Abstract: A method (300), system (100) and apparatus (200) are provided that enable selected features in a group of two or more devices. A first of the devices (102A) receives a license (306) identifying features to be enabled. The first device (102A) transmits the license (308) to other devices in the group (102B, 102C). The devices in the group (102A-102C) enable selected features (312), according to the license, from features that are available in all the devices in the group. The license may be encrypted (302) and the devices decrypt the license (310) before enabling the selected features (312). The license may be modified (302) using an identifier associated with the first device (102A) of the group and the first device transmits the identifier (308) to the other devices in the group, along with the encrypted license. The devices authorize the license (310) using the transmitted identifier.

Abstract: Methods and apparatuses for accessing documents in a multi-security domain environment are described herein. The novel methods may be processor implemented methods and may include saving by a processor from a first to a second security domain a version of a document, e.g., a wiki webpage with multiple tear portions, wherein the first security is a higher security domain than the second security domain. As part of the saving operation, a determination may be made as to whether the document includes one or more components not to be accessible through the second security domain, and writing the components of the document excluding the one or more components determined not to be accessible through the second security domain into the second security domain.

Abstract: An information processing apparatus that obtains pieces of content information relating to content recorded in an information recording medium, the information processing apparatus includes a data analyzing unit configured to read a content certificate which is recorded in the information recording medium and which corresponds to the content recorded in the information recording medium, a data transmitting unit configured to transmit a content certificate identifier analyzed using the data analyzing unit to a content information provision server, a data receiving unit configured to receive, from the content information provision server, the pieces of content information relating to the content which is specified on the bases of the content certification identifier, and a data outputting unit configured to output the pieces of content information received using the data receiving unit.

Abstract: Methods and systems for secure distribution of an original audiovisual stream constituted of a set of transport packets encapsulated according to a plurality of transport protocols suitable to be transmitted to a receiving device compatible with one of the said transport protocols include the steps of: generating a protected audiovisual stream from the original stream by modifying at least one of the original transport packets, and a complementary stream including digital information suitable from the protected stream, reconstituting on the receiving device the original audiovisual stream from the protected stream as function of the complementary stream, wherein the protected audiovisual stream includes a set of modified transport packets that are different from the corresponding original transport packets at modification positions, and the modification positions are in the complementary stream, the modification positions being generated according to each transport protocol of the plurality of transport p

Abstract: Disclosed is a domain DRM system, a license sharing method for the domain DRM system, and a license server. The domain DRM system includes at least one domain including at least one user module adapted for encryption or decryption using a provided encryption key and a domain manager adapted for decryption using a provided encryption key, and a license server for creating encryption keys corresponding to the domain manager and the one user module, respectively, and providing them with the created contents, respectively, so that, when at least one user module requests contents, a contents encryption key used to encrypt the contents is encrypted by using an encryption key of the user module and an encryption key of the domain manager according to a commutative encryption scheme, and one of the domain manager and the user module is provided with a shared license obtained as a result of encryption.

Abstract: One embodiment of the present invention enables delivery of “on-demand” high fidelity media content to computers via the Internet while restricting unauthorized users from directly retrieving media content from its source database. Once the computer receives the media, it is stored using hidden directories so that it may not be easily shared with others. Within the present embodiment, there are different functionality that are implemented in order to protect and monitor the media content source. For example, the actual address location of the media database is hidden from content recipients while its address directory is periodically change making past addresses obsolete. Additionally, an access key procedure and rate control restrictor may also be implemented to monitor and restrict suspicious media content requests.

Abstract: Embodiments of the present invention allow a system or client device to process multiple Digital Rights Management (DRM) systems and formats using a universal DRM client. The universal DRM client can operate based on a universal license so that it may use the same DRM scheme or format used by the content provider. A DRM system may then build a universal license that includes information for gaining access to the content in the DRM package. In turn, a DRM package and the universal license may be provided to the universal client. Based on the information in the universal license, the client device can access the protected content even if it does not have the specific client program code for the DRM format used originally by the content provider.

