Abstract: A captured content rights controller detects a first portion of streaming captured content and a second portion of the streaming captured content after the first portion of the streaming captured content is detected. The captured content rights controller determines whether rendering the second portion of the streaming captured content after the first portion of the streaming captured content is subject to at least one digital rights management protection rule for streaming captured content as specified by at least one owner of at least one restricted element within the streaming captured content captured independent of distribution of the content by the owner of the at least one restricted element within the streaming captured content. The captured content rights controller applies the at least one digital rights management protection rule to restrict rendering of the second portion of the streaming captured content after the first portion of the streaming captured content.

Abstract: A method of optimizing the retrieval of object-associated information may include identifying data associated with an object identification. At least one optimization parameter for the retrieval of data associated with an object identification is also identified. An amount of the associated data for transmission is determined using the at least one optimization parameter.

Abstract: A data recording apparatus and a data reproducing apparatus which ensure security of a portable recording medium, such as an optical disk. The apparatus has a security mode and a normal mode as operation modes. In the security mode, a system controller of the apparatus records a security identification signal in an area other than a user data area of the optical disk. At the time of copying of the optical disk, the security identification signal disappears, and a limitation is imposed on reproduction, thereby preventing copying operation. In the security mode, the system controller records the security identification signal in the area other than the user data area of the optical disk, as well as recording user data by means of converting an address through use of a password. At the time of reproduction of data, absence or presence of the security identification signal is ascertained. When the security identification signal is present, the address is inversely converted, thereby reproducing data.

Abstract: A system for securely distributing content is provided. A distribution system includes a content server that distributes content to content clients via a communications link or a tangible medium. The distribution system uses passwords to encrypt and decrypt content and to control access to sensitive information stored on the content clients. The distribution system initially receives various passwords from a user and encrypts each password. Some of the encrypted passwords are “identification passwords” and others are “encryption passwords.” The identification passwords are used to control access to sensitive information stored on the content clients, and the encryption passwords are used to encrypt and decrypt content that is distributed to the content clients. The distribution system configures each content client to contain the identification passwords and encryption passwords in a secure folder.

Abstract: A method for managing rights associated with data is described. A request to access encrypted data is intercepted. Credentials associated with the request are verified. The data is decrypted if the credentials are verified. The decrypted data is marked with an identifier. Predetermined operations directed to the decrypted data are monitored.

Abstract: When a PC 10 connects to a PD 20, the PC 10 decides whether or not the PD 20 holds a group ID and if the PC 10 decides PD 20 holds the group ID, PC 10 decides whether or not the group ID held in the PC 10 and the group ID held in the PD 20 coincide with each other. If the both IDs are not decided that they don't coincide with each other, the PC 10 acquires a device ID corresponding to PD 20 from PD 20 and transfers the device ID and a terminal ID of the PC 10 to a server apparatus 32. Then the PC 10 receives, from the server apparatus 32, a user link completion information representative that an association between first user ID corresponding to the terminal ID and second user ID corresponding to the device ID is completed.

Abstract: A reputation server is coupled to multiple clients via a network. Each client has a security module that detects malware at the client. The security module computes a hygiene score based on detected malware. The security module provides the hygiene score and an identifier of a visited web site to a reputation server. The security module also provides identifiers of files encountered at specified web sites to the reputation server. The reputation server computes secondary hygiene scores for web sites based on the hygiene scores of the clients that visit the web sites. The reputation server further computes reputation scores for files based on the secondary hygiene scores of sites that host the files. The reputation server provides the reputation scores to the clients. A reputation score represents an assessment of whether the associated file is malicious.

Abstract: Upon applying a DRM protection process to an image which is generated by an image processing apparatus, which doesn't have any communication means that allows direct communications with a PC, without any alteration, encryption of the image in the apparatus and that of the image in the PC as an internal process of the DRM are required, resulting in poor efficiency. The apparatus executes a part of the DRM protection process for the image, and outputs the encrypted image. The PC receives the image which has undergone the part of the DRM protection process, executes the remaining part of the DRM protection process, and outputs the image which has undergone the DRM protection process. In this case, the PC transmits use condition of the input image to a license server, receives signed use condition from the server, and combines the signed use condition with the input encrypted image.

