Abstract: A data processing device may include a processor, configured to combine a first data word and a second data word of a plurality of secret data words by storing, for each of the first data word and the second data word, for an Exclusive-Or sharing of the data word into multiple partial representatives, for at least one of the partial representatives, a transformed version of the partial representative in a processor register, and, if the combination of the data words requires a partial representative of the first data word to be combined with a partial representative of the second data word that is stored in a processor register after having been transformed, combining the partial representative of the first data word with the partial representative of the second data word with a processor operation that takes into consideration that the partial representative of the second data word has been transformed.

Abstract: A method, apparatus and storage medium for implementing a discrete frame-based scene section are disclosed. The method comprises: obtaining at least one first tag for mapping a discrete frame to a scene section; for any second tag in the at least one first tag, performing polling query on to-be-processed first discrete frames respectively to determine whether there is a second discrete frame matched with the second tag in the first discrete frames; if there is the second discrete frame, marking the second discrete frame with the second tag corresponding to a scene section; if the polling query corresponding to the second tag ends, storing start frame timestamp information and end frame timestamp information of the scene section.

Abstract: A method of and system for gate-level masking of secret data during a cryptographic process is described. A mask share is determined, wherein a first portion of the mask share includes a first number of zero-values and a second number of one-values, and a second portion of the mask share includes the first number of one-values and the second number of zero-values. Masked data values and the first portion of the mask share are input into a first portion of masked gate logic, and the masked data values and the second portion of the mask share are input into a second portion of the masked gate logic. A first output from the first portion of the masked gate logic and a second output from the second portion of the masked gate logic are identified, wherein either the first output or the second output is a zero-value.

Abstract: A computer-implemented method includes: retrieving a plurality of blocks from a blockchain node of a blockchain network. The plurality of blocks are encoded using error correction coding (ECC) as encoded blocks. For each encoded block: The encoded block is divided into a plurality of datasets. Hash values of the plurality of datasets are calculated. A request that includes at least one of the plurality of datasets, the hash values, and a data storage scheme that provides assignments of the plurality of datasets to the plurality of blockchain nodes is sent to each of the plurality of blockchain nodes of the blockchain network. Responses for accepting the request is received from at least a number of blockchain nodes that equals a number of the one or more datasets of information bits. Each of the plurality of blockchain nodes is sent a notification for adopting the data storage scheme.

Abstract: A computer-implemented method includes: retrieving a plurality of blocks from a blockchain node of a blockchain network. The plurality of blocks are encoded using error correction coding (ECC) as encoded blocks. For each encoded block: The encoded block is divided into a plurality of datasets. Hash values of the plurality of datasets are calculated. A request that includes at least one of the plurality of datasets, the hash values, and a data storage scheme that provides assignments of the plurality of datasets to the plurality of blockchain nodes is sent to each of the plurality of blockchain nodes of the blockchain network. Responses for accepting the request is received from at least a number of blockchain nodes that equals a number of the one or more datasets of information bits. Each of the plurality of blockchain nodes is sent a notification for adopting the data storage scheme.

Abstract: A method for low latency audio watermark embedding buffers samples of an audio stream in a buffer, including previous blocks of audio samples in the audio stream. It computes a perceptual mask from the audio samples in the buffer, generates a watermark signal; and applies the perceptual mask to the watermark signal for the first block to produce a mask-applied watermark signal. It inserts the mask-applied watermark signal into the audio samples of the first block without waiting for a subsequent audio block of samples in the audio stream and outputs watermarked audio of the first block.

Abstract: Techniques are described for an access management system to manage access to a service (e.g., a message management service). A client can receive a message including an electronic image from a messaging service. The electronic image can include access information for obtaining access to a message management service. Input is received that indicates interaction with the electronic image in an interface. The client can send, to the access management system, the electronic image to request access to the message management service based on the access information. Authorization is received from the access management system indicating that the account can access the message management service. The client displays an interface to provide access to the message management service. The access to the message management service can be based on the authorization.

Abstract: Methods and systems are provided for integrity verification of an audio-visual data stream. The method includes inserting a watermark into a frame of the visual data stream or into an audio window of a corresponding audio data stream, where the watermark includes: a hash code of the previous frame of the visual data stream and a hash code of the audio window of the audio data stream, and where the audio window corresponds in time to the previous frame of the visual data stream.

