Abstract: Systems and methods for interest-driven data visualization systems in accordance with embodiments of the invention are illustrated. In one embodiment, an interest-driven data visualization system includes a processor, a memory connected configured to store an interest-driven data visualization application, and metadata storage, wherein the interest-driven data visualization application configures the processor to define reporting data requirements, generate data retrieval job data based on the reporting data requirements, transmit the data retrieval job data, receive aggregate data, create at least one piece of reporting data using the received aggregate data and the reporting data requirements, associate visualization metadata with the reporting data describing the visual appearance of the at least one piece of reporting data, and generate a report using the reporting data requirements and the visualization metadata.

Abstract: A file sharing method and apparatus. The method includes uploading, by a first terminal, each encrypted file to a server for saving, and receiving a uniform resource locator (URL) that is returned by the server and corresponds to a location for saving each encrypted file, generating a key package that includes a shared key and a URL that correspond to a file to be shared, and providing the key package for a second terminal, so that the second terminal acquires a corresponding encrypted file by using the URL in the key package, and decrypts the acquired encrypted file by using the shared key in the key package.

Abstract: Digital Cameras configured to verify authenticity of digital photos taken with the digital camera and related methods and computer program products are provided. GPS information associated with a photograph taken with the digital camera is obtained. A checksum of pixels that make up the photograph and the obtained GPS information is generated. The generated checksum is encrypted using a private key associated with the digital camera so as to allow verification that the photograph has not been modified.

Abstract: Systems and methods for interest-driven data sharing in interest-driven business intelligence systems in accordance with embodiments of the invention are illustrated.

Abstract: A system for receiving a driving event comprises an interface and a processor. An interface is configured to receive a portion of data regarding a driving event. A processor is configured to determine whether more data regarding the driving event should be requested and, in the event that more data regarding the driving event should be requested, request more data regarding the driving event.

Abstract: A secure method for transmitting a control word between a server and a plurality of processing entities so as to respectively produce and utilize the control word. Preferably such a method is applied to the field of conditional access methods and systems for preventing the fraudulent use of compromised decryption keys resulting from a coalition of pirate hackers.

Abstract: Systems and methods for configuring devices are disclosed. One method can comprise receiving an output signal representing user rights relating to a requested data and processing the output signal to generate validation data. The method can also comprise transmitting the validation data to a source of the requested data, wherein the validation data facilitates the transmission of the requested data.

Abstract: A method of defining a location of a given object in an image of interest, where the object is characterized by having a specified pattern and an additional property. In an exemplary embodiment the method includes: specifying portions of the image, identifying among the specified image portions a candidate image portion comprising a portion of the specified pattern; defining an image region around the candidate image portion, the image region being composed of image portions, each comprising a portion of the specified pattern, the image region being surrounded by image portions not comprising a portion of the specified pattern; comparing the other property of the given object with same property at the identified region, and if the image region has the additional property of the given object, identifying the location of the given object as the location of the defined image region.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a gateway comprising a controller to receive from a communication device a request for media content, receive a key and a record associated with the communications device from an interactive television system, wherein the record comprises a list of entitled media content, determine whether the requested media content is in the list of entitled media content, retrieve the requested media content from the interactive television system when the requested media content is determined to be in the list of entitled media content, encrypt the retrieved media content utilizing the key, and transmit the encrypted media content to the communications device. Other embodiments are disclosed.

Abstract: A system and device for verifying the integrity of a system from its subcomponents, the system comprising a plurality of subcomponents each having a physical state, the system and the device comprising a processor that is connected to each of the subcomponents, the processor configured to verify systemic integrity by performing verification on some or all specified subcomponents. The verification may be individual (1,1) or threshold (n,1), and may be interactive or non-interactive.

