Abstract: Technologies are disclosed to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disc carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations, access secure nonvolatile storage, submit data to CODECs for output, and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: Technologies to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: A method for operating networks of devices (d) wherein said networks are formed by a plurality of domains (D), wherein each of said domains (D) is formed by one or by a plurality of sub-networks (n) of devices (d), wherein each device (d) is assigned to at least one authorized domain (AD) of said domains (D) by assigning and/or carrying/storing in each case at least one type of authorized domain identifier (ADI) to/by said respective device (d), wherein each type of authorized domain identifier (ADI) is descriptive and/or characteristic for said authorized domain (AD) and its type as well as for a membership of said respective device (d) to said respective domain (D), and wherein an access to, the provision of, and/or a transmission of data with respect to audio/video content by each device (d) is in each case ruled on the basis of the respective assigned and/or carried/storied authorized domain identifiers (ADI).

Abstract: A user-configurable firewall and method in which a user-changeable security setting for a client computer is maintained by an access server through which a user accesses the public network. The user-changeable security setting can be used to specify which outside computers or network devices may access the client computer and what type of access to the client computer is allowed. If an attempt to access the client computer is made, the user-configurable security setting is checked to determine if the attempted access is allowed by the current security setting. If the attempted access is allowed by the current security setting, access is allowed to the client computer; otherwise, access is not allowed. If the user changes the user-configurable security setting, the changes to the user-configurable security setting are provided to the access server.

Abstract: Systems and methods are described for providing security through sessions. In an implementation, a method includes initiating a session, by an operating system, in which operating system services are executable and initiating another session, by the operating system, in which a user-interactive application is executable.

Abstract: A device for executing a cryptoalgorithm including a central processing unit for a first sub-group of operations and for a flow control of the cryptoalgorithm as well as a hardware circuit for a second sub-group of operations, wherein the first sub-group preferably includes arithmetic and/or logic operations, while the second sub-group includes rotation operations, permutation operations, substitution operations or selection operations.

Abstract: A method is disclosed for providing security to a client-to-client communication. The method includes authenticating a first client and a second client with an access point device, transmitting the packet to the security device and modifying a destination media access control (MAC) address of a packet from the first client to a MAC address of a security device for a first network. The packet contains a destination internet protocol (IP) address of the second client. The access point device and the first and second clients belong to the first network. The security device is located between the first network and a second network.

Abstract: A method for facilitating connection between an entity's network and a first electronic device is provided. The method includes receiving, using an RFID (radio frequency identification) reader associated with the first electronic device, a first file from an RFID tag, the RFID tag being provided by the entity. The method also includes obtaining connection information from the first file, the connection information including at least one of a security policy and network configuration. The method further includes enabling a user to attempt to log in via the first electronic device, using the connection information, into the network, wherein the log in is attempted using a different connection modality than that employed to receive the first file from the RFID tag.

Abstract: Control system of an electronic instrument for metrological measurements, comprising an electronic local processing unit including a handling application of said instrument. The system includes a control application for said handling application, which can be associated with said local processing unit, said control application being suitable for generating a univocal certification code for the application.

Abstract: This invention relates generally to systems and methods for rapid, low-latency detection of viruses in network transmissions and specifically to methods for determining which parts of a network transmission might contain viruses and checking and cleaning only those parts of the transmission which could potentially be infected as soon as sufficient information is available for such a check.

Abstract: Secure instant messaging is described. In an embodiment, a messaging device encrypts a challenge identifier to generate an encrypted challenge message, and communicates the encrypted challenge message via a peer-to-peer communication link to a recipient messaging device. The recipient messaging device decrypts the encrypted challenge message and encrypts the challenge identifier as a return challenge identifier to generate an encrypted challenge return. The messaging device receives the encrypted challenge return from the recipient messaging device, decrypts the encrypted challenge return, and verifies that the return challenge identifier matches the challenge identifier to establish that communications are secure when communicated via the peer-to-peer communication link and, optionally, to establish control policies pertaining to a communication received at the recipient messaging device.

Abstract: A transfer layer on a surface of a mold has a thickness distribution along the radius direction that the layer is thick in an inner round portion but is gradually thinner toward an outer round portion. An adhesive layer is formed between a surface of a signal substrate which bears a signal recording film and the mold which seats the transfer layer. The adhesive layer has a thickness distribution that the layer is thin in an inner round portion but is gradually thicker toward an outer round portion. Since the thickness distributions along the radius direction of the transfer layer and the adhesive layer are opposite to each other, the thickness distribution of an isolation layer which comprises the two layers is uniform.

