Abstract: A load-balancing approach for scaling Secure Sockets Layer (SSL) performance is disclosed. During a handshake phase of establishing a SSL connection among a client and server, a processor card identifier value, processor identifier value, and session index value are encoded in a session identifier value that is sent to a client. When the client subsequently resumes the SSL session, it provides the session identifier value, and the encoded values are used for routing the session to an SSL processor that has the negotiated security parameters for the session. In one embodiment, a load balancer distributes the SSL sessions across multiple SSL termination engines that actually carry out SSL processing, based on the card identifier value and the processor identifier. If one of the SSL termination engine cards fails, the load balancer card routes all sessions destined for the failed card to other cards that are operating.

Abstract: A battery-powered computer chassis intrusion detection circuit which stores the time and date that the chassis hood, components, or AC power was removed. When intrusion occurs, an alarm bit isolates the detection circuit oscillator from the circuit, effectively stopping a real time clock from incrementing the time and date. When the computer is powered back up, internal ROM checks to see if an alarm condition occurred. If so, the intrusion date and time is recorded and the user or administrator may be alerted.

Abstract: A system and method is provided for tracking royalty obligations of a user of intellectual property. The intellectual property can perform program code being sent to a user of a programmable device. The program code is used to configure the programmable device to the functionality of a design owned by an intellectual property vendor. The intellectual property vendor can send an identifier with the code and the programmable device manufacturer can send an embedded code with the shipped, programmable device. The user, when programming the device, will compare the identifier within the code to the embedded code and, if a match results, the user will know that the program contains valuable intellectual property. For each device being programmed with such intellectual property, a computation can occur and the number of thusly programmed devices can be maintained within a resulting royalty payment table.

Abstract: Theft of decompressed digital content as the content is being rendered is prevented. A requested slow-down of the rendering of the content is detected. Transfers of relatively large amounts of data are detected. A re-compressor-based requested slow-down of the rendering of the content is detected. A re-compressor re-compressing the content is detected. In each situation, the detected activity is presumably initiated by a content thief attempting to steal the content. In each situation, the detected activity is responded to in a manner designed to frustrate the presumed attempt of the content thief to steal the content.

Abstract: A key or licence management system for the secure online distribution of digitized audio-visual works (“media”) using encryption techniques. Encrypted media is stored on a media server while the encryption keys are stored on a media key server. Users acquire rights from online retailers to obtain from the media key server keys corresponding to the media they wish to play. The key server encrypts keys before releasing them, preferably with the user's public key using a public key encryption algorithm. Keys are stored in volatile memory at the user's client device and thus the user is in receipt of the key just in time to play the media.

Abstract: A method, system, and computer program product that provides multiple names of a given malware in a quick and automated fashion. A method of providing names of computer malwares comprises the steps of receiving a sample of a computer malware, scanning the computer malware using a plurality of anti-virus scanners, at least some of the anti-virus scanners generating information identifying the computer malware, and compiling the generated information identifying the computer malware. The information identifying the computer malware may.

Abstract: A method and apparatus for protecting digital content. A secure digital appliance is disclosed for receiving communications coupled over a communication network. A private key of a private key and public key pair is stored in the secure digital appliance in such a way that the stored private key cannot be obtained by tampering with the secure digital appliance. Upon receipt of a session initiation message that is encrypted using the public key (of the private key and public key pair) the secure digital appliance decrypts the session initiation message using the stored private key to obtain a session key. The session key is then used to decrypt communications that include encrypted digital content. The secure digital appliance includes a local output device (e.g., a TV screen and/or speakers) that is operable to provide protected output of the digital content. The secure digital appliance does not contain any provision for output other than the protected output of digital content.

Abstract: An authentication/decryption unit authenticates and decrypts video signals received from a video signal output device. An open-condition detector detects the open condition of a cabinet. A memory stores therein one of a first flag indicating that an authentication operation of the authentication/decryption unit is enabled and a second flag indicating that an authentication operation of the authentication/decryption unit is disabled. A micro-controller controls whether the authentication operation of the authentication/decryption unit will be enabled or disabled according to the flag in the memory. When the open-condition detector detects that the cabinet is opened, the micro-controller writes the second flag into the memory.

Abstract: Methods and systems are provided for sequence number checking. Sequence numbers of data packets are compared to a “sliding” window. The sliding window indicates a range of sequence numbers considered valid (or invalid). The size of the sliding window may be a particular value or varied. If a sequence number is “below” the sliding window, then it may be considered invalid. If a sequence number is within the sliding window, then it may be further checked to determine if a duplicate sequence number has been received. If a sequence number is “above” the sliding window, then it may be considered valid and the sliding window is advanced. The sliding window and sequence numbers are processed using multiple level bitmaps, which indicate a historical state of sequence numbers received. Furthermore, the multiple level bitmaps may comprise summary bits to summarize a state of subsequent bits.