Abstract: Encryption and decryption methods for 3-dimensional shape data, especially copyrighted data, useful for detecting unauthorized use or piracy of a 3-dimensional object's shape represented by the 3-dimensional shape data are provided. An alteration is added to 3-dimensional shape data representing a 3-dimensional object by using an encryption key. The encrypted data, having been altered, are distributed. The 3-dimensional object represented by the encrypted data is distorted and different from the original 3-dimensional object. The recipient of the encrypted data can obtain the original 3-dimensional shape data by reversing the alteration of the encrypted data by using a decryption key.

Abstract: A receiving device comprises a signal demodulator circuit for demodulating an encrypted video signal and attribute information including information for decoding an encryption, an attribute information identifying circuit for identifying and outputting the attribute information, and a descramble circuit for unscrambling the video signal obtained from the signal demodulator circuit, based on the output produced from the attribute information identifying circuit. A signal re-scrambled in accordance with a device ID signal is recorded in a recording and reproducing device. Further, the recording of the signal is controlled based on the output obtained from the attribute information identifying circuit.

Abstract: A characteristic amount is retained and calculated from an entered video signal. Embedment intensity is retained and calculated from the retained characteristic amount. Embedment information is embedded as digital watermarks into the entered video signal in accordance with the retained embedment intensity of the previous frame or field that is located at a position earlier in time than a target image subject to digital watermark embedment. As a result, an output signal of video having the digital watermarks embedded therein is produced. The digital watermarks are embedded into the target image with reference to another image located at a position earlier in time than the target image. Such digital watermark embedment suppresses a delay in output of an output image with reference to an input image.

Abstract: The error detection code adding circuit adds error detection codes to watermark data. An encrypting circuit encrypts the error detection code added watermark data according to a first password. N encoders hide (embed) the encrypted error detection code added watermark data in the content data by N different hiding algorithms, respectively. A selector selects one of N encoders in response to a selection signal and outputs the encoded and selected content data in which the encrypted error detection code added watermark data is hidden. N decoders read watermark data and the error detection codes from the encoded content data by N extracting algorithms corresponding to the N hiding algorithms, respectively, to output N extracted content data including N read watermark data and N error detection codes and N read watermark data, respectively.

Abstract: A selective encryption method and apparatus consistent with the invention duplicates selected packets in a file or data stream and multiple encrypts the packets using multiple encryption keys. Each encryption key is valid for a specific segment of time so that changes in entitlement keys used for decryption can be made without negatively impacting a customer's ability to access content that has been paid for.

Abstract: A method for delivering computer code to a plurality of processing units is disclosed. A first set of digital data is distributed to the plurality of processing units. The first set of digital data is unencrypted and comprises a content portion and an identification label. At least one of the processing units sends the identification label to a remote station. The remote station then encrypts a second set of digital data and delivers the encrypted code to the requesting processing unit. The requesting processing unit can decrypt the encrypted second set of digital data.

Abstract: A reprogrammable subscriber terminal of a subscription television service which can have the control program code of its control processor modified by downloading new program code from the headend. The control processor stores a boot program in an internal read only memory. Upon start up and resets, the boot program determines whether the control program should be changed from a command sent from the headend. The command, termed a parameters transactions, includes the number of expected download program code transactions required to complete the control code modification, the memory space areas where the code is to be loaded, and the channel over which the download program code transactions are to be transmitted. The channel is tuned and when the boot program receives all the download program code transactions accurately and stores them, the boot program will cause the control program to be restarted at a selected address of the new or modified control program code which has been downloaded.

Abstract: A signal transmission method applicable to prevention of modification or alteration of the playback mode information, such as copying management information or charging information. The playback mode information form a terminal 15P is data-converted for ciphering by a playback mode information appendage circuit 14 in a header appendage circuit 13 responsive to the key information from a terminal 15K and the resulting information comprised of the data and the playback mode information is outputted. The reproducing side effects data conversion on the ciphered playback mode information for deciphering, by a playback mode information detection circuit 26 in a header separation circuit 25, using the key information from a terminal 27K, for taking out the original playback mode information at a terminal 27P.

