Abstract: A method for sharing electronic books may include receiving a request to borrow an electronic book. The request may be received from a borrowing user's electronic book reader. The method may also include generating a borrowing user's license for the electronic book. The method may also include transmitting a copy of the electronic book to the borrowing user's electronic book reader. The method may also include transmitting the borrowing user's license to the borrowing user's electronic book reader.

Abstract: A DRM scheme that may be optionally invoked by the owner. With the DRM protection turned on, the media is encrypted before it is distributed in a P2P network, and is decrypted prior to its use (play back). The peers may still efficiently distribute and serve without authorization from the owner. Nevertheless, when the media is used (played back), the client node must seek proper authorization from the owner. The invention further provides a hierarchical DRM scheme wherein each packet of the media is associated with a different protection level. In the hierarchical DRM scheme of the invention there is usually an order of the protection level. As a result, in one embodiment of the invention, the decryption key of a lower protection layer is the hash of the decryption key at the higher protection level. That way, a user granted access to the high protection layer may simply hold a single license of that layer, and obtain decryption keys of that layer and below.

Abstract: Techniques are disclosed for sharing information in a wide variety of contexts. An information sharing system is described that allows both an explicit capture process and an implicit capture process to add information items to a staging area. Further, the information sharing system supports both implicit and explicit consumption of information items that are stored in said staging area. A rules engine is provided to allow users to create and register rules that customize the behavior of the capture processes, the consuming processes, and propagation processes that propagate information from the staging areas to designated destinations. Techniques are also described for achieving exactly-once handling of sequence of items, where the items are maintained in volatile memory. Techniques are also provided for recording DDL operations, and for asynchronously performing operations based on the previously-performed DDL operations.

Abstract: Techniques are described regarding providing consumers with devices on which digital content appropriate for those consumers has been loaded, such as digital media player devices or other consumer devices that are able to play or otherwise present digital media loaded on those devices. In some situations, when a consumer orders such a digital media player or other consumer device from a merchant (or other distributor of the device), the merchant preloads a copy of the device with digital media content before delivering that device to the consumer or other specified recipient, such as digital media items that are automatically selected in a personalized manner for the recipient to whom the device will be sent. This abstract is provided to comply with rules requiring an abstract, and is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: A record carrier for storing a digital work (DW) includes access information (KLT) for gaining access to the digital work and a secondary channel (HC) in which secondary channel information (KLK) is stored which is used for encrypting, decrypting or verifying the access information (KLT). In order to prevent, hinder or discourage tampering with the access information (KLT), the secondary channel (HC) is stored on the record carrier on substantially the same physical location as the access information (KLT). In a preferred embodiment, the secondary channel information (KLK) is changed when the access information (KLT) has changed. This realizes a record carrier for which a replay-attack is prevented.

Abstract: A system and method comprising filtering electronic data on a transaction per transaction basis and replicating the filtered electronic data in response to a request to obtain electronic data on the transaction per transaction basis. The system and method further includes providing the filtered replicated electronic data for viewing.

Abstract: A recording device records one or more subcontents constituting one content recorded on a first recording medium, onto a second recording medium, wherein the first recording medium has further recorded thereon digest values of the subcontents, and a medium signature generated based on the digest values of the subcontents. The recording device includes a subcontent acquisition unit that selects and acquires one or more subcontents permitted to be copied; an excluded digest value acquisition unit that acquires excluded digest values from the first recording medium, wherein the excluded digest values are digest values of nonselected subcontents; a signature acquisition unit that acquires the medium signature from the first recording medium; and a write unit that writes, onto the second recording medium, (i) the one or more selected subcontents, (ii) the excluded digest values and (iii) the medium signature.

Abstract: Methods and apparatus are disclosed for facilitating online storage of files (e.g., audio tracks, video, etc.) for playback/access or sale/exchange by the owners of the files without violating copyrights that copyright holders have in the files. For example, by providing a playback service that does not store additional versions of an audio file when the file is transmitted to, and immediately played on, a user device without buffering, the present invention avoids violating copyright laws by not making copies of the file. Numerous other aspects are disclosed.

