Abstract: Methods and apparatus for converting original data into a plurality of sub-bands using wavelet decomposition; encrypting at least one of the sub-bands using a key to produce encrypted sub-band data; and transmitting the encrypted sub-band data to a recipient separately from the other sub-bands.

Abstract: Optimization of encrypted traffic flowing over a WAN is provided by an arrangement in which WAN compression is distributed between endpoints (i.e., client machines or servers) in a subnet of a hub and branch network and a WAN compression server in the subnet. A client portion of the WAN compression running on each of one or more endpoints interfaces with a disposable local cache of data seen by endpoints in the subnet that is used for compressing and decompressing traffic using dictionary-based compression techniques. The local WAN compression server in a subnet stores a shared central database of all the WAN traffic in the subnet which is used to populate local disposable caches in the endpoints.

Abstract: A method for examining an electronic representation of an item for a watermark, the method including examining at least a first electronic representation of an item for a watermark in accordance with a first watermark definition, receiving a signal indicating that a second watermark definition is to be used for examining electronic representations, and examining at least a second electronic representation of an item for a watermark in accordance with the second watermark definition. Related apparatus and methods are also provided.

Abstract: Systems and methods are described which utilize a recursive security protocol for the protection of digital data. These may include encrypting a bit stream with a first encryption algorithm and associating a first decryption algorithm with the encrypted bit stream. The resulting bit stream may then be encrypted with a second encryption algorithm to yield a second bit stream. This second bit stream is then associated with a second decryption algorithm. This second bit stream can then be decrypted by an intended recipient using associated keys.

Abstract: Embodiments of prime indexing and/or other related operations are disclosed.

Abstract: The present invention relates to a secure hash algorithm (SHA)-based message schedule operation method, a message compression operation method, and a cryptographic device performing the same. The present invention sequentially performs the message schedule operation by using an adder. Also, a memory for storing operation data input for the message schedule operation is used from a 17th round to store intermediate data generated by the message schedule operation. Further, the message compression operation is sequentially performed by using one adder.

Abstract: A system, method and data storage device for encrypting data to provide at-rest data encryption of data in the data storage device. The system includes a compression engine for receiving a host data stream packet and selectively generating a compressed data packet, and an encryption engine in electronic communication with the compression engine for receiving an unencrypted data packet from the compression engine. The unencrypted data packet comprises the compressed data packet when the compression engine generates the compressed data packet. The unencrypted data packet comprises the host data packet when the compression engine does not generate the compressed data packet. The encryption engine generates an encrypted data packet having an encrypted component corresponding to the unencrypted data packet and a set of meta data indicative of one or more characteristic of the encrypted data packet.

Abstract: A method to reduce the bandwidth for the renewal of subscriptions includes: A) defining a maximum length for a message, B) defining a command for security modules, C) forming a message comprising the command, D) filling the message with a starting address and a range E) determining a remaining length in the message, F) defining a bitmap of variable length, G) starting at identification address equal to the starting address and initializing an index value and the bitmap length, H) updating the bitmap bit for the security module pertaining to the identification address to activate/deactivate the command, I) compressing the bitmap, J) when the compressed bitmap length is smaller than the remaining size in the message, updating the index value, the bitmap length and the identification address and re-executing the steps H to J, K) updating the range with the index value and filling the message with the bitmap.

Abstract: An encryption device and method and decryption device and method which implement a bit-based encryption scheme and hardware design. The encryption device includes a random number generator, receiving a main key, determining a working key using at least one random number and outputting a working key, a model, receiving the main key, the working key and plain text to be encoded and generating at least two frequency counts. The encryption device further includes an encoder, which outputs encoded text based on the working key, the plain text and the at least two frequency counts. The encryption device and method and decryption device and method process encrypted text that is based upon a stream structure with an unlimited key length and may be compressed by 50%. The encoded text is changeable with different environments even for the same plain text and the same key. Operations of the hardware design are based on arithmetic additions and shifts, and not multiplications and divisions.

Abstract: A method of decoding symbols in which a first codeword has been spread by a second codeword to recover first information and second information is provided. The decoding occurs jointly, with an overall output determining both the first and second information. A first parallel code multiplying operation for each codeword of the second code is followed by a second parallel code multiplying operation for the first code. An overall maximum output of the second parallel code multiplying operations determines the output information.