Abstract: Data is protected from unauthorized copying by rescrambling an unauthorized version of the data, but descrambling an authorized version of the data. This is done using a trigger signal. One property of the trigger signal is that it is preserved through signal transformations, such as one or more of compression, decompression, analog to digital conversion, and digital to analog conversion. As a result of this property the trigger signal can be detected in either scrambled or descrambled data. The trigger signal is embedded into the data to form watermarked data. The watermarked data is passed through a descrambler, where the trigger signal, if present, is extracted. A descrambling key and a descrambling algorithm are applied to the watermarked data if the trigger signal is present, but not applied to the watermarked data if the trigger signal is not present.

Abstract: A system, method and article of manufacture are provided for remotely controlling content stored on a local computer connected to a network system such as the Internet. The invention allows content such as DVD Video content to be locked so that play can only be accomplished through verification of user identity and also allows augmentation and supplementation of the content provided by the video from a remote server. In addition, upon verification of user client credentials, the present invention allows the locally stored content to be supplemented with additional content delivered over the network system. Furthermore, the present invention allows content stored locally on a client device to be remotely controlled to play synchronously on a plurality of client devices.

Abstract: An optical disc recorder/reproducer, a personal computer, a television receiver, an IRD and so forth are connected mutually via a 1394 serial bus. When data transmitted from the personal computer to the optical disc recorder/reproducer via the 1394 serial bus are to be recorded, an isochronous packet is sent to the recorder/reproducer inclusive of the data to indicate whether the personal computer is a device capable of cognizing copy control information. And depending on whether the source of the transmitted data is a copy control information cognizant device or not, the optical disc recorder/reproducer updates the copy control information with reference to a selected table, and then the updated copy control information is recorded on the optical disc. This system can distinguish between a prerecorded disc and a user-recorded disc, hence achieving exact management of copy control information.

Abstract: A signal reproducing method and apparatus in which the generation limitation information, such as a token or a ticket, contained in digital data, is recorded in analog signals. A reproducing device 20 reproduces, from a source disc S, picture data etc having the superimposed copyright control information for copying limitation and a ticket representing the generation limitation information specifying the number of times of possible copying or reproduction. The reproducing device 20 converts the picture data etc into analog baseband signals and detects the ticket. The reproducing device 20 superimposes the detected ticket on audio signals by watermark processing to output the resulting analog baseband signals.

Abstract: A method for robust embedding of information into video content, said method comprising of breaking said video content into a series of at least one unit; selecting at least one of said units, selecting at least one parameter for at least one of said units and performing at least one geometric transformation on said selected units according to said parameters selected for said unit, thereby to embed said information in said video content.

Abstract: Some security processes call for the addition of data to the content material that is to be protected. The addition of such data may, however, cause anomalous behavior in subsequent processes that are designed to process the content material only. The data that is to be added to content material is preprocessed using a preprocessor that has, as its output, a signal that conforms to the general characteristics of the content material. This preprocessed additional data is then added to the original content material. By preprocessing the additional data, the combined material is assured to be compatible with subsequent postprocessors of the combined material, such as a watermarking process.

Abstract: An Open Descriptor demanding an access right is transmitted from a personal computer to a DVD player. In response to this demand, the DVD player transmits either an Accept response or a Reject response. Upon receiving the Accept response, the personal computer transmits a Write Descriptor. The Write Descriptor indicates an instruction that data (da) having a data length (le) is written (AuthDe) into an address (Add) of a sender (SD). Upon receiving this Write Descriptor, the DVD player transmits the Accept Write Descriptor indicating that the writing instruction has been accepted. Thus, in an authentication protocol, data is transmitted in accordance with the size of the buffer for use in an electronic machine.

Abstract: A method of transferring information from a content supplier from one or more databases, such information including program(s), audio, still, video, data files (e.g.

Abstract: Method of and system for detecting a watermark in MPEG-2 encoded video data during high-speed copying of the video data. A bus spy (120) selects independently coded frames, such as I-frames, from the video data and feeds the selected frames to a watermark detector (130) for detecting a watermark therein. By only supplying some of the frames to the watermark detector (130), the average input data rate for the watermark detector (130) is much lower than the data rate during the high-speed copying. Various embodiments present various ways to efficiently supply the contents of the selected frames to the watermark detector (130).

