Abstract: Functionality is described herein for presenting supplemental information. The functionality determines that a message includes a keyword and, based at least on the identified keyword, determines at least one item to recommend. The functionality annotates the message with an identifier of the recommended item, and responsive to activation of the identifier, presents the supplemental information regarding the item.

Abstract: For identifying matching video content, a method records characteristics of a plurality of videos. The characteristics include one or more of keywords, views, comments, subscriptions to content channels, uploaded content, likes, user followings, and user identities. The method further calculates a content profile for each video. In addition, the method identifies a matching content profile within a content proximity of a target video content profile.

Abstract: A system for receiving and decrypting media content encrypted according to the HDCP protocol is described herein. A receiving device coupled to a plurality of content channels includes an authentication engine to authenticate each content channel and to generate an initial session key associated with each authenticated content channel. The content channels can be, for example, an HDMI channel or an MHL3 channel. A session key indicator indicating a session key used to encrypt media content is received, and an updated session key is generated. The receiving device also includes a stream cipher engine configured to decrypt received encrypted media content using the updated session key. Decrypted media content can then be displayed, for instance on a display of the receiving device.

Abstract: A method of scalar multiplication to obtain the scalar product between a key and a point on an elliptic curve, wherein the secret is m bits long. In selected embodiments, the first step is to partition the secret into two partitions each with m/2 bits. Point-doubling operations are performed on the point and stored into three buffers. Point additions are performed at randomized time intervals thereby preventing the method from being susceptible to differential power analysis attacks.

Abstract: A multimedia conference broadcast system may include one or more processors and a memory. The one or more processors may receive video streams and audio streams from participant devices. The one or more processors may transmit, to each of the participant devices, the video streams and the audio streams corresponding to the other devices. The one or more processors may receive a request to broadcast the video streams and the audio streams from one of the participant devices. The one or more processors may generate a composite multimedia stream based on the video streams and the audio streams received from the participant devices. The one or more processors may broadcast the composite multimedia stream to viewer devices that are separate from the participant devices.

Abstract: Disclosed are various embodiments for facilitating the encryption of files as well as facilitating requiring a user to employ an authenticator device in order to access a file that is encrypted or otherwise secured. The authenticator device can provide an authenticator code in which a security key used to access a secured file can be embedded. An additional layer of encryption can also be applied in the authenticator code.

Abstract: A meeting management system for managing the conduct of a large meeting online provides the ability to split the online attendees into two classes, those who will actively take part in the meeting or videoconference and who will both receive and provide a video and audio stream, and those who will only receive a video and audio stream. The latter attendees will receive the stream from servers remote from the actual meeting manage system, possibly after the stream has been forwarded through several remote servers and has gained considerable latency. The latency will not be an issue as these attendees have no comparison with the live stream.

Abstract: An apparatus for decoding a media stream, wherein the apparatus comprises a memory module, a processor module coupled to the memory module, wherein the memory module contains instructions that when executed by the processor cause the apparatus to perform the following: receive a media stream comprising a segment signaling information and a plurality of segments, wherein the plurality of segments comprises encoded and unencoded segments, wherein the segment signaling information comprises identification of at least two segment groups each comprising at least one segment, identify at least one segment group using the segment signaling information in the media stream, identify at least one segment decoding algorithm for the at least one segment group, identify at least one decoding key for the at least segment group, and decode each encoded segment within the at least segment group using the at least segment decoding algorithm and the at least one decoding key.

Abstract: Embodiments of the invention relate to processing streams of encrypted data received from multiple users. As the streams are processed, smaller partitions in the form of data chunks are created and subject to individual decryption. The data chunks are placed into sub-stream based on a master key associated with its owning entity. Prior to processing, the data chunks in each stream are decrypted, and advanced functions, including but not limited to de-duplication and compression, are individually applied to the data chunks, followed by aggregation of processed data chunks into data units and encryption of the individual data units including use of a master key from the data's owning entity. Individual encryption units are created by encrypting the data unit(s) with an encryption key, thereby limiting access to the data unit. Confidentiality of data is maintained, and the ability of storage systems to perform data reduction functions is supported.