Abstract: An agent computer system, acting on behalf of the user, provides the personal information to various wide area network sites for conducting online transactions. A user has a secure device with a built-in device identifier. A backup center has a computer system to be coupled to the secure device during backup of the personal information. The personal information is encrypted with a unique user ID as a key. The user ID is entered by the user. The user ID is irreversibly encrypted to a unique irreversibly encrypted user identifier. The secure device includes data executable to establish a new account, renew an old account, and transmission of the encrypted information along with the unique device identifier and the unique irreversibly encrypted user identifier to the backup center. The unique device identifier and the unique irreversibly encrypted user identifier are used for indexing the storage of the encrypted information.

Abstract: A method and apparatus is provided for decrypting an encrypted transport stream, comprising. The method includes receiving the encrypted transport stream over a content delivery network. The encrypted transport stream is encrypted using a first control word that serves as an encryption/decryption key. A variable control word is received over the content delivery network. The variable control word is mathematically constrained to create a second control word. The encrypted transport stream is decrypted using the second control word if the second control word is the same as the first control word.

Abstract: The invention relates to a method of transforming a digital signal for it to be transmitted, the signal being decomposed into several regions each containing digital data, the signal comprising header data specific to each region and which comprise at least one part representing the amplitude of the data of the region considered, wherein the method comprises a step of modifying, among the header data specific to at least one region of the signal, the part of the header data representing the amplitude of the data of the region considered.

Abstract: Described is a process for encrypting and compressing data for storage by computing systems. A data stream received by a computing system is separated into data chunks for storage on a storage device using a data layout format. Each data chunk is examined and if possible, compressed to produce a compressed data chunk. Whether or not the data chunk can be compressed, the data chunk is encrypted and stored on the storage device in addition to metadata that describes the data chunk. When reading the stored data chunk from the storage device, the metadata identifies the starting location of the stored data chunk and provides metadata information to the computing system for decryption and decompression processing.

Abstract: A nonvolatile memory stores encrypted data, which is obtained by linking and encrypting program data, in which combined data is compressed, and first information data indicating the number of programs contained in the combined data, and second information data indicating the size of each program. A CPU reads the encrypted data from the nonvolatile memory and decrypts the read encrypted data to restore the program data, the first information data and the second information data, after which the program data is decompressed to restore the combined data that is then stored in RAM. The CPU also creates a program management table for managing the respective programs based on the first and second information data, and stores the program management table in the RAM. The present invention is applicable to microcomputers.

Abstract: A method and system for capturing an electronic signature of a user in a Java-based environment on a personal digital assistant. A user is prompted by an applet operating on the personal digital assistant, handling a canvas by the applet, and capturing an instance of the electronic signature on the canvas. The canvas encodes the instance of the electronic signature in a file and transfers the file by the canvas to the applet. A personal digital assistant may include a screen sensitive to pressure for capturing a signature and an application adapted to capture and attach the signature to a business object. The application may also include an applet adapted to prompt a user and adapted to handle a canvas. The canvas is adapted to capture an instance of the electronic signature and encode the instance in a file. The file is transferred by the canvas to the applet.

Abstract: An apparatus for generating codes includes a quantization unit which generates quantization coefficients by performing discrete wavelet transform with respect to each of tiles into which an image is divided, a block division unit which divides the quantization coefficients into blocks, a Hash conversion unit which performs Hash conversion based on the quantization coefficients of each of the blocks so as to produce a Hash value for each of the blocks, a digital watermark embedding unit which adjusts a parity of a quantization coefficient of interest equal to a parity of the Hash value of a block to which the quantization coefficient of interest belongs, and a coding unit which generates code sequence data by coding the quantization coefficients including the quantization coefficient whose parity is adjusted.

Abstract: An interface block (11) converts the format of input downstream data (STRM). A CPU (12) receives the format-converted data (DIF) and realizes the MAC function. A TEK process block (13) receives TEK process data (DTEK) obtained from the data (DIF), analyzes the data structure of the TEK process data, and performs decryption processing based on a result of the analysis.

Abstract: A method includes receiving an authentication request from a mobile station (401) and determining whether to forward the request to an authentication agent. When it is determined to forward the request, the request is forwarded to the authentication agent (107). A random number and a random seed are received from the authentication agent (107). The random number and the random seed are forwarded to the mobile station (401). A response to the random number and the random seed from the mobile station (401) is received and forwarded to the authentication agent (107). The authentication agent (107) compares the response with an expected response. When the authentication agent (107) authenticates the mobile station (401), a derived cipher key is received from the authentication agent (107).

Abstract: An encryption technique and a decryption technique that are applied to video data that is encrypted on a predetermined domain of compressed video data are disclosed. For example, JPEG2000 compressed video data can be compressed using a wavelet conversion. Compressed video data is input. The input video data is decompressed to a predetermined domain of the compression process, and the decompressed video data is then encrypted. The encrypted video data is then compressed in accordance with the decompression process, and information representing the encrypted compression domain is stored in a predetermined area of the compressed video data.

