Abstract: In a system for providing access control management to electronic data, techniques to secure the electronic data and keep the electronic data secured at all times are disclosed. According to one embodiment, a secured file or secured document includes two parts: an attachment, referred to as a header, and an encrypted document or data portion. The header includes security information that points to or includes the access rules and a file key. The access rules facilitate restrictive access to the secured document and essentially determine who/when/how/where the secured document can be accessed. The file key is used to encrypt/decrypt the encrypted data portion. Only those who have the proper access privileges are permitted to retrieve the file key to encrypt/decrypt the encrypted data portion.

Abstract: Techniques for fragmenting a file or a collection of media data are disclosed. According one aspect of the techniques, a file pertaining to a title is fragmented into a header and several tails or segments. The header is a continuous portion of the file while the segments are respective parts of the remaining portion of the file. The header is seeded substantially in all boxes, and none, one or more of the segments are distributed in each of the boxes in service. When a title is ordered, the header is instantly played back while the segments, if not locally available, are continuously fetched respectively from other boxes that have the segments.

Abstract: An internet server based computerized system and method to request media coverage of an event from smartphone (or other wireless computerized device) carrying potential event participants who are near the event's space-time location. Here event media requestors post event space-time location and media data requests on the invention's internet server database, and at various time intervals, this server in turn polls (by either a push or pull process) the position of the various potential event participants who are running the invention's application software on their smartphones. If the internet server determines that there is a match, the server transmits the event media request to the relevant potential event participants, along with additional information such as the number of requestors. Potential event participants can thus acquire the event media data, and upload or stream this media data back to the internet server, which can notify requestors when the data is available.

Abstract: Techniques for transporting data in a distributed environment are described. In a media system in which boxes are configured to supply each other needed data, stabilities of data transportation among the boxes are important. According to one aspect of the techniques, when one or more supplying boxes are identified to supply respective data portions to an ordering box, each communication session between the ordering box and one of the supplying boxes is constantly monitored. If the data is not transported correctly, a backup session by a backup box is activated to replace the session in which the data is not transported correctly. Without affecting the number of available boxes that may be designated to supply data to other ordering boxes, in one embodiment, one box is used to backup multiple boxes.

Abstract: Various techniques for providing instantaneous media services are disclosed. Some of the techniques provide an instantaneous media-on-demand system, process and method for the same. Such a system offers a dynamic library with a significant number of titles from which a user may select and offers play back a desired title fairly instantly. To facilitate instant playback, a file pertaining to a title is fragmented into a header and segments. The header is seeded in all boxes in service and none, one or more segments are distributed to the network of boxes. When the title is ordered, the header is instantly played back while the segments, if not locally available, are streamed in respectively from the boxes having the segments to enable continuous playback of the ordered title.

Abstract: Techniques for fragmenting a file or a collection of media data are disclosed. According one aspect of the techniques, a file pertaining to a title is fragmented into a header and several tails or segments. The header is a continuous portion of the file while the segments are respective parts of the remaining portion of the file. The header is seeded substantially in all boxes, and none, one or more of the segments are distributed in each of the boxes in service. When a title is ordered, the header is instantly played back while the segments, if not locally available, are continuously fetched respectively from other boxes that have the segments.

Abstract: Techniques for fragmenting a file or a collection of media data are disclosed. According one aspect of the techniques, a file pertaining to a title is fragmented into a header and several tails or segments. The header is a continuous portion of the file while the segments are respective parts of the remaining portion of the file. The header is seeded substantially in all boxes, and none, one or more of the segments are distributed in each of the boxes in service. When a title is ordered, the header is instantly played back while the segments, if not locally available, are continuously fetched respectively from other boxes that have the segments.

Abstract: To facilitate instant playback of an ordered title (e.g., a movie), a file pertaining to the title is fragmented into a header and segments. The header is seeded in all boxes in service and none, one or more segments are distributed to the network of boxes. When the title is ordered, the header is instantly played back while the segments, if not locally available, are streamed in respectively from the boxes having the segments to enable continuous playback of the ordered title. Should one of the boxes fails to deliver the segment according to a certain requirement (e.g., a lower transmission rate), the box gets immediately replaced by a substitute machine that continues to supply the segment from where it was stopped.

Abstract: Various techniques for a library with a significant number of titles are disclosed. A user may select and order a title whenever desired and play back the title fairly instantly. The library is dynamically updated in accordance with a schedule. According to one aspect of the techniques, whenever an ordered title is played back, a beginning portion of the data pertaining to the title is activated to be played back first. The beginning portion of the data is locally cached while the remaining portion of the data is supplied by other designated devices. To facilitate the management of the remaining portion of data for each of the titles in the library, the titles are partitioned into a number of groups or bands. The amount of the remaining portion of the data to be locally cached for each title is determined by a band the title belongs to. Further, as new titles are added in, the titles in each band are updated by retiring relatively unpopular titles to a lower band.

Abstract: Techniques for updating a library with a significant number of titles are disclosed. A library in each of the boxes in service is updated synchronously or asynchronously. Any release to update the library is performed by propagating data chunks by a gossip protocol to all boxes in service. A proper release package is then recovered in each box from the received data chunk to update the library. According to one aspect of the techniques, a small set of seeding boxes is designated to propagate at least some or all of respective received data chunks to a set of the boxes. Each of the set of the boxes is caused to recursively propagate its received data chunks to other boxes chosen to continue spreading, if necessary, some or all of the received data chunks among the boxes till each of the boxes in service has received a designated portion of the data chunks.