Abstract: This invention provides a method for identifying a purchaser who purchased content from which an illegal copy was produced. A provider system encrypts purchased by the purchaser using a public key of a purchaser system and sends the encrypted content to the purchaser system. The purchaser system creates a digital signature of the content with the use of a private key of its own and embeds the created digital signature into the received content. When an illegal copy is found, the provider system verifies the digital signature, embedded in the illegal copy as a digital watermark, to identify the purchaser who purchased the content from which the illegal copy was produced.

Abstract: This invention discloses an anti-piracy system including video representation signature apparatus for computing a forbidden signature of a forbidden video representation, communication apparatus for communicating the forbidden signature to a playing device, and a playing device adapted to receive and play back a recorded video representation, the playing device including reception apparatus for receiving the forbidden signature communicated by the communication apparatus, recorded video representation signature apparatus for computing a signature of the recorded video representation, and playback control apparatus operative to prevent playback of the recorded video representation if the computed signature of the recorded video representation matches the forbidden signature communicated to the playing device

Abstract: A copy-protected optical disc, including a preformed ID which is impressed upon the optical disc during optical disc manufacture, a unique ID which was written on the optical disc after it is manufactured; and an encrypted program written onto the optical disc wherein the encryption of such program is based upon the preformed ID and the unique ID.

Abstract: A system, method, and article of manufacture is provided for tracking the distribution of content electronically. First, an electronic storage medium tracking identifier is incorporated onto an electronic storage medium and stored on a database. Next, a package tracking identifier is situated onto a package in which the electronic storage medium is stored. The electronic storage medium is then tracked while being shipped between various entities using the tracking identifier on the package. Further, the electronic storage medium may be identified using the tracking identifier on the electronic storage medium in order to afford authorized use of the information contained on the electronic storage medium.

Abstract: To enable usage of content at a receiver which does not have a copying function even if copyright protection is provided. Model names of receivers not having a function enabling copying of content are held in an authentication processing circuit (151) of a transmitter (10). When a model name obtained from a connected receiver (40) is held, regardless of whether the content is copyright protected, a signal selection circuit (122) selects a terminal a side, a switch (123) is turned on, and an unencrypted signal is transmitted. When a change of the receiver (40) is detected by a hot plug detection function or a plug and play function at a processing circuit (152) during the transfer of a signal of copyright protected content without providing copyright protection, the selection circuit (122) is made to select a terminal b side or the switch (123) is turned off to suspend the transfer of the non-copyright protected signal. The information indicating the receiver is held in a tamper-proof updateable manner.

Abstract: A method and apparatus to format and process a Media Key Block so as to reduce latencies when processing the Media Key Block. A new record is generated containing header information for the records comprising the Media Key Block. This new record is read just once and allows a device to skip seeking and reading each record header individually. In addition, the records are adjusted so that individual records or individual fields within a record always fit within a single transfer unit.

Abstract: An information processing apparatus and an information processing method are capable of preventing information from being copied illegally.

Abstract: A system and method for authenticating an image of an object, include at least one identifier associated with the object, a receiver for interrogating the at least one identifier to produce identification information, a camera system for recording an image from the object including the at least one identifier, and a composite generator for encoding the identification information from the receiver along with the image acquired by the camera system, to produce composite data.

Abstract: A multilevel computer security system including a computer with multiple security subsystems for secure data storage and data communications at each security level, a smart-card reader for controlling user access to each security level, an electronically-activated switch for activating only the selected and authorized security level, and a mechanically-activated switch that detects the availability of the security level selected. The computer will automatically power-up at the first security level and activate the first security subsystem which is allocated to the processing of restricted data. Access to each level of restricted data requires a user to insert-his smart card into a smart-card reader which will verify the identity through an entered PIN or from stored biometrics data and will allow the user to access only those levels for which the user is authorized as stored in the smart card.

Abstract: Controlling the usage of a software component by an application program in an end user computer system includes obtaining an identifier of the application program by a controller computer system and generating a first password from the received application program identifier and an identifier of the component. The component, the component's identifier and the first password are communicated to the end user computer system. The component is registered with the application program as a “snap-in” or “plug-in” component. The application program generates a second password from the application program identifier and the received component identifier, compares the first password and the second password, and allows use of the “snapped-in” component by the application program on the end user computer system when the first password matches the second password.

