Abstract: Methods, systems, and apparatuses are described herein for the direct sharing and use of transaction data separately from transaction authorization processes. Transaction metadata associated with a transaction may be received and validated. Authorization information corresponding to the transaction may be received. The degree to which the transaction metadata is tested may be based on a predicted time of receipt of the authorization information. The transaction metadata and authorization information may be correlated. A computing device may determine whether to authorize the financial transaction based on the authorization information and the correlated transaction metadata. All or portions of the transaction metadata may be provided to one or more users after the transaction has been authorized or denied.

Abstract: An exemplary method of maintaining secure time in a computing device is disclosed in which one or more processors implements a Rich Execution Environment (REE), and a separate Trusted Execution Environment (TEE). The TEE maintains a real-time clock (RTC) that provides a RTC time to the REE. A RTC offset is stored in non-volatile memory, with the RTC offset indicating a difference between the RTC time and a protected reference (PR) time. Responsive to a request from the REE to read the RTC time, a current RTC time is returned to the REE. Responsive to a request from the REE to adjust the RTC time, the RTC time and the corresponding RTC offset are adjusted by a same amount, such that the PR time is not altered by the RTC adjustment. An exemplary computing device operable to implement the method is also disclosed.

Abstract: A method of and apparatus for encrypting and/or decrypting content according to broadcast encryption scheme. The decryption method includes: determining whether or not a revoked device among devices that have licenses for predetermined content is present; and according to the determination result, selectively decrypting a content key encrypted by using a key to prevent the revoked device from decrypting the predetermined content. By doing so, an unnecessary encryption process and decryption process that occur when there is no revoked device are avoided.

Abstract: Metering is enabled through an arrangement in which a metering certificate is communicated to a mobile device using an over-the-air protocol. A metering trigger provides the metering certificate that includes a location to which metering data is posted by the mobile device and a public key of a public-private key pair, or alternatively provides a link to such metering certificate. A metering helper passes the metering certificate to a DRM system on the mobile device which collects metering data associated with the metering ID and uses the public key to encrypt the metering data into a metering challenge. The metering helper posts the metering challenge to the location. The metering service extracts the metering data from the metering challenge using a private key and generates a metering response that is received by the metering helper which prompts the DRM system to reset at least a portion of a data store in which the metering data is stored.

Abstract: In some embodiments, a non-transitory processor-readable medium includes code that causes a processor to receive, at a compliance device, a message from a source communication device addressed to a destination communication device. The code causes the processor to analyze at a context engine, the content of the message to determine a first risk level associated with a preference of an organization. The code further causes the processor to analyze at a regulatory engine, the content of the message to determine a second risk level associated with a regulatory standard of a specific industry and to define a composite risk level based on the first risk level and the second risk level. The code further causes the processor to send a notification to an administrator if the composite risk level satisfies a criterion, and to send the message to the destination communication device irrespective of the composite risk level.

Abstract: A derivative work is encrypted using master keys generated from source data extracted from digital sources used to create the derivative work. A software application permits a mix artist to encrypt and stream a derivative work to a worldwide web server, where it is made available to consumers. A software application permits the consumers to acquire and decrypt an encrypted derivative work if the consumer has possession of a corresponding digital source for each of the digital sources used to encrypt the derivative work.

Abstract: A reduced capability subset of an application referred to as a “starter application” is provided on a computer device prior to purchase and intended for use by a user purchasing the computer device. The starter application may monitor input from the user when the starter application is executing to ascertain opportunities to inform the user of an upgrade and then solicit the user for purchasing the upgrade. The starter application may use a limited access browser to contact a server to assist in the solicitation and complete the transaction. Upon completing the transaction, the upgrade is provided to the computing device. The upgrade may comprise the full capability version of the application, templates, clip art, or other software. The upgrade may entail transmitting the upgrade to the computer device or providing an authorization key to unlock the upgrade that is already stored on the computer device.

