Abstract: An information processing apparatus deleting, from a second recording medium, a copy of electronic data once recorded in the second recording medium, an original of the electronic data being recorded in a first recording medium different from the second recording medium, includes: an electronic data deleting part deleting the copy of the electronic data from the second recording medium, which copy can be used when authentication is succeeded in based on medium identification information which is prepared for identifying the first recording medium; an electronic data validating part validating the electronic data once invalidated when the copy of the electronic data was created in the second recording medium; and a medium identification information deleting part deleting the medium identification information of the first recording medium which was recorded in a predetermined storage area when the copy was created in the second recording medium.

Abstract: In a method for loading media data (M) into a memory of a portable data carrier (10) connected to an external operator device (24), the data carrier (10) receives a loading job, an encrypted data transfer channel (50) is set up between the data carrier (10) and a trustworthy, non-local server (30) on which the media data (M) are held, and the media data (M) are transferred in encrypted form via the data transfer channel (50) and written to the memory of the data carrier (10). A data carrier (10) and a computer program product have corresponding features. In addition, an operator device (24) and a computer program product are provided that are configured to provide a user interface for initiating the method for loading the media data (M). The invention provides a technique for loading media data (M) into a portable data carrier (10), which technique prevents unauthorized copying of the media data (M).

Abstract: A system and method for generating and processing forensic information for digital cinema content in an efficient and cost-effective manner while maintaining the integrity and quality of the digital cinema images. Customized forensic content, which includes at least one of visible pictorial and text data, is generated for display with corresponding digital cinema content. The digital cinema content is analyzed for determining at least one of a location and time for incorporating the forensic content with the digital cinema content. Real-time information is incorporated into the customized forensic content, the real-time information including data indicating, e.g., at least one of an actual time, date and location pertaining to each actual showing of the digital cinema content. The customized forensic content having real-time information is unobtrusive yet easily and quickly detectable and decipherable during forensic analysis.

Abstract: Methods and apparatuses are provided for use with optical data storage media and related devices.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: An application for updating, distributing, and rendering an application feature set and application versions is disclosed. The application component allows multiple versions of similar applications to be installed and upgraded on the same computer. Meanwhile, allowing new product levels downloads to transform an existing product into a different product.

Abstract: The subject invention provides a unique system and method that facilitates creating HIP challenges (HIPs) that can be readily segmented and solved by human users but that are too difficult for non-human users. More specifically, the system and method utilize a variety of unique alteration techniques that are segmentation-based. For example, the system and method employ thicker arcs or occlusions that do not intersect characters already placed in the HIP. The thickness of the arc can be measured or determined by the thickness of the characters in the HIP. In addition to increasing the thickness, the arcs can be lengthened because longer arcs tend to resemble pieces of characters and may be harder to erode. Usability maps can be generated and used to selectively place clutter or occlusions and to selectively warp characters or the character sequence to facilitate human recognition of the characters.

Abstract: Methods and apparatus or systems for providing security based on innate characteristics of devices are disclosed. A method of providing security associated with communications from a digital device includes observing an analog signal associated with communications from the digital device, characterizing the digital device at least partially based on the analog signal, and providing a security feature at least partially based on the step of characterizing.

Abstract: A digital content distribution control method, a digital content reproducing method, and a digital content reproducing apparatus. The digital content distributing side manipulates digital content by encrypting and compressing the same, transmits the manipulated digital content, an encrypted content key, and encrypted billing information to the other party of communication, and distributes to digital content proprietors the digital content usage fees collected based on digital content usage information received from the other party. On the other hand, the digital content reproducing side decrypts, in a single portable terminal, the manipulated digital content by the digital key and decompresses the decrypted digital content for reproduction. At the same time, the reproducing side decrements the billing information according to the use of the content and generates content usage information to be transmitted to the content distributing side.

Abstract: A process for distributing digital audio sequences according to a nominal flux format including a succession of fields, each of which includes at least one digital block clusterizing a selected number of coefficients corresponding to single audio elements that are digitally coded inside the flux and utilized by audio decoders that are able to play it to be able to decode it correctly, including a preparatory step including modifying at least one of the coefficients, and a transmission step including a primary flux in compliance with a nominal format including blocks that were modified during the preparatory step and by a route separated from the primary flux by an additional piece of digital information which allows reconstruction of the original flux starting with a calculation, on recipient equipment, as a function of the primary flux and of the additional information.