Abstract: A three-dimensional imaging system providing certification over a distributed network. By monitoring or controlling image capture from a trusted environment, the fidelity of the record of the image captured is certified by the operator of the trusted environment. An image record may be archived and an audit trail maintained for any image of interest.

Abstract: A signal transmission method applicable to prevention of modification or alteration of the playback mode information, such as copying management information or charging information. The playback mode information form a terminal 15P is data-converted for ciphering by a playback mode information appendage circuit 14 in a header appendage circuit 13 responsive to the key information from a terminal 15K and the resulting information comprised of the data and the playback mode information is outputted. The reproducing side effects data conversion on the ciphered playback mode information for deciphering, by a playback mode information detection circuit 26 in a header separation circuit 25, using the key information from a terminal 27K, for taking out the original playback mode information at a terminal 27P.

Abstract: A multilevel computer security system including a computer with multiple security subsystems for secure data storage and data communications at each security level, a smart-card reader for controlling user access to each security level, an electronically-activated switch for activating only the selected and authorized security level, and a mechanically-activated switch that detects the availability of the security level selected. The computer will automatically power-up at the first security level and activate the first security subsystem which is allocated to the processing of restricted data. Access to each level of restricted data requires a user to insert his smart-card into a smart-card reader which will verify the identity through an entered PIN or from stored biometrics data and will allow the user to access only those levels for which the user is authorized as stored in the smart-card.

Abstract: An apparatus for embedding secret information in an image signal transmitted with a shape signal showing the shape of an object is described. This apparatus comprises an embedding position decision unit for deciding a position in the object where the secret information is to be embedded, according to the shape signal; and a compositor for embedding the secret information in the position decided by the decision unit. Therefore, the secret information is protected against translation or clipping of image.

Abstract: A method of compressing media content in which a first predetermined portion of a media content is compressed using a first data-based compression algorithm and inserted into a first portion of a data frame. A second predetermined portion of the media content is compressed using a second data-based compression algorithm and is inserted into a second portion of the data frame. The second predetermined portion of the media content is different from the first predetermined portion of the media content, and the second data-based compression algorithm is different from the first data-based compression algorithm. At least one of the first and second data-based compression algorithms is a private data-based compression algorithm. A plurality of data frames are generated and are made available for distribution, for example, by transmission over a computer network, such as the Internet.

Abstract: An MPEG2 moving picture and encoding/decoding system to provide digital copy protection of digital moving picture data. The MPEG2 moving picture encoder discrete cosine transforms a video input signal and uses a digital watermark inserter to embed digital watermark information on a frequency domain of the discrete cosine transformed video input signal. The MPEG2 moving picture decoder receives the encoded video output signal from the MPEG2 moving picture encoder and removes the embedded visual watermark information to locally decode the encoded video signal.

Abstract: In an interface security system between a plurality of devices mutually connected and transmitting/receiving a signal, the respective devices include respective selectors selecting a connection pattern between signals transmitted/received and external terminals for transmitting/receiving the signals and switching connections between the signals and the external terminals in accordance with a connection pattern selected, and the selectors of the respective devices select a connection pattern and switch the connections in synchronization between the respective devices.

Abstract: An electronic watermark data insertion apparatus comprises an insertion information memory (39) for preliminarily storing insertion information for designating electronic watermark data to be inserted block by block and an electronic watermark data insertion unit (33) for inserting, on the basis of the insertion information, the designated electronic watermark data from an electronic watermark data table (37) in a quantized image block by block. An electronic watermark data detection apparatus comprises an electronic watermark date extracting unit (45) for extracting the image data having a biased frequency region projecting in dependency on the inserted electronic watermark data block by block and an electronic watermark data detection unit (50) for calculating a statistical similarity between the extracted data and the electronic watermark data stored in an electronic watermark data table (48).

Abstract: To enable the source of an unauthorized copy of an information-bearing medium, such as a video DVD, to be traced, a compressed digital signal stream to be stored on the medium is altered to include “running marks,” that comprise pixel blocks changing in position frame by frame and encoded with information designating where and when the copy was made. The medium under test is played back synchronously with a reference medium containing the locations of the running marks together with original video. The source of copying message is advantageously encrypted and scrambled to avoid detection or alteration by a copyist. The message preferably is spread, for example into a spread spectrum carrier, to enhance discrimination among a large number of sources and enable demodulation in the presence of noise.