Abstract: A system and method for allowing requests generated as a result of dynamic URLs to be efficiently looked up in a cache are provided. The system and method involve receiving a request for a content element, the request being generated from a dynamic URL. A static content element identifier is generated from the request. In an embodiment, the static content element identifier includes only the content identification parameters and the dynamic parameters are removed. The static content element identifier is then used to determine whether the content element is in the cache.

Abstract: A controller (900) for transferring media content rights between media devices comprising a memory (906), a user interface (910) and a transceiver (902). The memory (906) stores a list of media devices (914) capable of receiving the permissions associated with the media content from an originating device and an encryption key (920) that may be used to encrypt the permissions. The user interface (910) detects a user selection of a target device from the list of media devices (914). The transceiver (902) communicates an address (916) associated with the target device and the encryption key (920) to the originating device. Thus, the originating device is able to encrypt the permissions using the encryption key (920) and send the encrypted permissions to the address (916) associated with the target device.

Abstract: A method for using time from a trusted host device is disclosed. In one embodiment, an application on a memory device receives a request to perform a time-based operation from an entity authenticated by the memory device, wherein the entity is running on a host device. The application selects time from the host device instead of time from a time module on the memory device to perform the time-based operation and uses the time from the host device to perform the time-based operation. Other embodiments are disclosed, and each of the embodiments can be used alone or together in combination.

Abstract: A method of tracking software application downloads over the internet in which clicking on a web advertisement for a software application causes a user's device web browser to link to a tracking server which creates a unique identifier which is stored by the user's device browser, and also on the tracking server together with an indication of the web page including the advertisement. The user's device web browser then downloads the desired software application which includes executable code which, upon first execution, suspends the downloaded application and starts the browser, directing it to the tracking server and sending the unique identifier to the tracking server together with identification of the device and downloaded software application. The tracking server then uses the unique identifier to correlate the information on the downloaded application with the information originally stored at the time of clicking on the web advertisement.

Abstract: A system for securing patient medical information for communication over a potentially vulnerable system includes separating patient's medical file into a demographics layer and a data layer, separately encrypting the demographic layer and data layer using different encryption keys, and providing servers in a communication and processing system with a decryption key for the layer processed by such server. Medical file data may be separated into more than two layers. Users accessing the system are authenticated using standard techniques. By separately encrypting different parts of a patient medical record, processing and communication of patient medical files by intermediary servers is enabled without risking disclosure of sensitive patient information if such servers are compromised.

Abstract: Systems and methods for performing secure playback of media content are described. One embodiment, among others, is a method for performing secure playback of video in a hardware protection module. The method comprises receiving media content from a media player comprising video data, audio data, and navigation data. The method further comprises receiving digital rights management (DRM) information relating to the media content, removing a portion of the video data from the media content, forwarding the audio data, navigation data, and a remaining portion of the video data to the media player for decoding, and decoding, in the hardware protection module, the portion of the video data.

Abstract: A proactive intellectual property enforcement system is disclosed. File sharing services may be disrupted by uploading a collection of multiple modified versions of a media file. The collection of modified copies may each include a distinct portion of modified and unmodified content. However, even though each modified copy includes a distinct variation of modified and unmodified content, the set of modified files are constructed such that some common portion (or portions) of the media file are always created as the modified version. Thus, a complete, unmodified copy of the media title cannot be reconstructed from the set of modified copies.

Abstract: A derivative work is encrypted using a cipher created from digital sources used to create the derivative work. A software application made available for download permits a mix artist to generate a derivative-encrypted work from a derivative work that the mix artist has created using one or more of the digital sources. The derivative-encrypted work is streamed to a worldwide web server, where it is made available for download by consumers for a fee. The software application is also available for download by the consumers and permits the consumers to purchase and download any available derivative-encrypted work. However, the derivative-encrypted works can only be decrypted if the consumer has possession of a digital source for each of the source art works associated with the digital sources used to create the derivative work.