Abstract: Embodiments of the invention relate to processing streams of encrypted data received from multiple users. As the streams are processed, smaller partitions in the form of data chunks are created and subject to individual decryption. The data chunks are placed into sub-stream based on a master key associated with its owning entity. Prior to processing, the data chunks in each stream are decrypted, and advanced functions, including but not limited to de-duplication and compression, are individually applied to the data chunks, followed by aggregation of processed data chunks into data units and encryption of the individual data units including use of a master key from the data's owning entity. Individual encryption units are created by encrypting the data unit(s) with an encryption key, thereby limiting access to the data unit. Confidentiality of data is maintained, and the ability of storage systems to perform data reduction functions is supported.

Abstract: A method and apparatus for exercising access control over television programs using a parental control user interface that has different functions is provided. The method requires a password to enter into a master mode for obtaining access to all the functions of the parental control user interface. Once in the master mode, the user may enter a criterion for blocking a television program from being viewed or recorded or the user can override an already blocked television program. If a user, not in the master mode, attempts to watch or record a program that meets the blocking criterion and the program does not meet the overriding criterion, a prompt is provided to the user to enter the password. Upon entering a correct password, the program is unblocked.

Abstract: Provided is an information storage device including a storage unit configured to store encrypted content and an encryption key to be applied to decryption of the encrypted content, wherein the storage unit stores a converted encryption key generated through an arithmetic operation of the encryption key and an electronic signature that is constituent data of an encrypted content signature file set corresponding to the encrypted content, wherein the electronic signature is an electronic signature for data that includes constituent data of the encrypted content and the encryption key, and wherein a reproduction device configured to read the encrypted content from the storage unit and execute a decryption process is able to be caused to perform acquisition of the encryption key through an arithmetic operation of applying the electronic signature to the converted encryption key.

Abstract: A video on demand system in the context of the Internet, for video rentals. A user accesses an on-line store to rent a video program or movie. The rental is for a limited time (such as 30 days) and within that thirty days, the video program or movie can only be viewed for a 24 hour time window. The time limits are enforced by the on-line store which maintains a database of each rental transaction and allows supply of the needed keys for decrypting the (encrypted) video or movie only if within the time limits.

Abstract: A method for telephony includes receiving at an Internet telephony service provider a subscriber request to place a call to a telephone number. A cache associated with the internet telephony service provider is queried to check if the cache holds a record for the telephone number. If the cache holds the record, the record is obtained. If the cache does not hold the record, a request is sent to a database server that maintains a database of records associating endpoint user terminal telephone numbers of subscribers with respective packet network addresses of the endpoint user terminal. The call is placed to the endpoint user terminal telephone number via a public switched telephone network while the request is sent to the database server to retrieve the packet network address of the endpoint user terminal to which calls to the telephone number should be placed.

Abstract: A digital data signal, such as a digital video signal, is intentionally pre-distorted before being sent over a network. In one embodiment, this pre-distortion may be performed in accordance with a pre-distortion pattern or algorithm which is shared with only intended receivers. The pre-distortion pattern may be used to vary the pre-distortion on a periodic basis, as frequently as on a symbol-by-symbol basis. The pre-distortion function may include distorting the phase and/or the amplitude of the digital signal's modulation.

Abstract: A communication system that may include a traffic management module and a communication interface module. The communication interface module is arranged to: estimate a status of multiple channels by utilizing hardware channel status estimators, generate filler packets in response to the status of the multiple channels; wherein the filler packets are associated with the multiple channels; send the filler packets to the traffic management module. The traffic management module is arranged to receive multiple input packets that are associated with multiple channels, receive the filler packets; apply a traffic management scheme on the multiple input packets and the filler packets to provide multiple intermediate packets that comprise (a) multiple filler traffic managed packets and (b) multiple non-filler traffic managed packets.

Abstract: A method of detecting associations between items can include identifying a plurality of items represented in a data repository from which to select items to recommend to a target user, each item including one or more attributes. A degree of fit between an item's attributes and other items is calculated. The degree of fit can indicate the relevance of the attributes of one item to the other item. A degree of association between the two items is calculated based at least in part on the calculated degree of fit. The degree of association between the two items can indicate the relatedness of the two items. Based on this degree of association, an association between the items can be stored in a data repository.