Abstract: A conditional access system for controlling the access of receivers of end-users to data content transmitted from a data content source in an uplink system. The uplink system comprises a scrambler for scrambling the content supplied from the content source, an entitlement control message generator for generating entitlement control messages containing a control word and an entitlement identification and a transmitter for transmitting the scrambled content and the entitlement control messages. A descrambler, an entitlement control message decoder and means for recording entitlement identifications are associated to the receiver. The entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled, if a match between the entitlement identification in the entitlement control message and the recorded entitlement identification exists.

Abstract: After a digital content is loaded into an information terminal such as a PC, ID information unique to a viewer or a user of the PC is imprinted into the content. The ID information is imprinted into a predetermined location of the content or alternatively, it may be imprinted over the entire content in the form of a spatial frequency. The content with an ID added thereto is then enabled to be used in the terminal.

Abstract: A trusted rendering system for use in a system for controlling the distribution and use of digital works. A trusted rendering system facilitates the protection of rendered digital works which have been rendered on a system which controls the distribution and use of digital works through the use of dynamically generated watermark information that is embedded in the rendered output. The watermark data typically provides information relating to the owner of the digital work, the rights associated with the rendered copy of the digital work and when and where the digital work was rendered. This information will typically aid in deterring or preventing unauthorized copying of the rendered work to be made. The system for controlling distribution and use of digital works provides for attaching persistent usage rights to a digital work. Digital works are transferred between repositories which are used to request and grant access to digital works.

Abstract: A computer watchdog system monitors and controls distribution content sent form producers, through distributors, to subscribers. The computer watchdog system acting to ensure the just execution of agreements between a producer of content and a distributor of content. The computer watchdog system serving as an agent trusted by both producers and distributors. The computer watchdog system may be equipped with tamper protection for resisting exogenous attempts to gain unauthorized access to the system. The computer watchdog system may be installed entirely within distributor's sites. Alternatively, the computer watchdog system may reside partially within distributor's sites and partially within subscriber's sites. The computer watchdog system logs and reports on information relating to the distribution of content. Further, the computer watchdog system may selectively transform content provided by a producer, customizing the content for distributors and subscribers.

Abstract: A cipher processing apparatus which readily updates a cipher processing circuit for encrypting information communicated through a communication function. A service station side and a user side are connected. A receiving function receives a command for requesting a change of a cipher processing program and the cipher processing program which are transmitted from the service station side to the user side through the communication function. Circuit updating function updates a cipher processing circuit provided on the user side with the cipher processing program. With these functions, the cipher processing circuit provided on the user side can be readily rewritten in accordance with the cipher processing program transmitted from the service station side.

Abstract: Digital watermarking of audio, image, video or multimedia data is achieved by inserting the watermark into the perceptually significant components of a decomposition of the data in a manner so as to be visually imperceptible. In a preferred method, a frequency spectral image of the data, preferably a Fourier transform of the data, is obtained. A watermark is inserted into perceptually significant components of the frequency spectral image. The resultant watermarked spectral image is subjected to an inverse transform to produce watermarked data. The watermark is extracted from watermarked data by first comparing the watermarked data with the original data to obtain an extracted watermark. Then, the original watermark, original data and the extracted watermark are compared to generate a watermark which is analyzed for authenticity of the watermark.

Abstract: To store main information with associated additional information incorporated therein, data constituting the additional information is divided into a plurality of small-size data pieces of, e.g., one bit. Then, the respective values of particular ones of predetermined data units (e.g., bytes) constituting the main information are subjected to arithmetic operations in accordance with a predetermined algorithm containing the value of each of the data pieces as a parameter. In this way, the respective values of the particular data units in the main information are modulated in accordance with the values of the individual data pieces in the additional information; at that time, only some of the data unit values are altered with the others left unaltered. For reproduction of the additional information, the stored main information is read out, and the individual data pieces are reproduced from the particular data units by inversely executing the algorithm.

