Abstract: A controlling device provides conditional access to secured content renderable by an appliance. The controlling device transmits a data frame to the appliance and encrypts at least a part of the data frame that includes data to be used by the appliance to provide access to the secured content. At the appliance a decryption key complimentary to the encryption key is used to decrypt the received the data frame. The appliance allows the secured content to be rendered only after the appliance determines that the data in the received, decrypted data frame includes the data the appliance requires to provide access to the secured content.

Abstract: A method and systems are provided for creating an authentication of secure communications between a software video driver and a video display. A video driver transmitting digital video data deemed high-bandwidth digital content, to a display, performs authentication to determine if a secure connection has been established with a display. The video driver and the display both generate encryption keys that are compared to ensure that the display used is authorized for secure communications. A single stream of video data is encrypted using the secret keys. A first encryption key encrypts even-numbered pixels in the single stream of video data. A second encryption key encrypts odd-numbered pixels in the single stream of video data. The stream is split into two streams of data, which are transmitted to a display. The display decrypts each of the streams of encrypted video data and merges them to re-create the original stream of video data.

Abstract: Method, apparatus and article of manufacture for disabling on-demand access to computerized resources on a computerized apparatus. The method comprises receiving a disablement code; validating the disablement code; and disabling an on-demand resource if the validating is successful, thereby rendering the disabled on-demand resource unavailable for use by users of the computerized apparatus, wherein the disabled on-demand resource is a hardware resource of the computerized apparatus. Another embodiment includes receiving a disablement code comprising encrypted data, validating the disablement code, disabling at least one on-demand resource if the validating is successful. The validating includes generating a first key using system information unique to the computerized apparatus; decrypting the encrypted data using a second key to produce decrypted data; encrypting a value to produce an encrypted value; decrypting the encrypted value to produce a decrypted value; and comparing the value to the decrypted value.

Abstract: In a digital certificate management system, a client/server system is connected to a digital certificate management apparatus capable of communicating with clients and servers. Mutual authentication is performed between the clients and the servers by using digital certificates and communications are performed over a communication channel established based on mutual authentication. The digital certificate management apparatus includes a certification key update part updating a server certification key used for mutual authentication and stored in each of the clients that become communication parties of one of the servers. The certification key updating part includes a key obtaining part, a certificate obtaining part, and first and second transmission parts.

Abstract: A method is for protecting an encrypted content, by use of at least one encryption key. The method includes generation of a temporary encryption key, encryption by the temporary key of a value allowing the determination of the encryption keys of the content, transmission of the encrypted value to a multimedia unit, and encryption and transmission of at least two cryptograms including the temporary key encrypted by an authorization key. The first cryptogram is encrypted by a first authorization key pertaining to a first security module and the second cryptogram is encrypted by a second authorization key pertaining to a group of security modules whose first security module is excluded.

Abstract: A system is provided for securely downloading content to a mobile telecommunications device. The system includes a mobile application to enable the mobile telecommunications device to send a request for content identified on a telecommunication provider system. The system includes a content application maintained by the content provider to retrieve content and promote delivery of the content to the mobile telecommunications device. The system also includes a challenge component and a response component, the response component communicates with the mobile application and encodes a challenge data. The challenge component communicates with the content application. The challenge component sends the challenge data to the mobile application and decodes the challenge data received from the mobile application to validate the response for delivery of the content to the mobile application.

Abstract: Complexity is reduced and performance is improved when enforcing security restrictions on the execution of program code in a runtime environment. Units of executable code, such as methods or functions, are classified by “security level.” Code units belonging to a “trusted” security level may call any other code unit in the runtime environment, but other security levels are restricted in the code units they can call. Code units may also have “instance permissions” to allow them to have permission to call other individually-specified code units that they would normally be precluded from calling, due to their security level. The security level scheme described herein reduces the complexity of establishing permissions with respect to different code units in the runtime environment. This security level scheme also improves runtime performance by making it unnecessary to check individually-defined permissions in many cases.

Abstract: A cryptographic device formed as an integrated circuit encapsulated in an integrated circuit package. The cryptographic device decrypts information having a first encrypted format that is input into the cryptographic device producing information in a non-encrypted format. The information in the non-encrypted format is subsequently re-encrypted into a second encrypted format which is output from the cryptographic device. The decryption and re-encryption operations are accomplished entirely within the cryptographic device.

Abstract: According to one embodiment of the invention, a method is provided for receiving a timestamp from a caller via a telephone connection; receiving a device identifier from the caller, in which the device identifier identifies a device; determining a cryptographic key based on the device identifier; determining an indication of a time based on the timestamp and the cryptographic key; providing the indication of the time to the caller; determining an account; and charging a fee to the account.

