Abstract: A client computing system inserts selected advertising into digital content. Ads may be inserted into content based on a dynamic advertising matching process that is securely implemented within a hardware-based root of trust. User profiles used in ad matching may be privacy protected and maintained with confidentiality protection in the client computing system and/or a service provider server, respectively. When a client computing system makes a request to the service provider server for content with specified ad slots, the request may be made with the client's EPID signature, which is inherently privacy protected. The hardware-based root of trust protects insertion of selected ads into the linear rendering flow of the content.

Abstract: A method of providing a service to a customer comprises receiving a request by a customer for an item of content, providing to the customer an option to subscribe to a service for a limited time, if the customer opts to subscribe, then providing the service for the limited time, and if the customer does not opt to subscribe, then not providing the service for the limited time.

Abstract: A universal ID and biometrics systems and methods are disclosed. A method includes receiving an authentication request message originating from a user. The authentication request message includes a first identifier and a second identifier, where the second identifier includes biometric data. The method further includes determining a third identifier based on the first identifier and sending the second and third identifiers to a first server computer to determine if the second and third identifiers have a predetermined correlation. The method further includes receiving confirmation of user authentication if the identification system determines that the second and third identifiers have the predetermined correlation.

Abstract: A method and apparatus for attesting the configuration of a computing platform to a verifier. A signature key (SK) is bound to the platform and bound to a defined configuration of the platform. A credential (C(SK), CDAA(SK)) for the signature key (SK) is obtained from an evaluator. This credential (C(SK), CDAA(SK)) certifies that the signature key (SK) is bound to an unspecified trusted platform configuration. The platform can then demonstrate to the verifier the ability to sign a challenge from the verifier using the signature key (SK), and demonstrate possession of the credential (C(SK), CDAA(SK)) to the verifier, thereby attesting that the platform has a trusted configuration without disclosing the platform configuration to the verifier.

Abstract: An information processing device includes: a local memory unit for storing data including an encrypted content; a memory for storing data including key information used to reproduce the encrypted content; and a data processing unit performing a process of writing data to the local memory unit and the memory, and a process of reproducing the encrypted content, wherein the data processing unit performs a process of writing encrypted content downloaded from a server or encrypted content copied from a medium to the local memory unit, and performs a process of decoding the encrypted content or a validity authenticating process using the data stored in the local memory unit and the data stored in the memory when reproducing the encrypted content written to the local memory unit.

Abstract: Instead of buying blanket licenses for all licensable components of its CE devices, a manufacturer enables users to activate licensable components on a device basis and then obtains the necessary licenses individually. Seldom used activation modes and seldom activated licensable components can be pruned from future devices, while widely activated licensable components can be automatically enabled by purchasing a blanket license for those components. Characteristics of license requests and the people making them can be used to focus marketing.

Abstract: To provide a copyright protection storage medium in which copyright protected contents are recorded by an information recording apparatus connected to a content server providing copyright protected contents and a license server handling licenses concerning recording/playback of the copyright protected contents through a network, in which the copyright protected contents are written by a simple copy-and-paste when the information recording apparatus is possessed by a prescribed user, and the copyright protected contents are written by combining a domain model which assures playback in the apparatus and a media-bind model when the information recording apparatus is possessed by another user.

Abstract: An information processing apparatus in which a part of a plurality of different programs included in an application package is validated includes an invalidation command input unit configured to input a command to invalidate a license of the application package, a generation unit configured to generate invalidation verification data by invalidating the license of the program which is included in the application package, is already installed in the information processing apparatus, and has a validated license, and to generate invalidation verification data of the license of the program without installing the program which is included in the application package and is not installed in the information processing apparatus, and an output unit configured to output the invalidation verification data generated by the generation unit.

Abstract: In a content delivery system, delivery of content and charging the fee of the content are performed and managed in a highly secure and effective fashion. If a content-purchasing request is transmitted from a user device to a shop server, a charging process is performed. A user device authentication server, which manages content delivery, converts an encrypted content key KpDAS(Kc) encrypted using a public key of the user device authentication server (DAS) into an encrypted content key KpDEV(Kc) encrypted using a public key KpDEV of the user device. If the charging process is successfully completed, the shop server transmits, to the user device, the encrypted content key KpDEV(Kc).

Abstract: A building management strategy includes using exponentially weighted moving averages with statistical models to detect changes in the behavior of the building management system. Detected changes in the behavior of the system may indicate a detected fault, a change in a predicted behavior, or a need for the statistical models to be updated.