Abstract: In one embodiment, a system includes a control word processor to generate first regional-specific control word formation data items (RSCWFDI), for a first geographical sub-region of a primary geographical region which includes different geographical sub-regions, for use over cryptoperiods, the first RSCWFDI being used in generating control words in receiver-decoder devices, an encryption engine to encrypt content with the control words over the cryptoperiods yielding encrypted content, a first transmission apparatus to broadcast the first RSCWFDI and the encrypted content in the primary geographic region, and a communication interface to share data about second RSCWFDI of the first geographical sub-region with at least one regional transmission apparatus of the first geographical sub-region operative to broadcast the second RSCWFDI of the geographical sub-region in the geographical sub-region, wherein each control word may be generated in the receiver-decoder devices using one of first and one second RSCWFDI.

Abstract: A computing device includes an input bridge, an output bridge, a processing core, and authentication logic. The input bridge is coupled to receive a sequence of data items for use by the device in execution of a program. The processing core is coupled to receive the data items from the input bridge and execute the program so as to cause the output bridge to output a signal in response to a given data item in the sequence, and the authentication logic is coupled to receive and authenticate the data items while the processing core executes the program, and to inhibit output of the signal by the output bridge until the given data item has been authenticated.

Abstract: Some embodiments set forth systems and methods enabling a first network to use the resources of various second networks in order to localize delivery of the first network content from the various second networks in a secure manner. Some embodiments provide a token-based authentication scheme to ensure that any configured content access restrictions are effectuated at the first network and any of the second networks providing localized content delivery for the first network. The scheme involves a two phase user authentication, wherein the user is separately authenticated at the first network and the redirected to second network using either the same or different set of access restrictions. The first network exchanges a first encryption key with content providers for encrypting/decrypting the first access restriction and a second encryption key with a second network for encrypting/decrypting the second access restriction.

Abstract: A computer-implemented method for managing data protection of storage units may include 1) providing a user interface that enables a user to configure data protection policies for storage units, 2) selecting at least one storage unit for data protection, 3) enabling the user to configure, through the user interface, a data protection policy to schedule a data backup of the storage unit, and 4) enabling the user to configure, through the same user interface, the same data protection policy to schedule a data transfer operation from the storage unit to an additional storage unit. The data transfer operation may include at least one of a replication operation and a continuous data protection operation. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: One embodiment includes hardware-based cybersecurity devices that create a physical barrier (“hardware security barrier”) between a computer's (or other device's) processor and a public or private network. Hardware security barriers typically use immutable hardware in accomplishing cybersecurity activities including generating and distributing cryptographically secure numbers, encryption, decryption, source authentication, and packet integrity verification. This hardware security barrier protects against remote threats and guarantees that all exported and received data are strongly encrypted. A hardware security barrier can be included in any computing or networking device that contains a network interface. One embodiment of a hardware security barrier is implemented as part of a network interface, such as, but not limited to being part of a network interface controller, or as a standalone unit between a communications interface of a host system and a connection to a network.

Abstract: A portable data or information carrier in the form of a smart card with partially or fully virtualized components. To maximize the confidentiality of information stored in the carrier, and more specifically to limit the amount of information available to a potential defrauder, electronic components such as circuits, I/O, cryptographic, memory and dummy objects are built, modified or influenced on demand from physical characteristics of an eligible person or device. Digitized unique biometric or hardware identifiers are read upon start-up and runtime of the device and, in case of an eligible person or device, subsequently supply all values necessary for determination of the characteristics of the user specific virtual smart cards objects, their placement and connections. By multi-factor authentication, the end-user or device will retain sole control of its keys and use them for authentication, signature or encryption purposes as if he had a physical smart card in his hand.

Abstract: A method of synchronizing includes providing a sensor network including sensor nodes having object recognition sensors (ORS's) and building automation network nodes. The ORS's have partially overlapping fields of view in a sensed overlap area in the building. Movement of an individual through the sensed overlap area triggers dynamic synchronizing with the first sensor node waking up and sending a first RF request to join a subnet and for a schedule of wakeup times, the first sensor node receiving a response from any sensor node that receives the first request including synchronization information having times the first sensor node should wake up. The second sensor node is activated by the individual's movement and sends a second RF message to join the subnet and for a schedule of wakeup times. The first sensor node receives the second RF message and in response sends the synchronization information to the second sensor node.

