Abstract: A peer-to-peer connection is established by a receiving computer with a sending computer on which a desired file is located. The sending computer encrypts the file using a track key specifically generated for this particular file transfer. Once encrypted, the encrypted file is preferably obfuscated. An application server sends a public key specific to the receiving computer to the sending computer. The sending computer encrypts the track key using the public key associated with the receiving computer, and the sending computer sends the encrypted track key and the encrypted file to the receiving computer. The receiving computer stores the received encrypted track key and the received encrypted file as a secured file on the receiving computer. When a file is transferred, associated business rules are also transferred to the receiving computer. Business rules act to restrict the extent to which a file is read, copied, or distributed.

Abstract: An electronic watermark data insertion apparatus comprises an insertion information memory (39) for preliminarily storing insertion information for designating electronic watermark data to be inserted block by block and an electronic watermark data insertion unit (33) for inserting, on the basis of the insertion information, the designated electronic watermark data from an electronic watermark data table (37) in a quantized image block by block. An electronic watermark data detection apparatus comprises an electronic watermark date extracting unit (45) for extracting the image data having a biased frequency region projecting in dependency on the inserted electronic watermark data block by block and an electronic watermark data detection unit (50) for calculating a statistical similarity between the extracted data and the electronic watermark data stored in an electronic watermark data table (48).

Abstract: A method and apparatus of encouraging distribution, registration, and purchase of free copyable software and other digital information which is accessed on a User's System via a Programmer's Program. Software tools which can be incorporated into a Programmer's Program allow the User to access Advanced Features of the Programmer's Program only in the presence of a valid Password which is unique to a particular Target ID generated on an ID-Target such as the User's System. Advanced features will thus relock if the Password is copied to another ID-target. If a valid Password is not present, the User is invited to obtain one, and provided with the means of doing so, and of installing that Password in a place accessible to the User's System on subsequent occasions. The present invention also provides Programmers with means to invoke business operations as well as computational operations with their programs, and thus to automatically obtain payment from Users who elect to obtain passwords.

Abstract: A system that inserts subscriber identification information includes, in a preferred embodiment, a system with a memory for storing subscriber identification information and a processor configured to insert the subscriber identification information into a media presentation to improve traceability of copied presentations to a subscriber.

Abstract: To distribute digital content from a retailer to a customer, the content as issued by a content provider is retrieved. The as issued content has license acquisition information for acquiring a corresponding license attached thereto, where the license acquisition information includes a site identifier identifying a site at which the customer may obtain a digital license corresponding to the content. The site identifier includes an additional information field attached thereto. The additional information field is modified to include retailer information identifying the retailer, and the content is delivered with the modified additional information field to the customer. Thus, a license request sent from the customer is addressed to the site identified by the site identifier in the license acquisition information and includes the modified additional information field attached thereto.

Abstract: An image processing apparatus capable of preventing a copy protect function of a video or other contents signal from being disabled. An encoder encodes a contents signal from a DVD reproduction unit. A copy protect circuit performs copy protect processing on the encoded signal and outputs it. The copy protect circuit is controlled by control data input from CPU via an I2C_IF circuit. At this time, verification data from the CPU is stored in, and then read from registers in the I2C_IF circuit. Then, the CPU verifies the destination of transmission of the control data.

Abstract: In a cellular phone, a controller stores content data received from a distribution server into a memory. When the content data is to be transmitted to a memory card, a random number key generator generates a license key, and an encryption processing unit encrypts the content data using the license key. The controller transmits encrypted content data to a memory card via a memory card interface. Then, the controller deletes the content data stored in the memory. As a result, distribution of content data that must be deleted when transferring to another apparatus can be facilitated while protecting the copyright.

Abstract: An electronic program guide (EPG) hardware card is disclosed. The card is insertable into a television tuning device having EPG capability. A non-volatile memory, such as flash memory, is situated within a case of the hardware card, and has data stored thereon representing one or more loader programs for the device. Each program corresponds to an EPG provider, and gives the device the capability to receive EPG information from this provider. The case of the hardware card may have a form factor such as a Smart Card, a Compact Flash, a Smart Media, or another form factor. Alternatively, the data stored on the card represents non-executable information corresponding to an EPG provider. A business model and a server-based embodiment are also disclosed.