Abstract: This disclosure describes novel methods for generating unique copies of content. One method combines the functions of the master copy and unique copy watermarks. In particular, the method generates a unique copy by varying the manner in which the master copy watermark is embedded in unique copies of a content item. In one embodiment, the master copy watermark is repeated within the content item and its location is varied in a unique pattern that comprises the unique copy watermark. The unique copy is generated by producing a copy in which master copy watermarks are embedded in a unique pattern. For instance in one embodiment, the locations of the master copy watermarks in the content item are represented as a vector of delta values in which each delta value corresponds to the distance between a corresponding instance of the master copy watermark, and a neighboring instance of the master copy watermark.

Abstract: A device comprising a hardware processor and memory storing an application of an application package comprising a first version and a second version of the application, the first version being intended to be executed on a genuine device and the second version on a jailbroken device. The hardware processor determines a jailbreak status of the device, i.e. genuine or jailbroken and derives a key based on at least the jailbreak status. In case the device is genuine, the hardware processor deciphers using the key at least a first part of the first version and executes, the first version using the first deciphered part, for example a jump table used to execute CFG flattened code. In case the jailbreak status is jailbroken, the hardware processor deciphers using the key at least a first part of the second version and executes the second version using the second deciphered part, for example comprising executable instructions.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to perform symbol-based watermark detection. An example method includes, in response to determining that a first rate of occurrence of a first potential symbol equals a second rate of occurrence of a second potential symbol, a first accumulated signal to noise ratio value corresponding to occurrences of the first potential symbol value is determined. A second accumulated signal to noise ratio value corresponding to occurrences of the second potential symbol value is determined. One of the first potential symbol value or the second potential symbol value having a greatest accumulated signal to noise ratio value as the likely symbol value is selected. The likely symbol value is concatenated with other likely symbol values corresponding to other symbols of the watermark to detect the watermark.

Abstract: An apparatus and method for a sensor network, machine-to-machine (M2M) communication, machine type communication (MTC), and Internet of things (IoT) are disclosed. The disclosure may be applied to, for example, intelligent services related to the above technologies, in conjunction with smart homes, smart buildings, smart cities, smart cars or connected cars, health care, digital education, retail business, security, and safety related services. The method includes generating first image data by resizing original image data to a predetermined size, inserting watermark data into the first image data, and adding difference data corresponding to the difference between the original image data and the first image data to second image data that is image data in which the watermark data is inserted.

Abstract: A method, apparatus, media and data structure for rendering a wrapper. The wrapper includes at least one data structure in a format that is renderable by a standard rendering engine and containing censored content comprising source content identification information. When the wrapper is opened by a standard rendering engine, the censored content is rendered. When opened by a trusted rendering engine, the source content is rendered.

Abstract: A method is provided for estimating past data by identifying a high frequency data set for a defined time period. A pattern is calculated for the high frequency data set and then the pattern is applied to a low frequency data set in a past time period to estimate a high frequency query point.

Abstract: Electronic content, such as an image, video, or audio file, may be tagged as being associated with an individual. When the electronic content contains biometric data related to the individual, the individual's authorization may be required or preferred before the requested association is made or shared. In a method, a request is received from a tagger to associate a taggee with electronic content. Before the association is made (and potentially shared), the tag data is encrypted. The cryptographic key is sent to the taggee. The encrypted tag data is stored and indexed based on an address associated with the taggee, such as the taggee's email address. When the taggee receives and activates the cryptographic key, the tag data is decrypted and an association is made between the taggee and the electronic content. Biometric data of the taggee included in the electronic content may then be collected and shared.

Abstract: A host device, which may include a DVR, selects to record content on the host device DVR or in a network attached storage (NAS) unit. The recorded content remains bound to the host device from a DRM perspective when it is recorded on the host DVR and on the remotely located NAS. A client device can obtain access to content recorded on the NAS by negotiating DRM rights with the host device instead of the NAS. When access rights are approved, the host device provides access information to the client device so that the content is streamed directly to the client device from the NAS.