Abstract: A profiling service may determine, local to a device, user profile attributes associated with a device user based on interaction of the device user with the device, based on device-local monitoring of device user interactions with the device, and may store the user profile attributes in a memory. The profiling service may be configured as an augmentation to a device operating system of the device. A profile exposure component may manage exposure of information associated with the user profile attributes to applications operating locally on the device, without exposure to the applications or to third parties of information determined as sensitive to the device user.

Abstract: A method and system is disclosed that provides at least one server device; and at least one remote audio playback device, the remote audio playback device including a unique identifier stored thereon. An encryption key is created by the at least one server device. The at least one server device transmits, over a long range communication network, to the remote audio playback device, music content encrypted using the encryption key and the remote audio playback device's unique identifier.

Abstract: A method includes receiving, at a first wireless device, from a second wireless device, content and an identification of the second wireless device, over a peer-to-peer wireless communication link. The received content is rendered and verification information containing the identification of the second wireless device and an identification of the received content is generated at the first wireless device. The verification information is then encrypted at the first wireless device using an encryption key. Apparatus and a computer program product counterparts to the method are also disclosed.

Abstract: To provide a secure service to an application virtual machine running in a first domain of a virtualized computing platform, a second domain is arranged to run a corresponding service driver exclusively for the application virtual machine. As part of the secure service, the service driver effects a key-based cryptographic operation; to do so, the service driver has to obtain the appropriate key from a key manager. The key manager is arranged to store the key and to release it to the service driver only upon receiving evidence of its identity and being satisfied of compliance with release policies associated with the key. These policies include receipt of valid integrity metrics, signed by trusted-device functionality of the virtualized computing platform, for the service driver and the code on which it depends.

Abstract: A method is carried out by a receiving and playing device (10), for receiving and playing a media stream. The method includes a first playing procedure (s12), a playing mode switching procedure (s14), and a second playing procedure (s16). The first playing procedure (s12) includes receiving a media stream through a communication medium or network (30) and playing the received media stream. The playing mode switching procedure (s14) includes determining (s142) whether a media content about to be received or being received is locally stored and, if so, switching to the second playing procedure (s16). The second playing procedure (s16) includes playing the media content based on at least the locally stored media content. The invention also relates to methods carried out by a transmitting device (20), to receiving and playing devices (10), to transmitting devices (20), and to computer programs.

Abstract: A method for managing an external portable storage device includes at least the following steps: when the external portable storage device having at least a non-encrypted partition is electrically connected to an electronic device, searching the external portable storage device for a default image file which is an encrypted partition; and when the default image file is found in the external portable storage device, mounting the default image file to an operating system of the electronic device, such that the encrypted partition and the non-encrypted partition are both available to the operating system for data access.

Abstract: A method is provided for producing a secured data object by means of a data processing device. The method includes: generating a data representation value in each case at the end of an interval having a first interval length which is assigned to the data sets of the respective interval of first length, receiving a first time stamp assigned to the respective data representation value, storing the respective data representation value together with the assigned first time stamp, generating an interval representation value in each case at the end of an interval having a second interval length which is greater than the first interval length which is assigned to the data representation values of the respective interval of second length, receiving a second time stamp assigned to the respective interval representation value and storing the respective interval representation value together with the associated second time stamp.

Abstract: A method is provided in one example embodiment and includes creating a key from a hash of a resource identifier associated with a video object; storing the video object in a distributed hash table with the key; and replicating the video object in the distributed hash table based on a redundancy factor associated with the video object. In more particular embodiments, the method can include fragmenting the video object into segments; creating sub-keys with a hash of resource identifiers associated with each of the segments; storing the segments in the distributed hash table with the sub-keys; and replicating the segments in the distributed hash table based on the redundancy factor.