Abstract: A method of controlling presentation of content on a media storage device is described. The method is comprised of verifying presence of a content presentation mechanism and a usage compliance mechanism on a computer system operated by a recipient to whom the media storage device is distributed. The usage compliance mechanism includes a file system filter driver for controlling data reads associated with the content. The present method further includes permitting the recipient to experience the content via the computer system provided the usage compliance mechanism is present on the computer system and the computer system is communicatively coupled with a network and wherein a server in the network authorizes the recipient to experience the content. The present method further includes presenting the content to the recipient via the content presentation mechanism. The content presentation mechanism is communicatively coupled with the usage compliance mechanism.

Abstract: A print management system for production of printed documents, said system comprising a policy editor component capable of receiving a document file, and applying a level of protection to said document file to produce a protected document file a policy enforcement component, operable for enforcing a document management policy for said protected document file; and at least one printer device, said printer device operable to receive said protected document file, refer to said policy enforcement component, and in response to an authorization signal received from said policy enforcement component, to print at least one printed document.

Abstract: A method is disclosed that enables the handling of audio streams for segments in the audio that might contain private information, in a way that is more straightforward than in some techniques in the prior art. The data-processing system of the illustrative embodiment receives a media stream that comprises an audio stream, possibly in addition to other types of media such as video. The audio stream comprises audio content, some of which can be private in nature. Once it receives the data, the data-processing system then analyzes the audio stream for private audio content by using one or more techniques that involve looking for private information as well as non-private information. As a result of the analysis, the data-processing system omits the private audio content from the resulting stream that contains the processed audio.

Abstract: To help ensure that only authorized media content that is associated with rights management (RM) restrictions is delivered from a compliant RM interface of a source device to a non-compliant RM interface of a destination device, an interconnect device provides a compliant RM interface to connect to the source device and monitors media content received from the source device to detect an embedded digital watermark. The interconnect device takes the necessary steps to determine if the watermark is authentic and control delivery of the media content to the destination device accordingly. The interconnect device may go back to the source device or to a remote service to authenticate the watermark. If the watermark is authentic, the media content is passed by the interconnect device to the non-compliant interface of the destination device outside of normal RM restrictions. Otherwise, the delivery of the media content is restricted by the interconnect device.

Abstract: A method for preventing rendering of content at overlapping time periods on more rendering devices than permitted by a license associated with the content is disclosed.

Abstract: A data storage medium includes a first storage unit and a second storage unit. The first storage unit is used to store a target electronic device ID, the second storage unit stores software installation data. The software installation data includes a copyright protection module, a software installation program, and a software data. When the software installation data is invoked to install the software data, the copyright protection module is invoked and automatically runs. The copyright protection module accesses the first storage unit and reads the target electronic device ID. The software data can be installed in the target electronic device only if the first storage unit contained the target electronic device ID or the first storage unit is writable and the target electronic device ID is stored in the first storage unit successfully.

Abstract: An apparatus and method for encoding and decoding additional information into a stream of digitized samples in an integral manner. The information is encoded using special keys. The information is contained in the samples, not prepended or appended to the sample stream. The method makes it extremely difficult to find the information in the samples if the proper keys are not possessed by the decoder. The method does not cause a significant degradation to the sample stream. The method is used to establish ownership of copyrighted digital multimedia content and provide a disincentive to piracy of such material.

Abstract: A method of operating a digital program playback device, including: receiving, via a first communications network, a data stream including an encrypted data portion representative of a program; identifying, from the received data stream, an identifier associated with the program; transmitting the program identifier and a device identifier associated with the digital program playback device to an authorization device via a second communications network; receiving, via the second communications network, a decryption key in response to the transmission; and, decrypting the data stream using the decryption key and generating an output signal for playback of the program.

Abstract: A secure pre-recorded medium and a method for descrambling encrypted content thereon. When a player wants to access the content, a secure processor on the medium verifies that the player has not been revoked, preferably by comparing an identity of the player with identities in a revocation list, after which a mutual authentication is performed. The secure processor then verifies that the player has the rights to access the content and provides the player with the key necessary to descramble the content, whereafter the player descrambles the content.

Abstract: In a content data reproducing apparatus having a temporary memory for stream reproduction, a content data acquisition section acquires content data from an external content provision server. A storage control section temporarily stores the content data acquired by the content data acquisition section in the temporary memory such that the stored content data should be erased from the temporary memory when a power supply is turned off. A reproduction condition acquisition section acquires reproduction condition data which defines a reproduction condition for reproducing the content data. A reproduction section reproduces the content data read from the temporary memory.

Abstract: A method of subsidizing the presentation of media content by including informative messages as part of the presentation. The presentation of the media content is paused while the informative message is presented. The cost of the media content is credited to the owner and the payment associated with the informative message is debited from the sponsor of the informative message. Some content is segmented into sections and the informative messages are presented before or after each section. Other content is not segmented, but informative messages are presented at intervals determined by an e-PVR.