Abstract: A provider of content may provide access to portions of content from a source, but not the source content in its entirety. In some embodiments, one or more access rules or criteria may be implemented that enable users to access portions of the source content up to an allowed limit or threshold (e.g., number or percentage of pages), after which access is prevented to the remaining content that has not previously been accessed. In other embodiments, one or more access rules or criteria may be implemented that enable users to access portions of content of only a certain type (e.g., index, bibliography, introduction, certain chapters, etc.). Unauthorized portions are suppressed or access to them is denied. The content source may be a textual work, an audio work, or a video work of any form. For example, the content may be in electronic form, such as images of pages of content.

Abstract: A method for providing protected content, wherein content usage rights information and/or usage state information is embedded into obtained primary data that serves as a basis for a content item to be provided thereby providing the primary data with the embedded content usage rights information and/or usage state information as the content item.

Abstract: A system and method comprising a computer useable medium having computer readable program code means embodied therein for authenticating and encrypting and decrypting information transferred over a public network between a client application program running in a client computer and a server application program running in a server computer and a directory service application program running in a server computer. A method for obtaining a session master key by an application from a server includes sending an open request to the server for the session master key and receiving a first reply by the application from the server with a first portion of the session master key. The first reply identifies a directory server from which a second portion of the session master key may be obtained. The application sends an open request to the directory server specified by the server in the first reply for the second portion of the session master key and receives it from the directory server.

Abstract: A system and method comprising a computer useable medium having computer readable program code embodied therein for authenticating and encrypting and decrypting information transferred over a public network between a client application program running in a client computer and a server application program running in a server computer and a directory service application program running in a server computer. A method for secure communication by a processor with a server includes generating a message to the server by employing a one pass key generation probabilistic authentication process using a predetermined session master key and sending the message to the server. A method for secure communication between an application executable on a computer and a web server coupled to the computer includes participating by the application in an initial authentication process with the server and wrapping every GET and POST request message to the server in an SSLX-EA exchange after the initial authentication process.

Abstract: An Internet Box Office (IBO) system and technique vends digital content via a computer network, such as the Internet. The IBO system comprises a viewing system that cooperates with a Digital Rights Management system and various deployment enhancements within the Internet to provide an infrastructure that facilitates access to digital content in a manner that comports with copyright law and the control of intellectual property by the copyright owner. The IBO system enables a content copyright owner to retain control of its intellectual property while allowing a consumer to have transparent access to the copyright-protected content via the network. To that end, the IBO system operates to download and stage the copyrighted digital content on the viewing system of a consumer.

Abstract: A system comprised of a Tool Bar equipped with the ability to: a) encrypt emails that are sent to computer users who must download and maintain a copy of the Tool Bar to receive the encryption keys needed to decrypt emails; b) display Advertisements in an area of the Tool Bar designed to support text, graphics and video advertisements; c) display various multi-media sessions that allow the user to watch Internet videos, listen to Internet music, read RSS content and engage in other Internet media applications; d) carry out a process by which the computer user can install the Tool Bar in a number of computer applications. e) carry out a process by which the video, radio and RSS functions of the Tool Bar can be continuously viewed as the user moves between software applications.

Abstract: Sharing media content between entities. A computing device detects and connects to another computing device within a predefined proximity. Media content items and associated metadata are selected and exchanged between the connected computing devices. A subsequent purchase opportunity is provided to the users to purchase the exchanged media content items.

Abstract: A content transfer control system for a wireless device and a method of controlling content transfer from a wireless device are described. The system includes a content transfer control component arranged to (a) detect licensed content and (b) transfer a content source indicating a source of the licensed content responsive to detection of licensed content. The method includes transmitting content from the wireless device if the content is not determined to be licensed content and transmitting a content source from the wireless device if the content is determined to be licensed content.