Abstract: A server apparatus includes a CPU, a RAM, a cipher processing unit for carrying out encryption and decryption, a communication processing unit for carrying out communication with an information processing terminal, and a data storage unit for storing information that does not require confidentiality. The server apparatus also includes a distribution information storage unit for storing information such as a program to be distributed, and a specific information distribution history holding unit for holding a specific information distribution history for managing a record of a program specific information of a program previously distributed to the information processing terminal.

Abstract: Subject matter includes methods of using conventional set-top boxes that receive streaming video modulated on coaxial cable rather than over an IP-based LAN as nodes in a media network. In one implementation, an exemplary adapter is used to integrate a conventional set-top box into a media network. In one implementation, an exemplary filter is used to reserve frequencies for communications between a conventional set-top box and a hub and to prevent communications from leaving a media network. In one implementation, an exemplary content protection method provides a way of encrypting program content on the media network in a manner that a conventional set-top box can decode.

Abstract: In a digital image matching method, reference calibration data associated with one or more reference digital image files is ascertained. The reference digital image files each have reference calibration data that is hidden metadata and can also have public metadata that is readable by a different procedure. A test digital image file is obtained and a data structure capable of holding the reference calibration data is detected in the test digital image file. The presence of second calibration data within the data structure of the test digital image file is determined. If the reference and second calibration data match, then the test digital image file and reference digital image files are from the same digital acquisition device.

Abstract: A method of selecting data for multiple carriage partial encryption consistent with certain embodiments involves examining unencrypted packets of data in a digital audio/video data stream to identify a packet type; and selecting packets of the identified packet type for multiple partial encryption, wherein the amount of data to be encrypted is sufficient to render a portion of an entire frame unviewable. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: The present invention relates to searching content, particularly for at least one extract common to a first data file and a second data file.

Abstract: Providing authorized copies of encrypted media content including: receiving application for authentication to make copies of the media content; providing forensic decryption tools to process the media content; transmitting a permission to make copies of the media content using the forensic decryption tools; performing authorized decryption of the media content; and making and forensically marking copies of the decrypted media content.

Abstract: A method of protection against the copying of digital data stored on an information carrier envisages, on the basis of a first identification of an encryption of the digital data and of a second identification of a watermarking of digital data, the determination of a first mark if it has been possible to identify the encryption and the watermarking. A third identification of a type of the information carrier is followed by the determination of a second mark if it has been possible to determine the first mark and if has been possible to identify a determined type of information carrier. A fourth identification of cryptographic signature data accompanying the digital data is followed by the determination of a third mark if it has been possible to determine the second mark and if it has been possible to identify a cryptographic signature datum.

Abstract: Data items are selected for inclusion in a data set so as to discourage a transmission of the entire set. Each data item includes section(s) which constitute(s) the complete data set. Each section contains a watermark that includes an identifier of the section, and an identifier of the data set. The identifier of the section may be the address of the section, and the identifier of the data set may be the serial number and an indicator of the total size of the data set. The presence of the data set is confirmed by checking the watermarks of randomly selected sections to verify that the original section that formed the data set is present. If a section is discovered to be missing or altered, subsequent processing of data items of the data set is prevented. The identifiers may be stored as a combination of robust and fragile watermarks.

Abstract: Consumers may utilize computing devices to assist in the purchase and/or loyalty process, and in particular, the consumer may utilize a PDA to facilitate the purchase and/or loyalty process. During the purchase and/or loyalty process, the consumer may need to insure that any content downloaded or used in association with the PDA is secure in how it is collected, assembled, and delivered to the PDA device. This system and method secures the data from its source to when it is actually viewed or used by the authorized user. The PDA may have direct access to an Internet web site portal that offers secure personal content from a content provider, such as, for example, an on-line banking or financial institution. Using the web site portal, the content provider may offer personal or confidential data, such as financial information, to PDA users in a secure (e.g., encrypted) environment.