Abstract: The invention relates to a method of securing a changing scene composed of at least one element and intended to be played back on a terminal. According to the invention, such a method comprises the following steps: creation (10) of at least one security rule, defining at least one authorization to modify said scene and/or at least one element of said scene and/or an authorization to execute at least one command in a context of playing back said scene on said terminal; allocation (10) of a security policy, comprising at least one of said security rules, to said scene and/or to at least one of said elements of said scene.

Abstract: The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node.

Abstract: In certain embodiments, a computer system and process for use in a trading system are provided that allow trading entities to compress trade records while simplifying the reconciliation process. Advantageously, compressed trade records are processed by a custodian firm, while uncompressed reconciliation data are processed by a central counterparty. In some embodiments, a computer system and process are provided that allows trading entities to compress trade records across markets. Advantageously, compression across markets provides a larger pool of eligible trade records for compression, increasing the number of compressible trades, and thus reducing fees paid by the trading firm and the amount of data transmitted.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: A user terminal (110) having a license purchase unit (603) obtaining a license (500) indicating a content usable time (502) of a content data (200) composed of a plurality of elements (203), each of which can be replayed individually. The user terminal (110) also having an availability judgment unit (604) judging whether or not encrypted elements (203) included in the content data (200) are available, based on the content usable time (502) indicated in the obtained license (500), and having a replay/display unit (607) replaying the encrypted elements judged as available. In addition, the user terminal (110) having a use status management unit (608) specifying license-consuming elements, each of which consumes an authorized amount of replay under right, out of the elements that are being replayed, and measuring a content used time (504) consumed by replaying the specified license-consuming elements.

Abstract: An audience measurement system for gathering data reflecting usage of media data by a user by means of a user system. The user system preprocesses the gathered data into micro-level report objects.

Abstract: A system and process for coordinating streaming content or messages is provided. A network-connected server maintains a database containing media content-related data, such as the text of a message, accompanying media, time of airing, payment and related comments. A user can view these feeds or streams of these consciousness messages by downloading a mobile application or browsing to a website. The application can also be used to create, schedule and pay for a media content message.

Abstract: Authenticity of a proposed future or current participant in a multi-party dialog is checked by splitting an authenticity challenge query into at least two portions wherein none of the portions individually contains sufficient information to fully define the challenge query. These separated portions are then sent to another dialog participant over at least two different communication channels thus enhancing the probability that a successive challenge response is authentic. The authenticity challenge query and splitting thereof into plural portions may include formation of a logical combination (e.g., exclusive-OR) of first and second data strings (one of which may be a challenge question) to produce a resultant third data string where the separated and separately communicated portions include the first and third data strings as separate portions as being sent over respectively different communication channels.

Abstract: A system and method of billing for scanning service costs is provided to examine content of a page and apply a cost function to approximate the cost of scanning the page. Examining the page includes detecting an object in the page, determining a type of the detected object, determining an approximate file size of the page, and determining an approximate area of coverage of the detected object within the page. A usage profile of each type of detected object is calculated and stored. The cost function uses the detected object, the approximate file size, the approximate area of coverage, and a weight value associated with the type of detected object to approximate the cost of the page. When costs are calculated over a period of time, the weight value of each type of detected object may be adjusted based on the usage profile for each type of detected object.

Abstract: A licensing system is disclosed for performing synchronous encryption with a client over an IP-compliant network. In disclosed embodiments, the system includes a licensing agent configured to pass a data structure unencrypted in an initial communication between the licensing agent/client pair and pass a first key to said client responsive to an initial communication. The licensing agent then receives the data structure from the client having designated fields encrypted according to the first key. The licensing agent then sends a second key to the client for use in subsequent communications.

Abstract: A system includes a central server in communication with public agencies through a private network and with local service-providers through a public network. The central server executes a profiling module configured to exchange standardized information with a local service-provider over the public network and with a public agency over the private network; an invoicing module in communication with the profiling module, the invoicing module being configured to process claims submitted by the local service-providers; a compliance module in communication with the profiling module, the compliance module being configured to monitor compliance with contracts between the local service-providers and the public agencies; a demand module in communication with the profiling module for forecasting demand for services; and a procurement module in communication with the profiling module for entering into contracts with the local service-providers.

Abstract: Disclosed are various embodiments for facilitating access to data in network page generation code supplied by customers of a hosting provider. A request for a network page is obtained from a client. The network page is associated with a network site hosted by a hosting provider on behalf of a customer. Page generation code supplied by the customer is obtained, and this code includes a dynamic data variable. One or more service calls are executed based at least in part on the dynamic data variable to obtain one or more data objects. The page generation code is executed to generate the network page in response to the request, where the page generation code is executed with the data objects in place of the dynamic data variable.