Abstract: In embodiments, apparatuses, methods and storage media are described that are associated with blackout rules for media content. In embodiments, one or more segments may be generated from the media content, one or more of the generated segments containing a blackout rule identifier. The blackout rule identifier may identify a blackout rule describing one or more limitations to access to the piece of media content. When displaying the media content, a client device may retrieve the blackout rule based at least in part on the blackout rule identifier. The client device may then limit access to the media content if directed to do so by the blackout rule.

Abstract: Techniques for providing live content at different quality levels to a user device include advertising content availability at multiple quality levels for selection by the user device, receiving a quality level selection from the user device, wherein the quality level selection matches one of the advertised multiple quality levels, determining whether the received quality level selection differs from a currently used quality level, when it is determined that the received quality level selection is different from the currently used quality level, reconfiguring a transcoder to transcode the live content to only the received quality level, and updating a metafile to include a first quality level at a first bitrate lower than a bitrate for the received quality level selection and a second quality level at a second bitrate higher than the bitrate for the received quality level selection.

Abstract: A user is presented with one or more user-level permissions in a human understandable language, where the one or more user-level permissions represent one or more application-level permissions requested from an application for accessing one or more resources. A security profile is generated having one or more operating system (OS)-level permissions based on at least one of the user-level permissions authorized by the user. The security profile is enforced to restrict the application to accessing the one or more resources based on the OS-level permissions.

Abstract: A video display system is provided. The video display system includes: a first media device; and a second media device, wherein the first media device is connected to the second media device through a universal serial bus power delivery (USB PD) interface, and the first media device transmits both data and a protected video content to the second media device simultaneously through the USB PD interface, wherein the second media device displays the protected video content on a first electronic device through the USB PD interface.

Abstract: Disclosed are a method and device for managing security of information in a mobile terminal, as well as a mobile terminal.

Abstract: Provided is a video processing device with which it is possible to efficaciously carry out a process of superpositioning a monitor character signal in a video signal which is inputted from a camera and outputting same separately from the video signal. The video processing device comprises: a character signal emitter which generates a character signal on the basis of the monitor data; and a character superposition unit which superpositions the character signal which is generated by the character signal emitter upon the least significant bits of the color difference signal of the video signal which is inputted from the camera. With respect to downconverting the video signal whereupon the character signal has been superpositioned, only a downsampling process on the least significant bits of the color difference signal is carried out, and an interpolation filter process is not carried out.

Abstract: A method and system for protecting content in graphics memory are disclosed. Specifically, one embodiment of the present invention sets forth a method, which includes the steps of storing a first privilege level in a privilege map with restricted access, wherein the first privilege level is associated with a memory page used to store the content; and determining whether to permit a request to access the memory page based on the first privilege level.

Abstract: An image forming apparatus is provided, in which the image forming apparatus includes a scanner, a display device, processing circuitry configured to activate a secure application program, read a code for user authentication from a card medium that stores the code, conduct the user authentication using the read code, and display, on the display device, when the user authentication is successful, a function selection screen that receives a selection of a function among a plurality of functions, the plurality of functions including at least a scanner function.

Abstract: The data-content authentication center includes a data-content receiver comprises a transceiver for receiving data/content directly from a data/content generation/capturing device by first checking and confirming a registered device identification (ID) of the data/content generation/capturing device before receiving the data/content transmitted from the data/content generation/capturing device into the data-content receiver.

Abstract: A method and system for detecting manipulation when control data are transmitted from a first control unit to a second control unit via a network, which includes generating integrity check information data for the control data transmitted by the first control unit via an integrity check generating unit on the transmitter side, calculating a cryptographic checksum for the integrity check information data generated on the transmitter side via the integrity check generating unit, transmitting the integrity check information data and the cryptographic checksum to an integrity check verifying unit that verifies the cryptographic checksum on the receiver side, generating integrity check information data on the receiver side for the control data received by the second control unit using the integrity check verifying unit, and comparing the integrity check information data and the integrity check information data with the cryptographic checksum to detect the manipulation of the transmitted control data.