Abstract: A security system purposely damages at least a portion of content material, using a damaging process that is easily reversible, until a verification of authorization is determined. While the authorization to access the content material is in an unverified state, an undamaged version is provided for immediate rendering, but any stored versions of the content material is stored in the damaged state. When the authorization is verified, the damaging process ceases, and the stored damaged version is repaired, thereby allowing unimpeded subsequent access to the authorized content material. If sufficient evidence is obtained to warrant a determination that the content material is unauthorized, the access to the material is terminated, and any stored content material remains in the damaged state, thereby precluding subsequent access to the unauthorized content material.

Abstract: The information reproduction device for reproducing contents information based on license information added to the contents information and required for reproducing the contents information, includes a determining section for determining whether encrypted contents information is the officially copied contents information or privately copied contents information based on the contents of the license information, and a reproduction section configured to reproduce the contents information determined as the privately copied contents information by the determining section under more severe restriction than the officially copied contents information. Thus, the contents copied by the proper route (officially copied contents) can be distributed in a more advantageous form than the contents copied without proper authorization.

Abstract: A security unit to prevent unauthorized retrieval of data includes an encrypting unit for encrypting data in accordance with commands received by the security unit, and a common register for storing both intermediate results and final results of the data encryption. A switching element operatively coupled to the register selectively outputs the contents of the register. The switching element is controlled to prevent external access to the intermediate results of the encryption. The security unit is particularly useful as part of a memory unit that is attachable to a recording/reproduction device such as a digital audio recorder/player.

Abstract: A method for electronic advertising by an advertiser includes posting an advertisement for an item offered to a buyer for purchase from a merchant on a page per fee basis at a predetermined price via a network link to a network address represented in the advertisement by an alias, which conceals the network address from the buyer. Upon receiving an invocation of the link from the buyer, an order is transmitted to the merchant for supply of the item to the buyer in exchange for payment of the price by the buyer. The item is conveyed, responsive to the order, from the merchant to the buyer, and the advertiser receives a predefined portion of the price paid by the buyer in consideration for posting the advertisement.

Abstract: A data player for reading contents encrypted by a decoding key from a digital medium, and playing the encrypted contents by using the decoding key which is stored in a key storage unit, comprises: a key obtaining unit for performing mutual authentication with the key storage unit to obtain the decoding key stored in the key storage unit; a key holding unit for holding the decoding key; a playback state obtaining unit for monitoring the playback state of the digital medium; and a contents decoding unit for decoding the encrypted contents by using the decoding key. The decoding key is obtained by the key obtaining unit and stored in the key holding unit, and the encrypted contents read from the digital medium is decoded with the decoding key by the contents decoding unit to play the contents. The decoding key stored in the key holding unit is discarded according to the playback state of the digital medium which is obtained by the playback state obtaining unit.

Abstract: In a method for generating a second data stream from a first data stream, which comprises a first header and a first payload data block with payload data, the first header is initially extracted from the first data stream. Subsequently the second header for the second data stream is generated. Then, at least a part of the first header is entered into the second header, the part of the first header including information, which allows conclusions as to the origin of the payload data. Finally, the second payload data block is generated, which comprises the same payload data, so as to obtain the complete second data stream. The method according to the invention enables device-specific encrypting of payload data, a flexible, device-specific “copy” for other devices of a user and, in particular, complete documentation of the origin of the present copy, such that effective copyright protection may be realized.

Abstract: A method on an end user system for creating additional copies onto at least one computer readable medium such as CDs, DVDs, ZipDisks™, tape, Flash memory, and RAM. The method comprising the steps of: receiving encrypted content with associated usage conditions and a first hash value; receiving a selection from an end user to create at least one copy of the encrypted content onto at least one computer readable medium; sending a request to an online electronic store of the encrypted content selected to be copied; receiving from the electronic store a description of the content selected to be copied along with a second hash value; and determining if the first hash value received is identical to the second hash value and if the first hash and the second hash value is identical authorizing the creating additional copies onto at least one computer readable medium.