Abstract: An anti-debugger comprises spatially and temporally separate detection and response portions. In an example configuration, the anti-debugger is implemented into a game system for detecting and responding to a debugger attached to a game application. The detection portion is implemented on one thread of the system and the response portion is implemented on another thread of the system. When a debugger is detected, a message indicative of the detection is provided to a thread interface. The thread interface provides the message to the response portion. After a period of time has elapsed, the response portion disables the functionality of the game application, such as by halting the game execution and/or obfuscating game performance.

Abstract: A data copyright management system comprises a database for storing original data, a key control center for managing crypt keys, copyright management center for managing data copyrights, and a communication network for connecting these sections. Data supplied from the database to users is encrypted and distributed. The users decrypts the encrypted data by crypt keys obtained from the key control center or copyright management center. To supply data to users, there are the following two methods: a one-way supplying of encrypted data to users by means of broadcasting or the like; and two-way supplying of encrypted data to users corresponding to users' requests. A crypt key system used for encrypting data uses a secret-key cryptosystem, a public-key cryptosystem or a cryptosystem combining a secret-key and a public-key and further uses a copyright control program to control data copyrights.

Abstract: Methods and systems for controlling the distribution of digital content are provided. A license holder acquires protected content and an original digital license to the protected content from a content provider system. The license holder in turn delegates all or part of the grants in that original license to other qualified devices or clients. The content remains in its original, protected or encrypted form while it is delivered from the license holder to the client along with a digital sublicense that the client receives from the original license holder, whereupon the content can then be rendered. The original digital license defines or governs the conditions under which such delegation occurs, and includes terms under which such delegation is permitted to continue in order to enforce the intent of the content provider.

Abstract: A system that stores plural reference measures, each reference measure corresponding to measured transitions of one or more video objects of plural successive pictures corresponding to a video scene, receives first and second measures of plural successive pictures corresponding to a first video scene received from a remote device, the first and second measures corresponding to measured transitions of a video object of the first video scene, compares the first and second measures with the stored plural reference measures, and indicates to the remote device whether a threshold percentage match exists between the first and second measures and one of the stored plural reference pictures.

Abstract: A method of checking revocation of a device and software, and transmitting data to a secure device and secure software whose keys have not been leaked is provided. The method includes receiving authentication information of a device requesting transmission of data, and authentication information of software accessing the data in the device; checking revocation of the device and the software, based on the received authentication information; and transmitting the data to the software of the device, when the device and the software are not revoked as a result of the checking. By doing so, during transmission of data, such as content or a license, it is possible to check security of a device and software being executed in the device, so that the data can be more safely transmitted.

Abstract: A system, method, and apparatus are arranged to enable loading of an application, such as a game application, prior to a formal release date of the application. An end-user is provided components of the application either over a network, CD, DVD, or the like. At least one component of the application is encrypted. The end-user may register with an application provider. At a pre-defined time, such as a release date for the application, a decryption key is made available to the end-user. The decryption key may be employed to decrypt the encrypted component(s) of the application, such that the application may be readied for execution. In addition, bug fixes, additions, or the like, may also be pre-loaded to release of the application, thereby ensuring that the end-user has the most current application configuration.

Abstract: A content server apparatus (10) includes: a unique information holding unit (103) which holds unique information of an on-vehicle player apparatus (20), a content obtaining unit (101) which obtains a content from outside, an encrypting unit (104) which encrypts the obtained content, prior to a transmission request from the on-vehicle player apparatus (20), onto an encrypted content using the unique information, a storing unit (105) which stores the encrypted content, and a transmitting unit (107) which transmits the stored encrypted content in response to the transmission request from the on-vehicle player apparatus (20). The on-vehicle player apparatus includes a storage medium (208) which stores the received encrypted content, and a decrypting unit (209) which decrypts the stored encrypted content in response to a reproduction request given from outside.

Abstract: Systems and methods for detecting copies of documents are described. In one example, a system and method for detecting copies of documents utilizes multiple authentication tests performed using original and scanned copy detection patterns. The system captures a CDP that may be skewed or improperly sized. The system also retrieves or reconstitutes the expected CDP. Then the system performs a first correlation to determine if the captured CDP indicates the correct document identification and then if necessary, one or more authentication tests are applied wherein the authentication test may be grouped into distinct orthogonal test groups. The authentication tests applied may be selected according to usefulness, system throughput or target document valuation parameters.