Abstract: Watermarking techniques are described which can be performed at network edge locations such as a Content Delivery Network (CDN) point-of-presence (POP). An edge server can identify users by request and apply a watermark based on the user to media content stored locally. Performance is improved by moving the watermarking from a central location closer to the user in terms of network proximity. An edge server can receive instructions on what type of watermark to assign and how to assign it. The edge server can use requester's identity to create and apply watermarks at the time of transferring media content to the requester. Individualized watermarking is applied to the bits transmitted to the device, the watermark indicating the specific user downloading the stream, time of transmission, etc. Watermarking can be applied throughout all of the frames of the media content rather than merely attaching it at a specific place.

Abstract: A spread spectrum data hiding for audio signals is described. A set of pseudo-random noise sequences is added to an audio signal according to a data to be embedded. A masking curve is used to shape the added noise. A transient detection step can be used to control whether a shaped noise sequence is to be added or not. Embedded information is detected by first performing a whitening step and then performing a phase-only correlation with a same set of pseudo-random noise sequences. A detection method that is based on correlation of multiplexed noise sequences with a noise sequence embedded in the audio is also described.

Abstract: Large amounts of unstructured log data generated by software and infrastructure components of a computing system are processed and analyzed in real time to identify anomalies and potential problems within the computing system. A log analytics module reduces both the volume and level of detail of log data by first classifying log messages into message types based on their content similarity. The log analytics module may then further reduce data by grouping bursts of log messages into log events. Patterns within these log events, such as the collection and number of different message types that comprise the event, can be used to identify anomalous events.

Abstract: Disclosed are a data transmission/reception apparatus and method. A secret key generation unit uses a user ID as a public key to generate a secret key corresponding to the user ID. An encryption/decryption unit sets a user ID intended to receive data as an input value to encrypt the data using a certain method and decrypt the encrypted data using a certain method on the basis of a secret key corresponding to a user ID of a receiver generated by the secret key generation unit. The transmission apparatus and method according to the present invention allow for secure communication between terminals without server intervention by encrypting data using an ID-based encryption technique for safe data communication and then communicating the encrypted data.

Abstract: Watermarking techniques are described which can be performed at network edge locations such as a Content Delivery Network (CDN) point-of-presence (POP). An edge server can identify users by request and apply a watermark based on the user to media content stored locally. Performance is improved by moving the watermarking from a central location closer to the user in terms of network proximity. An edge server can receive instructions on what type of watermark to assign and how to assign it. The edge server can use requester's identity to create and apply watermarks at the time of transferring media content to the requester. Individualized watermarking is applied to the bits transmitted to the device, the watermark indicating the specific user downloading the stream, time of transmission, etc. Watermarking can be applied throughout all of the frames of the media content rather than merely attaching it at a specific place.

Abstract: A method of processing content according to a workflow, where a digital content is processed on one of a plurality of processing devices according to process definition associated to the content, includes the steps, iterated at the processing device, of: a) receiving from a server a signed workflow information, a workflow information comprising a status of the content processing, a signature of the process definition and a hash of the content; b) verifying the workflow information; c) when the workflow information is verified, processing the content according to the process definition and according to status of the content processing; d) updating and signing the workflow information; e) sending to the server the signed workflow information; and the steps iterated at the server of: f) receiving from a processing device a signed workflow information; g) publishing the signed workflow information received from the processing device. A system for performing the method is also provided.

Abstract: A method for preparing a content for watermarking is disclosed, wherein the content is available in different versions on a server for at least a client and wherein the different versions of the content are subdivided into temporally aligned chunks. The method comprises obtaining, for each version of the content, candidate locations for watermarking; determining a watermark payload bit insertion rate according to a minimum path, wherein the minimum path comprises, for all sets of temporally aligned chunks, the chunks with the smallest number of candidate locations; and generating watermark embedding metadata for each version of the content such that the watermark payload bit insertion rate is the same. A device for implementing the method and a non-transitory program storage device are also disclosed.

Abstract: A system and method for embedding data is provided. The method comprises dividing the host data set into a plurality of blocks, wherein each block comprises a plurality of elements, generating a pattern connecting the elements of each block; and embedding data on the elements of block based on the pattern.

Abstract: The present invention relates to methods for protecting a data signal using the following techniques: applying a data reduction technique to reduce the data signal into a reduced data signal; subtracting the reduced data signal from the data signal to produce a remainder signal; embedding a first watermark into the reduced data signal to produce a watermarked, reduced data signal; and adding the watermarked, reduced data signal to the remainder signal to produce an output signal. A second watermark may be embedded into the remainder signal before the final addition step. Further, cryptographic techniques may be used to encrypt the reduced data signals and to encrypt the remainder signals before the final addition step.