Abstract: A secure electronic content system and method is provided. The system includes a controller including an interface component, a host system coupled to the controller, the host system configured to present content under predetermined conditions, the host system operable with a navigation protocol, the host system further including a system manager operable with an associations component configured to be at least partially run by the host system, a translator configured to provide meanings and generate commands within the host system at least a first digital rights management (DRM) component configured to provide encoding and access rules for the content; and a file system component including a file system application programming interface (API) configured to provide a logical interface between a plurality of components.

Abstract: An enforcement architecture and method for implementing digital rights management are disclosed. Digital content is distributed from a content server to a computing device of a user and received, and an attempt is made to render the digital content by way of a rendering application. The rendering application invokes a Digital Rights Management (DRM) system, and such DRM system determines whether a right to render the digital content in the manner sought exists based on any digital license stored in the computing device and corresponding to the digital content. If the right does not exist, a digital license that provides such right and that corresponds to the digital content is requested from a license server, and the license server issues the digital license to the DRM system. The computing device receives the issued digital license and stores the received digital license thereon.

Abstract: An information processing apparatus utilizing encrypted information corresponding to content of purchased right, includes a memory for storing the encrypted information, usage control policy indicating content of purchased right and price tag for specifying price content corresponding to the content of the purchased right. A first generating device generates a usage control status including the purchase history of the information on the basis of the usage control policy and the price tag stored in the memory. A setting device sets usage history based on usage of the information to the usage control status. A second generating device calculates an accounting price and generates accounting information including the accounting price based on the purchase history or the usage history, and/or puts a limit on purchasable usage conditions based on the purchase history or the usage history on the occasion the right is purchased again on different format from the control policy.

Abstract: By recording a digital signature and a public key certificate when recording data on an information recording medium, a recording device having recorded content can be specified. If recording media including illegally recorded data are distributed, the recording device used for the recording can be specified and can be excluded from the system. An information playback device verifies the validity of the digital signature and public key certificate when reading data, specifies a content recorder, and verifies no falsification in the digital signature and the public key certificate before playing back the data. This structure can efficiently exclude the playback of content recorded by an invalid recording device.

Abstract: An information detecting apparatus which can surely detect specific information such as a digital watermark in high-speed data stream and can be configured at low cost. The apparatus extracts data including specific information from a high-speed data stream, and detects the specific information in the extracted data at low speed.

Abstract: In a digital content distribution method to distribute digital contents via a network, distribution of a digital content is instructed according to a distribution schedule, the digital content is distributed according to the distribution schedule indicated, and a particular digital content is selected from the digital contents distributed and is then sold, thereby conducting the distribution of digital contents at a high speed.

Abstract: Computer-readable medium provided with a memory area (2; 26, 28) for storing data and a distinct microprocessor (3) having a communication interface (4), a memory unit (7) and a processor unit (5) connected to both the communication interface (4) and the memory unit (7). The data may include a first data portion which is arranged to be read and decrypted by a computer arrangement (11) provided at least one condition is met, and the microprocessor (3) being arranged to generate at least one cryptographic key once the condition is met that is necessary to decrypt the data. The invention is also directed to a computer arrangement arranged to communicate with such a medium.

Abstract: A system and method for authenticating documents and content thereof. A counterfeit resistant document recording medium is provided, having thereon a predefined unique document identifier and at least one security feature. The recording medium is thereafter imprinted with document content, which typically varies between documents. The document content is stored in a database, indexed by an associated document identifier. The document may then be authenticated by checking the security feature and comparing the stored document content with a perceived document content. The system provides a number of opportunities for commercial exploitation, including sales of identified recording media, recording of information in a database, on-line authentication transactions, differential accounting for document validations and counterfeit identifications, imprinting devices, authentication devices, and the like.

Abstract: Data C generated by scrambling user-desired digital data P and a control word CWp corresponding to the number of reproductions p are recorded on recording media. When creating a master, a user has already been charged for the number of reproductions p. A decryption block decrypts the control word CWp, which is read from the recording media, to CW0. A de-scrambler uses the decryption control word CW0 to decrypt the digital data P for output to a reproduction unit. After confirming the end of reproduction, the decryption block writes a control word CW(p?1) back to the recording media. The recording media may be reproduced p times with no need for communication between a reproduction device and an accounting manager.