Abstract: The present invention discloses several methods to strengthen the integrity of entities, messages, and processing related to content distribution as defined by the Open Mobile Alliance (OMA) Digital Rights Management (DRM). The methods use techniques related to the Trusted Computing Group (TCG) specifications. A first embodiment uses TCG techniques to verify platform and DRM software integrity or trustworthiness, both with and without modifications to the DRM rights object acquisition protocol (ROAP) and DRM content format specifications. A second embodiment uses TCG techniques to strengthen the integrity of ROAP messages, constituent information, and processing without changing the existing ROAP protocol. A third embodiment uses TCG techniques to strengthen the integrity of the ROAP messages, information, and processing with some changes to the existing ROAP protocol.

Abstract: Methods and apparatuses for enforcing terms of a licensing agreement between a plurality of parties involved in a particular hardware design through the use of hardware technologies. According to one embodiment, a hardware sub-design includes a license verification sub-design that is protected from user modification by encryption. In one embodiment, a license is generated based on a trusted host identifier within an external hardware device. In one embodiment, each trusted host identifier is unique, and no two integrated circuits share the same trusted host identifier. In another embodiment, the integrated circuit is a field programmable gate array or an application specific integrated circuit. In one embodiment, a license determines how long the hardware sub-design will operate when the hardware sub-design is implemented within an integrated circuit having a trusted host identifier.

Abstract: A content rental system includes one data store for storing rental content. The content rental system also includes a content server for transferring content to one viewing device based upon a received request. The content server is further configured to authorize the transfer of the content from the viewing device to another viewing device.

Abstract: According to a first aspect there is provided a method for associating a file that contains the image with a second file that is identified by input received at a set-top box from a user. According to a second aspect there is provided a method for capturing an image that is displayed on a display device that is associated with the set-top box; and communicating the image over a network. According to a third aspect there is provided a method for adjusting a frame that is displayed on a display device that is associated with the set-top box; capturing an image that is displayed inside the frame on the display device; and processing the image. According to a fourth aspect there is provided a method for capturing an image displayed on a display device associated with the set-top box; associating the image with a rule; and processing the rule to prevent the image from being printed.

Abstract: A system for identifying digital content related to a portion of a block of text receives, automatically or via input by a user, an indication of one or more words included in the block of text. The system searches a database of digital content based on the one or more words and retrieves from the database one or more digital content items or identifiers of digital content items that are related to the one or more words. The system provides the retrieved digital content items or identifiers to the user, and receives a selection of one or more of the provided items or identifiers from the user. The system associates for display or replay the one or more selected digital content items with the one or more words in the block of text. Other embodiments of the system are also disclosed.

Abstract: A system and method for selling software products over a network. The system includes a server computer with access to software products. The system is configured to allow a user to purchase a subscription for the periodic acquisition of selected software products. In one embodiment, as part of the subscription, the user pays an amount during selected billing intervals. In return, the system issues to the user a number of credits for downloading at no additional charge at least one of the software products during a credit interval, which may be equal in length to the billing interval. In one embodiment, the system debits a number of credits in response to fulfilling a user's purchase request. The system may be also configured to deduct credits that are not used within selected credit intervals.

Abstract: An information retrieval system uses phrases to index, retrieve, organize and describe documents, analyzing documents and storing the results of the analysis as phrase data. Phrases are identified that predict the presence of other phrases in documents. Documents are the indexed according to their included phrases. Related phrases and phrase extensions are also identified. Changes to existing phrase data about a document collection submitted by a user is captured and analyzed, and the existing phrase data is updated to reflect the additional knowledge gained through the analysis.

Abstract: A method for securing intellectual property includes establishing contact between an IP server and a client. At least two component codes are shared and pre-stored in both the player and the server prior to ordering the intellectual property. The IP server accepts an order for an intellectual property product from the client. The IP server creates a shared private key based on the pre-stored shared component codes and an additional shared component code at the time the intellectual property product is ordered. The shared private key is not distributed to the player software. The IP server encrypts the intellectual property product with the created shared private key prior to distribution to the client. The intellectual property product further comprises content data and rights data in digital form. The IP server electronically distributes the intellectual property product to the client in encrypted form without the shared private key.