Abstract: The present invention comprises a method and apparatus for enforcing software licenses for resource libraries such as an application program interface (API), a toolkit, a framework, a runtime library, a dynamic link library (DLL), an applet (e.g. a Java or ActiveX applet), or any other reusable resource. The present invention allows the resource library to be selectively used only by authorized end user software programs. The present invention can be used to enforce a “per-program” licensing scheme for a resource library whereby the resource library is licensed only for use with particular software programs. In one embodiment, a license text string and a corresponding license key are embedded in a program that has been licensed to use a resource library. The license text string and the license key are supplied, for example, by a resource library vendor to a program developer who wants to use the resource library with an end user program being developed.

Abstract: A method for securely storing analog or digital data on a data storage medium. An analog information signal is combined with a noise signal. The composite noise and information signal is encrypted with a key which is derived from the noise signal. The encrypted composite signal is compressed and then recorded on the data storage medium along with an encrypted value of the key. The storage medium data is read, decompressed, and decrypted using a decryption key derived from the stored encrypted key. The data is then converted to an analog signal and combined with a noise correction signal derived from said key to eliminate the noise signal added to the analog information signal before storing the signal on the data storage medium.

Abstract: A method and apparatus for cloning protection of a player. The present invention provides a method and apparatus for providing cloning protection of a software digital information playback device by using an activation procedure prior to use of the playback device. In one embodiment, the playback device is deactivated in order to move the playback device to a different computer system or to otherwise vary the operating conditions of the playback device. To activate the playback device a unique identifier is generated by the playback device. The identifier is communicated to a server and linked to the playback device generating the identifier. In one embodiment, the identifier and a digital signature authenticating the information from the server are communicated to the playback device along with any digital programming. Only digital programming including the identifier and the signature are played by the playback device.

Abstract: A data structure and method are disclosed for encapsulating a message with a verifiable message ID and a verifiable identification of message interpretation information. The encapsulated message includes a message set and a data generated message identifier. The message set includes a message body that contains the content of a message and a data generated interpretation identifier that verifiably identifies an interpretation file that may be used to interpret the message body. The data generated message identifier is a hash function of the message set that includes the message body and the data generated interpretation identifier. The data generated message identifier is determined such that the data generated message identifier verifiably identifies the message set.

Abstract: A signal reproducing apparatus for prohibiting copying or unauthorized use. The apparatus includes a copying management information decision circuit 19 for discriminating the state of the copying management information read out from each header of a data sector and within the TOC, a protect signal generating circuit 20 for generating a protect signal based on the discrimination signal and a mixing circuit 24 for mixing a protect signal in a vertical blanking period of an analog video signal D/A converted from digital video data reproduced from an optical disc D. The apparatus also includes a descrambling circuit 31 for descrambling the digital data based on the copying management information and a scrambling circuit 32 for descrambling the digital data. The apparatus enables prohibition of unauthorized analog copying and digital copying, inhibition of serial generational copying and prohibition of unauthorized analog and digital copying simultaneously.

Abstract: A data copyright management system is provided, in which a primary user edits a received data and supplies the edited data to a secondary user. The copyright management system comprises a database and a key control center, and uses a primary copyright label, a primary use permit key including a first crypt key, a secondary use permit key, a third crypt key, and a copyright management program. The primary user decrypts the copyrighted primary data, which is encrypted using the first crypt key and supplied, to plaintext using a primary use permit key obtained from the key control center and utilizes it. If the copyrighted primary data is stored in a primary user device, it is re-encrypted using the primary use permit key. The primary user receives a secondary use permit key for editing the copyrighted primary data from the key control center and edits the copyrighted primary data. The data being edited is encrypted using the secondary use permit key and is stored.

Abstract: A system for restricting access to transmitted programming content is disclosed, which transmits the encryption key used to encrypt the program to the customer with the encrypted programming content. A set-top terminal or similar mechanism restricts access to the transmitted multimedia information using stored decryption keys. The set-top terminal preferably receives one or more package keys, S.sub.J, periodically from the service provider, each corresponding to a package of programs that the customer is entitled to for a given period. Each program is preferably encrypted by the head-end server prior to transmission using a program key, K.sub.P, which may be unique to the program. Header information is transmitted with the encrypted program to the customers, containing a package pair for each package to which the program belongs. A package pair preferably includes an identifier of the package, as well as the program key, K.sub.P, encrypted by the corresponding package key, S.sub.J.