Abstract: Apparatus, system, and media for utilizing content. An exemplary system comprises a first computing device and a second computing device, wherein the first computing device transmits a request for access to content to the second computing device, receives the content from the second computing device, and grants at least one permitted utilization of the content, and wherein the second computing device receives the request for access to content from the first computing device, determines whether the first second computing device is permitted to receive the content, grants access to the content based at least in part on the first computing device being permitted to receive the content, and transmits the content to the first computing device based at least in part on the first computing device being permitted to receive the content.

Abstract: A computerized method for providing a computer code an access to a restricted resource of a computer program, comprising modifying an at least one duplicate of an at least one declaration file of the computer program by removing a restriction definition of an at least one resource of the computer program that is referred to by the computer code, thereby generating an at least one modified declaration file, and building a computer application comprising the computer code and also the computer program as being dependent on the at least one modified declaration file, thereby providing access to the at least one resource originally defined as restricted, and an apparatus for performing the same.

Abstract: A system and method provide an enablement scheme that accommodates small bandwidth channels and does not rely on shared secrets between parties. This is accomplished by storing a table of messages on a vendor server and a table of hashes of the message on client machines. A process is used by the vendor to select a message from the table to use for a validation code for enablement, and an identical process is used by the client to find a corresponding hash in the hash table. By comparing the hash in the hash table to a hash of the validation code received, the client can verify the validation code. The system includes software portions for enabling the method.

Abstract: When a viewer views content, it is reproduced by a reproduction procedure depending on a dynamic condition set in the content. Here, a content object data input unit obtains an externally-input content object. The content object is stored in a content object data retention unit, if necessary. The content object includes a reproduction rule and a content data. A reproduction rule evaluation and execution unit obtains the reproduction rule in the content object and performs processing in accordance with the reproduction rule. The reproduction unit reproduces a reproducible data specified by the reproduction rule evaluation and execution unit. An identifier management unit retains an identifier of a content object reproduction device and provides the identifier upon request. It is thus possible to reproduce in accordance with the reproduction rule set in the content object data and to control the reproduction procedure depending on the dynamic condition.

Abstract: A system for generating a transferable license key and method thereof are described. The system comprises a license key generator for generating a transferable license key responsive to receipt of a license key request. The license key request comprises a hardware identifier and the transferable license key comprises an uninstall key. The system further comprises a storage device arranged to store the hardware identifier and the uninstall key. The method comprises storing a generated hardware identifier in a first device and transmitting a license key request to a second device, wherein the license key request comprises the hardware identifier. A feature of the first device is activated based on a license key received from the second device. The license key received at the first device is stored and the license key comprises a license identifier and an uninstall verification portion from the second device.

Abstract: The present invention can reliably prevent the contents of a recording medium from being illegally copied but allow them to be copied only for the purpose of personal use. The invention takes out title identifying information and medium identifying information of a DVD loaded on a hard-disk-containing DVD player and transmits those pieces of information to management server along with the apparatus identifying information of the hard-disk-containing DVD player so as to enquire about copying prohibition flag for a copying operation and control copying of the recorded contents of the DVD according to the copying prohibition flag. Thus, the invention prohibits copying when the management server judges that copying of the contents of the DVD by means of the hard-disk-containing DVD player is illegal, whereas it allows copying when the management server judges that copying of the contents of the DVD by means of the hard-disk-containing DVD player is for the purpose of personal use.

Abstract: An authenticated digital confirmation of an installation or an update of a licensed computer data product, for providing the licensor with a validation that the installation/update was carried out as intended, and conveying relevant details of the installation/update. The installation/updating facility (internal software, external hardware device, or combination thereof) examines and documents the pre-installation/update state of the target computer system, performs the installation/update, examines and documents the post-installation/update state, and generates the confirmation, which is a summary or digest of the process and the status thereof. The confirmation is securely authenticated and sent to the licensor for validation, to be used for order fulfillment, billing and accounting, and other purposes.

