Abstract: The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node.

Abstract: To overcome a watermark security system that is based on a limited set of possible watermark values, a collection of authentic watermarked material is created, and a substitution system provides material from this collection in lieu of the content material that the watermark verification system is intended to verify. In security systems that are designed to verify the existence of authentic watermarked material, without regard to the actual content of the material, this substitution scheme will be successful. In security systems that are designed to verify the existence of an entirety of a data set in order to authorize the presentation of select material from the data set, the substitution of authentic watermarked material for the non-selected material will also be successful. A dictionary of expected watermarks for the data set is provided.

Abstract: A cable television system provides conditional access to services. The cable television system includes a headend from which service “instances”, or programs, are broadcast and a plurality of set top units for receiving the instances and selectively decrypting the instances for display to system subscribers. The service instances are encrypted using public and/or private keys provided by service providers or central authorization agents. Keys used by the set tops for selective decryption may also be public or private in nature, and such keys may be reassigned at different times to provide a cable television system in which piracy concerns are minimized.

Abstract: A video source device includes a cipher unit. The video source device uses the cipher unit to generate cipher bits for ciphering video to be transmitted to protect the video from unauthorized copying. The video source device authenticates video receiving devices using a symmetric ciphering/deciphering process that requires the video source device to generate and provide the video receiving device with a pseudo random number as the seed/basis number for the symmetric ciphering/deciphering process. The video source device is further provided with a state machine that controls the cipher unit to generate the required pseudo random number for the video source devices, thereby eliminating the need of having to provide separate circuitry to generate the required pseudo random numbers.

Abstract: A digital work recorded on a computer readable media for use within a system having at least one repository for enforcing use of digital content in accordance with usage rights associated with the digital content. The digital work includes digital content electronically recorded on a first media portion and being capable of being rendered by a rendering engine, and usage rights electronically recorded on a second media portion and being associated with the digital content. The usage rights specify a manner of use by which a repository will permit use of the digital content. The usage rights can be constructed of a grammar including symbols selected from a set of predetermined symbols which define a valid sequence of symbols that are interpreted by the repository to indicate the manner of use.

Abstract: After a digital content is loaded into an information terminal such as a PC, ID information unique to a viewer or a user of the PC is imprinted into the content. The ID information is imprinted into a predetermined location of the content or alternatively, it may be imprinted over the entire content in the form of a spatial frequency. The content with an ID added thereto is then enabled to be used in the terminal.

Abstract: A system for associating usage rights with digital content. Usage rights are created from a grammar. The usage rights specify a manner of use indicating one or more stated purposes for which the digital content can be at least one of used and distributed by an authorized party. The usage rights are associated with the digital content. Information is exchanged with a first repository for storing the digital content and the associated usage rights and for processing a usage transaction specifying the usage rights to determine if access to the digital content can be granted. Information is exchanged with a second repository for generating the usage transaction specifying the usage rights for requesting access to the digital content.

Abstract: A electronic asset lending library method and apparatus enables the electronic management and reassignment of licenses for unused electronic assets installed on computers connected through a communications network. Licensing data for the unused electronic assets is released by the currently assigned owner and made available to one or more communities of users for display by product category, name, or keyword search. Once released, the lending library notifies the currently assigned owner to remove the unused electronic asset from their computer and transfers the licensing data to a library account. Eligible borrowers are permitted to request a re-assignment of an available released license for an unused electronic asset from a lending library account to their own account. Upon re-assignment the electronic asset lending library automatically notifies the borrower with instructions for the download and installation of the unused electronic asset to their computer.

Abstract: The present invention provides a method and system for verifying software product licenses using hardware and product identifications. Specifically, the present invention provides a method and system for verifying multiple products using a verification file that is obtained/maintained separately from the product. The products are verified based upon specific end-users' computer systems, as opposed to the end-users themselves.