Abstract: A thin-film magnetic head comprises at least one of a magnetoresistive device for reading and an electromagnetic transducer device for writing, and a heating element provided in the head body part. The heating element has an up portion meandering between an origin and a halfway point and a down portion meandering along the up portion from the halfway point to an end positioned in the vicinity of the origin, and adapted to generate heat when energized.

Abstract: If regeneration is not performed normally when data is regenerated from a medium, a read retry processing unit changes the intensities of the laser beam and of the regeneration magnetic field respectively to prearranged stages to perform the regeneration again. A regeneration condition change unit remembers the regeneration sector number for one read command from the higher order. When retry occurs, the regeneration condition change unit counts the number of the sectors for each stage which can be regenerated at each stage, and by providing a coefficient for each stage in advance, changes the default regeneration condition using the sum of products of the coefficients and the number of the counted regenerable sectors.

Abstract: A device for storing optical discs is disclosed. The device includes a housing, a carousel arranged in the housing for movement relative to the housing, the carousel having a plurality of storage compartments each for storing a disc, an opening in the housing through which a disc can pass, drive means for driving the carousel relative to the housing to align each of the storage compartments and a disc stored in that storage compartment in registry with the opening, and an ejection system to eject a disc from a storage compartment and through the opening in said housing. The ejection system is powered by a motor and a clutch system, and control means is provided to cause said carousel to rotate and to cause the ejection system to operate as instructed by a user.

Abstract: An evaluation method for calculating an identification signal by using PRML, comprises a table storing true patterns and ideal signals thereof, false patterns corresponding to the true patterns and ideal signals thereof, and Euclidean distance between the true pattern and the false pattern, a calculating unit, when a recording signal synchronized with an identification signal coincides with any pattern of the table, calculates a distance between Euclidean distance between the ideal signal of the true pattern and a reproduction signal and Euclidean distance between the ideal signal of the false pattern and a reproduction signal, and an evaluation unit which evaluates an identification signal by using an average and standard deviation of difference. A table for patterns is created for a likely mistaken pattern, whereby calculating an evaluation value with high precision, of a signal quality, with a small amount of calculation.

Abstract: The present invention provides an optical disk recording and reproducing apparatus having a circuit configuration whereby it is possible to prevent tracking drive signals from being offset even when the temperature of a tracking actuator drive circuit is increased.

Abstract: A method and device are provided for controlling a beginning point of an optical pick-up unit. The optical pick-up unit moves to a beginning point of an optical disc such as a DVD (Digital Versatile Disc) to execute a servo-tuning function at the beginning point. The method includes a) performing a focus search operation on an optical disc and at the same time determining whether there is a reflection signal from the optical disc; b) after performing the focus search operation, moving the optical pick-up unit toward a predetermined beginning point of the optical disc based on the result of the determining step; and c) based on the reflection signal from the optical disc, determining whether or not the optical pick-up unit has moved to the beginning point of the optical disc while the optical pick-up unit is in motion.

Abstract: A record carrier (1) has a servo track (4) indicating an information track (9) intended for recording information blocks represented by marks, this servo track (4) having a periodic variation of a physical parameter. Due to cross-talk, there exists a variation in the wobble signal called wobble beat. The track pitch t and the wobble period p, p being the length of a wobble period, are chosen in such a way that 2?t/p?n+ 1/2 where n is 10 integer. The choice results in a reduced wobble beat. A recording and/or playback device has apparatus for recording/reading the information blocks and for generating a wobble signal.

Abstract: A recorded stream generator generates a data block stream in synchronism with the phase of a recording clock, from the input data. The recorded stream generator further generates, for each predetermined data unit constituting the data block stream, a data phase reference pulse indicative of the phase of the data unit. An inserting section inserts a VFO signal into a predetermined amount (32 sectors) of the data block stream, the VFO signal having a length of time corresponding to a difference in phase between an wobble address phase signal and a data phase reference pulse. The inserting section thus provides a data stream DST consisting of the VFO signals and the data block streams. An LD uses light beams to record the data stream on an optical disk.