Amazon have a system where you can set a private url that expires
after a short time.
The expiry is encoded into the url so it can't be changed.
Attachment_fu supports it with something like:
file.authenticated_s3_url(:thumb, :expires_in => 5.minutes.to_i)
http://MyMvelope.com - The SIMPLE way to manage your savings