Abstract: Techniques for reorganizing security levels without implicating accessibility to secured files classified in accordance to one of the security levels are disclosed. In a case of adding a new security level, the controllability or restrictiveness of the new security level is determined with respect to the most restrictive security level or the least security level in a set of existing security levels. A set of proper security parameters are then generated for the new security level and subsequently the existing security levels are reorganized to accommodate the new security level. In a case of removing a security level from the existing security levels, the security parameters for the security level to be deleted are either folded up or down to an immediate next security level, depending on implementation.

Abstract: Communication information transmitted in the broadband communication system may be in a packet format and secured using encryption techniques, for example encryption software, including a means for providing an initial security key and updated security keys to the various pieces of communication equipment located throughout the broadband communication system. When communication equipment, for example a gateway, is first registered with, for example, an IP central station, the IP central station assigns an initial encryption key to the gateway that is assigned and retained by a server, for example a call manager server, and the gateway (e.g., broadband residential gateway. This initial encryption key may be used to establish a secure two way communication between two pieces of communication equipment as an originating point communication equipment and a terminating point communication equipment.

Abstract: Often, during an event, such as a movie, play, concert, opera, etc., viewers of the event attempt to illicitly record the event. Such illicit recording attempts may be interfered with by using emitters that emit radiation that interferes with recording and/or operation of the recording devices. For example, infrared emitters may be used to saturate an event viewing area. The infrared, while non-visible to human viewers, is received and recorded by recorders using charge-coupled devices (CCDs), such as conventional digital cameras, movie cameras, television cameras, telescopes, etc. Other radiation can be emitted based on the type of recorder with which one desires to interfere. Alternatively, or in addition thereto, emitters may also be used to send commands to recorders, such as stop, rewind, eject, etc., to interfere with operation of the recorders.

Abstract: In each digital content utilize session, a memory card generates conversion key information for specifying a data conversion, while a player generates inverse conversion key information for specifying an inverse data conversion. The memory card then performs the data conversion specified by the conversion key information on management information stored therein, and sends the converted management information and digital content stored therein to the player. The player performs the inverse data conversion specified by the inverse conversion key information on the converted management information to restore the management information, and utilizes the digital content in accordance with restrictions set in the restored management information to limit the use of the digital content.

Abstract: The present invention may be regarded as a digital video recorder (DVR) comprising a storage device for storing an encrypted video program, a unique ID for interlocking the encrypted video program with the digital video recorder, and a cryptography facility. The cryptography facility comprises an encoder, responsive to the unique ID, for encrypting a plaintext video program into the encrypted video program stored on the storage device, and a decoder, responsive to the unique ID, for decrypting the encrypted video program stored on the storage device into the plaintext video program during playback.

Abstract: A method for the authentication of an integrated circuit in an application system comprises, for the integrated circuit: detecting an activation scenario, and then modifying at least one of its responses. The application system implements an application program which sends instructions to the integrated circuit. The activation scenario is contained in the sequence of instructions received from the application program. The modification causes no malfunction of the integrated circuit in the application system, and therefore does not put the integrated circuit out of operation. A complementary method for the application system comprises: detecting an activation scenario; measuring the response of the integrated circuit to the activation scenario; verifying the response if it has been modified correctly by the integrated circuit; and authenticating the integrated circuit if the response is verified.

Abstract: If content is transmitted/received through a digital signal bus, protection of copyright causes a problem because of no deterioration in quality. Accordingly, authentication is required. The quantity of information to be processed is, however, so large that a long time is required for authentication. Accordingly, both achievement of handling property as in conventional analog connection and protection of copyrighted content without user's awareness become an object. The foregoing object can be achieved by authentication which is executed, for management of copyright, among apparatuses connected to the digital signal bus when the apparatuses are powered on or connected to the digital signal bus or when an input terminal connected to the digital signal bus is selected. The object can be further achieved by an encryption key shared among these apparatuses.