Abstract: A system, method and program product for modifying data packets being communicated between a client and a Web application to enhance the Web experience of a user. A system is disclosed for enhancing searches being performed by a search engine application, and monitoring data packets passing through a network node to identify a data packet containing an original search query; modifying the data packet containing the original search query to create a modified search query; and forwarding the modified search query to the search engine application in place of the original search query.

Abstract: A method of using a device, including monitoring host activity in an autonomous manner, without the host reporting to the device about its activity. The method also including initiating communications from the device and using resources of the host for such communications, thereby enabling the device to function as a proactive device.

Abstract: An apparatus and method for providing control information in a Multi User-Multiple Input Multiple Output (MU-MIMO) wireless communication system is provided. The method includes receiving a plurality of Resource Elements (REs) including Downlink Control Information (DCI), determining, using the DCI, a set of REs to which a plurality of Downlink Reference Signals (DRSs) may be mapped, determining remaining REs as REs to which data is mapped, and demodulating the data using a precoding vector of a DRS corresponding to the MS.

Abstract: An apparatus and method for providing control information in a Multi User-Multiple Input Multiple Output (MU-MIMO) wireless communication system is provided. The method includes receiving a plurality of Resource Elements (REs) including Downlink Control Information (DCI), determining, using the DCI, a set of REs to which a plurality of Downlink Reference Signals (DRSs) may be mapped, determining remaining REs as REs to which data is mapped, and demodulating the data using a precoding vector of a DRS corresponding to the MS.

Abstract: An encoder/decoder system usable to decrease the probability of a failed transmission over a lossy wireless network. In one embodiment, data packets unsuccessfully sent over the wireless network may be retransmitted a particular number of times, depending on how important the data in the lost packet is. In another embodiment, when a number of transmission failures is determined to exceed a predetermined threshold, it may be signaled that multiple reference frames should be used for encoding predictions.

Abstract: A method of transmitting and receiving data using a superframe structure is disclosed. A method for transmitting data through a superframe including a superframe header, includes generating the superframe which includes a data region including user data and includes a dedicated control region including data region allocation information indicating resource allocation for the data region, and transmitting the superframe. The dedicated control region is arranged at at least one of locations except for a subframe of the superframe header. A user equipment which does not have to transmit and receive data decodes only data region allocation information using information of the data region indicated by a dedicated control region, thereby minimizing power loss, reducing a feedback delay, and reducing system overhead using a superframe structure.

Abstract: In a wireless mobile communications system, a method of transmitting and receiving radio access information that allows a faster and an efficient way of establishing a radio connection between a terminal and a target base station while performing a handover for the terminal to a cell of the target base station. The network transmits in advance, the radio access information and the like, to the terminal so that the terminal can be connected with the target cell in a faster manner which minimizes the total time for the handover process.

Abstract: In a wireless mobile communications system, a method of transmitting and receiving radio access information that allows a faster and an efficient way of establishing a radio connection between a terminal and a target base station while performing a handover for the terminal to a cell of the target base station. The network transmits in advance, the radio access information and the like, to the terminal so that the terminal can be connected with the target cell in a faster manner which minimizes the total time for the handover process.

Abstract: The invention relates to method applicable in a packet-switched cellular network for voice connections, by which method a new dedicated channel can be established quickly using the existing dedicated channel of the voice connection. The establishment of the new dedicated channel utilizes the previous dedicated channel the existence of which is extended by sending to at least the receiving terminals post-speech packets according to the invention. The post-speech packets produce a 2-second delay, approximately, which is sufficient to establish a new dedicated channel between terminals participating in a session.

Abstract: In a wireless mobile communications system, a method of transmitting and receiving radio access information that allows a faster and an efficient way of establishing a radio connection between a terminal and a target base station while performing a handover for the terminal to a cell of the target base station. The network transmits in advance, the radio access information and the like, to the terminal so that the terminal can be connected with the target cell in a faster manner which minimizes the total time for the handover process.

Abstract: In accordance with an example embodiment of the present invention, a first bit sequence of a first length is assigned to a first group of signaling bits. Further, a second bit sequence of a second length is assigned to a second group of signaling bits. The first bit sequence is scrambled with a first scrambling sequence, and the second bit sequence is scrambled with a second scrambling sequence different from the first scrambling sequence. A first and a second orthogonal frequency-division multiplexing (OFDM) symbol are assigned to the first and the second scrambled bit sequences respectively, and the first and second orthogonal frequency-division multiplexing (OFDM) symbols are transmitted as synchronization symbols of a data frame. Further, a corresponding method for receiving the data frame, and apparatuses for transmission and reception are disclosed.