Abstract: In response to an instruction to copy data from a first electronic document to a second electronic document, a protected document generating section of a document processing apparatus newly generates a third electronic document as a copying result. A combining requesting section requests combining of pieces of manipulation authority information (policies) to be applied to the first and second electronic documents, respectively. In response to the request, a policy combining section of a policy managing apparatus combines the two pieces of manipulation authority information together into third manipulation authority information. A protected document registering section registers the third electronic document and the third manipulation authority information in a document DB.

Abstract: The present invention provides a method of embedding watermarking data in an audio signal which includes the steps of incorporating watermarking information into said audio signal, sectioning said signal into at least two sections, marking at least one said section whereby said sections may be identified, generating distortion in one said section of said signal in manner recoverable by a key obtainable from at least one other said section, and appending said distorted section to said at least one other section to form a composite signal comprising a distorted section to said at least one other section to form a composite signal comprising a distorted section and at least one undistorted section. The present invention is particularly useful for enabling advertisements and or trial listening sections to be added to an audio file in such a manner that they include the key for recovering a distorted section. If an attempt is made to remove the advertisement or trial section, then the key would be lost.

Abstract: Fraud detection mechanisms and methods that are adapted for inconsistent data collection are provided. Data is analyzed to determine normal operational variations from ideal system behavior. Profiles are developed for each individual sender, e.g., the number of multiple scans performed per confirmation number generated by each sender, and other parameters, such as delivery areas, e.g., the number of multiple scans performed per specific geographic area. If the sender's profile differs significantly from the normal operational variations, there is an indication of potential fraudulent activity and an investigation can be initiated. By analyzing a combination of sender and delivery scan data with system wide scan data, the effect of inconsistent data is minimized to significantly reduce the number of erroneous indications of fraudulent activity while still providing a high level of fraud detection.

Abstract: A system is provided for managing asset access. The system includes a processor, a user manager interface, an asset manager interface, and an access tool. The access tool, when executed by the processor, compiles a user list of user access to restricted assets, provides the user list to the user manager interface, and receives a modified user list of user access to the restricted assets from the user manager interface. The access tool also compiles an asset list of user access to the restricted assets, provides the asset list to the asset manager interface, and receives a modified asset list of user access to the restricted assets from the asset manager interface. Additionally, the access tool modifies the user access to at least one of the restricted assets based on at least one of the modified user list and the modified asset list.

Abstract: A system for protecting software against piracy while protecting a user's privacy enables enhancements to the protection software in a user device and extended protections against piracy. The protection system allows the user device to postpone validation of purchased tags stored in a tag table for installed software and to re-establish ownership of a tag table to recover from invalidation of a tag table identifier value resulting from revelation of a tag table identifier value. Continued use of the tag table is provided by the use of credits associated with a tag table. A protection center is protected against denial of service attacks by making calls to the protection center cost time or money to the attackers.

Abstract: A data generating device is capable of preventing unauthorized extraction of plaintext content between decryption processing and digital watermark embedment processing. A content reproducing device obtains restoration information and, in accordance with the restoration information, selectively performs predetermined restoration processing and processing of embedding device unique information, on content data at a position shown by the restoration information.

Abstract: Various techniques for software license inventory and asset management are disclosed. A fingerprint may be generated and associated with various copies of software applications installed on a software licensee's computer systems. Upon generation, each fingerprint may be stored in a license information database system along with relevant license information for that copy of the software application. A software inventory tool may then be used to collect fingerprints on installed copies of software applications and provide these fingerprints to the license information database system to obtain the corresponding license information. The output of the software inventory tool may be used by a licensee to comply with software license agreements and/or efficiently allocate information technology resources. Methods and systems that provide and process secured, dynamic and persistent tagging of software deployments and usage are also disclosed.