Abstract: A method authenticates at least one of a media and data stored on said media in order to prevent at least one of piracy, unauthorized access and unauthorized copying of the data stored on said media. At least one predetermined error is introduced with the data resulting in mixed data. The mixed data is optionally stored on the media. The at least one predetermined error includes at least one authentication key or component thereof, for authenticating whether the media and/or data is authorized. The method includes the following sequential, non-sequential and/or sequence independent steps: reading the mixed data from the media, detecting the at least one predetermined error from the mixed data, and comparing the at least one predetermined error to the at least one authentication key or component thereof.

Abstract: Fee imposition system and method for application software, in which a software providing corporation can collect the fee without fail and charge a fair fee to a customer, and thereby the customer can use the application software with a paying method easy to estimate. The fee imposition system includes a server machine installed in a management center for managing the software, a client machine installed in a customer's office and connected with the server machine through a communication means, a ticket issue unit for issuing a ticket file on the basis of a predetermined fee schedule, and a data copy/writing unit for copying data corresponding to the information designated by the ticket file from a data source memory unit and recording the copied data on a data target memory unit.

Abstract: A copy-protected optical disc, including a preformed identification number (ID) in the ATIP signal and the subcode which is impressed upon the optical disc and a number of other optical discs during optical disc manufacture, a unique identification number for the optical disc which was written on the optical disc after it is manufactured; and an encrypted program written onto the optical disc wherein the encryption of such program is based upon the preformed ID and the unique ID and includes two or more selectable security levels.

Abstract: The inventive data processing apparatus initially generates verifying values for verifying integrity of contents data stored in a memory device, then stores the verifying values in correspondence with contents data, and then, using the verifying values, the data processing apparatus proves the act of tampering with the relevant contents data, where the verifying values are generated and stored in a memory device per category of contents data. Each of the categories is preset based on a controlling entity of enabling key blocks (EKB) which encipher and provide a contents key (Kcon) provided as a key for enciphering the kinds of categories or contents data. Because of this arrangement, it is possible to effectively and independently executes the process for probing the act of tampering with contents data per controlling entity of the enabling key blocks (EKB) for example.

Abstract: A method for loaning a digital work having one or more rights associated therewith within a system having repositories configured to enforce use of the digital work in accordance with the rights. A loan right is associated with a digital work and specifies how the digital work can be loaned. If a request for the digital work is valid, use of the digital work is transferred during a loan period from a repository to the requester in accordance with the loan. Loan right data for the digital work is then updated and use of the digital work by the requestor is deactivated upon exhaustion of the loan period.

Abstract: A “virtual bookshelf” for users of a digital rights management system. The invention lists the purchased material and/or material that the consumer has a right to use. The invention automatically backs up the consumer's material when it is downloaded; provides for the retrieval and/or synchronization of the material on a computer or other device; provides for the rights-based sharing of the material; and the ability to recommend or transfer the material to a third party with or without financial consideration.

Abstract: This invention relates to a transmission apparatus for transmitting digital content data via a communication medium, comprising attachment means for attaching cost information per unit data volume to the digital content data; and transmission means for transmitting the digital content data attached with the cost information after converting a data format of the digital content data attached with the cost information into a data format suitable to the communication medium.

Abstract: An apparatus and method for displaying a copy-deterrent pattern (104) within a digital motion picture in order to discourage recording of the motion picture using a video camera or other sampling recording device. A copy-deterrent pattern (104) could be, for example, one or more symbols, a random pattern, a digital watermark or a text message (106). The copy-deterrent pattern (104) comprises a plurality of pixels within each frame of the digital motion picture, and the displayed pixel intensities are modulated at a temporal frequency using modulation characteristics deliberately selected to be imperceptible to human observers while simultaneously producing objectionable aliasing in any copy made using a video camera.