Abstract: An image display may be displayed by augmented reality on a remote controller. This may include identifying an electronic device having playable content, receiving information regarding a locked status of the playable content of the identified electronic device, and displaying, on a screen, an object indicating a locked status when the playable content of the identified electronic device requires a user authentication for playing the content. A user authentication input may be received and a determination may be made whether the received user authentication input matches a previously stored user authentication information. The playable content may be released from the locked status when it is determined that the received user authentication input matches the previously stored user authentication information, and information relating to the released playable content may be displayed.

Abstract: A process for distributing a marked audiovisual sequence from a nominal audiovisual sequence towards a receiver, said nominal audiovisual sequence having a nominal content, comprising: generating a marked audiovisual sequence according to a first mark applied to initial content at marking positions; generating a modified stream having a modified content different from the nominal content at least at marking positions; generating a complementary stream so that it is possible to reconstitute the marked audiovisual sequence from the modified stream; and transmitting the modified stream and the complementary stream towards the receiver wherein, on the receiver, a reconstitution of the audiovisual sequence, comprises calculating new complementary data according to the marking positions and the complementary stream so that it is possible to create an audiovisual sequence marked with a second mark from the modified stream, wherein the second mark, being different from the first mark, is applied to the initial conten

Abstract: The present invention discloses a method, an application server and a system for privacy protection in a video call, which are applied in a video call between a first terminal and a second terminal, wherein the method includes: judging whether to perform privacy protection on the first terminal; and when determining to perform privacy protection on the first terminal, playing a substitute video in a media server as a video of the first terminal to the second terminal. Using the method, the application server and the system disclosed by the present invention when performing a video call between the first terminal and the second terminal not only avoids leakage of a user's own privacy and embarrassment, but also guarantees a normal operation of the video call, thus improving the convenience of 3G services.

Abstract: A digital data signal, such as a digital video signal, is intentionally pre-distorted before being sent over a network. In one embodiment, this pre-distortion may be performed in accordance with a pre-distortion pattern or algorithm which is shared with only intended receivers. The pre-distortion pattern may be used to vary the pre-distortion on a periodic basis, as frequently as on a symbol-by-symbol basis. The pre-distortion function may include distorting the phase and/or the amplitude of the digital signal's modulation.

Abstract: The present invention relates to methods for protecting a data signal using the following techniques: applying a data reduction technique to reduce the data signal into a reduced data signal; subtracting the reduced data signal from the data signal to produce a remainder signal; embedding a first watermark into the reduced data signal to produce a watermarked, reduced data signal; and adding the watermarked, reduced data signal to the remainder signal to produce an output signal. A second watermark may be embedded into the remainder signal before the final addition step. Further, cryptographic techniques may be used to encrypt the reduced data signals and to encrypt the remainder signals before the final addition step.

Abstract: A method to enforce watermarking instructions by a security module in a receiving device, comprising the steps of receiving a security message by—a security module, comprising at least a content key, watermark instructions and security message signature, said watermark instruction activates or deactivates a watermarking module, decrypting—a security message with a transmission key, verifying—a security message signature, and in case of successful verification, reading a watermarking data from the watermarking module, verifying the authenticity of the watermarking data, and in case of successful verification, transmitting the watermark instructions to the watermark module and the content key to a descrambling module.

Abstract: An electronic confidential document viewing method is performed by an electronic device in electronic communication with a pair of eyeglasses. In response to display a confidential document on a display device, a protection image is generated based on a security image of the confidential document. The protection image is a copy of the security image that is offset from the security image by a predetermined distance in a vertical direction or a horizontal direction. The security image and the protection image are synchronously transmitted to the display device. The display device displays an overlapping picture based on the two images. The eyeglasses receive the overlapping picture, and separate the overlapping picture into two images. One of the two images is viewable by the left eye of a viewer, and another image is viewable by the right eye of the viewer.

Abstract: A data generating is device capable of preventing unauthorized extraction of plaintext content between decryption processing and digital watermark embedment processing. A content reproducing device obtains restoration information and, in accordance with the restoration information, selectively performs predetermined restoration processing and processing of embedding device unique information, on content data at a position shown by the restoration information.