Abstract: A target computing environment is secured by a hardware trust anchor that provides a trust state of the target computing environment based upon a security audit of the target computing environment. And diagnosing the target computing environment can be diagnosed by the hardware trust anchor according to the security diagnostic information.

Abstract: A method and system for authenticating applications. The system includes a plurality of portable electronic devices, at least one process organizer, at least one module developer, at least one task performer and a workflow server. The process organizer generates an application. The process organizer can request modules from module developers that are incorporated into the application. Alternatively, the process organizer makes an agreement with a task performer to perform tasks to complete the application. The application is transmitted to the workflow server, which includes an online marketplace for displaying and selling the applications. A user purchases the application through the store. A routing module generates a signature and compares the signature to application, module or document metadata and a secret to determine consistency of the data before the application, module or document is routed.

Abstract: An information distribution apparatus creates data to be simultaneously distributed, further adding to the data an identifier which indicates that the data is distributed by a broadcast service, and adding billing class information in accordance with the data amount, and transmits it; a mobile terminal receives the data, creates a reception confirmation message if it is determined from the identifier added to the received data that the received data is distributed by a broadcast service, and further adds the identifier and the billing class information added to the data to the reception confirmation message to transmit it to a billing-information generation apparatus and the information distribution apparatus; and the billing-information generation apparatus generates billing information based on the billing class information added to the reception confirmation message if it is determined from the identifier added to the reception confirmation message that the data is distributed by a broadcast service.

Abstract: A device initialization method includes generating a license request for a personal media device. A timeout indicator may be obtained for a subscription associated with the personal media device. The license request and the timeout indicator may be combined to form a device license for the personal media device. The device license may be digitally-signed to form a signed device license.

Abstract: A computing platform for facilitating dynamic connection and collaboration of users to transact services in a secure computing environment. The users include service providers and service requesters. The platform includes a registration module for registering users including service requesters and service providers, a connection module for connect users to form groups based on users' selective invitations to other users, and a collaboration module for creating a virtual secure data room for collaboration and sharing of encrypted data by the connected users in a user-friendly and transparent manner. The platform further comprises a transaction module for settling payments between the service requesters and the service providers based on completion of previously agreed project milestones.

Abstract: The execution of an image processing job is limited using a printing amount by an image processing job that has already been executed and a printing amount that is scheduled to be printed by an image processing job that has already been transmitted but not yet executed. To accomplish this, a multi-function peripheral manages a first printing amount that has already been printed by a executed print job and a second printing amount that is scheduled to be printed by a print job that has been transmitted from the multi-function peripheral to a printer and that has not yet been executed in association with a user ID, and determines, before transmitting the print job, whether or not the total of a third printing amount that is scheduled to be printed by the print job, the first printing amount and the second printing amount exceeds an upper limit amount.

Abstract: A portable non-volatile memory device including a user interface for selectively assigning one of a plurality of security statuses to a user file stored therein is provided. In some embodiments, the memory device includes a power source so that the user interface is operative even when the memory device is in an uncoupled state. Optionally, the device provides a mechanism for authenticating users. In exemplary embodiments, the assigned security status of a user file is selected from the group consisting of non-secure, encrypted, visible while protected against copying and hidden.

Abstract: Selling intangible property rights may include receiving content from a seller and determining one or more potential purchasers for the content's intangible property rights. The potential purchasers may be determined according to the subject of the content, the audience for the content, and the intangible property rights being sold. An offer to sell the intangible property rights may then be transmitted to one or more potential purchasers, along with a portion of the content. Upon receiving the one or more purchaser's acceptance of the offer, a complete copy of the content may be transmitted to the purchaser.

Abstract: A message, method and system for processing rights object (RO) in a DRM system are disclosed. A message for requesting submission or return of an unused/partially consumed rights object (RO) is newly defined. When an authenticated device generates such a request message and transmits it to a right issuer (RI), the RI checks whether there exists an ID of a receiving device in the request message. If an ID of a receiving device exists in the request message, the RI performs a procedure for submitting the RO to the ID of the receiving device. If, however, the ID of the receiving device does not exist, the RI performs a procedure of returning of the RO or issuing of a different RO. Accordingly, the unused RO or partially consumed RO can be returned or submitted to a different device by using the request message.