Abstract: Disclosed herein are a recording medium, an apparatus for forming the recording medium, and an apparatus and method for reproducing the recording medium. CPI (Copy Protection-related Information), identification information (CPI_Flag) indicative of recording or non-recording of the CPI, and/or a plurality of contents specific information (CSI) with different formats are recorded in a PIC (Permanent Information & Control data) zone of a high-density optical disc such as a BD-ROM (Blu-ray Disc-ROM). A formatting operation and mastering operation are performed under the condition that control data including the CPI, CPI_Flag and/or CSI is separated from main data. An optical disc device judges whether the optical disc has been illegally copied, with reference to the CPI, CPI_Flag and/or CSI read from the optical disc, and compulsorily stops a data playback operation upon judging that the disc has been illegally copied.

Abstract: A method and apparatus for directly and indirectly preventing illegal copying of works such as cinema or video images displayed on a display apparatus such as a theater screen or display unit. In particular, the method and apparatus prevents illegal copying of a displayed work wherein one seeks to use an image pickup apparatus, such as a video camera, to make a copy of the displayed work. Prevention of illegal copying is achieved by implementing one or more changeover modes to changeover a display operation condition so that a stripe pattern or the like is produced on a redisplayed image to deteriorate the quality of the redisplayed image.

Abstract: A network communications method communicates a certificate from a client machine to a server machine through a security module. The protocol used between the client and server machines is HTTP or an equivalent protocol, and a security protocol such as SSL or an equivalent is implemented between the client machine and the security module. The steps of the method include inserting the certificate into a cookie header of a request in HTTP or an equivalent protocol, and then transmitting the request from the security module to the server machine.

Abstract: Processing an MPEG elementary stream contained in multiple PID streams in a conditional access overlay environment. A multi-program transport stream contains numerous video and audio elementary streams. Critical packets in the elementary streams are encrypted with two different encryption schemes creating a stream having multiple PID values. The streams are then sent from the headend to individual set-top boxes. One encryption scheme can be decoded by the incumbent set-top box and the second encryption scheme can be decoded by the overlay set-top box. The overlay set-top box uses a dual filter system to filter and decode the PIDs for each video and audio stream of the desired program.

Abstract: A license managing apparatus comprises an inputting device, an encrypting device for encrypting information inputted from the inputting device to produce encrypted information, and an outputting device for outputting the encrypted information. The encrypting device encrypts at least identification information of the game apparatus to be licensed and license condition information thereof to produce the foregoing encrypted information. The game apparatus includes an inputting device for inputting the outputted encrypted information, an encryption decoding device for decoding the inputted encrypted information, and a controller for controlling execution of a game program. The game apparatus further includes a storing device for storing identification information of the game apparatus, and a storing device for storing internal information.

Abstract: A secure video system for a graphics display adaptor includes a module for decrypting a content signal from a media player or other secure content source. The adaptor may be provided as a component of a computer graphics system, or in a stand-alone special-purpose device. The adaptor may include other features for preventing unauthorized use of protected content, for example authenticating the source of a content signal before providing an output audio or video signal, encrypting the output video signal, responding to commands to renew or revoke cryptographic keysets, and embedding forensic tracking information in an audio or video signal.

Abstract: An apparatus for generating codes includes a quantization unit which generates quantization coefficients by performing discrete wavelet transform with respect to each of tiles into which an image is divided, a block division unit which divides the quantization coefficients into blocks, a Hash conversion unit which performs Hash conversion based on the quantization coefficients of each of the blocks so as to produce a Hash value for each of the blocks, a digital watermark embedding unit which adjusts a parity of a quantization coefficient of interest equal to a parity of the Hash value of a block to which the quantization coefficient of interest belongs, and a coding unit which generates code sequence data by coding the quantization coefficients including the quantization coefficient whose parity is adjusted.

Abstract: A system including a secure LSI 1 establishes a communication path to/from a server 3 (UD1), and receives a common key-encrypted program generated by encryption with a common key and transmitted from the server 3 (UD6 and UD7). The received common key-encrypted program is decrypted to generate a raw program, and the raw program is re-encrypted with an inherent key to newly generate an inherent key-encrypted program, which is stored in an external memory.