Abstract: Methods, systems, and articles of manufacture consistent with the present invention provide an electronic marketplace that matches units of content from secondary content providers with suitable vacancies from primary content providers. Vacancies may constitute, or be included in, any digital transmission containers, such as a television or radio programming, web pages, and the like. Specifically, the electronic marketplace automatically matches content offered by secondary content providers with vacancies offered by primary content providers thus filling the vacancies in these containers through a real-time content trading, placement, and distribution system. To do so, attributes associated with the vacancies and with units of secondary content are used to trade and match suitable vacancies with suitable content. This invention enables both secondary content owners and vacancy owners (primary content providers) to obtain the full commercial benefit of their secondary content and containers.

Abstract: A digital rights management (“DRM”) system is described that seeks to restrict the use and execution of certain computer program code to those hardware systems or platforms authorized by the provider of the protected software. To this end, certain computer programs (or portions thereof) are provided to authorized users in an encrypted format. When a “protected” program is to be executed, it is retrieved and stored in its encrypted format in operating system memory where it is accessible to operating system level routines (e.g., a file read operation). It is also decrypted and placed in another memory such that only the process executing the protected program has ready access to it.

Abstract: A data copyright management system in one embodiment includes a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The user decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. When a user stores, copies, or transfers data, the data is encrypted by a different crypt key. This disclosure can be applied to a data copyright management system for using not only single data but also a plurality of data supplied from a single database or a plurality of data supplied from a plurality of databases.

Abstract: A method and device for controlling distribution and use of a digital work stored together with an attached usage right information on a record carrier. The attached usage right information, which may be unencrypted, is verified by using a hidden information which is changed at every change of the usage right information. The hidden information may be a checksum of a data block containing the usage right information, or other encoding that may detect a change to the stored data block. Thus, a “copy and restore attack” is not successful, since it will lead to a mismatch between the hidden information and the restored usage right information.

Abstract: Portable digital rights for multiple devices is described. In an embodiment, a digital rights management (DRM) system includes a first device with a removable component configured as a token that is associated with a DRM license. The first device also includes a removable memory card that stores protected media content on which the first device can perform actions as permitted by the DRM license. The DRM system also includes a second device that can have the removable component and the removable memory card when removed from the first device and installed in the second device such that the second device can perform the actions on the protected media content as permitted by the DRM license.

Abstract: Exemplary methods, systems, and products are described for creating rules for the administration of end-user license agreements (‘EULAs’). Creating rules for the administration of end-user license agreements is accomplished by identifying, from historical license data, a license administration pattern. A license administration rule is then created in dependence upon the license administration pattern. Identifying a license administration pattern from historical license data may include data mining a collection of accepted EULAs and data mining a collection of rejected EULAs.

Abstract: A method of watermarking an image. A visible watermark is inserted in the image to obtain a visibly watermarked image. Information allowing removal of the visible watermark is protected to obtain protected information that is inserted as an invisible watermark in the visibly watermarked image to obtain a visibly and invisibly watermarked image. The information allowing removal of the visible watermark may be image values of the pixels to be covered by the visible watermark and, possibly, the position and size of the visible watermark, in which case these values are first memorized. The visible watermark may be opaque. Also provided are an apparatus for inserting the watermarks, a method for removing the visible watermark, essentially by performing the method “in a mirror”, and an apparatus for removing the visible watermark.

Abstract: A method, system and program product, the method comprising: accessing Transfer Fee data to be paid to a third party that is not the borrower or the lender or the buyer or seller in a repurchase agreement transaction of a security for a right to loan or repo one or more units of the security; accessing data on a loan or repo of units of the security, calculating an amount of a Transfer Fee for the right to loan or repo the security; generating data for debiting an account or sending a bill for the Transfer Fee; and updating the database with data on the Transfer Fee.

Abstract: An apparatus for providing a Digital Rights Management (DRM) service includes a Media Presentation Description (MPD) information configurer for determining a DRM system required in each of representations of content provided by an adaptive streaming service, classifying the representations into one or more groups according to predetermined criteria, and configuring MPD information by inserting content protection information including representation group information representing classified groups and information about DRM systems corresponding to the representation group information; and a communication unit for transmitting the MPD information to a user terminal receiving the content.