Abstract: Digital assets (e.g., files) are protected with a combination of more than one type of applicable security means. Techniques are developed to determine which of the security means to enforce in accordance with an access policy or policies when an access request is received. According to one embodiment, an interpreter or an access control module intercepts an access request from a requestor to access a secured file. The access control module is configured to determine if the access request is to be granted or denied to enforce security of the file through an access control technique and a cryptographic technique; and when the access request is granted, a key is retrieved to proceed with the access request.

Abstract: In a system for providing access control management to electronic data, techniques to secure the electronic data and keep the electronic data secured at all times are disclosed. According to one embodiment, a secured file or secured document includes two parts: an attachment, referred to as a header, and an encrypted document or data portion. The header includes security information that points to or includes the access rules and a file key. The access rules facilitate restrictive access to the secured document and essentially determine who/when/how/where the secured document can be accessed. The file key is used to encrypt/decrypt the encrypted data portion. Only those who have the proper access privileges are permitted to retrieve the file key to encrypt/decrypt the encrypted data portion.

Abstract: Techniques for displaying a library of many movies and providing interactive mechanisms for users to browse the library, select or order a title are disclosed. In one embodiment, data pertaining to a title is distributed across a network. Whenever a movie is ordered, depending on implementation, either a leading portion of the data locally cached is played back or a time-fill program is activated during which distributed data is fetched as data streams from a set of designated boxes. In addition, movie titles are presented or displayed in movie banners, each resembling at least part or all of a corresponding movie poster distributed and promoted commercially by a studio or production company. Such a movie banner provides an expression with substantially similar style, colors and background such that a coincident impact may be created on audience when the movie banner is seen. Further each of the banners is embedded with a link that leads to a full review of the movie when selected.

Abstract: To facilitate instant playback of an ordered title (e.g., a movie), a file pertaining to the title is fragmented into a header and segments. The header is seeded in all boxes in service and none, one or more segments are distributed to the network of boxes. When the title is ordered, the header is instantly played back while the segments, if not locally available, are streamed in respectively from the boxes having the segments to enable continuous playback of the ordered title. Should one of the boxes fails to deliver the segment according to a certain requirement (e.g., a lower transmission rate), the box gets immediately replaced by a substitute machine that continues to supply the segment from where it was stopped.

Abstract: The present invention has been made in consideration of thin devices efficiently communicating ideas and transactions into data networks by using other devices with full functional user interface in the networks. According to one aspect of the present invention, the thin device exclusively controls the authentication of a rendezvous that is associated with a user account in a server. The thin device running a micro-browser provisions the rendezvous with a set of credential information in an authenticated and secure communication session so that the provisioning process is truly proprietary. To access the user account, the other devices equipped with well-known browsers must submit the correct credential information to the rendezvous for verification in the server.

Abstract: The present invention has been made in consideration of thin devices efficiently communicating ideas and transactions into data networks by using other devices with full functional user interface in the networks. According to one aspect of the present invention, the thin device exclusively controls the authentication of a rendezvous that is associated with a user account in a server. The thin device running a micro-browser provisions the rendezvous with a set of credential information in an authenticated and secure communication session so that the provisioning process is truly proprietary. To access the user account, the other devices equipped with well-known browsers must submit the correct credential information to the rendezvous for verification in the server.

Abstract: Techniques for providing pervasive security to digital assets are disclosed. According to one aspect of the techniques, a server is configured to provide access control (AC) management for a user (e.g., a single user, a group of users, software agents or devices) with a need to access secured data. Within the server module, various access rules for the secured data and/or access privileges for the user can be created, updated and managed so that the user with the proper access privileges can access the secured documents if granted by the corresponding access rules in the secured data.

Abstract: Various techniques for providing instantaneous media services are disclosed. Some of the techniques provide an instantaneous media-on-demand system, process and method for the same. Such a system offers a dynamic library with a significant number of titles from which a user may select and offers play back a desired title fairly instantly. To facilitate instant playback, a file pertaining to a title is fragmented into a header and segments. The header is seeded in all boxes in service and none, one or more segments are distributed to the network of boxes. When the title is ordered, the header is instantly played back while the segments, if not locally available, are streamed in respectively from the boxes having the segments to enable continuous playback of the ordered title.

Abstract: Various techniques for providing a video-on-demand (VOD) system based on distributed networks are disclosed. According to one aspect of the VOD system, individual client devices on a network are identified to supply each other with needed sources in pieces to render required services. As a result, the loading pressure on a central server or centralized servers is distributed into the network. A VOD system so contemplated can sustain a substantial growth in its subscribers.

Abstract: Techniques for transporting data in a distributed environment are disclosed. In a media system in which boxes are configured to supply each other needed data, stabilities of data transportation among the boxes are important. According to one aspect of the techniques, when one or more supplying boxes are identified to supply respective data portions to an ordering box, each communication session between the ordering box and one of the supplying boxes is constantly monitored. If the data is not transported correctly, a backup session by a backup box is activated to replace the session in which the data is not transported correctly. Without affecting the number of available boxes that may be designated to supply data to other ordering boxes, in one embodiment, one box is used to backup multiple boxes.