Abstract: Embodiments of the invention generally provide a method and apparatus for enabling digital rights management in file transfers. One embodiment of a method for transferring digital content from a first user to a second user, includes transferring ownership of an instance of the digital content to the second user, where the instance of the digital content resides on a first device belonging to the first user. Copies of the digital content are then deleted from one or more additional devices belonging to the first user (including at least one offline device).

Abstract: A system for authenticating a serialized commodity is presented. A fixed identification, serial number, and authentication code are received for a serialized commodity to be checked for authenticity. A reference table is searched for an entry that matches the received fixed identification. In response to finding an entry in the reference table that matches the received fixed identification, a fixed identification key is retrieved from the reference table that is associated with the received fixed identification. A recreated authentication code is generated for the serialized commodity using the retrieved fixed identification key, the received fixed identification, and the received serial number. Then, it is determined whether the recreated authentication code matches the received authentication code. In response to determining that the recreated authentication code does match the received authentication code, an authentication code match message is outputted to authenticate the serialized commodity.

Abstract: A transmitting gateway may utilize a retrieved domain-specific key to secure an outbound message, and a receiving gateway may utilize another retrieved domain-specific key to authenticate and validate the secured message.

Abstract: A content transmission apparatus is disclosed which promotes distribution of contents over a network and thereby affords better convenience to those who wish to sell and buy the contents. The apparatus is implemented typically as a video camera provided beforehand with an access account from a server apparatus. The content transmission apparatus is equipped with abilities to encode contents in a streaming format for upload and to connect communicably with the server receiving what is uploaded. These features allow the user of the content transmission apparatus easily to upload the content generated thereby to the server without going through complicated steps to sign up with an ISP; to prepare a personal computer, a modem and other hardware; or to make elaborate settings and establish connection with the server. Therefore, uploading of contents is promoted. The server apparatus presents uploaded contents illustratively at its website to solicit potential buyers extensively for the presented contents.

Abstract: Methods and systems for receiving and distributing annotations of a digital work include receiving an annotation of the digital work, storing the annotation, and providing the annotation to a user. The user may be required to submit a valid authorization credential for the annotation. Annotations may be textual or graphical, and may be associated with particular content in a digital work. Indicators may be displayed to identify content in the digital work for which annotations are available. A user may exchange compensation or perform a specified action for access to an annotation. Some or all of the compensation received for an annotation may be distributed to the author of the annotation. Multiple annotations may be listed in an order based a criterion, such as ranking, price, or date of receipt. Users that purchase a digital work may automatically receive an authorization credential to receive annotations of the digital work.

Abstract: Technologies are disclosed to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disc carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations, access secure nonvolatile storage, submit data to CODECs for output, and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: Various techniques are provided for the gifting between multiple electronic devices of media content provided by an online digital media provider. An offer and acceptance of a selected gift file is accomplished between a gifter device and a receiving giftee device using a near-field communication (NFC) connection. If a connection to the online provider is available, the gifter device may transmit a gift request by which the gifter's account is charged for the gift file. Thereafter, a gift file created using DRM keys associated with the giftee's account may be downloaded to the giftee device. If a network connection is unavailable, the giftee device may transfer a locked gift file and a corresponding gift license to the giftee device using a peer-to-peer connection. The giftee device may authenticate the license and unlock the gift file once a connection to the online provider is available.

Abstract: Systems, methods and computer program products are disclosed for providing long-term authenticity proof of an electronic document having a digital signature, wherein the electronic document is digitally signed with a digital signature and the electronic document and its digital signature are archived in a data archive. Such methods, systems and computer program products may store the electronic document in a first data archive and store a hash value of the electronic document in a second data archive different from the first data archive. Long-term authenticity and integrity may be achieved by periodically re-signing, particularly time stamping the hash value in the second data archive.