Abstract: Particular embodiments provide a method for orchestrating an order fulfillment business process that includes a sub-process. In one embodiment, abstraction of business processes from an underlying information technology (IT) infrastructure is provided. An orchestration process can be designed using sub-processes such that the sub-process is assembled at run-time into an executable process. The sub-process may be defined in an interface as a single step. A plurality of services as then assembled as steps in the executable process at run-time.

Abstract: A method, performed by a video provisioning system, may include receiving a request for a first digital rights management (DRM) token, associated with a video asset purchased via the video provisioning system, from a browser application associated with a user device and providing the first DRM token to the browser application. The method may further include receiving a license authorization request to issue a DRM license for the video asset, where the license authorization request is received from a license server, where the DRM license is to be used by the user device to decrypt the video asset, and where the license authorization request includes a second DRM token; determining whether the second DRM token matches the first DRM token; and authorizing the license server to issue the DRM license for the video asset, when the second DRM token matches the first DRM token.

Abstract: An embodiment of the present invention proposes a novel file and multimedia management and tracking system using a secure key server. The invention also proposes a novel, but very simple, digital watermarking technique. With the invented technology, the user's files/data can be encrypted and managed automatically, whether the data is stored in a USB format or in a public storage space. Furthermore, the file/data access record will be kept on the secure key server. Hence, an user can always track when the file/data was accessed. The advantage of the invented secure file manage system is that the key server never access the protected electronic data, and the data—encrypted or decrypted—are always on the local machine. The secure key server only manages the keys and records the key queryings. With the present invented technology, the multimedia server and the multimedia owner can protect their copyright, even when the multimedia is downloaded from the Internet.

Abstract: A method and system for authenticating a user receiving device to communicate with a partner service device includes a primary service provider. A user receiving device generates a request for a first encrypted token. The user receiving device communicates the request for the first encrypted token to an authentication web service of the primary service provider. The authentication web service generates the first encrypted token. The primary service provider communicates the first encrypted token to the user receiving device. The user receiving device communicates the first encrypted token to the partner service provider. The partner service provider communicates data to the user receiving device after receiving the first encrypted token.

Abstract: Online document storage and/or retrieval techniques are described. In an implementation, one or more computer-readable media comprising instructions that are executable to provide a web service application programming interface (API). The web service API is configured to accept a document and information specified by the document's provider. The information specifying which of a plurality of tabs in a user interface at least a portion of data included in the document is to be associated with for display in which at least one of the tabs pertains to billing data and another one of the tabs does not pertain to billing data.

Abstract: A wagering game system and its operations are described herein. In embodiments, the operations can include managing multiple instances of gaming applications associated with a wagering game client device and determining event data from the multiple instances of gaming applications. The operations can further include aggregating the event data into an event repository and determining that a requesting application requests some portion of the event data. The operations can further include opening a communication channel between the event data repository and the requesting application, formatting the requested portion of the event data in a format understandable to the requesting application, and communicating the requested portion of the event data to the requesting application via the communication channel.

Abstract: A document encryption and decryption system for selectively encrypting and decrypting files and any other items and method for same to protect or secure its contents by helping to prevent unauthorized individuals from viewing data in human-perceivable or readable form. The encryption system includes remote authentication to verify a user's credentials stored on a remote database hosted by a web server. The encryption system further includes remote delete to automatically delete encrypted items stored on the user's computer, handheld or portable device, smartphone, and any other computing device of any kind when it logs onto a network if the user's computer or computing device is reported lost, stolen, or otherwise compromised. Decryption keys allow selective decryption of encrypted items that are on the computer or computing device of any kind. A Windows Communication Foundation service helps with authenticating the users with the encryption key and login process stored and processed by the web server.

Abstract: A method and apparatus for location-based access control applies a location-based identifier to a document, wherein the location-based identifier indicates an original storage location of the document. The original storage location is an authorized node having access privileges specific to the document. In response to the document being moved or copied, an access control engine compares a current location of the document to the original storage location and denies access when there is a discrepancy. When the document is moved consistent with an access control policy, such as when an administrator moves the document, an original storage location identifier is changed consistent with a new location. The document is only accessible when accessed from an authorized location. The locations may be referred to as access nodes, wherein each access node corresponds to a folder.