Abstract: A content receiver is compatible with a plurality of rights management and protection methods (RMP) devised for each content distribution system. Only the format which specifies the specification of the RMP formed of information such as content billing, security, and copyright protection, is standardized. Each content provider inputs encrypted content and rights processing information to content in a form conforming to the standardized specification. For content users, by merely being provided with functions corresponding to each RMP method in advance, even if the content is based on any RMP method, the content can be decrypted and used in the same content receiver.

Abstract: A memory database creation system for encrypted program material in which received encrypted material is first descrambled or decrypted and parsed to allow the generation of location identifiers for portions of the material. Once parsed, the location identifiers are stored in a database in a receiver and the material is again encrypted at the receiver prior to storage in memory. Typically, the steps of the method and system are performed at one instant thereby preventing unauthorized access to the material when it is in a descrambled or decrypted form.

Abstract: The present invention relates to digital watermarking systems and methods. In a first implementation, so-called movie studio rough-cuts are watermarked to provide a forensic tracking clue or to provide security for distributed rough-cuts. In another implementation, a watermark is determined for a compressed video object. The watermark is compressed as an object and the watermarked object is then associated with the compressed video object. The two separate objects are provided to a rendering device, which after decompressing both objects, embeds the watermark in the video prior to rendering.

Abstract: A multilayer digital content protection system, particularly for a digital cinema application is provided. Detection of unauthorized activity at the time it is occurring is provided using a first protection layer. Two layers of imperceptible watermarks, one camcorder viewable and one camcorder invisible are inserted into unauthorized copies of the digital content with second and third protection layers. Strong near infrared is also used to degrade the quality of any attempted unauthorized recording of digital content using a camcorder.

Abstract: Methods and systems for associating watermark enabled objects with machine behaviors. Machine behaviors refer to actions by devices or systems in response to a triggering event. Examples of these behaviors include fetching a web page, opening an email client to send an email to a specific person, initiating a phone or video conference call, etc. A registration system enables users to associate machine behaviors with objects through a watermark embedded in the objects. The decoding of the watermark initiates a process for triggering the machine behaviors associated with the watermarked object. While the disclosure describes an implementation for stickers as a class of watermark enabled objects, the system and related methods apply to other forms of watermark enabled objects, including both electronic and physical objects.

Abstract: An information recording medium 1 is provided with: a user data recording part 3 which records user data; a random-patter-information recording part 4 which records random pattern information from a random physical phenomenon; and an authentication data recording part 5 which records, as authentication data, medium identification information created on the basis of the random pattern information detected from the random-pattern-information recording part 4 and a digital signature for each manufacturer with respect to the medium identification information.

Abstract: A memory card 110 extracts a session key Ks from the data applied onto a data bus BS3 by carrying out a decryption process. An encryption processing unit 1406 encrypts a public encryption key KPcard(1) of memory card 110 based on session key Ks, and applies the encrypted key to a server via data bus BS3. A memory 1412 receives from a server data such as license key Kc, license ID data License-ID and user ID data User-ID encrypted with a public encryption key KPcard(1) differing for each memory card for storage, and receives encrypted content data [Dc]Kc encrypted with license key Kc from data bus BS3 for storage.

Abstract: A method and system for distributing digital information is disclosed. Preferably, a user acquires a tangible object which contain a code authorizing access to the digital information. The user reads the tangible object through a reader, which sends the code to a server on which the digital information is stored. The server then authorizes access to the digital information to one or more access devices listed in registries belonging to the user. The user may use the digital information on the terms he agrees to, and, while in use by the user, access to the digital information to other users or other playback devices is disabled. Once the user no longer is using the digital information, the access device erases the digital information, and signals the server that the digital information is no longer in use, thereby re-enabling access to the digital information by the other playback devices listed in the registry.

Abstract: An apparatus for restricting a copy of digital information is provided with a detecting device for detecting a first watermark, which is buried in the digital information and comprises a first signal generated on the basis of a first rule. A burying device buries a second watermark, which comprises a second signal generated on the basis of a second rule and having a structure different from that of the first signal, into the digital information if the first watermark is detected by the detecting device. A recording apparatus is provided with: an inputting device for inputting the digital information; the above mentioned copy restricting apparatus; and a recording device for recording the digital information in which the second watermark is buried by the burying device.