Abstract: A multilayer digital content protection system, particularly for a digital cinema application is provided. Detection of unauthorized activity at the time it is occurring is provided using a first protection layer. Two layers of imperceptible watermarks, one camcorder viewable and one camcorder invisible are inserted into unauthorized copies of the digital content with second and third protection layers. Strong near infrared is also used to degrade the quality of any attempted unauthorized recording of digital content using a camcorder.

Abstract: Content data is judged to determine whether data prepared by a digital device were altered by performing an authentication process using a medium on which content data are recorded; reading the content data from the medium; embedding, in the content data, data for verifying the pertinent content; extracting, from the content data, the data for verifying the pertinent contents; using the results of the extraction to determine whether the content data were altered. Preferably, the means includes means for identifying any portion containing altered data.

Abstract: A method and apparatus for authenticating a digital file operates by generating an image file or other data file in a first device such as a camera. The file is processed using a function to generate a second data file, which is stored in the device. It is then determined if a suspect data file is identical to the image file by processing the suspect data file with the same function, and comparing the result with the second data file. The second data files for a multitude of images may be permanently stored in the device, and the function used to generate the second data file operates to ensure that the second data file is much smaller than the image data file.

Abstract: A device and method for protection of legitimate software against used software and counterfeit software in recording media. The device includes a disk is set in a main unit. A specific title code is read, and if this title code has been registered, the main unit shifts to a normal operation. If the code has not been registered, verification software is initiated, PG detection is performed, and when a PG pattern and verification data match, the code is registered in the COCT. If matching does not occur, the disk is processed as illegitimate software.

Abstract: In an image encoding apparatus for receiving and encoding an image signal, the input image signal is encoded in units of blocks in accordance with an encoding parameter via a DCT device, quantizer, and variable-length encoder. The encoded codes are multiplexed together with information indicating the presence/absence of scrambling, authentication data, a quantization parameter used in the quantizer, and a quantization parameter obtained by converting this quantization parameter. A copyrighted image signal is scrambled upon encoding, an image decoding apparatus of an authentic viewer normally plays back, and an image decoding apparatus of an unauthentic viewer plays back an image with which the viewer can recognize its outline.

Abstract: Computer data containing compressed video data is examined to see if it is banned computer data, for example containing pirate or copyright-infringing video material, by examining the identifier of the video codec associated with the compressed video data. Certain video codec identifiers are highly correlated with the computer data concerned being banned computer data. Thus, an examination of the header file of the computer data may be used as an efficient and sensitive tool for identifying the computer data as banned computer data.

Abstract: A data encryption method for an IEEE 1394 serial bus network, a data encryption method for an IEEE 1394 serial bus network, comprising the steps of requesting a private encryption at a data transmission node using a predetermined encryption algorithm at a data receiving node; recognizing and confirming that the data transmission node set the private encryption requesting at the data receiving node; transmitting an encrypted data at the data transmission node when the receiving node requests a service at the data transmission node; and decoding the encrypted data using a predetermined unencrypting key at the data receiving node, for thereby transmitting an encryption algorithm and encryption data to a corresponding node when a service is requested from a receiving node with respect to a certain system by setting an encryption algorithm in the system and decoding an encrypted data transmitted from the system in accordance with an encryption algorithm and displaying the same, so that a certain user can use a ser

Abstract: An information generating apparatus for generating output information to be outputted is provided with: an error correcting code adding device for adding an error correction code, which is used for an error correction of the output information when the output information is outputted, to the output information to thereby generate the output information having the error correction code; and a replacing device for replacing a part of the output information having the error correction code, which is generated by the error correcting code adding device, with identification information indicating that the output information to be outputted is not illegally copied to thereby generate the partially replaced output information.

Abstract: A method for delivering digital data to a plurality of processing units is disclosed. A plurality of portable memory device containing a first set of digital data is distributed to the plurality of processing units. The first set of digital data is unencrypted and comprises a content portion and an identification label. At least one of the processing units sends the identification label to a remote station. The remote station then encrypts a second set of digital data and delivers the encrypted data to the requesting processing unit. The requesting processing unit can decrypt the encrypted data, and combine the decrypted second set of data with the content portion.