Abstract: A method and apparatus for temporarily using Digital Rights Management (DRM) contents is provided. The method includes receiving a rights object having information required for using the contents, converting the rights object into a first temporary rights object and a second temporary rights object for a temporary use of the contents, and transmitting the first temporary rights object and the second temporary rights object to an unauthorized device. The first temporary rights object and the second temporary rights object are the rights objects that allow using the contents for a predetermined time.

Abstract: There is provided a method for encrypting a data stream using multiple algorithms. In one embodiment, a first portion of the data stream is encrypted with a first algorithm utilizing a first key to generate a first encrypted portion. The first algorithm can be, for example, a Triple Data Encryption Algorithm (TDEA). Data indicating the first algorithm and the first key is then transmitted. Then, the first encrypted portion of the data stream is transmitted. Thereafter, a second portion of the data stream is encrypted with a second algorithm utilizing a second key to generate a second encrypted portion. The second algorithm can be, for example, a Single Data Encryption Algorithm (SDEA). Next, data indicating the second algorithm and the second key is transmitted. Thereafter, the first encrypted portion of the data stream is transmitted.

Abstract: An electronic device, such as, a computer, may be adapted for self-monitoring for compliance to an operating policy. The operating policy may specify a pay-per-use or subscription business model and measurements associated with compliant usage. A secure execution environment may measure usage in accordance with the business model as well as monitor and enforce compliance to the operating policy. To increase the difficulty of attacking or otherwise disabling the secure execution environment, elements of the secure execution environment may be distributed. The distribution points may include other functional elements of the computer, such as interface circuits, or may even be remotely located over a network. An implementation method for disaggregating the secure execution environment is also disclosed.

Abstract: An automatic performance apparatus which can make it difficult to discriminate between music contents which require copyright protection and music contents which do not require copyright protection. An encrypted content file distributed by a contents distributing site via a network is received, and copyright protection information indicative of whether or not the received encrypted content file requires copyright protection is acquired. The received encrypted content file is decoded to generate a decoded content file. When the acquired copyright protection information indicates that copyright protection is required, a storage medium stores the encrypted content file, or a re-encrypted content file generated by re-encrypting the decoded content file by an encrypting method different from an encrypting method used to obtain the encrypted content file.

Abstract: A set of equipment for secure direct information transfer over the Internet contains information transmitting terminal devices for collaborating with an information forwarding network, taking part in the information traffic. The individual information transmitting terminal devices are equipped with a sender partial unit, a receiver partial unit and a storage partial unit comprising an ID-register containing a device identification signal, a C-register for storing a coding key and a D-register for storing a decoding key. The C-register containing the coding key is connected to the sender partial unit, and a coding key and a collaborating decoding key are allocated to each individual information transmitting terminal device.

Abstract: An apparatus and method capable of purchasing external charged content in a UPnP network are provided. A media server (MS) provides a media renderer (MR) with a URL that executes a CGI that that performs purchasing of a charged content included in an external server, and, if the MR requests the reproduction of content corresponding to the URL, the MS executes a CGI of the URL, purchases charged content corresponding to the URL, and downloads the charged content, thereby browsing a list of contents provided by an external contents purchase site through a consumer electronic device such as a digital television, in which a UPnP audio/visual control point is mounted without a separate interface, purchasing desired content, and reproducing the purchased content.

Abstract: A method, apparatus, and article of manufacture for processing data. The method, apparatus and article of manufacture preferably comprise the steps of: (a) receiving a record having a plurality of identifiers into a computer system, the record corresponding to an entity; (b) encrypting one or more of the identifiers in the record to form an encrypted record; (c) applying one or more encrypted variants to the encrypted record based on the encrypted identifiers and pre-computed encrypted synonyms; and (d) comparing the encrypted record to previously stored data using the encrypted identifiers and the encrypted variants in order to the match or associate the encrypted record with the previously stored data.

Abstract: A system and method for the secure storage of data in a network. Data stored on a primary server connected to the network is initially encrypted. The IP address of the primary server is sent to a second server, via the network, and a communication is received from the second server indicating pending instructions. If the instructions indicate that theft of the primary server has occurred, then the data stored on the primary server is re-encrypted and the IP address of the primary server is sent to the second server. If attempted unauthorized access of the primary server is determined, and a predetermined number of consecutive unauthorized attempts to access the primary server are made, then the data stored on the primary server is erased.