Abstract: An apparatus for compressing media content is disclosed. The apparatus divides the media content into at least three predetermined portions, compresses each of the at least three portions using one of at least three different compression algorithms and makes the at least three compressed predetermined portions publicly available. Making the portions publicly available includes, for example, transmitting the portions over a computer network such as the Internet.

Abstract: An architecture for content-aware compression and/or encryption of various segments of a application is disclosed. The architecture advantageously allows decompression and decryption units to be placed various levels of a memory hierarchy.

Abstract: A method and system for securely and scalably encoding data are disclosed. A method and system for decoding data which has been securely and scalably encoding are also disclosed. In one encoding method embodiment, the present invention recites receiving data. The present method then segments the data into corresponding regions. The regions are then scalably encoded into scalable data. The present embodiment then progressively encrypts the scalable data to generate progressively encrypted scalable data. Next, the present embodiment packetizes the progressively encrypted scalable data.

Abstract: Methods and apparati are provided for determining a “Squared Tate pairing” for hyperelliptic curves and using the results to support at least one cryptographic process. The improved techniques provide increased efficiency and an alternative method to the conventional method of implementing the Tate pairing for Jacobians of hyperelliptic curves. With the Squared Tate pairing for hyperelliptic curves, one may obtain a significant speed-up over a contemporary implementation of the Tate pairing for hyperelliptic curves. The Squared Tate pairing for hyperelliptic curves can be substituted for the Tate pairing for hyperelliptic curves in any applicable cryptographic application.

Abstract: Methods and apparatus for converting original data into a plurality of sub-bands using wavelet decomposition; encrypting at least one of the sub-bands using a key to produce encrypted sub-band data; and transmitting the encrypted sub-band data to a recipient separately from the other sub-bands.

Abstract: A procedure and system reduces latency in restoring encrypted or compressed and encrypted data through a security appliance. The security appliance is coupled to a sequential access device and is configured to encrypt or compress and encrypt data provided by an initiator for secure storage on a sequential access device. To that end, the security appliance intercepts a read request issued by an initiator to access the data stored on the device, and forward the request to the device. Upon return of the requested data from the device, the security appliance restores (decrypts or decrypts and decompresses) the data prior to returning it to the initiator. The appliance also issues a “read ahead” (retrieve beyond the request) request to the device for predetermined amount of additional data for caching on the appliance.

Abstract: A method, system and computer readable medium for the blocking of recording digital content at an end user multimedia end-user-system during the rendering of encrypted digital multimedia files. Before the process of rendering of encrypted digital multimedia can be started all rendered media stream during playback are opened to ensure that this multimedia content is not recorded. This blocks the usage of the multimedia interfaces including devices and/or ports that can be used to store un-encrypted content that has been decrypted for the purposes of playing or rendering. The method also includes an exception, which allows recording with permission from the present invention.

Abstract: Methods and systems for accelerating data communication by reducing network latency particularly by data compression in which requested data is recursively compressed by an encoder and sent to the requester in codes which may or may not be understood by the requester. The requester can subsequently request data corresponding to unknown codes. The request-reply sequence is also recursive and continues until the requested data is present at the requester. To further accelerate communication, a persistently connected network is employed, together with a new socket layer capable of combining multiple messages from different machines, threads, and/or processes into single TCP/IP packets to be relayed along message hubs in the persistent network. These features are introduced singly and combined to create a new caching network. A new content distribution network can take advantage of these data communication improvements since requested content can be distributed in caches in a caching network.

Abstract: A device and method thereof for encoding and encrypting data. The device includes a segmenter adapted to receive the data and segment at least a portion of the data into regions, a scalable encoder adapted to scalably encode at least one of the regions into scalably encoded data, and a progressive encrypter adapted to progressively encrypt at least a portion of the scalably encoded data into progressively encrypted scalably encoded data. In one embodiment, progressively encrypted scalably encoded data are provided to a packetizer in real time. In another embodiment, the device includes a storage unit adapted to store progressively encrypted scalably encoded data. In this latter embodiment, data can then be extracted from storage and provided to a packetizer.

Abstract: A method for a secure transmission of information between a first and a second module is disclosed. Each module contains one of the keys of two pairs of keys. A first number and a second number are randomly generated in the first module, and a third number is randomly generated in the second module. A check is made that a random number encrypted by one of the modules, then decrypted by the other, then re-transmitted re-encrypted to the initial module, is after decryption in the latter identical to the original random number. In each of the modules a common session key K is created independently with at least three same numbers generated randomly partially in one module and partially in the other module. Information transmitted between the two modules is encrypted with the common session key.