Abstract: The subject matter relates to software application collaboration and, more particularly, collaboration between software applications via formular updates. Some such embodiments include systems, methods, and software to receive a definition of a content item from a first party, wherein the content item is operable within an application of a second party to cause data to be exported by the second party's application in a manner that can be imported to an application of the first party. Some such embodiments further include sending the content item to the second party.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked-out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: A method and system for installing software and hardware licenses on electronic devices supporting licensable features. Specifically, a method is disclosed for installing licenses in a node based licensing scheme. The electronic device defining the node receives an input containing an authorization key. The authorization comprises a license for a service feature, a node identifier, a software version, and a sequence number. Information in the authorization key is used to install the license on the electronic device. The node identifier is compared to an official node identifier stored at the electronic device. The sequence number is compared to an official sequence number stored at the electronic device. The license is installed into a pool of licenses available to the electronic device when the node identifier matches the official node identifier and the sequence number matches the official sequence number. The sequence number ensures that the authorization key at most can only be used once.

Abstract: An image processing apparatus acquires restricted function data indicating functions whose execution is restricted, and acquires function data indicating a plurality of functions to be called by script data. The apparatus determines, based on the acquired function data, a realizable function by combining the functions indicated by the function data, and determines, based on the restricted function data and the realizable function, whether to permit execution of the script data corresponding to the function data.

Abstract: An apparatus for a flexible and common IPMP System (Intellectual Property Management and Protection) offers flexibility and interoperability by incorporating a complete IPMP Tool List stored in the content stream or downloaded from a URL location. The IPMP Tool Manager of a compliant IPMP terminal functioning as a preprocessor module is provided, the IPMP Tool List is parsed, and an IPMP Tool is acquired based on the IPMP Tool ID, related location identifier, and IPMP Tool Format ID. The IPMP Tool can be precompiled to a binary format and sent or downloaded to the IPMP terminal, and different binary formats are prepared by the content provider for use on different IPMP terminal platforms.

Abstract: There is provided a method for operating a basic input/output system (BIOS) of a pay-as-you go computer system. In one example embodiment, the method includes periodically resetting a watchdog timer, wherein failure to reset the watchdog timer indicates a security violation. In another example embodiment, the method also includes comparing a first time count representing motherboard use time with a second time count representing hard drive use time to determine if a security violation has occurred. There is also provided a pay-as-you-go computer system having a BIOS configured to determine if a hard drive is password protected. In an example embodiment, the BIOS is configured to calculate a password to unlock the hard drive if the hard drive is password protected.

Abstract: An information processor is capable of restricting the available application program interface for each application program. The information processor capable of executing a predetermined application program includes at least one application program interface for providing predetermined control function for the application program, a determining unit for determining an available application program interface for the application program based on license information of the application program, and an operation controlling means for controlling the operation of the application program interfaces in accordance with the results determined by the determining unit.

Abstract: One embodiment of the present invention includes a method for traitor tracing that includes performing an inner code traitor tracing on a recovered pirated digital file, the recovered digital file incorporating an inner code for assigning segments of the digital file and an outer code for assigning inner codes to individual digital files. The method also includes extracting partial information regarding the outer code from the inner code tracing. An outer code tracing procedure may then be performed using the partial information.

Abstract: A method and associated computer program product for processing edited objects associated with a physical document. The method is for use in a user workstation by a user. The method includes: determining a position of a point pressed on a touch foil to select an item on a page of the physical document; identifying the selected item by correlating the determined position of the pressed point with a position of the selected item in a list of item positions recorded in an edited objects table; identifying a first edited object in the edited objects table from an association of the first edited object with the selected item identified by the correlating; ascertaining, that the user does not have a license to use and/or copy the first edited object; and sending, from the user workstation to an edited objects server, a request for information concerning the first edited object.

Abstract: A method and system for dynamic, real-time addition of advertisements to downloaded static content. The method comprises seamlessly combining a downloaded original content file with personalized information on a user device, and allowing the user either to use the combined original content and personalized information without possibility of personalized information removal, or to remove the personalized information after a fee payment. The seamless combination and removal operations are done by a player located in the user device.