Abstract: A system for physical distribution of secure content to customers and physical collection of secure billing information. A plurality of content storage devices may be provided to a customer, each content storage device including secure content. A billing storage device may also be provided to the customer, the billing storage device including decryption information, which may be used by a media player for decrypting the secure content of the content storage devices to exhibit the secure content to the customer. The content and billing storage devices may be provided to the customer via physical delivery and without electronic data transmission occurring to or from the physical location of the customer. After each billing period, the billing storage device may be received from the customer via physical delivery. The billing storage device includes secure billing information stored in a writeable area, which is associated with the exhibition of secure content to the customer.

Abstract: An approach is disclosed for providing an audio phone card. A telephone call is received for an audio service from a voice station by user. Audio content is transmitted to the user over the telephone call, wherein playback of the audio content is controlled by the user via the telephone call.

Abstract: Novel methods of IP or patent management and monetization based on IP/patent pooling and scoring systems are disclosed. In addition, novel partnership methods with IP producing entities (such as universities) are disclosed which produce incentives and efficiencies far and above other methods. Systems and methods are disclosed for valuation of IP instruments and distribution of IP revenue/proceeds. Examples of methods for scoring IP instruments, using a transactional and event driven point/value system, are disclosed for tracking, monitoring, distribution and allocation of proceeds in a complex pooling arrangement of IP instruments.

Abstract: A server receives a consumer request pertaining to product asset management from a client. The consumer request comprises one or more product-related certificates that associates the client with one or more products. The product-related certificate comprises at least one extended attribute object identifier that has a corresponding product attribute. For each extended attribute object identifier, the server searches a data store to identify a product that corresponds to the extended attribute object identifier and generates a response to the consumer request based on the product that is identified in the data store.

Abstract: Systems and methods are provided for electronically managing content. In one embodiment, information identifying content items found on a page is received from a client system through code embedded on the page. Systems and methods for associating advertisement data with content items are also disclosed.

Abstract: A system, method, and computer program product for managing limited-use software on a host computer having an operating system is disclosed. A software application can be installed in the operating system as a virtualized application using light weight virtualization technology. Rights usage information for the software application is received, the rights usage information comprising a rule describing permitted use of the software application on the host computer. A determination is made whether to enable the virtualized application based at least in part on the rights usage information. Responsive to the determination, the virtualized application is enabled to be executed on the host computer.

Abstract: A system and method for managing use of items having usage rights associated therewith. The system includes an activation device adapted to issue a software package having a public and private key pair, the public key being associated with a user, a license device adapted to issue a license, a usage device adapted to receive the software package, receive the license and allow the user to access the item in accordance with the license, and a subscription managing device adapted to maintain a subscription list including the public key associated with the user. License's is issued by the license device upon verifying presence of the public key in the subscription list corresponding to requested content.

Abstract: Generally, the present disclosure provides a system and method configured to prevent unauthorized copying of video content in a mobile device. The method may use virtualization technology to prevent unauthorized copying of the premium video content. A user OS may operate in a virtual machine. A hypervisor may be configured to prevent an application and/or a corrupted OS from reading premium video content from video memory. The hypervisor may be configured to prevent direct memory access to the video content in the video memory.

Abstract: Generally, the present disclosure provides a system and method configured to prevent unauthorized copying of video content in a mobile device. The method may use virtualization technology to prevent unauthorized copying of the premium video content. A user OS may operate in a virtual machine. A hypervisor may be configured to prevent an application and/or a corrupted OS from reading premium video content from video memory. The hypervisor may be configured to prevent direct memory access to the video content in the video memory.