Abstract: An image data processing system is configured to store image data with redundant protection in the form of a redundant array of inexpensive disks (RAID). An input card is configured to receive an input stream of real-time digital video data, possibly provided by a video tape recorder. The video image data is stored and a processor is arranged to perform processing operations upon the stored video data. The input card receives an input stream of real-time video data and the processor performs a first writing operation to write the video data to storage (106) in real-time without parity. The processor then performs a reading operation to read the data from storage and performs a data manipulation (307) upon the data to generate parity information to create protected video data. The processor then performs a second writing operation to write the protected video data back to storage.

Abstract: The present invention is a compression method for compressing digital data. The data is strings of digital values, which can be broken down to a series of 1's and 0's. The present inventive method uses a chaotic system to compress the data. The first step in the inventive method is generating a plurality of periodic orbits that correspond to a plurality of control bit strings. Each of the periodic orbits is formed with a series of numeric values. The next step is to convert the numeric values of the periodic orbits to digital data values, similar in form to the data to be compressed. The digital data values of the periodic orbits are then organized to identically match the original digital data values. Then the control bit strings corresponding to the organized digital data values of the periodic orbits are identified and saved in order, such that applying the control bit strings to the chaotic system will regenerate the original data.

Abstract: Methods and apparatus for converting original data into a plurality of sub-bands using wavelet decomposition; encrypting at least one of the sub-bands using a key to produce encrypted sub-band data; and transmitting the encrypted sub-band data to a recipient separately from the other sub-bands.

Abstract: In a signal processing device and its method as well as a program storing medium, psychological auditory sense analysis of the survival state of an input signal of the time when the input signal has been compressed is performed in response to the compression processing, and the result of the very analysis is outputted as the psychological auditory sense encoded information, and digital watermarking information is superimposed on the input signal on the basis of the psychological auditory sense encoded information, so that it is possible to easily realize digital watermarking information that has large compression resistance and digital watermarking information that has small compression resistance.

Abstract: An encryption key is generated in response to a plurality of information pieces being bases for the encryption key. Original information is encrypted into encryption-resultant information in response to the generated encryption key. The encryption-resultant information is divided into units. Each of the units is loaded with encryption control information for identifying the plurality of information pieces being the bases for the encryption key.

Abstract: Data is recorded in a first part PA1 in accordance with a signal format same as that of an existing CD at the lower limit (1.5 ?m) of an allowable value of a Wreck pitch and the lower limit (1.2 m/sec) of a linear velocity. As a result, the data for the maximum regeneration time (74.7 min) can be recorded in the first part PA1. An existing CD reproducing apparatus can reproduce the audio data recorded in the first part PA1 with no problem. Moreover, compressed and encrypted audio data is recorded in a second part PA2 at a single density or a double density. The single density represents a recording density same as that of an existing CD and the double density represents a density two time larger than the single density. Furthermore, the audio data recorded in the second part PA2 is charged when reproduced in order to protect copyrights. The format of the data recorded in the second part PA2 uses the format of a CD-ROM.

Abstract: Encrypted compressed content is produced by encrypting content based at least in part on a content key, and compressing the content based at least in part on the content key. Thus, the content key is employed to encrypt the content and also to compress the content. Similarly, decrypted decompressed content is produced from the encrypted compressed content by decrypting the content based at least in part on a content key, and decompressing the content based at least in part on the content key. Thus, the content key is employed to decrypt the content and also to decompress the content.

Abstract: Systems and methods are described which utilize a recursive security protocol for the protection of digital data. These may include encrypting a bit stream with a first encryption algorithm and associating a first decryption algorithm with the encrypted bit stream. The resulting bit stream may then be encrypted with a second encryption algorithm to yield a second bit stream. This second bit stream is then associated with a second decryption algorithm. This second bit stream can then be decrypted by an intended recipient using associated keys.

Abstract: A method for examining an electronic representation of an item for a watermark, the method including examining at least a first electronic representation of an item for a watermark in accordance with a first watermark definition, receiving a signal indicating that a second watermark definition is to be used for examining electronic representations, and examining at least a second electronic representation of an item for a watermark in accordance with the second watermark definition. Related apparatus and methods are also provided.

Abstract: In a technique for compressing data, a data storage server receives a set of data, which includes a first number of subsets. The storage server defines a number of compression groups for the set of data, each compression group including multiple entries, each entry containing a pointer to a different subset of the set of data. At least part of the set of data is then compressed into a smaller number of subsets. For each of the subsets which does not contain compressed data after the compression, a predetermined value is stored in the corresponding entry of the corresponding compression group, to indicate that corresponding data is compressed and represented elsewhere in the compression group. The predetermined value may also indicate which compression algorithm was used to compress the data.

