Abstract: In one aspect of the invention is a method for preventing unauthorized copies of a medium, such as a DVD, from being played by a compliant device by using the validation area (VA) region of a medium to validate keying material. A compliant device is a device that will validate keying material. In one embodiment of the invention, a compliant device validates keying material by using the value in the VA region of the medium. In alternative embodiments, a compliant device will validate keying material by checking correspondence between keying material written to a non-VA region of a medium and validation data written to a VA region of a medium. In the alternative embodiments, if the keying material does not correspond to the validation data, then a compliant device will prevent the contents of the medium from being played.

Abstract: A method and apparatus to protect unencrypted content or data in a storage media from prohibited use or reproduction by encrypting unprotected content before it is transmitted to another device or software application. A compliant device or software application is capable of decrypting the content, detecting any watermark within the content, and accessing or processing the content according to the restrictions associated with the detected watermark. Non-compliant devices or software are prevented from accessing or processing the content since they are unable to decrypt it.

Abstract: A system is described for protecting digital content stored on a storage medium from unauthorized copying. The system includes a number generator to generate a nonce, an encryption subsystem and a decryption subsystem. The encryption subsystem encrypts data accessed from a storage medium containing a key distribution data block using an encryption bus key prior to transmitting the encrypted data via a data bus. The encryption bus key is derived based on at least a portion of the key distribution data block, at least one device key assigned to the encryption subsystem and the nonce generated by the number generator. The decryption subsystem is coupled to the data bus to decrypt the encrypted data received over the data bus using a decryption bus key derived based on at least a portion of the key distribution data block, at least one device key assigned to the decryption subsystem and the nonce generated by the number generator.

Abstract: Avoiding transitory uncertainty caused by delayed watermark detection by a device in a content protection system may be accomplished by receiving content having a watermark from a content source, receiving a request for action to process the received content, checking the received content for data associated with the watermark, performing at least one of halting and preventing the requested action when associated data is found in the received content and the associated data indicates that the requested action is not permitted, and beginning the requested action when associated data is found in the received content and the associated data indicates that the requested action is permitted.

Abstract: A method for verifying the integrity of a media key block (MKB) by storing validation data in a cutting area of a medium, such as a DVD-R or a DVD-RW. In one embodiment, validation data comprises a hash function on a media key block. In another embodiment, validation data comprises the Verification Data field of an MKB's Verify Media Key Record.

Abstract: The present invention includes a method, system and apparatus for storing, distributing, and protecting content from unauthorized access. The media includes a writeable area, a read only area and the content stored on the writeable area. A first media validation data containing an encrypted preselected value is stored on the read only area.

Abstract: A method and apparatus to format and process a Media Key Block so as to reduce latencies when processing the Media Key Block. A new record is generated containing header information for the records comprising the Media Key Block. This new record is read just once and allows a device to skip seeking and reading each record header individually. In addition, the records are adjusted so that individual records or individual fields within a record always fit within a single transfer unit.

Abstract: An apparatus is equipped with a source oriented data move technique. In one embodiment, the apparatus is a computer system and the source oriented data moving technique is incorporated in a disk block relocation engine that relocates disk blocks in accordance with the specifications of a disk block relocation vector. In one embodiment, the disk block relocation vector is destination oriented, and the disk block relocation engine is complemented with an transformation function for annotating the destination oriented disk block relocation vector with data source information. The disk block relocation engine then identifies chains of serial disk block moves among the specified disk block moves, and performs the chains of serial disk block moves, keying off the annotated data source information.

Abstract: An apparatus is equipped with a disk block relocation de-optimization detection function that detects the de-optimization of a disk block relocation of a first disk block relocation optimization methodology by a second disk block relocation optimization methodology, employing a key file of the first disk block relocation optimization methodology. The optimization principles of the two methodologies conflict at least partially with each other. In one embodiment, the function performs the detection by monitoring disk block allocation changes to the key file whose file clusters have been allocated disk blocks in a manner that is inconsistent with one or more optimization principles of the second disk block relocation optimization methodology. In one embodiment, the function also causes the key file to be created by a file subsystem, and then reallocates the file clusters to disk blocks in the inconsistent manner.