Abstract: A content distribution system for transferring contents between transmission device and reception device. The transmission device includes: key obtaining unit that obtains, from reception device, public keys and public key identifiers; watermark embedding unit that embeds a different public key identifier, as electronic watermark, into each of contents that are identical in substance; an encryption unit that encrypts contents using public keys to generate encrypted contents; and transmission unit that transmits encrypted contents to reception device. The reception device includes: key storage unit storing public keys, public key identifiers, and a private key that makes a pair with one of the public keys; key transmission unit that transmits public keys and public key identifiers to the transmission device; content receiving unit that receives encrypted contents from transmission device; and decryption unit that obtains a content from the received encrypted contents, using the private key.

Abstract: Apparatus, systems, and methods may operate to receive reports at a server node, the reports indicating a change in virtual machine status for virtual machines hosted on a virtual machine host node; and to allocate/de-allocate software licenses to the virtual machines based on the change in virtual machine status. In some embodiments, operations may include detecting, at a virtual machine host node, a change in virtual machine status for virtual machines hosted on the host node; and transmitting reports to a server node from the host node. The reports can be used to indicate the change in virtual machine status, enabling the server node to allocate/de-allocate software licenses to the virtual machines based on the change in virtual machine status. Additional apparatus, systems, and methods are disclosed.

Abstract: When scenes of a story are divided and dubbed to a plurality of recording media, the recording media are added with information about a total number of recording media used and sequential numbers of the recording media.

Abstract: Provided is a system and method for controlling server usage in a peer-to-peer (P2P) based streaming service. The system to control server usage in a peer-to-peer based streaming service includes a concurrent connections number providing unit to calculate a number of peer clients concurrently connected to the peer-to-peer based streaming service; a non-transitory memory to store the number of peer clients concurrently connected to the peer-to-peer based streaming service; and a server usage controlling unit to control server usage for the peer-to-peer based streaming service based on a ratio of a variable associated with an influx rate of peer clients to the number of peer clients concurrently connected to the peer-to-peer based streaming service.

Abstract: A system and method are provided for synchronizing playback of media content on multiple playback devices utilizing Digital Rights Management (DRM) encoding. In general, multiple playback devices or users of those playback devices are associated to form a virtual group. A virtual group (VG) control function operates to synchronize advertisement (ad) slots within media content provided to the playback devices in the virtual group utilizing DRM encoding.

Abstract: An application program or an extended application program is installed that extends the functionality of this application program. If the application program is installed, a license file used in this application program is stored in a storage unit. If the extended application is installed, then control is executed so as to install the extended application using the license file stored in the storage unit and used in installing the application program corresponding to the extended application program.

Abstract: Systems and methods for protecting digital assets associated with a computing device are described herein. An example of a method according to the disclosure includes assigning at least one asset worth value to respective digital assets associated with a device, computing at least one device worth value using the at least one asset worth value assigned to the digital assets associated with the device, identifying at least one device worth value threshold, performing a comparison of the at least one device worth value to the at least one worth value threshold, and initiating at least one action with respect to the digital assets associated with the device based on the comparison.

Abstract: A method embeds tracing secret data into multimedia contents delivered to particular users. The method descrambles a first scrambled video stream having alternate values to obtain a personalized video stream corresponding to an original video stream by a decoder comprising at least a security unit and a descrambling unit, the personalized video stream being obtained by restoring the alternate values by personalized values taking into account an internal parameter on the security unit and received control data containing the original values and their location in the modified stream.

Abstract: There is provided a method and system for allocating an entitlement to digital media content. In one implementation, the system includes a media server accessible over a communications network and configured to utilize a processor to issue the entitlement including a transferable authorization to access the digital media content to a first user, and to store an entitlement record identified with the first user and authorizing access to the digital media content by the first user in a memory of the media server. The media server is further configured to receive a communication including a data corresponding to the transferable authorization to access the digital media content from a second user and to update the entitlement record to authorize access to the digital media content by the second user.