Abstract: A system including a secure LSI 1 establishes a communication path to/from a server 3 (UD1), and receives a common key-encrypted program generated by encryption with a common key and transmitted from the server 3 (UD6 and UD7). The received common key-encrypted program is decrypted to generate a raw program, and the raw program is re-encrypted with an inherent key to newly generate an inherent key-encrypted program, which is stored in an external memory.

Abstract: An image verification system has an image generation device and a first image verification device. The image generation device includes (a) an image data generation unit that generates image data, and (b) a first verification data generation unit that generates first verification data from the image data using a common key in common key cryptography. The first image verification device includes (a) a first verification unit that verifies, using the image data, the first verification data and the common key, whether the image data is altered, and (b) a second verification data generation unit that generates second verification data from the image data using a private key in public key cryptography without editing the image data, if the first verification unit verifies that the image data is not altered.

Abstract: In accordance with an embodiment of the invention, a method for creating a self-authenticating document is disclosed. The method comprises: providing a base substrate forming the document; printing an authentication seal on the document, the authentication seal comprising a printed portion comprising an ink creating a bleed area on the document where the ink and the substrate interact; and obtaining unique bleed properties of the bleed area. The bleed properties are obtained by scanning the bleed area upon termination of bleeding or drying to provide a description of the ink and substrate interaction to generate an identifier code representing the unique bleed properties. The method further comprises generating a signature of the identifier code, encoding the identifier code in an information carrier, and associating the information carrier with the document or storing the signed identifier code in a remote verification seal code that is not printed on the document.

Abstract: The present invention is a method for identification of manipulations on an arrangement which includes a sensor which emits pulses and a recording unit. As is the case with a tachograph, any possibility of manipulation must be overcome. For this purpose, the sensor transmits real time pulses to the recording unit and, cyclically in response to first request instructions, transmits higher data signals for a measurement, and receives a number of real time pulses in response to second request instructions which are offset in time with respect to the first request instructions. A data signal evaluation module compares the number of real time pulses with the number of data signal pulses and thus achieves a very high level of security against manipulation.

Abstract: A method of and apparatus for protecting data in a data storage system. A method of securely erasing data stored in a data storage system includes: determining whether a security-erase command is received together with a random number and an encrypted random number; decrypting the encrypted random number using a security-erase algorithm and an associated key when the security-erase command is received; determining whether the decrypted random number is identical to the received random number; and executing the security-erase command when the decrypted random number is identical to the received random number, and stopping the execution of the security-erase command when the decrypted random number is not identical to the received random number.

Abstract: A classification scheme assigns samples of the watermarked media to classes based on a classification criteria indicating a likely presence of a watermarked signal. Once classified, the scheme models a statistical distribution of the samples in each class. It then assigns a figure of merit to the samples in each class. A watermark detector and reader use the figure of merit to give greater weight to samples that are more likely to contain a watermark signal. Alternatively, the statistical distributions of the classes may be used to derive an estimate of a watermark signal in a pre-filtering stage of a watermark decoder. The watermark decoder then extracts a message from the estimate of the watermark signal.

Abstract: The present invention is suitable for use in a partial dual encrypted system. The present invention allows for two different decryption devices (e.g., an incumbent, or first, set-top and an overlay, or second, set-top) to be located in a single system having an incumbent encryption scheme and a second encryption scheme. Each set-top is designed to decrypt the first or second proprietary encryption schemes, respectively. In accordance with the present invention, the second set-top utilizes a novel program map table to ensure that the second set-top chooses correct elementary streams in the partial dual-encrypted stream (i.e., a combined stream including a first encrypted stream, a second encrypted stream, and a clear stream) for a desired program.

Abstract: A method for robust embedding of information into video content, said method comprising of breaking said video content into a series of at least one unit; selecting at least one of said units; selecting at least one parameter for at least one of said units and performing at least one geometric transformation on said selected units according to said parameters selected for said unit, thereby to embed said information in said video content.