Abstract: A method for verifying the authenticity and integrity of an ordered sequence of digital video frames, without having access to the original recording, by embedding therein a respective series of digital signatures based on a secret key, or keys, and on the video content of respective frames. Signatures are camouflaged by embedding in transform coefficients of a transformed representation of the video data in parts of the frame corresponding to motion. If there is sufficient motion to contain all of the signature bits, a supplementary technique embeds in high-texture areas of a frame. A final fall-back is to embed in a pre-defined default zone. A method of predicting when supplementary embedding is needed enables the process to be applied in a single pass allowing real-time operation. Verification is done during decoding by comparing, for identity, embedded signatures with signatures calculated anew using the method employed to embed.

Abstract: A system, method and device for real-time compositing of encrypted video streams without having to decrypt each video stream is disclosed herein. A shared encryption key is derived to encrypt multiple incoming video streams to an encrypted master video stream, while retaining full interoperability with popular incumbent video encryption standards. Compositing video is then possible without having to decrypt the master video stream, thereby preserving the security of the copyrighted material. The invention preferably genlocks a digital video source to a master video stream.

Abstract: A countermeasure for differential power analysis attacks on computing devices. The countermeasure includes the definition of a set of split mask values. The split mask values are applied to a key value used in conjunction with a masked table defined with reference to a table mask value. The set of n split mask values are defined by randomly generating n?1 split mask values and defining an nth split mask value by exclusive or'ing the table mask value with the n?1 randomly generated split mask values.

Abstract: A method and apparatus for controlling access restrictions for media resource playback may include defining a user-specific content control profile authorizing one or more classes of content to be delivered to a client device, generating a media resource request identifying a first media resource associated with a first class of content and one or more attributes of the content control profile, determining whether the first class of content has been authorized for delivery to the client device based at least in part upon the one or more attributes of the content control profile, and delivering the first media resource to the client device if the first class of content has been authorized for delivery to the client device.

Abstract: A method embeds tracing secret data into multimedia contents delivered to particular users. The method descrambles a first scrambled video stream having alternate values to obtain a personalized video stream corresponding to an original video stream by a decoder comprising at least a security unit and a descrambling unit, the personalized video stream being obtained by restoring the alternate values by personalized values taking into account an internal parameter on the security unit and received control data containing the original values and their location in the modified stream.

Abstract: A computing device-implemented method and system is provided for obtaining an interim masked substitution table value for a given input component in a cryptographic round, such as an AES cryptographic round, using a substitution table and a self-cancelling mask. A mask with a length equal to an entry in the substitution table is provided, wherein the mask comprises a plurality of mask components of equal length such that a bitwise logical inequality operation such as XOR on the mask components equals zero, and the substitution table is masked with this mask. For each of input component, an interim masked substitution table value is obtained from the substitution table thus masked.

Abstract: A composite masking system and method for improving the invisibility of high-definition video watermarking. The composite masking system includes a watermark generation module, a mask generation module, and watermark embedment means. The watermark generation module generates a basic watermark pattern using a private key, and generate a watermark pattern by repeatedly extending the basic watermark pattern. The mask generation module generates a Noise Visibility Function (NVF) mask using NVF masking means, an adaptive dithering mask using adaptive dithering masking means, and a contour mask using contour masking means. The watermark embedment means generates a composite mask by multiplying the NVF mask, the adaptive dithering mask and the contour mask together, multiplying the composite mask and the extended watermark pattern together, and embedding the result of the second multiplication in the luminance channel of an original image.

Abstract: The present invention relates to methods for protecting a data signal using the following techniques: applying a data reduction technique to reduce the data signal into a reduced data signal; subtracting the reduced data signal from the data signal to produce a remainder signal; embedding a first watermark into the reduced data signal to produce a watermarked, reduced data signal; and adding the watermarked, reduced data signal to the remainder signal to produce an output signal. A second watermark may be embedded into the remainder signal before the final addition step. Further, cryptographic techniques may be used to encrypt the reduced data signals and to encrypt the remainder signals before the final addition step.