Abstract: Techniques are provided for securely delivering media data. A requestor is directed to a secure streaming portal after being authenticated. A requesting application contacts the secure streaming portal and requests media data. A configuration header having a key for decrypting the media data is sent to the requesting application using secure communications. The media data is dynamically encrypted using the key and streamed to the requesting application. The requesting application uses the key and decrypts the encrypted media data for consumption.

Abstract: A method and apparatus for placing a time stamp in a remotely applied watermark is disclosed. The method permits a time stamp of high resolution to be added remotely while minimizing the number of bits necessary in the time stamp.

Abstract: Usage rights for a digital work are established prior to creation of the corresponding content. The rights can be associated with the content after the content is created. A content creation, such as a video recorder or a still camera, device can store labels of the rights and can associate usage rights with content in real time as the content is created.

Abstract: A system for remotely reviewing medical data allows medical data to be transmitted over a vulnerable network to a physician's mobile device. The system includes a console, a data server and mobile devices. The system may include medical imaging equipment, medical records databases, and other sensors. Medical data is routed through the console to the data server to reach the mobile device via a wireless network. Patient's medical file may be separated into a demographics layer and a data layer, and separately encrypted using different encryption keys for the demographic layer and the data layer. Servers in the communication and processing system are provided with a decryption key for the layer processed by such server. Physicians may transmit comments to the requestor through the same system. A resident messaging system may notify users of messages or data awaiting review along with the urgency of the required review are also described.

Abstract: A system for remotely reviewing medical data allows medical data to be transmitted to a nurse's mobile handheld device from medical equipment or data storage. The system includes a console, a data server and mobile handheld devices; the data server may be a software component within the console. The system may further include medical imaging equipment, medical records databases, and other sensors and servers. Medical data is routed through the console to the data server to reach the mobile handheld device via a wireless network. After reviewing the data, nurses may transmit their comments from their mobile handheld device to the requester by going through the same system. The data server may further include a resident messaging system that communicates to the mobile handheld device such that the user is notified of messages or data awaiting review along with the urgency of the required review are also described.

Abstract: A method for remotely reviewing medical data allows medical data to be transmitted over a vulnerable network to a physician's mobile device. The method sends data to be transmitted through a console, and a data server to reach the mobile device. The method includes separating patient's medical file into a demographics layer and a data layer, separately encrypting the demographic layer and data layer using different encryption keys, and providing servers in a communication and processing system with a decryption key for the layer processed by such server. Medical file data may be separated into more than two layers. After reviewing the data, physicians may transmit their comments from their mobile device to the requestor by going through the same system. Separately encrypting different parts of a patient medical record enables processing and communication of patient medical files by intermediary servers without risking disclosure of sensitive patient information.

Abstract: A system for securing patient medical information for communication over a potentially vulnerable system includes separating patient's medical file into a demographics layer and a data layer, separately encrypting the demographic layer and data layer using different encryption keys, and providing servers in a communication and processing system with a decryption key for the layer processed by such server. Medical file data may be separated into more than two layers. Users accessing the system are authenticated using standard techniques. By separately encrypting different parts of a patient medical record, processing and communication of patient medical files by intermediary servers is enabled without risking disclosure of sensitive patient information if such servers are compromised.

Abstract: A method for providing protected content, wherein content usage rights information and/or usage state information is embedded into obtained primary data that serves as a basis for a content item to be provided thereby providing the primary data with the embedded content usage rights information and/or usage state information as the content item.

Abstract: Methods and systems for communicating a patient medical file having personal demographic information, medical data and a diagnostic image include separating the file into layers including a demographic layer demographic information and a data layer. Medical data may be evaluated using an auto-analysis. The demographic layer may be encrypted with a first encryption key, and the data layer may be encrypted with a second encryption key different from the first. The encrypted demographic and data layers may be sent to a server capable of decrypting one of the layers but not both. The data layer may be decrypted at the server and an operation performed to select a second portion of the diagnostic image. The portion of the processed data layer including the selected second portion of the image may be re-encrypted and the encrypted demographic layer and re-encrypted data layer may be transmitted to a mobile device.