Abstract: Even though data transmitted between a data processing apparatus and disc recording and/or reproducing apparatus is monitored, copying the data is effectively prevented and the data can be protected. A write ID generator 20 of a disc recording and/or reproducing apparatus 10 generates independent write ID for each recording of data, and transmits the write ID to an encryptor 102 of a data processing apparatus 100. The encryptor 102 encrypts contents ID to be used for key information for encrypted contents data and data control information to restrict or prohibit copy by the use of an encrypting key based on the write ID. The encrypted data are transmitted to an encryptor 24 of the disc recording and/or reproducing apparatus 10 via an I/F 101 and I/F 19, and encrypted along with the write ID by the use of an encrypting key based on disc ID, and recorded to a disc 30.

Abstract: A semiconductor integrated circuit for the processing of conditional access television signals comprises an input interface for receiving encrypted television signals and an output interface for output of decrypted television signals. Control signals broadcast with the television signals include control words and common keys. Entitlement messages are received in encrypted form, encrypted according to a secret key unique to each semiconductor integrated circuit. The input interface is connected to a decryption circuit whereby the only manner of providing the common keys to the circuit are in encrypted form encrypted according to the secret key. Due to the monolithic nature of the circuit, no secrets are exposed and the system is secure. Alternatively, the entitlement messages are encrypted for decryption with the common keys and a unique ID stored in the circuit is compared with an ID in a received entitlement message. Only if the received and stored IDs match can the rights be stored and used.

Abstract: In accordance with certain aspects, data is received from a calling program. Ciphertext that includes the data is generated, using a symmetric cipher, in a manner that allows only one or more target programs to be able to obtain the data from the ciphertext. In accordance with other aspects, a bit string is received from a calling program. An identifier of the calling program is checked to determine whether the calling program is allowed to access data encrypted in ciphertext of the bit string. The integrity of the data is also verified, and the data is decrypted using a symmetric key. The data is returned to the calling program only if the calling program is allowed to access the data and if the integrity of the data is successfully verified.

Abstract: With content management apparatus 110 serving as a copy origin and storage medium 120 as a copy target, the copy origin retains allowed copy count control information on content, and when the content is copied from the copy origin to the copy target, the allowed copy count control information retained at the copy origin before copy processing is updated in accordance with a predetermined rule to generate allowed copy count control information to be retained at the copy origin and allowed copy count control information to be retained at the copy target, and subsequent copy processing at the copy origin is done based on the allowed copy count control information retained at the copy origin, whereas subsequent copy processing on the content stored in storage medium 120 is done based on the allowed copy count control information stored in storage medium 120. In this way, it is possible to achieve content management which is easily understandable for users.

Abstract: A method and system for secure distribution of digital media files including text, video, audio and combinations of these is described. A particular embodiment involves the distribution of audio tiles (particularly music) which are presently being widely distributed over the internet without compensating the various rights holders. In some embodiments, audio content (except for an optional preview section) is encrypted in a single executable file, allowing it to be freely distributed. When consumers want to access the encrypted portion of the file, a decryption key is obtained from a remote server, but because the file includes an integral decryption engine, a decrypted copy of the file never appears on the client side. Thus, there is no unprotected copy that the consumer can illegally distribute. The disclosure also describes other advantageous techniques, such as bonding the decryption key to the consumer's computer, so it cannot be used by others.

Abstract: A unified broadcast encryption system divides a media key tree into S subtrees, divides digital content into segments, and converts some of the segments into variations; the number of segments and variations is q. The system subdivides each of the subtrees into q/|S| subdivided subtrees, assigns a key media variant to each of the subdivided subtrees, and generates a unified media key block (MKBu). The system decrypts digital content by obtaining required key media variants from the MKBu, using the key media variant to find an entry in a variant key table, decrypt a title key, and locate a variant number from the variant key table. The system uses the variant number to identify which of the variations may be decrypted by the title key and uses the title key to decrypt segments and variations.

Abstract: A method and system are provided for monitoring use of a licensed digital good, such as software, digital audio or video, text, and web pages. Each licensed digital good is associated with a shared resource, such as a record in a remote database in a license server. The shared resource is updated with data, such as a sequence or periodic transmission, from each instance of the licensed digital good when each instance is used. By detecting if the data in the shared resource has experienced a race condition, the use of multiple instances of the licensed digital good is detected. The method and system can also be used to determine a number of unlicensed uses of the digital good for purposes of automatically selling additional licenses.