Abstract: Techniques for interacting with an online media store to obtain a media asset bundle, such as a digital boxset, are disclosed. These techniques involve, for instance, browsing for a media asset bundle that includes at least one non-playable media asset, purchasing the media asset bundle, obtaining the media assets contained in the media asset bundle, determining if a presentation request has been made for a media asset in the media asset bundle, and presenting the requested media asset. Further, these techniques involve playing the media assets in a media asset bundle by selecting a media asset in the media asset bundle, determining whether the media asset is playable or non-playable, presenting the media asset using an appropriate media asset viewer if it is playable, not playing (skipping) the media asset if it is non-playable, and selecting/playing other media assets in the media asset bundle until no more media assets are available to be played.

Abstract: A determination is made regarding whether a user is allowed to access a content item. The content item is associated with a website. An offer associated with the website is identified. The offer includes a set of use-time rules specifying time periods during which the offer can be used to access content. A use-time rule is associated with a user class. A class of the user with respect to the offer is determined. The user's class indicates whether the user has accepted the offer or whether the user has registered with the website. A determination is made regarding whether the user is allowed to access the content item based on the offer, the user's class, and a current timestamp.

Abstract: Improved techniques involve controlling access to data based on who has previously accessed the data. For example, when a user submits a request to access a resource, a list of those users who have accessed the resource is generated. Identifiers associated with the requesting user and the accessing users from the list of users are located within an organization chart which contains information about the hierarchal level and department to which users within the organization belong. As an example, if the requesting user is an executive-level employee and the accessing users are also executive-level users, then access to the resource is granted. If, on the other hand, the requesting user is on the level of an individual contributor, or a contractor, then access to the resource is denied. Further, access requests can be recorded in the access log for tracking.

Abstract: The invention relates to network connection management, wherein user confirmations are queried for implementing operations requiring a network connection. According to the invention the user confirmation are queried variantly depending on the initiator of the operation. The invention relates to a devices for browsing the network and to a computer program product.

Abstract: Multiple access internet portal billing systems are provided. A representative system, among others, includes a communication facility, a wireless internet server, and a transaction billing system. The communication facility includes a billing platform, and is operable to connect to a plurality of wireless device platforms through a mobile network, and to connect to the wireless internet server. The wireless internet server provides internet access to the wireless devices and communicates at least one billing information record including a usage time to a transaction billing system. The transaction billing system receives the billing information record from the wireless internet server, formats the billing information record, and communicates the formatted record to the communication facility billing platform. Methods and other systems for multiple access internet portals are also provided.

Abstract: A system and method for managing use of items having usage rights associated therewith. The system includes an activation device adapted to issue a software package having a public and private key pair, the public key being associated with a user, a license device adapted to issue a license, a usage device adapted to receive the software package, receive the license and allow the user to access the item in accordance with the license, and a subscription managing device adapted to maintain a subscription list including the public key associated with the user. License's is issued by the license device upon verifying presence of the public key in the subscription list corresponding to requested content.

Abstract: The present invention controls to read encrypted digital data from a detachable storage medium, in which the digital data and a decode key for decoding encryption of the digital data are stored. In reading the digital data, the decode key is read, the decode key is deleted from the storage medium, the encrypted digital data is read, and then encryption of the encrypted digital data is decoded by the read decode key.

Abstract: Voice and/or image data packets are transferred by a packet handler between user stations in a GSM-type mobile communications system using a General Packet Radio Service (GPRS) data link. Control data for controlling a call is stored in a data store accessible by the packet handler. The control data identifies call participants and the identity of a participant who has currently seized the call. A mobile station capable of video conferencing is operable in a half-duplex video conferencing mode, in which intermittent transmission of video data is controlled by depression of a transmit button.

Abstract: A system and method for online content licensing and distribution is provided. A central website is accessible by content providers and content licensees via the Internet, and allows content providers to upload content to the central website. Licenses can be associated with uploaded content, and one or more licensees for the content can be designated. Royalty distributions can be defined and distributed to one or more recipients, and can be expressed as percentages of collected royalties or dollar amounts. An e-mail is automatically transmitted to a designated licensee which allows the licensee to access the uploaded content, pay for the content, and download the content. Collected payments are automatically distributed to one or more recipients in accordance with the royalty distributions. Suggested license fees for uploaded content can be generated and provided to the content provider, and uploaded content can be published to a third-party publication website or service.

Abstract: Systems and methods enable members of a secure transaction network to readily identify the appropriate trusted service manager (TSM) to support a particular transaction. A global directory of TSM providers is provided that a secure service provider can use for determining which TSM provider is the authorized manager of a security domain for the particular transaction. In aspect the directory of TSM providers may be stored within a mobile device secure element. In another aspect, the directory of TSM providers may be stored in a central TSM repository. In a further aspect, the directory of TSM providers may be distributed among a number of secondary TSM repositories. The appropriate TSM may be identified based upon a secure element identifier and an application identifier provided by a secure element as part of the transaction. Communication of the identifiers from mobile devices may be via cellular or near field communication links.