Abstract: Embodiments of the present invention provide for the copy protection of distributed material after conditional access is applied, regardless of where the material is distributed. The solutions described provide the advantage of being sufficiently simple in implementation to qualify as “curb high” solutions. “Curb high” solutions provide a range of security from minimal security to a high level of security while requiring relatively fewer system resources to implement than prior approaches.

Abstract: The publishing system and method automates at least some portion of a publishing process. The system publishes content using metadata, rights templates and/or specifications, publishing profiles and business rules.

Abstract: Embodiments of the invention generally relate to replicating changes between corresponding real objects and virtual objects in a virtual world. Embodiments of the invention may include receiving a request to generate a virtual item in a virtual world based on a real-world object, generating the virtual item, synchronizing the virtual item and real-world object, and sharing the virtual item with a second avatar in the virtual world.

Abstract: Various techniques and procedures related to encryption key versioning and rotation in a multi-tenant environment are presented here. One approach employs a computer-implemented method of managing encrypted data and their associated encryption keys. In accordance with this approach, a key splitting process securely stores a master key used to encrypt tenant-level encryption keys, a key versioning process is used to securely track updated encryption keys, and a key rotation process is used to rotate encrypted data to an updated version of a tenant-level encryption key.

Abstract: A key-sharing scheme is used to control distribution and use of video and audio content in personal digital assistants (PDAs) and other wireless devices. A private key is split into key-shares using a Blakley-Shamir key splitting technique and the key-shares are distributed to various network entities including a finance server and security server. Key-shares are also stored in a user's subscriber identity module (SIM) and a security processor of the PDA. The key-shares from the network entities are provided to the PDA after the user requests specific video or audio content and credit verification is performed. The PDA's security processor combines the key-shares to form the decryption key for use in playing the content by the PDA's communications processor. When a service limit is reached, the PDA's security processor purges the key-shares to prevent further use of the content.

Abstract: An embodiment defines access control allowing the expression of access control rules using ontology based semantics and references an ontology subset using XPath as the ontological expression. The access control rules or access criteria are defined by an access control statement and may be expressed using classification criteria and ontology classes. The access control statement comprises a structural description that is used to define an asset and a logical expression that may be used to express the classification criteria. The access control statement defines access policy for various assets.

Abstract: Briefly, in accordance with one or more embodiments, a utilization permit key may be pre-defined to permit at least one of displaying, editing, storing, copying, and/or transferring of digital data.

Abstract: An intellectual property trading exchange is disclosed for facilitating the trading of intellectual property rights. The exchange includes at least one intellectual property license contract relating to intellectual property rights and a forum configured to allow a plurality of participants to trade the license contract. The plurality of participants includes at least one seller, which may be the owner, having the license contract and desiring to trade the license contract. The plurality of participants also includes at least one buyer desiring to obtain the license contract. The buyer may be an investor, speculator, market maker, or arbitrageur, who purchases the license contract to achieve appreciation. The buyer also may be a licensee, who purchases the license contract to practice the intellectual property rights.

Abstract: A client playback architecture for a media content distribution system is provided. In the preferred embodiment, the client playback architecture is a Remote Direct Memory Access (RDMA) based architecture. The RDMA based architecture enables the client playback device to obtain media content from a central server in real-time or in substantially real-time as the media content is needed for playback at the client playback device. More specifically, the playback device includes RDMA enabled playback circuitry operating to perform RDMA transfers for select media content, buffer the media content received as a result of the RDMA transfers, and provide the media content for presentation to one or more associated viewers via one or more audio/video interfaces.

Abstract: Computer-implemented methods and apparatus to perform a valid transfer of an electronic mobile ticket on a mobile device by a ticketing application system of a ticket processing center. One method includes: receiving a first electronic message from a first user, where the first message includes an encrypted electronic mobile ticket and a mobile device number of a second user, and where the electronic mobile ticket is encrypted with a key shared between the first user and the ticketing application system; decrypting the encrypted electronic mobile ticket; generating an electronic mobile ticket encrypted with a key shared by the ticketing application system and the second user; and transmitting a second electronic message that includes the electronic mobile ticket encrypted with the key shared between the ticketing application system and the second user to a mobile device of the second user.