Abstract: A secure communication system wherein message decryption may be performed while off-line, or optionally while on-line. A sender encrypts a message based on the message key and sends it to the recipient. An envelope containing a message key is created by encrypting the message key based on a verifier, where the verifier is based on a secret of the recipient. The recipient is provided the envelope, along with the message or separately, from the sender or from another party, contemporaneous with receipt of the message or otherwise. The recipient can then open the envelope while off-line, based on their secret, and retrieve the message key from the envelope to decrypt the message. In the event the recipient cannot open the envelope, optional on-line access permits obtaining assistance that may include obtaining an alternate envelope that the recipient can open.

Abstract: A powerfully simple digital media player and methods for use therewith are disclosed. In one embodiment, a digital media player with a simplified user interface is disclosed that, like an FM radio, allows a user to easily select a category of digital media for playback. In another embodiment, to make the experience more FM-radio-like for a user, instead of charging the user for the digital audio files, digital media files can be distributed for free (or at a reduced charge) by playing advertisements before, during, or after the playback of a digital audio file. In yet another embodiment, an exemplary network infrastructure is provided. In another embodiment, a generic streaming content file interface is presented. Other embodiments are disclosed, and any of these embodiments can be used alone or in combination with one another.

Abstract: A system and method for providing modified rights information to an application on an electronic device. A centralized component monitors both a system clock and a secure clock. The centralized component calculates the difference between the time of the system clock and the time of the secure clock and thereafter modifies the access rights information for the application by the difference between the times. The modified access rights information is then presented to the application for use.

Abstract: Methods, systems, and articles of manufacture consistent with the present invention provide an electronic marketplace that matches units of content from secondary content providers with suitable vacancies from primary content providers. Vacancies may constitute, or be included in, any digital transmission containers, such as a television or radio programming, web pages, and the like. Specifically, the electronic marketplace automatically matches content offered by secondary content providers with vacancies offered by primary content providers thus filling the vacancies in these containers through a real-time content trading, placement, and distribution system. To do so, attributes associated with the vacancies and with units of secondary content are used to trade and match suitable vacancies with suitable content. This invention enables both secondary content owners and vacancy owners (primary content providers) to obtain the full commercial benefit of their secondary content and containers.

Abstract: An image processing apparatus includes an image receiving unit, an extraction unit, a determination unit, an area conversion unit and an image concealing unit. The image receiving unit receives an image. The extraction unit extracts a portion having been additionally written in the image received by the image receiving unit. The determination unit determines an area to be concealed in the received image based on the additionally written portion extracted by the extraction unit. The area conversion unit converts the area determined by the determination unit. The image concealing unit conceals the area determined by the determination unit in the received image using an area obtained by the conversion of by the area conversion unit.

Abstract: A method of managing protected video content is presented that includes inspecting a packet stream received from a subscriber broadband interface, where the packet stream includes video content. The method also includes generating a signature based on the video content and comparing the generated signature with a stored signature corresponding to protected video content. In a particular embodiment, the method can include storing data indicating that the protected video content has been re-distributed from the subscriber broadband interface when the generated signature matches the stored signature.

Abstract: An authentication method for use in sending/receiving data between a coded data output apparatus for outputting coded data having a water mark, and a recording apparatus for recording data onto a recording medium, the method including: deciding a type of the recording medium used by the recording apparatus; based on a result of the deciding, selecting, from a plurality of authentication methods, an authentication method corresponding to the type of the recording medium, and conducting authentication between the coded data output apparatus and the recording apparatus, using the authentication method; sending/receiving data between the coded data output apparatus and the recording apparatus after conducting the authentication; and in a case where the coded data has the water mark, detecting the water mark by the coded data output apparatus, wherein the data exchanged between the coded data output apparatus and the recording apparatus is scrambled by a scrambling method corresponding to the type the recording me

Abstract: Provided here is a copy protection method and apparatus to confuse currently available personal computer software (and other content) copying packages by use of unexpected (“illegal”) special characters in the volume (or directory) name for the software or other content or data subject to being copied. This method can be used alone or with a broad range of other known copy protection technologies such as RipGuard (available from Macrovision Corp.). Also provided here is a method and apparatus to defeat the confusion method, thereby allowing copying of such copy protected software.