Abstract: A communication system includes a terminal having a first storage section for storing a number of pieces of content information, a second storage section for storing a number of pieces of the content information, a storage control section for placing a content ID stored in the second storage section into purchase information for each terminal and stored in the second storage section, an access control section for controlling access to the content information corresponding to the content ID stored in the second storage section, and an accounting setting section for setting an amount of a fee to be imposed on the terminal in response to the purchase information.

Abstract: Systems and methods for selectively providing access to a media device based on a profile associated with the media device. In certain embodiments, the profile of the media device can be user-defined as a development profile or a personal profile. When the device is connected to a host computer system, the profile of the media device is accessed. If the profile of the media device is a development profile, an integrated development environment on the host computer system can access the media device. If the profile of the media device is a personal profile, the integrated development environment is prevented from accessing the device.

Abstract: A method and system for ensuring the authenticity of server returned information displayed at a client browser is provided. The method comprises receiving the server returned information at a client computer; storing a copy of the server returned information at the client computer; inspecting the server returned information for one or more locked objects; allowing the client browser to operate one or more client installed scripts; inspecting the server returned information for any modifications to the one or more locked objects; and in response to determining that the one or more client installed scripts have made modifications to the one or more locked objects, replacing the modified locked objects with unmodified versions of the locked objects from the stored copy of the server returned information.

Abstract: Systems and methods are provided to allocate application tasks to a pool of processing machines. According to some embodiments, a requestor generates a scope request including an indication of a number of compute units to be reserved. The requestor also provides an application request associated with the scope. A subset of available processing machines may then be allocated to the scope, and the application request is divided into a number of different tasks. Each task may then be assigned to a processing machine that has been allocated to the application request. According to some embodiments, each task is associated with a deadline. Moreover, according to some embodiments an overall cost is determined and then allocated to the requestor based on the number of compute units that were reserved for the scope.

Abstract: Techniques for performing an accounts payable process may include receiving transaction data including at least one of invoice data, purchase order data, and vendor data; and verifying a transaction by matching a dynamic data set of client-specified multi-dimensional criteria to the transaction data. An accounts payable system may include a host system in communication with one or more client systems. The host system may include a matching database configured to receive an accounts payable file including at least one of invoice data, purchase order data, and vendor data; and verify a transaction by matching a dynamic data set of client-specified multi-dimensional records to attributes of the accounts payable file.

Abstract: A method of calculating broadband access server DHCP user's on-line time, includes these steps: (a) setting the inner time, outer time and traffic threshold for said access server calculating user's data traffic, and the inner time is shorter than the outer time; (b) user accesses the said access server, after authenticated successfully, the access server notifies starting to charge the user's online time; (c) according to each user, said access server establishes a ring list to record data traffic; (d) said access server sets the number of ring list elements as multiple of said outer time to said inner time; (e) said access server inspects the said user's data traffic according to inner time, fills it in content indicated by top element index of ring list, until current data traffic inspected and value recorded by top index are not more than said traffic threshold. The advantage of the invention is that timing is precise and error is small.

Abstract: The method, device and medium according to the invention provide (restricted) forward compatibility to higher device/medium versions. It is provided a defined behavior of an older device, if it has to handle information of a higher version number than supported by itself. A device according to the invention is able to provide restricted (e.g. playback) functionality of its records to older devices. So, a newer device is assured, that older devices will not damage the additionally stored information: This is important, because only a newer device is able to understand these additional information, and to process it correctly.

Abstract: The method, device and medium according to the invention provide (restricted) forward compatibility to higher device/medium versions. It is provided a defined behavior of an older device, if it has to handle information of a higher version number than supported by itself. A device according to the invention is able to provide restricted (e.g. playback) functionality of its records to older devices. So, a newer device is assured, that older devices will not damage the additionally stored information: This is important, because only a newer device is able to understand these additional information, and to process it correctly.

Abstract: The method, device and medium according to the invention provide (restricted) forward compatibility to higher device/medium versions. It is provided a defined behavior of an older device, if it has to handle information of a higher version number than supported by itself. A device according to the invention is able to provide restricted (e.g. playback) functionality of its records to older devices. So, a newer device is assured, that older devices will not damage the additionally stored information: This is important, because only a newer device is able to understand these additional information, and to process it correctly.