Abstract: A method and system for securely and scalably encoding data are described. A method and system for decoding data which has been securely and scalably encoding are also described. In one encoding method embodiment, the present invention recites receiving data. The present method then segments the data into corresponding regions. The regions are then scalably encoded into scalable data. The present embodiment then progressively encrypts the scalable data to generate progressively encrypted scalable data. Next, the present embodiment packetizes the progressively encrypted scalable data.

Abstract: A stream of data is encoded by applying a multilevel transform to the stream of data, each level of the transform producing one or more transform coefficients for each block of a sequence of blocks in the stream of data. Encryption is applied to at least a subset of the transform coefficients produced by a least one level of the multilevel transform. Furthermore, at least one level of the multilevel transform is applied to the encrypted transform coefficients. The multilevel transform and encryption operations generate a result set of transform coefficients. The result set of transform coefficients may be encrypted, using a symmetric key encryption, to generate an output data stream that is then transmitted from a sending device to a receiving device. The encoding method may be performed in real time, producing the output data stream at a same rate as the stream of data is presented for encoding.

Abstract: A code stream and data indicating a normalization method are inputted to a normalization processing unit 21, and the normalization processing unit applies normalization processing to the code stream to generate a normalized code stream. Next, when signature data is inputted, a verification processing unit 22 performs encryption and decryption processing with respect to the signature data using a public key Kp and calculates a Hash value (first Hash value) and, on the other hand, calculates a Hash value of the normalized code stream (second Hash value). Next, the verification processing unit compares the first Hash value and the second Hash value and, if the first Hash value and the second Hash value are equal, judges that the code stream is not falsified. On the other hand, if the first Hash value and the second Hash value are not equal, the verification processing unit judges that the code stream is falsified.

Abstract: It is an object to provide an efficient transfer of content data. In a case of transferring the content data from a data transfer device on a primary recording medium side to a data recording device to record the content data in a secondary recording medium, a data compression system and a bit rate that are conformable to the data recording device are compared with a data compression system and a bit rate of the content data to be sent, so that a required transfer processing is brought into realization according to a result of the comparison. For instance, when both the data compression systems are equal, and the bit rate of the content data is not more than the bit rate that is conformable to the data recording device, the content data is sent as it is in an encrypted compressed data state.

Abstract: A key scheduler for an encryption apparatus using a DES encryption algorithm is disclosed.

Abstract: An image compression apparatus capable of efficiently encoding an image without causing color deviation to the eye compresses luminance element image data and two types of chrominance element image data each consisting of a plurality of blocks.

Abstract: A system and method for enabling authorized music from a CD or DVD to be compressed by a user for the user's own use, but to prevent the recompression of unauthorized music from, e.g., the Internet, includes hashing the music during recording with a cryptographic hash, and then signing the hash with a digital signature derived from the hash. Subsequent unauthorized compression and recompression will destroy the digital signature. Accordingly, music to be recorded is hashed to obtain a test digital signature and if, after hashing, the test digital signature matches the digital signature accompanying the music, compression and recording are allowed to proceed.

Abstract: A system for processing an information signal comprises a system (1) for scrambling the information signal and at least one system (2) for descrambling the scrambled information signal. The scrambling system (1) comprises means (3,6) for analysing the entropy distribution of the information signal, means (5,6,7,9) for scrambling the information signal in dependence on the entropy distribution of the information signal to provide a scrambled information signal having an entropy distribution corresponding with the entropy distribution of the information signal and means (11) for compressing the scrambled information signal. The descrambling system (2) comprises means (14) for decompressing the compressed scrambled information signal and means (16,19,21,22,24) for descrambling the scrambled information signal to provide the information signal.

Abstract: A method of producing a stream of digital data. The method includes determining a plurality of portions within the stream of digital data, such that a portion of the stream of digital data is encrypted with an encryption key that is capable of being decrypted by a decryption key and the portion including therein another decryption key capable of decrypting a subsequent portion of the stream of digital data, and the subsequent portion of the stream of digital data is encrypted with another encryption key that is capable of being decrypted by the another decryption key. The method also includes transmitting the stream of digital data, including the portion and the subsequent portion.

Abstract: A method is provided for asymmetrically encrypting data communicated between a ground platform and multiple airborne platforms. The method includes packet encrypting ground-based data so as to preserve routing information while encrypting the remaining data. The packet-encrypted data is then transmitted to the airborne platforms. The method also includes bulk encrypting airborne-based data so as to maximize security. The bulk-encrypted data is then transmitted to the ground platform.