Abstract: Media content to be place shifted is received at the local user device along with a place shift enabled parameter that contains data associated with the received media content and that indicates whether the received media content is authorized to be place shifted. A user command to place shift the received media content to the remote user device is also received. It is then determined, by analyzing the place shift enabled parameter, whether the received media content is authorized to be place shifted and based on this determination the place shifting of the received content to a remote device is allowed or impaired.

Abstract: A method and system of preventing control word sharing, the method and system including receiving a temporal key, denoted TKi, at a removable security element, receiving an entitlement control message (ECM), the ECM including a control word derivable by the removable security element, deriving the control word from the ECM at the removable security element, combining at least the control word and a value associated with an ID of the removable security element, thereby producing combined control word and removable security element ID data, encrypting the combined control word and removable security element ID data according to an encryption function, wherein the encrypting includes using TKi as an encryption key, and at a time after a removable security element interface has received TKi, but prior to a start of a crypto period with which the control word is associated, sending the encrypted combined control word and removable security element ID data to the removable security element interface.

Abstract: A system for receiving a driving event comprises an interface and a processor. An interface is configured to receive a portion of data regarding a driving event. A processor is configured to determine whether more data regarding the driving event should be requested and, in the event that more data regarding the driving event should be requested, request more data regarding the driving event.

Abstract: A streaming system includes an authoring unit (2), a stream server (3) and a client terminal (5). The authoring unit generates a file composed of encrypted contents data and the ancillary information at least containing the packetizing control information for generating an RTP packet, a non-encrypted codec dependent header made up of the information pertinent to encoded contents data, and the encryption information for decrypting the encrypted contents data form packet to packet. The streaming server packetizes the encrypted contents data along with at least the codec dependent header and distributes the resulting data as a stream. The client terminal refers to the codec dependent header of the received packet, re-assembles the packet, and decrypts the encrypted contents data of the re-assembled packet to generate contents data.

Abstract: Methods and apparatus for creation and transport of multimedia content flows to a distribution network. The system includes a method for transporting a content flow to an access network for distribution to devices coupled to the access network. The method includes transmitting a request message to add the content flow to the access network, wherein the request message comprises one or more flow parameters associated with the content flow. The method also includes receiving a response message indicating that the content flow associated with the one or more flow parameters will be added to the access network, and delivering the content flow to the access network.

Abstract: According to one embodiment, an information processing apparatus includes a first input module, a second input module, a converter and an output module. The first input module receives a first packet group of first content applied to a first copyright protection method. The second input module receives a second packet group of second content applied to a second copyright protection method. The converter re-packetizes the first content packetized into the first packet group and the second content packetized into the second packet group, into a third packet group for outputting to a transmission path by applying a third copyright protection method. The output module outputs the third packet group of the first content and the second content.

Abstract: Methods and arrangements in video encoding and decoding entities. The methods and arrangements relate to the joint encoding of reference information associated with encoded video. The method and arrangement in a decoding entity relate to obtaining (402) a single syntax element associated with an encoded block Be, and identifying (404) a reference mode and one or more reference pictures based on the obtained syntax element. The method and arrangement further relate to-decoding (406) of the block Be based on the identified reference mode and one or more reference pictures, thus providing a decoded block, B, of pixels.

Abstract: Method for transmitting and receiving audiovisual content in “push” environments without a return channel, in which a transmitter composed of at least one transponder transmits, to a set of receivers, each composed of a plurality of tuners, a transport signal comprising at least one audiovisual content channel, adapted to be received and directly reproduced in each receiver by virtue of the transponder which transmits said audiovisual content channel being tuned by each receiver, and a data channel associated with each audiovisual content channel, which comprises at least one audiovisual content, for the subsequent recording thereof in a storage device of each receiver.