Abstract: A decryption key for decrypting data from an access node is distributed to an access terminal intending to receive the data. An authentication unit receives a message for terminal authentication including a terminal identifier from the terminal and authenticates the terminal. The authentication unit refers to a content registration table having stored in advance the content type of a content which the terminal can receive, in association with the terminal identifier, according to the received terminal identifier to obtain a corresponding content type. The authentication unit refers to a decryption data base having stored in advance a decryption key and its valid period in association with a content type, according to the obtained content type to obtain a corresponding decryption key and valid period. The authentication unit sends an authentication result and the decryption key and valid period to the terminal or to a packet control unit.

Abstract: A method and a terminal device for making multi-system constraint of a specified permission in a digital rights. A rights object related to content object is obtained by an executing device. The specific permission descriptions of the rights object include system constraint descriptions of a plurality of systems of the same type. The executing device obtains a corresponding system information in the device according to the system constraint descriptions and compares the system information in the device with the system information in the system constraint descriptions, so as to judge whether there is any system permitted in system constraint descriptions. If yes, it determines to permit executing the specific permission for the content object; otherwise, it determines not to permit executing said specific permission for the content object.

Abstract: A program generation apparatus generates an obfuscated program difficult to analyze from outside and a program execution apparatus executes the program. The program generation apparatus includes an acquisition unit that acquires a 1st program including one or more instructions, the 1st program causing a process by executing the instructions in a predetermined order to obtain a result; a generation unit that generates a 2nd program based on the 1st program; and an output unit that outputs the 2nd program. The 2nd program causes a process that is different from the process caused by the 1st program and varies according to current information determined at execution of the 2nd program in order to obtain a result identical to the result of the 1st program.

Abstract: Some embodiments of the invention provide a method for distributing content over a network. The method distributes a single media storage structure to a device (e.g., a computer, portable player, etc.) that connects to the network. The media storage structure includes first and second pieces of encrypted content. Based on whether the device is allowed to access the first piece of content, the second piece of content, or both, the method provides the device with a set of keys for decrypting the pieces of the content that the device is able to access. The provided set of keys might include one or more keys for decrypting only one of the two encrypted pieces of content. Alternatively, it might include one or more keys for decrypting both encrypted pieces of content. For instance, the selected set of keys might include a first key for decrypting the first encrypted piece and a second key for decrypting the second encrypted piece.

Abstract: A method of packaging broadcast contents are provided. The method includes: extracting a copy control bit from input broadcast contents and determining whether the broadcast contents will be stored after being encrypted based on the extracted copy control bit; creating usage rule information which includes an encryption method of the broadcast contents if it is determined that the broadcast contents will be stored after being encrypted; extracting the copy control bit from each new broadcast content sequentially input and detecting broadcast contents which include copy control bits indicating that the broadcast contents will be stored without being encrypted; and encrypting the input broadcast contents through the broadcast contents before the detected broadcast contents using the encryption method and packaging and storing the encrypted broadcast contents and the usage rule information.

Abstract: An information processing apparatus which processes document information includes a designation unit configured to designate information which is not to be displayed in the document information, a generation unit configured to generate identification information which is uniquely determined, an addition unit configured to add metadata for restoring the designated information from the identification information to the document information, and a replacing unit configured to replace the designated information in the document information with the identification information.

Abstract: A computer session management system operates in conjunction with a host computer, and comprises: i) a safe access module to facilitate safe access to a computer-based application, particularly a network-based application, in conjunction with said host computer; and ii) an advertising module providing advertisements associated with the computer-based application.

Abstract: A data distribution system and method suitably performing various processing such as suitable distribution of data, control of copying, conversion of signals, charging, and distribution of profits, comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, a recording apparatus for recording reproduced content data on a mounted recording medium, an examining means for examining types of content data recorded on the recording medium, the recording medium mounted in the reproducing apparatus, the reproducing apparatus, a recording medium mounted in the recording apparatus and the recording apparatus, and a controlling means for controlling a transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus based on results of the examination.

Abstract: Content processing is disclosed. An indication that a sender desires to send encrypted content to a destination is received. An agreement is obtained from the sender to provide an access key to a node other than the destination and to encrypt content sent to the destination using an encryption key selected such that the access key is usable to decrypt the content.