Abstract: An input processing circuit decodes a digital video signal selected by an input signal selector. Decryption circuits each decrypt the encryption of a video signal output from the input processing circuit, and generate an authentication key of the encryption. A video signal selector selects and outputs one of the video signals output from the decryption circuits, to a monitor. The decryption circuits each include a pseudo-signal generation circuit which extracts information from the video signal, and based on the extracted information, generates a pseudo-video signal.

Abstract: Disclosed is a method for implementing a symmetric key encryption algorithm against power analysis attacks, including: generating and storing an affine transform table; generating and storing a masked inversion table; and operating a masked S-box using the affine transform table and the masked inversion table.

Abstract: Apparatus and methods are provided for embedding or embedding digital data into an analog host or cover signal. A distributed signal feature of the cover signal in a particular domain (time, frequency or space) is calculated and compared with a set of predefined quantization values corresponding to an information symbol to be encoded. The amount of change required to modify the signal feature to the determined target quantization value is calculated and the cover signal is modified accordingly to so change the feature value over a predefined interval. Information symbols are extracted by the opposite process. In one embodiment, the predefined value is a short term auto correlation value of the cover signal.

Abstract: An apparatus and method for encoding and decoding additional information into a stream of digitized samples in an integral manner. The information is encoded using special keys. The information is contained in the samples, not prepended or appended to the sample stream. The method makes it extremely difficult to find the information in the samples if the proper keys are not possessed by the decoder. The method does not cause a significant degradation to the sample stream. The method is used to establish ownership of copyrighted digital multimedia content and provide a disincentive to piracy of such material.

Abstract: In order to encrypt a part of an input image in such a manner that the encrypted part can be located for decryption, means for regularly converting pixel values in the area to be encrypted and generating a pattern unique to the pixel value conversion in order to encrypt the area to be encrypted; means for setting a specified positioning marker for locating an encryption position at two or more of the four corners of the area to be encrypted; and means for setting one or more checking marks for verifying appropriateness of a decrypted image in the encrypted area before the decryption are included.

Abstract: An image processing device includes an additional image formation unit configured to form an additional image having a first predetermined density. At least a part of the additional image is overlaid with a main image having a second predetermined density, the main image being formed on an image formation medium. A boundary image formation unit is configured to form a boundary image which is formed in an area defined in the vicinity of an overlaid area where the additional image is overlaid with the main image. A density of the boundary image is lower than both the first predetermined density and the second predetermined density. A synthesized image formation unit is configured to synthesize the main image, additional image and the boundary image to form a synthesized image.

Abstract: A device for locating a DES key value that corresponds to a packet identification (PID) contained at a variable possible location which comprises part only of a 32-bit packet header. A table stored in memory contains for each DES key: (i) a packet header having 32 bits with a PID of either 12, 9 or 8 bits contained at a defined location and with zero values elsewhere, and (ii) a mask value also having 32 bits with ones contained at the said defined location of the PID and zeros elsewhere. The table is divided into regions for respective packet format types. An incoming packet header at an input is combined with a first one of the mask values from the table to provide a combined value that consists of the value held in the input packet header at the defined location and zeros elsewhere. This combined value is compared with the corresponding packet header stored in the table. When they are not equal, the combining and comparison is repeated for the next row of the table.

Abstract: A test pattern containing plurality of patches recorded using small dot patterns and large dot patterns is printed. The dot sizes arranged in the patches are different between patches. Then the test patterns are read. The detection rate and average density of additional information embedded in each large dot pattern are obtained. A large dot pattern whose detection rate and average density fall within a reference range and are closest to ideal values is determined. The average density of each small dot pattern is obtained. A small dot pattern whose average density falls within a reference range and is closest to the average density of the determined large dot pattern is determined. A copy-forgery-inhibited pattern image is generated using these dot patterns and combined with a print target image.

Abstract: A configuration in which use management for each piece of content, which is divided in units, can be performed strictly and efficiently is provided. CPS units such that content stored on an information recording medium is divided into units are set, a unit key is assigned to each CPS unit, and data forming each unit is encrypted and recorded. For reproduction, a unit key is generated, and data processing using the unit key is performed. As information for generating the unit key, copy/play control information (CCI) that is set so as to correspond to the CPS unit and a content hash that is a hash value based on data forming the CPS unit are used. With this configuration, tampering of CCI and data forming the CPS unit can be prevented, and authorized content use can be realized.