Abstract: A utilization method and system within a communication network comprises at least one service provider and at least one service consumer. In particular, a there is license contract method and system for validating web services during runtime. At least one parameter is provided to define, if and how many meter event requests associated with service requests may be stored in a cache memory. The parameter is predefined and may be contained in the license contract. Further, a counter may be provided for counting the service requests. The actual status of the counter is sent to the service consumer and/or the service provider.

Abstract: Value tracking of automated clearing house (“ACH”) payments processed by an ACH operator includes receiving an ACH file for ACH processing. The ACH file comprises ACH payments originated by a remote sending point on behalf of a sending customer. A sum value of the ACH payments is added to a value of prior payments processed for the sending customer during a specified time period to obtain an accumulated payment value. The accumulated payment value is compared to a pre-established payment cap to determine whether the accumulated payment value exceeds the payment cap. The ACH payments are processed in response to a determination that the accumulated payment value does not exceed the payment cap. Whether to override the payment cap can be determined in response to a determination that the accumulated payment value exceeds the payment cap.

Abstract: The present invention provides a method and system for protecting image data transmitted over a network and processing royalty for image usage. This method and system comprises a secure web server with a valid certificate to host all transactions. The method and system keeps the encrypted file which are provided by an image provider (e.g. publishers of copyrighted materials) on the web server and leases the file to the customers (e.g. manufacturers of finished art). The method and system also comprises a proprietary (FREE) encryption software that enables the image providers to encrypt and upload the image file on the website. The method and system further comprises a proprietary (FREE) decryption printing software that enables the customers to download, decrypt, print the image file and enables the system to track the transaction details.

Abstract: A method, system and program product, the method comprising: accessing Transfer Fee data to be paid to a third party that is not the borrower or the lender of a security for a right to loan one or more units of the security; accessing loan data on a loan of units of the security, calculating an amount of a Transfer Fee for the right to loan the security; generating data for debiting an account or sending a bill for the Transfer Fee; sending or having sent data on revenue from one or more of the Transfer Fees to be paid to an issuer of the security; updating the database with data on the Transfer Fee.

Abstract: An instance of an application hierarchy can be stored on a client computer to facilitate enforcement of software licensing by a software license component of a software protection system. The application hierarchy is a tree structure (e.g., unordered) that includes a top node, one or more product offering group(s), and, one or more selling unit(s). A computer-implemented software protection system can facilitate enforcement of software licensing on a client computer. The software protection system includes a software license component that can store and enforce software licensing rule(s). The software license component can further manipulate state data of an instance of the application hierarchy stored in a licensing data store via application program interface(s) (APIs). State data and/or property(ies) of a particular node of the instance of the application hierarchy can be accessed through the API via an assigned identifier.

Abstract: In a content delivery system, delivery of content and charging the fee of the content are performed and managed in a highly secure and effective fashion. If a content-purchasing request is transmitted from a user device to a shop server, a charging process is performed. A user device authentication server, which manages content delivery, converts an encrypted content key KpDAS(Kc) encrypted using a public key of the user device authentication server (DAS) into an encrypted content key KpDEV(Kc) encrypted using a public key KpDEV of the user device. If the charging process is successfully completed, the shop server transmits, to the user device, the encrypted content key KpDEV(Kc).

Abstract: A method and system for authenticating a partner service provider and a primary service provider includes a network and, a partner service provider generating a request for a first encrypted token from a partner service provider and communicating the request to the network. An authentication web service receives the request for the first encrypted token from the network and generates the first encrypted token. The partner service provider generates a request for data with the first encrypted token and communicates the request for data to the network. A data web service receives the request for data and communicates the request for data from the data web service to the authentication web service. The authentication web service validates the request for data and communicates a validation result to the data web service. The data web service communicates data to the partner service provider from the data web service after validating.