Abstract: Methods, systems and apparatus are described for producing wagering products and conducting wagering games. In one embodiment, a method for producing a lottery product comprises producing a play slip that includes an indication of at least one event that potentially occurs in a corresponding content (e.g., audio/video content) component of the lottery product. In one embodiment, a unit of the corresponding content is provided to a player along with a play slip.

Abstract: A software installation system comprises an interface component that receives a request to access data resident upon a flash memory card. An installation component compares a unique identifier associated with the data with a unique identifier embedded within the flash memory card, and the installation component determines whether to allow access to the data based at least in part upon the comparison. The installation component prohibits access to the data if the unique identifier associated with the data does not match the unique identifier embedded within the flash memory card.

Abstract: Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Abstract: A system and method for preventing unauthorized access to copyrighted academic texts is provided in which trademark licenses, discussion boards, and grade content are integrated into a web-based system that aligns the interests of teaching professionals, students, and publishers while also enhancing the overarching academic mission to create and disseminate knowledge.

Abstract: An image processing unit includes an image data input unit, a page-description language (PDL) converter, a special document determination unit, and an image treatment command adding unit. The image data input unit inputs image data. The PDL converter converts the input image data to page-description language data, and transmits an end-of-page command when a page-description language conversion for image data is completed. The special document determination unit determines whether the input image data includes a special document. The image treatment command adding unit instructs the PDL converter to wait for a transmission of the end-of-page command until the special document determination unit issues a determination result. When it is determined that the image data includes a special document, the image treatment command adding unit generates an image treatment command for the image data. The image treatment command adding unit transmits the image treatment command with the end-of-page command.

Abstract: A key-sharing scheme is used to control distribution and use of video and audio content in personal digital assistants (PDAs) and other wireless devices. A private key is split into key-shares using a Blakley-Shamir key splitting technique and the key-shares are distributed to various network entities including a finance server and security server. Key-shares are also stored in a user's subscriber identity module (SIM) and a security processor of the PDA. The key-shares from the network entities are provided to the PDA after the user requests specific video or audio content and credit verification is performed. The PDA's security processor combines the key-shares to form the decryption key for use in playing the content by the PDA's communications processor. When a service limit is reached, the PDA's security processor purges the key-shares to prevent further use of the content.

Abstract: An electromechanical system consists of a memory storage unit in which the licensed video files are stored. The function of this device is to recognize the requested data and thereby allow the video file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the video files in the device from non-duplication.

Abstract: Upon applying a DRM protection process to an image which is generated by an image processing apparatus, which doesn't have any communication means that allows direct communications with a PC, without any alteration, encryption of the image in the apparatus and that of the image in the PC as an internal process of the DRM are required, resulting in poor efficiency. The apparatus executes a part of the DRM protection process for the image, and outputs the encrypted image. The PC receives the image which has undergone the part of the DRM protection process, executes the remaining part of the DRM protection process, and outputs the image which has undergone the DRM protection process. In this case, the PC transmits use condition of the input image to a license server, receives signed use condition from the server, and combines the signed use condition with the input encrypted image.

Abstract: A method and computer-readable medium for deterring software piracy in a volume license environment. An activation bypass message is generated and sent. Information contained in the activation bypass message is compared to a list of machine identifiers. A binding service message contains a count of the machine identifiers in the list. Once the count reaches a predetermined threshold, software activation bypass may occur.

Abstract: A computerized intellectual property trading exchange is disclosed for facilitating the trading of license contracts relating to intellectual property rights or pools of intellectual property rights. The exchange includes at least one intellectual property license contract relating to intellectual property rights or pools of intellectual property rights and a computer-accessible forum configured to allow a plurality of participants to trade the license contract. The plurality of participants includes at least one seller, which may be the owner, having the license contract and desiring to trade the license contract. The plurality of participants also includes at least one buyer desiring to obtain the license contract. The buyer may be an investor, speculator, market maker, or arbitrageur, who purchases the license contract to achieve appreciation. The buyer also may be a licensee, who purchases the license contract to practice the intellectual property rights.

Abstract: A method of managing keys is provided. According to one exemplary method, digital content data encrypted with a first encrypting key is decrypted using a first decrypting key, and re-encrypted using a second encrypting key. A second decrypting key is encrypted using a third encrypting key to produce an encrypted second decrypting key. In some embodiments, an encrypted first decrypting key that was encrypted using a fourth encrypting key is received, and the encrypted first decrypting key is decrypted using a fourth decrypting key to reproduce the first decrypting key. An application for use on a computer system is also provided.