Abstract: The method, program and information processing system secures data, and particularly security sensitive words, characters or data objects in the data, in a computer system with territorial, geographic and triggering event protocols. The method and system determines device location within or without a predetermined region and then extracts security data from the file, text, data object or whatever. The extracted data is separated from the remainder data and stored either on media in a local drive or remotely, typically via wireless network, to a remote store. Encryption is used to further enhance security levels. Extraction may be automatic, when the portable device is beyond a predetermined territory, or triggered by an event, such a “save document” or a time-out routine. Reconstruction of the data is permitted only with security clearance and within certain geographic territories. An information processing system for securing data is also described.

Abstract: A threat detection system is integrated with intrusion protection system (IPS) logic, virtual execution logic and reporting logic is shown. The IPS logic is configured to identify a first plurality of objects as suspicious objects and outputting information associated with the suspicious objects. The virtual execution logic is configured to receive the suspicious objects and verify whether any of the suspicious objects is an exploit. The virtual execution logic includes at least one virtual machine configured to virtually process content within the suspicious objects and monitor for anomalous behaviors during the virtual processing that are indicative of exploits. The reporting logic is configured to issue a report including the information associated with the suspicious objects from the IPS logic and results of the virtual processing of the content within the suspicious objects.

Abstract: Method of scrambling signals, transmission point device and user equipment using the method are provided. The method is for scrambling signals assigned on predetermined radio resources of at least one layer of resource blocks with the same time and frequency resources, and comprises the steps of: sending an ID table to a user equipment through higher layer signaling, the ID table being a subset of the whole ID space and containing available IDs for the user equipment; notifying the user equipment an ID in the ID table to be used through physical layer signaling or UE specific higher layer signaling; generating a random seed based on the notified ID; initializing a scrambling sequence by the random seed; and scrambling the signals with the initialized scrambling sequence.

Abstract: A data compression reduces redundancy over time using information from other frames and among different viewers. A personal compressed copy of content includes an array of keys, and encrypted copy of the content and a codebook. The codebook, which is not a copy of the content may be stored in shared memory.

Abstract: Techniques are provided for generating descriptions of matching resources in a manner that takes into account the kind, quality, and relevance of the available sources of information about the matching resources. For example, after the search engine identifies matching resources based on the query terms, the search engine determines the kinds of available sources of information about each matching resource. For each matching resource, based on the kinds of available sources of information about the matching resource, one of a plurality of processes is selected to generate a description for the matching resource. Using the content-sensitive description generation techniques described herein, a single result set may include abstracts that were generated using several different processes, where the difference in process corresponds to a difference in the kind, quality, and relevance of the available sources of information about each matching resource.

Abstract: A television includes a display, a first network interface to a packet-based network, and a decoder operable to process a multimedia data stream received via the first network interface. The television is operable to display content of the multimedia data stream on the display promptly upon receipt of a user request to power up the television. A method includes receiving a multimedia data stream at a network interface of a television, processing the multimedia data stream to generate content, and providing the video content to a display of the television.

Abstract: A DVR controller in network communication with a digital video recorder receives an instruction from a user directing the digital video recorder to perform a function among a set of available functions. The set of available functions comprises a record function operative to cause the digital video recorder to record content and store that content on the digital video recorder, and a playback function operative to cause the digital video recorder to play back content stored on the digital video recorder. Subsequently, at least in part in response to the instructions from the user, the DVR controller issues a command to the digital video recorder to perform the function. The digital video recorder is operative to present content on a presentation device controlled by the user. The DVR controller, in turn, is remotely disposed from the digital video recorder in a facility of a content provider.

Abstract: Systems and devices are disclosed for monitoring and controlling usage of media content by blocking usage of media segments. In one embodiment, usage data defining usage, or consumption, of the media content is obtained. A pattern in media segments in the media content based on the usage data is detected when the media segments satisfy at least one defined criterion and are consumed at least a predefined threshold amount. Usage of at least one of the media segments is blocked. In one embodiment, one or more additional media segments accessible to the one or more media devices that are similar to the at least one of the one or more media segments for which usage is blocked at the one or more media devices is identified. Usage of at least one of the one or more additional media segments at the one or more media devices is blocked.