Abstract: A method and system of providing conditional access to encrypted content includes receiving unsolicited multiply encrypted video content and first decryption data over a broadcast network. Partially decrypted video content is obtained by decrypting a first layer of encryption of the encrypted video content using the first decryption data. The partially decrypted video content is stored. A request for viewing the encrypted video content is transmitted and second decryption data is received. A second layer of encryption of the encrypted video content is decrypted using the second decryption data.

Abstract: Computationally implemented methods and systems are described herein that are designed to, among other things, receiving a level-one encrypted output of a surveillance device; encrypting at least a part of the level-one encrypted output of the surveillance device with a level-two encryption key whose decryption key is inaccessible by a level-two encryption entity; and transmitting a level-two encrypted output of the surveillance device.

Abstract: A request to render content associated with a first super distributed content file is detected by a content rendering device. At least one portion of the content associated with the first super distributed content file is determined to be missing from the first super distributed content file. A second file including the at least one portion of the content missing from the first super distributed content file is obtained from a server. The at least one portion of the content of the second file includes partial encrypted portions of the content associated with an encryption system of the content rendering device. A content output stream including decrypted partial encrypted portions of the content of the second file and the content associated with the first super distributed content file is generated. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: In one aspect, a method includes: obtaining compressed video content within a video content processing module, a portion of a document structure of the compressed video content conforming to a predefined codec, the portion of the document structure including a plurality of video frames; decrypting the compressed video content in accordance with a digital rights management data encryption applied to the compressed video content; adding information in an extension frame associated with a portion of the document structure; and applying an encoding technique to content of one or more of the plurality of video frames after the decrypting, wherein the extension frame flags the applied encoding technique; and providing the compressed video content, including the encoded content, to a media player including a codec conforming to the predefined codec.

Abstract: Approaches for combining different information to be transmitted into different slices of a data packet and/or encrypting the slices using different cryptographic schemes for secure transmission of the information are disclosed. In some implementations, first information and second information may be received. A first data slice representing a portion of the first information may be generated based on a first cryptographic scheme. A second data slice representing a portion of the second information may be generated based on a second cryptographic scheme different than the first cryptographic scheme. A first header may be generated such that the first header may specify the first cryptographic scheme for the first data slice and the second cryptographic scheme for the second data slice. A first data packet may be generated such that the first data packet may include the first header, the first data slice, and the second data slice.

Abstract: This discloses a video file encryption and decryption method, device, and mobile terminal. The encryption method can include: obtaining a to-be-encrypted video file and an encryption key, encrypting the video file using the encryption key to obtain an encrypted video file, obtaining scanned non-hidden partitions of a mobile terminal and an extended memory of the mobile terminal for storing user data, determining a partition storing the to-be-encrypted video file among the non-hidden partitions, and moving the encrypted video file to a folder in the partition storing the to-be-encrypted video file. The decryption method can include: obtaining a to-be-decrypted video file and a decryption key, decrypting the to-be-decrypted video file using the decryption key to obtain a decrypted video file, and determining a pre-encryption storage location of the to-be-decrypted video file and moving the decrypted video file to the pre-encryption storage location of the to-be-decrypted video file.

Abstract: Methods, systems, and apparatus are disclosed which enable flexible insertion of forensic watermarks into a digital content signal using a common customization function. The common customization function flexibly employs a range of different marking techniques that are applicable to a wide range of forensic marking schemes. These customization functions are also applicable to pre-processing and post-processing operations that may be necessary for enhancing the security and transparency of the embedded marks, as well as improving the computational efficiency of the marking process. The common customization function supports a well-defined set of operations specific to the task of forensic mark customization that can be carried out with a modest and preferably bounded effort on a wide range of devices. This is accomplished through the use of a generic transformation technique for use as a “customization” step for producing versions of content forensically marked with any of a multiplicity of mark messages.