Abstract: A reprogrammable subscriber terminal of a subscription television service which can have the control program code of its control processor modified by downloading new program code from the headend. The control processor stores a boot program in an internal read only memory. Upon start up and resets, the boot program determines whether the control program should be changed from a command sent from the headend. The command, termed a parameters transactions, includes the number of expected download program code transactions required to complete the control code modification, the memory space areas where the code is to be loaded, and the channel over which the download program code transactions are to be transmitted. The channel is tuned and when the boot program receives all the download program code transactions accurately and stores them, the boot program will cause the control program to be restarted at a selected address of the new or modified control program code which has been downloaded.

Abstract: The invention provides techniques to implement unique identifier for an integrated chip and how this ID can be employed to enhance the security of content in personal video recorder type systems. The storage device can be a hard disk, a removable storage medium or any other type of storage medium. An integrated circuit (IC) within the personal video recorder stores a unique identifier that is used in for encryption and decryption of data stored on the storage device. Several embodiments are disclosed herein that maintain the secrecy of the unique ID such that it is not easily accessible thereby defeating the security scheme.

Abstract: A method for delivering computer code to a plurality of processing units is disclosed. A first set of digital data is distributed to the plurality of processing units. The first set of digital data is unencrypted and comprises a first set of computer code and an identification label. The first set of code is executable by the plurality of processing units. At least one of the processing units sends the identification label to a remote station. The remote station then encrypts a second set of computer code and delivers the encrypted code to the requesting processing unit. The requesting processing unit can decrypt the encrypted computer code.

Abstract: A specific frequency component extraction unit extracts a specific frequency component signal from an input image signal. A phase controller controls the phase of the specific frequency component signal. A correlator computes the cross-correlation value of the phase-controlled specific frequency component signal and the input image signal. A watermark information estimation unit filters the cross-correlation value to detect watermark information embedded in the input image signal.

Abstract: The present invention is relative with a data recording and/or reproducing device having a deciphering circuit 12, a detection circuit 26, a data processing unit 14, 15, 17, 18 and 19, a recording unit and a controller 23. The deciphering processing unit deciphers and/or decompresses input encrypted and/or compressed data. The detection circuit detects whether or not watermark signals are contained in output data of the deciphering processing unit. The data processing unit is supplied at least with output signals from the deciphering processing unit and applies signal processing for recording on the supplied data. The recording unit records output data from the data processing unit on a recording medium. If the watermark signals are detected to be contained by the detection unit, the controller controls the operation of the data processing unit based on the detected watermark signals.

Abstract: A hybrid digital watermarking system for video authentication includes an authenticated acquisition subsystem for digitally watermarking video data and a video management subsystem in signal communication with the authenticated acquisition subsystem for verifying the digitally watermarked video data, where the authenticated acquisition subsystem may include a watermarking device for applying each of an identity signature and a control signature to the video data within a hybrid digital watermark, and the hybrid digital watermark may achieve progressively varying robustness by means of error-correcting signature coding and/or rate-distortion guided bit embedding.

Abstract: System, methods and apparatus are applicable to enable owners and vendors of software to protect their intellectual property and other rights in that software. The system also enables vendors or distributors of software to charge per-use for an instance of software. The system produces a unique, unforgeable, tag for every vendor supplied instance (copy) of specific software. Each user device is equipped with a supervising program that ensures, by use of the tag and other information, that no software instance will be used on the device in a manner infringing on the vendor, distributor, or software owner's rights. When installing or using a vendor-supplied software instance, the supervising program verifies the associated tag and stores the tag. When installing or using untagged software, the supervising program fingerprints selected portions of the software and stores the fingerprints. Software is used on a user's device through the supervising program which ensures proper use of the software.

Abstract: A method is provided for utilizing a title signal contained in digital data through a comparison of the title signal to a player signal stored in a player device.