Abstract: A dongle for digital rights management protection, in accordance with one embodiment of the present technology, includes a digital right management engine and an encryption/decryption engine. The digital rights management engine is adapted to port digital rights management rules of a source of content to digital rights management rules enforced by the digital rights management engine. The encryption/decryption engine is adapted to re-encrypting the source of content into a managed copy of the content, wherein the managed copy of the content is locked to the dongle.

Abstract: A system and method are provided for synchronizing playback of media content on multiple playback devices utilizing Digital Rights Management (DRM) encoding. In general, multiple playback devices or users of those playback devices are associated to form a virtual group. A virtual group (VG) control function operates to synchronize advertisement (ad) slots within media content provided to the playback devices in the virtual group utilizing DRM encoding.

Abstract: Methods and devices are provided for central management of licenses, particularly those relating to wagering games. A license proxy deployed in and/or dedicated to a gaming establishment may operate under the control of a central licensing manager controlled by another entity, e.g., by a game provider. The license proxy may receive requests to enable features of an electronic gaming machine of the gaming establishment (e.g., game themes, player tracking features and/or peripheral device features) and determine, based on information provided by the central licensing manager, whether to grant such requests. The license proxy may also process requests to enable features of other devices in a gaming establishment, such as server-based features.

Abstract: An image processing apparatus which is capable of easily determining, when a user causes the apparatus to scan a sheet original to carry out predetermined processing, whether or not the sheet original has been modified or edited from a document file as the source of the sheet original. A scanner section not only reads an original and generates original image data, but also recognizes information embedded in the original. Rights information concerning the original is acquired based on the information embedded in the original. A controller unit determines whether or not the original has been edited, and performs control based on contents of the rights information and a result of the determination, such that execution of processing, which is designated by a user, on the original image data is permitted or restricted.

Abstract: A method, and apparatus for software and resource management with a model-based architecture.

Abstract: A system and method for managing use of items having usage rights associated therewith. The system includes an activation device adapted to issue a software package having a public and private key pair, the public key being associated with a user, a license device adapted to issue a license, a usage device adapted to receive the software package, receive the license and allow the user to access the item in accordance with the license, and a subscription managing device adapted to maintain a subscription list including the public key associated with the user. License's is issued by the license device upon verifying presence of the public key in the subscription list corresponding to requested content.

Abstract: A method, device, and system including a digital rights management (DRM) license manager to protect software applications from unauthorized use. The DRM license manager system binds essential application data to a software license. This binding is achieved by adding an encryption key to a software license and encrypting the application data with that key. The essential application data is any kind of data which is required for proper operation of the program, such as media files, game levels or state tables. The DRM license manager system performs a check and decrypt operation of the essential application data during program run time. It requires that the license is available on the system. It also ensures that the decryption operation can only take place if the conditions defined in the license are met.

Abstract: The publishing system and method automates at least some portion of a publishing process. The system publishes content using metadata, rights templates and/or specifications, publishing profiles and business rules.

Abstract: A routing computer is connected to one or more multi-function peripherals (MFPs) on a network. A routing manager located in the routing computer contains user information for users that operate one or more of the MFPs connected on the network. Based on a set of user preferences and or default settings, document data scanned by or received via facsimile for a particular user is sent from one of the MFPs to the routing computer. The routing manager then applies rights management and optional encryption to the destination document created from the document data and sends the destination document to a folder or to one or more individuals via electronic mail. As a result, rights management policy may be applied to newly created documents automatically and before the documents are accessible to users in network storage or by email.

Abstract: A copy prevention method and apparatus of a digital magnetic recording/reproducing system performs the copy prevention function by encoding to insert a marker involving copy prevention function information and executing the function and allows a program supplier to realize a desired copy prevention function of various patterns, in which the marker formed by a control word for scrambling audio and video bit straps and copy prevention information for preventing an illegal copy is encrypted by an encoded key to be multiplexed with the audio and video bit strips scrambled by the control word. The marker transmitted is detected from the bit strips to be decrypted and analyzed by the encoded key to determine whether the copy is permitted or not, so that the detected marker is updated to be recorded on a video tape and the control word is produced from the marker to perform the descrambling to supply the result to a monitor to be displayed.