Abstract: A block key to encrypt block data is generated using an ATS (arrival time stamp) appended to each of TS (transport stream) packets included in a transport stream correspondingly to the arrival time of the TS packet. The ATS is a random data depending upon an arrival time, and so a block-unique key can be generated, which enhances the protection against data cryptanalysis. A block key is generated from a combination of an ATS with a key unique to a device, recording medium or the like such as a master key, disc-unique key, title-unique key or the like. Since an ATS is used to generate a block key, any area for storage of an encryption key for each block may not be provided in a recording medium.

Abstract: The present invention relates to a recording apparatus and method and communication apparatus and method suitably for use in supplying the encoded data of accumulated music for example to a semiconductor memory or a portable device. In step S461, the content data enabled for check-in into an MS are identified. In step S462, a check-in process is executed. In step S463, it is determined whether or not the content data enabled for check-in have all been checked in. In step S464, an album to be checked out is determined. In step S465, one track is selected. In step S466, the selected track is determined whether or not it is enabled for check-out. In step S467, the capacity of the MS is confirmed. In step S468, a check-out operation is performed. In step S469, it is determined whether or not all tracks in the album to be checked out have been selected. The present invention is applicable to audio servers for example.

Abstract: Provided here is a copy protection method and apparatus to confuse currently available personal computer software (and other content) copying packages by use of unexpected (“illegal”) special characters in the volume (or directory) name for the software or other content or data subject to being copied. This method can be used alone or with a broad range of other known copy protection technologies such as RipGuard (available from Macrovision Corp.). Also provided here is a method and apparatus to defeat the confusion method, thereby allowing copying of such copy protected software.

Abstract: A duplication/delivery center DDS records contents C11 and C12 on a recording medium M in accordance with requests from content providing apparatuses CP11 and CP12, duplicates the recording medium M, and delivers the recording medium M to users. When doing so, parts of the contents are encrypted. The content providing apparatuses CP11 and CP12 request a content control apparatus CC1 to control the contents on the recording media M. At the side of contents users, when a user sets a recording medium M in a video game console GM and tries to use a content that has been encrypted, the video game console GM requests, via a mobile packet communication network MPN, the content control apparatus CC1 to transmit a decryption key. The content control apparatus CC1 decides whether or not to transmit the decryption key based on the content of the request received from the content providing apparatus.

Abstract: A method for authenticating data comprising the steps of: providing data to a first device having at least two initial cryptographic keys; generating authentication information required to authenticate the data utilizing the at least two initial cryptographic keys; sending the data and authentication data to a second device having paired cryptographic keys wherein each paired cryptographic key is associated to one of the at least two initial cryptographic keys; and authenticating the data in the second device utilizing the paired cryptographic keys.

Abstract: A method of controlling presentation of content on a media storage device is described. The method is comprised of verifying the presence of a media presentation mechanism and a usage compliance mechanism on a computer system operated by a recipient to whom the media storage device is distributed. The usage compliance mechanism includes a file system filter driver for controlling data reads associated with the computer readable media. The media presentation mechanism is communicatively coupled with the usage compliance mechanism. The present method further includes the file system driver performing a first decryption of the computer readable media. The present method further includes the media presentation mechanism performing a second decrypting of the computer readable media concurrent with presenting the computer readable media to the recipient.

Abstract: A licensing system is provided for transferring license information for at least one license-requiring software component of software-controlled devices. The licensing system comprises a first, portable license data storage medium (3), which is provided with a processor unit (8) and on which at least one license information for the at least one license-requiring software component is stored in a memory unit (9). A second, exchangeable license data storage medium (4; 4.1, 4.2) is provided with a processor unit (10; 10.1, 10.2). A data transfer channel (5) is provided for transferring data between the first license data storage medium (3) and the second license data storage medium (4; 4.1, 4.2). A license detection device (6) is provided which can poll the at least one license information of the first license data storage medium (3) and transfer same to the second license data storage medium (4; 4.1, 4.2) via the data transfer channel (5).