Abstract: Methods for embedding digital watermarks in compressed video include perceptual adapting a digital watermark in predicted and non-predicted data based on block activity derived from the compressed video stream, embedding in predicted objects in a video stream having separately compressed video objects, and bit rate control of watermarked video.

Abstract: A method for tracing the distribution of physical digital media and reporting feedback to a content provider regarding whether the profile of the user of the physical digital media corresponds to known profile. Identifying data is gathered from a user's computer and transmitted to a host. The host performs pattern matching to determine whether the identifying data matches stored profile information.

Abstract: A platform featuring memory which contains a plurality of software components and a manifest which includes a digest of each of the plurality of the software components and a processor which is coupled to the memory. The processor executes a hash function to produce the manifest and to verify integrity of the plurality of software components by re-computing digests of the plurality of software components and comparing the computed digests with the digests of the manifest.

Abstract: A load program causes a user's computer to generate an intermediate code as a function of a read time from the computer's system clock and an operating system ID. The software provider receives the intermediate code from the user and generates a password as a function of the intermediate code and a secret product ID code for the software that the user wishes to install. The load program within the user's computer uses the same mathematical algorithm to compute an internal key upon the next execution of the load program. The internal key is compared with the software supplier's password following a prompt from the load program to enter the supplier's password. The software supplier's password and the internally generated password must both agree before the load program authorizes execution of the software that the user wishes to install.

Abstract: An improvement in protecting information transmitted via a network from illegal copying is disclosed. While data input from an information provider via a network is stored in a storage device, an ID inherent in an information terminal unit stored in a ROM, the time information which is output from a real-time clock counter, an ID of the owner of an ID card read by a card reader are multiplex-recorded as identification information on the input data. Identification information is also multiplex-recorded on the data read from the storage device and to be output through the output terminal.

Abstract: Methods and systems include: (1) steganographically embedding location information in images, where the location information is obtained from remote sources like a cell phone network or remote GPS receiver; (2) steganographically embedding participant IDs in content to ensure proper billing and royalty tracking; (3) providing a fingerprint database which is limited to a play list for a particular broadcast network over a predetermined period; (4) providing fair-use content management based upon digital watermark-tracked usage; (5) providing micro-payments based upon watermarked ID cards for retailers; or (6) providing watermarked logon cards, such as watermarked hotel room keys, to better provide internet logon access control.

Abstract: A method for combining transfer functions with predetermined key creation. In one embodiment, digital information, including a digital sample and format information, is protected by identifying and encoding a portion of the format information. Encoded digital information, including the digital sample and the encoded format information, is generated to protect the original digital information. In another embodiment, a digital signal, including digital samples in a file format having an inherent granularity, is protected by creating a predetermined key. The predetermined key is comprised of a transfer function-based mask set to manipulate data at the inherent granularity of the file format of the underlying digitized samples.

Abstract: A method for protecting the video memory on a computer system from being illicitly copied. The invention decrypts a previously encrypted image and displays it on the video screen. During the time the image is displayed, the invention protects it from being copied by other running applications. This is accomplished in multithreaded operating systems by first issuing a multithreaded locking primitive to the video memory resource, and then inserting a pending video hardware request that will take precedence over any subsequent video memory access requests. The pending request serves the purpose of destroying the contents of video memory. The pending request is passive in that it does not execute unless a malicious program has removed the video memory lock.

Abstract: A method and system thereof for controlling and regulating the distribution of intellectual properties using Internet Protocol and a plurality of controlling processes and applications. An intellectual property is assigned a unique digital identifier that provides an address for locating the intellectual property using Internet Protocol. Electronic links are enabled between the intellectual property and other intellectual property elements which establish terms for accessing said intellectual property. A digital feature element can be used to describe features of the intellectual property. A digital rights element can be used to describe the legal rights and limitations associated with the intellectual property. A digital license element can be used to provide a license for the intellectual property.