Abstract: The present invention relates to three dimension (3D) scene representations and in particular to a method and a processor for providing improved 3D scene representations. An objective of the embodiments of the present invention is to improve the determination of consistency among a plurality of projections at a virtual view denoted vF. When determining the consistency, entries of a distance matrix, indicative of distance differences of 3D components between different views for a corresponding segment k when projected to the predefined view (vF) for each segment k, are compared with entries of a threshold matrix. The objective is achieved by assigning each segment k of a 3D component to a cluster based on individual rules for each cluster and one threshold matrix and by determining one threshold matrix for each cluster based on the segments of that cluster.

Abstract: A method for protecting digital content is described. The method includes receiving compressed encrypted digital content, determining an output format based, at least in part, on all of the following: a user-requested output format; received control information; and a rule determining whether a clear compressed output format is allowedand producing output from the compressed digital content based on a result of the determining, wherein, if the rule does not allow clear compressed output format, the compressed encrypted digital content is provided in a form which prevents production of clear compressed output in the producing step. Related apparatus and methods are also described.

Abstract: A user private key is stored in a database of the user terminal. A user public key and user information are stored in the user management DB. The encryption/decryption unit encrypts an authority private key specific to a first authority given to a user, by using a user public key associated with user information to indicate a user. The secret sharing unit shares in secret an authority private key into two or more shared authority private keys. The encryption/decryption unit encrypts the shared authority private keys, by using an authority public key specific to each of second authorities to manage the first authority in a shared manner. The authority management DB stores the encrypted authority private key and authority public key in association with the first authority, and stores the encrypted shared authority private keys in association with the second authorities.

Abstract: The present invention discloses an apparatus and method for defining and enforcing rules of transition between two security domains, e.g., a transport domain and a persistent security domain. In turn, a border guard, e.g., a security device, is provided between these two domains that enforce rules for transition between the two security domains. This novel approach of defining a transport domain and a persistent security domain simplifies the classification of the digital content and its movement through the system. Namely, the border guard once established between the two systems can enforce DRM rules associated with how contents are moved between the two domains.

Abstract: A method and apparatus for an iterative cryptographic block under the control of a CPU and without a fixed number of stages. In one embodiment, a first cryptographic block descrambles received information using an internal key or a preprogrammed key to form a descrambled key or descrambled data. A data feedback path stores the descrambled data as internal data and provides the internal data or the external data as data input to the first cryptographic block. A key feedback path stores the descrambled key as an internal key and provides the internal key or the preprogrammed key to a key input of the first cryptographic block. A second cryptographic block descrambles received content using a final descrambling key. Other embodiments are described and claimed.

Abstract: Example embodiments are directed to a digital audio/video (AV) data processing unit and a method of controlling access to the digital AV data. The processing unit of AV digital data includes a deciphering unit of the AV data, a decompression unit, an input/output interface of the processed AV data and communication device towards a security module. The deciphering and decompression units respectively include an encryption unit and a decryption unit, each having at least one personal key and a common encryption key. Deciphering the AV data using the control words and re-encrypting the deciphered AV data occurs only after a successful verification of the control word and the common key. After temporary storage, the re-encrypted AV data cannot be decrypted by the decryption unit unless the common key has been positively verified by the security module by way of a random number generated by the decryption unit.

Abstract: Device (120), smart card (300) and method for selectively supplying access to a service (202) encrypted using a control word. A service (202) is received with an entitlement control message (ECM) (203) comprising authorization data and a specifier of a validity period of the authorization data. The service is decrypted only if the ECM (203) is found valid. The service (202) can be stored on a storage medium such as a DVD. An ECM transcoding module (211) obtains the authorization data from the ECM (203) supplies to writing means (215) a device-specific ECM comprising the authorization data. The device-specific ECM may be encrypted with a key specific to the device (120) and/or comprise an identifier for the device (120).

Abstract: A method and system for determining a smaller sample of large data objects to search through for a match to one under test. The data objects are in preferred embodiments biometric templates.

Abstract: A video data communication system and method are disclosed which provides for the secure transmission of video data among devices connected to a video data bus. The video data is transmitted with address information corresponding to a particular device or, alternatively, video data is encrypted and transmitted on the data bus without address information.

Abstract: An apparatus and method for transferring from a broadcaster to a receiver a limited reproduction right in data. A signal indicating the limited reproduction right is transmitted by the broadcaster and stored by the receiver with the data. The receiver reproduces and processes the data as a function of this signal.