Abstract: A selective encryption encoder consistent with certain embodiments of the invention has vertical and/or horizontal stripes encrypted. In one embodiment, packets are examined in the digital video signal to identify a specified packet type, the specified packet type being both packets carrying intra-coded data representing a pattern of horizontal stripes across an image and packets carrying intra-coded data representing a pattern of vertical stripes across an image. The packets identified as being of the specified packet type are encrypted using a first encryption method to produce first encrypted packets. These first encrypted packets are then used to replace the unencrypted packets in the digital video signal to produce a partially encrypted video signal. The packets of the specified type can also be multiple encrypted and replaced in the data stream to produce a multiple encrypted video data stream.

Abstract: A method of verification of rights is disclosed, contained in a security module associated to an apparatus processing broadcasted digital data. The apparatus is connected to a management center transmitting encrypted rights messages for accessing the digital data. The method includes reception and reading by the security module of all or part of a rights message including at least one right and means for verifying the right, decryption and verification of the rights message and updating of a rights memory, and storage of all or part of the rights message in a messages memory. During a further verification step, the method includes identification of at least one right present in the rights memory, search of the corresponding stored rights message and verification of the rights message, comparison of the right contained in the rights message with the corresponding right stored in the rights memory, and determination of a default state when the result of the comparison indicates a difference.

Abstract: A multi-merchant purchasing system is configured to identify downloadable products selected by a user for purchase. The identified downloadable products are offered by multiple merchants. The multi-merchant purchasing system enables the user to purchase all of the downloadable products in a single transaction. Specifically, the multi-merchant purchasing system determines payment information associated with the user and, with minimum user-interaction, sends the payment information to applications associated with the merchants for processing. The multi-merchant purchasing system may also be configured to receive purchase information from the merchant applications and maintains the purchase information for the user in a locker. The multi-merchant purchasing system may further be configured to automatically download and install the purchased product onto the user's computing device through a software assistant.

Abstract: A method for providing protected content, wherein content usage rights information and/or usage state information is embedded into obtained primary data that serves as a basis for a content item to be provided thereby providing the primary data with the embedded content usage rights information and/or usage state information as the content item.

Abstract: Methods and apparatus to conditionally authorize content delivery at content servers in pay delivery systems are disclosed. An example method comprises receiving an authorization for a program download, receiving a request to download the program from a receiver, wherein the receiver is configured to receive a broadcast signal, and transmitting the program to the receiver via point-to-point communication signal.

Abstract: An encrypted content and its encryption key under a copy right use condition of prohibiting a copy by the device having received a content are stored, and the encrypted content is copy-transferred with another device through the network, and at the same time, the encryption key is transferred through the network, so that it is stored in either one of the devices. Even when a high definition television broadcast signal received with a copy-once taken as a copy right use condition is recorded, an access flag that controls the presence or absence of the reproduction of the broadcast content for each broadcast content is provided. When an original broadcast content is transcoded into a low resolution, and is transfer to another device, its access flag is turned on, thereby making the reproduction possible.

Abstract: A captured content rights controller detects a first portion of streaming captured content and a second portion of the streaming captured content after the first portion of the streaming captured content is detected.

Abstract: A system consisting of a memory storage unit in which the licensed audio files are stored. The function of this device is to recognize the requested data and thereby allow the audio file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the audio files in the device from duplication.

Abstract: The present invention provides a method and system for location-based digital rights management. Digital rights for protected content are restricted to a specific location or region by specifying the approved location of the consuming device within the license. This allows the content owner to specify the geographic locations/regions at which the protected content may be consumed. The device obtains its location from a location entity which is then evaluated against the location constraint within the license. If the device is within the location constraint then the content may be accessed. Acquiring the location of the device before allowing access to certain content helps in preventing a user from accessing a protected document in an area which is considered a prohibited location as defined within the license.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.