Abstract: The invention is a system for digital watermarking that operates on a conventional digital video stream to etch, on hand, and read, on the other hand, digital watermarks in the stream that do not visibly interfere with the video content. A system according to the invention operates on digital data that has been transformed into the spatial-frequency domain, using inter-block differences between spatial-frequency coefficients to encode the bits of a digital watermark. Using the principles of the invention, it is possible to encode multiple watermark bits between two adjacent blocks, thus providing higher watermark data rates relative to underlying video content.

Abstract: Systems and methods are provided for monitoring transmissions of media content (such as audio and audiovisual content) in order to obtain independent and objective data regarding the use of specific media content recordings or works within the transmissions. Processing and reporting of such data is provided in various ways to serve a variety of business needs. Methods for employing content identification technology to efficiently and automatically obtain reliable, accurate, and precise monitoring data are also disclosed. Various information products and services based on such monitoring systems are proposed.

Abstract: A method and system thereof for implementing and controlling the electronic distribution of intellectual property using protocols other than the Internet Protocol. A request for intellectual property is codified according to a protocol other than an Internet Protocol. A service is performed to provide an electronic version of the intellectual property in response to the request, and a service is performed to provide an electronic version of terms for using the intellectual property. These requests and responses are coupled between an intellectual property management system and non-Internet Protocol based networks and/or systems. Thus, software product and service orders are translated into deliverables that are coupled over non-Internet protocol systems.

Abstract: One aspect of the present invention is a method for embedding a watermark in a digital movie. The method includes: buffering portions of an electronic digital representation of a digital movie in at least one digital representation domain; embedding an electronic watermark into at least one of the buffered digital representation domain of the movie; and presenting portions of the digital movie while the embedding is occurring.

Abstract: An object of the invention is to allow secure identification of an image forming apparatus from an image on a recording medium on which the black image has been formed, thereby preventing leakage of secret information on the black image securely. A driving roller, a tensioning roller and a supporting member are supported to a frame so as to be movable in upward and downward directions, and a portion spacing mechanism moving an elevating rod in upward and downward directions by rotation of a motor is provided. At a time of the black-image forming process, the driving roller, the tensioning roller and the supporting member are moved downward by the portion spacing mechanism, a transfer conveying belt and transferring devices are spaced from photosensitive drums included in image forming stations for forming magenta and cyan images, and only the image forming process regarding a black image and an image of identification information obtained at image forming stations are made effective.

Abstract: A digital watermark reader performs a logarithmic sampling of a watermarked media signal to produce a sampled signal. It then analyzes the sampled signal to detect attributes associated with a watermark signal. It extracts a digital watermark based on detected attributes associated with the watermark signal. As an alternative or in addition to these operations, the watermark reader performs a polar sampling of the media signal. For example, polar sampling may be used to address rotational distortion. Another digital watermark reader transforms the media signal to a transform domain, and analyzes the transformed media signal to detect a symmetrical attribute associated with a watermark signal. The method extracts the digital watermark based on detected attributes associated with the watermark signal.

Abstract: A pseudo-synchronization pulse detecting section detects a pseudo-synchronization pulse from a horizontal scanning line signal during a vertical blanking period of an entered analog video signal. A pseudo-AGC pulse detecting section detects a pseudo-AGC pulse from the horizontal scanning line signal during the vertical blanking period. A determining section determines whether a copy-protection signal is actually contained or not in the analog video signal, i.e., whether the video signal is protected or not, based on detection results of the pseudo-synchronization pulse detecting section and the pseudo-AGC pulse detecting section.

Abstract: A digital recording/reproducing system includes a set top box. The STB receives a digital television broadcast signal and transmits a scrambled data stream from a stream selector via an interface to a digital recording/reproducing apparatus. In the data recording/reproducing apparatus, a scramble key is acquired depending on a billing request for data recording. To AS-MO disc are recorded a contents key converted from a disc unique ID using a descramble key as well as the data stream. In accordance with a user's approval for the billing, an account table is created which is registered in an IC card and transmitted via a MODEM and telephone line.