Abstract: A digital rights management method and device are provided. To implement the DRM method and device, there is provided a master device including a storage module which stores a plurality of rights objects (ROs) having an inheritance structure, a detection module which detects the storage module for an RO needed for playing back a predetermined content object, a message generation module which, if the detection module fails to discover the RO needed for playing back the predetermined content object from the storage module, generates an RO request message, a device interface module which transmits the RO request message to a slave device and receives the RO needed for playing back the predetermined content object from the slave device, and a playback module which plays back the predetermined content object using at least one of the RO detected from the storage module and the RO received from the slave device.

Abstract: A system, method, and computer program product to find coalitions of receivers who collude to produce pirated protected content, then evaluates the confidence that particular members of each identified coalition are traitors versus innocent receivers incriminated by chance. Typically, each file in a group of original files is modified to include variations of critical file segments. The group of files is then broadcast with individualized codes that enable particular authorized receivers to properly process the modified files. The modifications in a pirated version of a file can identify which traitorous receivers contributed to its piracy. Candidate coalitions of differing size are first evaluated to determine if they cover observed file variations with greater than a predetermined likelihood that an innocent coalition is falsely incriminated by chance. Individual members of satisfactory coalitions are then evaluated. Traitors may be cryptographically revoked.

Abstract: In a data providing server 1101, whether or not specified compressed content data D51 generated by means of a specified compression coding method corresponding to terminal identification information has been stored in a content database 1113 is detected, according to content specifying data D53 transmitted from a portable dedicated terminal 1104. If the specified compressed content data D51 has been stored, the data providing server 1101 reads and transmits this to the portable dedicated terminal 1104. And if the specified compressed content data D51 has not been stored, the data providing server 1101 generates the specified compressed content data D51 by means of the specified compression coding method, and transmits this to the portable dedicated terminal 1104. Thereby, the specified compressed content data D51 generated by means of a specified decoding method can be properly provided to the portable dedicated terminal 1104, and the user can easily view a content based on the content data.

Abstract: A management method is disclosed for managing license information indicating an allowed amount of usage of a program executable on a peripheral device or a function provided by the peripheral device.

Abstract: A method and apparatus for copying or moving a rights object having right information regarding digital contents between a device and a portable storage device to copy or move the digital contents there between are provided. According to the method and apparatus, the digital works can be prevented from being recklessly and randomly copied and moved, and therefore, copyright can be protected. In addition, data loss or unauthorized access can be prevented.

Abstract: A system and method for the authorization of access to a service by a computational device or devices. A software agent generates a digital signature for the device each time it attempts to access the service and send it to an authentication server, which compares the digital signature sent with one or more digital signatures on file to determine whether access to the service is permitted. The digital signature is generated by using hashes based on software and hardware configuration data collected from the device. The system may be used in conjunction with other authorization methods and devices.

Abstract: Methods and apparatuses for accessing documents in a multi-security domain environment are described herein. The novel methods may be processor implemented methods and may include saving by a processor from a first to a second security domain a version of a document, wherein the first security is a higher security domain than the second security domain. As part of the saving operation, a determination may be made as to whether the document includes one or more components not to be accessible through the second security domain, and writing the components of the document excluding the one or more components determined not to be accessible through the second security domain into the second security domain. The methods may further include opening the document through the security domain by determining whether a version of the document has been saved to the second security domain, and if so, merging a copy of modifications made to version of the document, if there are any, into the document being open.

Abstract: A method and apparatus for enabling a licensed end user to record digital data as described is particularly useful to the music industry as it enables them to make audio data available over the internet but to retain control of the uses to which that audio data can be put. Thus, upon completing a financial transaction to pay for the required audio tracks, the end user is enabled to download and decrypt encrypted music tracks and to play them on the end user's personal computer. The end user can also be allowed to burn a CD including the downloaded music tracks. However, the end user is only enabled to decrypt and record the music tracks onto the CD if the music tracks are recorded together with copy protection.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.

Abstract: A system for dealing in an original data content and an edited data content. A data content is handled as an object, and the data content is edited by editing a data content, functioning as an object, in accordance with an edit program. The edited data content is expressed by the original data content and the editing scenario which describes editing detail by the edit program. Only the encrypted editing scenario is dealt in. Upon receipt of the encrypted editing scenario, a user decrypts the encrypted editing scenario using a crypt key obtained from a key management center, and obtains the original data content from the database in accordance with the editing scenario and re-constitutes the edited data content. In case there is the one who wishes sale of the editing scenario, its utilization right is sold by auction.