Abstract: The present invention relates to a digital contents selling system for selling digital contents. Identification information of digital contents selected by a customer is received. Personal digital contents are generated by setting identification information for identifying the customer in the selected digital contents as status information for permitting the customer to replay the selected digital contents. The generated digital contents are sold. Thereby, a technique is provided for preventing the illegal use of the sold digital contents.

Abstract: A method and system for securing a data product for mass distribution. An authorization server may encrypt a portion of a data product. Further, the authorization server may assemble an authorization key that includes information indicative of an entity authorized to store the data product, and the authorization server may encrypt the authorization key. To encrypt the authorization key, the authorization server may apply a symmetric encryption algorithm based on a cryptographic key that is derived as a function of an identification code associated with the authorized entity. The encrypted portion of the data product, the encrypted authentication key, and the remainder of the data product may then be stored on the authorized entity, which may be provided to a machine authorized to access the data product. The machine is preferably programmed to derive the second decryption key, use it to decrypt the authentication key, and then use the authentication key to validate use of the data product.

Abstract: A Personal Digital Key Digital Content Security System (PDK-DCSS) is used to protect computers from unauthorized use and protect the digital content stored on computers from being wrongfully accessed, copied, and/or distributed. The basic components of the PDK-DCSS are (1) a standard hard drive device, with the addition of a PDK Receiver/Decoder Circuit (PDK-RDC) optionally integrated into the hard drive's controller, and (2) a PDK-Key associated with the PDK-RDC. The PDK-Key and RDC technology is utilized to provide two categories of protection: (1) hard drive access control for providing Drive-Level and Sector-Level protection and (2) operating system-level independent file protection for providing File-Level and Network-Level protection.

Abstract: The conventional multimedia communication terminals require the implementation of a camera unit for video input and a video encoder for generating encoded video streams. This configuration is expensive and power-consuming, so that the life of battery for driving the transmitter will be short, or otherwise a battery of larger capacity will be required, resulting in a larger size terminal, with less portability. In accordance with the present invention, the video input and encoding process may be implemented in a video information generating apparatus separated apart from the transmitter. The video or audio and video bitstream generated by the video information generating apparatus will be retrieved by the transmitter, or stored once in a server and then forwarded to a receiver.

Abstract: A method and system for controlling use of digital works in accordance with usage rights associated with the digital works. The method includes the steps of receiving a request to use a digital work, and determining whether the request should be granted based on usage rights associated with the digital work. The usage rights include a manner of use for the digital work, conditions that must be satisfied in order to exercise the manner of use, and status information relating to the state of the usage. Use of the digital work is granted in accordance with the manner of use if the result of the determining step is that the request should be granted.

Abstract: An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Abstract: Music is blanket transmitted (for example, via satellite downlink transmission) to each customer's computer-based user station. Customers preselect from a list of available music in advance using an interactive screen selector, and pay only for music that they choose to have recorded for unlimited playback, for example, by a “CD burner”. An “ID tag” is woven into the recorded music so that any illegal copies therefrom may be traced to the purchase transaction.

Abstract: Disclosed is a service identification tag for being used in accessing an information transmission server on the Internet. The tag is formed combining an exclusive graphic pattern that can be recognized by a human, and an identification code that can be read by a reading unit. Also disclosed is a communications system having: a service server provided with an identification code/URL conversion table; an information transmission server provided with an information storage; and a terminal unit that is connected through a radio or wire communication network to the information transmission server, the terminal unit having a function for communicating with a Web server. The terminal unit makes a unique link to the service server, reads the identification code from a service identification tag, sends the identification code to the service server, and receives the URL information of the information transmission server corresponding to the identification code from service server.

Abstract: A method and apparatus for securely restricting the viewing of television programs. When a television program has been received along with rating data associated with a rating of the television program; length data associated with a length of the program, a microcomputer determines whether the rating data are higher than a predetermined viewing restricting level. If the rating data have been found higher, a muting circuit mutes the television program until it ends with reference to the television program length data, and the program corresponding to the rating data is outputted from a tuner.