Abstract: A method, system, and computer program product for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset. The digital asset is downloaded to the wireless device from any one of a plurality of content servers or other wireless devices. The digital asset comprising a content ID, content encrypted with a content key, and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network. The method, system, and computer program product also creates the digital asset for downloading to a wireless device from one of a plurality of content servers in a network and generates a voucher at the voucher server.

Abstract: A method and arrangement for detecting a watermark embedded in an MPEG compressed signal includes a conventional MPEG decoder stripped to such an extent that a modified baseband video signal suitable for watermark detection is obtained. A plurality of pictures with the embedded watermark is accumulated (2,3,4) in the transform domain, and the inverse DCT (5) is applied to the accumulated result. Conventional watermark detection (6) is then applied to the accumulated plurality of pictures in the spatial domain.

Abstract: A Personal Digital Key Digital Content Security System (PDK-DCSS) is used to protect computers from unauthorized use and protect the digital content stored on computers from being wrongfully accessed, copied, and/or distributed. The basic components of the PDK-DCSS are (1) a standard hard drive device, with the addition of a PDK Receiver/Decoder Circuit (PDK-RDC) optionally integrated into the hard drive's controller, and (2) a PDK-Key associated with the PDK-RDC. The PDK-Key and RDC technology is utilized to provide two categories of protection: (1) hard drive access control for providing Drive-Level and Sector-Level protection and (2) operating system-level independent file protection for providing File-Level and Network-Level protection.

Abstract: Method and apparatus to prevent hacking of encrypted audio or video content during playback. Hackers, using a debugging attachment or other tools, can illicitly access encrypted data in memory in a playback device when the data is decrypted during playback and momentarily stored in digital form. This hacking is defeated here by methodically “poisoning” the encrypted data so that it is no longer playable by a standard decoder. The poisoning involves deliberate alteration of certain bit values. On playback, the player invokes a special secure routine that provides correction of the poisoned bit values, for successful playback.

Abstract: A method and apparatus for restricting access of an application to computer hardware. The apparatus includes both an authentication module and a validation module. The authentication module is within the trusted firmware layer. The purpose of the authentication module is to verify a cryptographic key presented by an application. The validation module is responsive to the authentication module and limits access of the application to the computer hardware. The authentication modules may be implemented in software through a firmware call, or through a hardware register of the computer.

Abstract: A reception apparatus includes: a reception unit for receiving the scrambled content, the scrambled content being scrambled so that a predetermined unit of scrambled content is descrambled using a descrambling key corresponding to the predetermined unit of scrambled content, and at least one piece of storage information in which a list including all descrambling keys used for descrambling the scrambled content is embedded; storage unit for storing the received scrambled content and the storage information; list extraction unit for extracting the list from the stored storage information; descramble processing unit for extracting the predetermined unit of scrambled content from the stored scrambled content, extracting a descrambling key corresponding to the predetermined unit of scrambled content from the extracted list, and descrambling the extracted predetermined unit of scrambled content using the extracted descrambling key; and reproduction unit for reproducing the predetermined unit of descrambled content

Abstract: The inventive data processing apparatus initially generates verifying values for verifying integrity of contents data stored in a memory device, then stores the verifying values in correspondence with contents data, and then, using the verifying values, the data processing apparatus proves the act of tampering with the relevant contents data, where the verifying values are generated and stored in a memory device per category of contents data. Each of the categories is preset based on a controlling entity of enabling key blocks (EKB) which encipher and provide a contents key (Kcon) provided as a key for enciphering the kinds of categories or contents data. Because of this arrangement, it is possible to effectively and independently executes the process for probing the act of tampering with contents data per controlling entity of the enabling key blocks (EKB) for example.

Abstract: A method for protecting the video memory on a computer system from being illicitly copied. The invention decrypts a previously encrypted image and displays it on the video screen. During the time the image is displayed, the invention protects it from being copied by other running applications. This is accomplished in multithreaded operating systems by first issuing a multithreaded locking primitive to the video memory resource, and then inserting a pending video hardware request that will take precedence over any subsequent video memory access requests. The pending request serves the purpose of destroying the contents of video memory. The pending request is passive in that it does not execute unless a malicious program has removed the video memory lock.