Abstract: A method, service, and product for hiding a watermark existing in a digital media within a software application, comprising creating a set pattern of pixels represented by coordinates which represent a red, a green, a blue, and an alpha level of color, where the set pattern of pixels covers a set of original pixels within the digital media. The method including determining whether the transparency level of color should be removed from the set pattern of pixels based on a known pixel transparency removal parameter; and modifying the set pattern of pixels to remove the transparency level of color coordinates, wherein an original pixel color can be seen because the set pattern of pixels are made transparent; or not modifying the set of pixels to remove the transparency level of color coordinates, wherein the original pixel color cannot be seen because the set of original pixels is made transparent.

Abstract: Methods and apparatus are disclosed for facilitating online storage of files (e.g., audio tracks, video, etc.) for playback/access or sale/exchange by the owners of the files without violating copyrights that copyright holders have in the files. For example, by providing a playback service that does not store additional versions of an audio file when the file is transmitted to, and immediately played on, a user device without buffering, the present invention avoids violating copyright laws by not making copies of the file. Numerous other aspects are disclosed.

Abstract: A video file system for an aircraft carrying a person having a personal electronic device (PED) for displaying video files includes a ground-based video server and an aircraft-based video system. The ground-based video server stores video files, with each video file being updatable from an available status to an unavailable status. The aircraft-based video system copies video files from the ground-based video server while the aircraft is on the ground. A determination is made, via communications with the ground-based video server and while the aircraft is airborne, whether a given video file has been updated from the available status to the unavailable status. The PED is permitted to display the given video file if it has the available status, and is not permitted to display the given video file if it has the unavailable status.

Abstract: The present embodiments provide methods, apparatuses, and systems to distribute content over a network. Some embodiments provide methods to distribute content within a local media network. These methods receive a request for a first content to be transferred to a sink device, request from the source an access criteria for a first content that is protected according to a first digital rights management (DRM), forward the access criteria to the sink device, receive an evaluation of the access criteria from the sink device regarding at least whether the sink device can interpret the first DRM, determine according to the evaluation received from the sink device whether the sink device can utilize the first content that is protected according to the first DRM, and initiate a transfer of the first content from the source device to the sink device when the sink device can utilize the first content.

Abstract: A digital Rights Management (DRM), and particularly an apparatus and method of authentication between DRM agents for moving Rights Object (RO) is provided, whereby RO and contents can be moved between DRM agents after a simple authentication therebetween using specific authentication information received from a Rights Issuer (RI), in case where the RO is moved in a user domain or among a plurality of DRM agents.

Abstract: A highly configurable kernel supports a wide variety of content protection systems. The kernel may reside in a host that interacts with a secure processor maintaining content protection clients. After establishing communication with the secure processor, the host receives messages from content protection clients requesting rules for message handling operations to support client operations. This flexible configuration allows for dynamic reconfiguration of host and secure processor operation.

Abstract: Interoperability of protected content items between computing devices is facilitated by providing content items having a standard representation, and media players having support for the content item representations. The representation of the content item may be limited by a profile as to the elements it contains. The elements allowed in the content item may also be limited.

Abstract: Systems and methods are disclosed for providing secure, captured data in a customer center. In one embodiment, the method comprises: capturing data with a recording system; receiving a request to retrieve electronic keys for encrypting the data; responsive to receiving the request, transmitting the electronic keys to the recording system; encrypting the data using the electronic keys; associating the electronic keys with the encrypted data; and storing the encrypted data in the recording system.

Abstract: A system for identifying digital content related to a portion of a block of text receives, automatically or via input by a user, an indication of one or more words included in the block of text. The system searches a database of digital content based on the one or more words and retrieves from the database one or more digital content items or identifiers of digital content items that are related to the one or more words. The system provides the retrieved digital content items or identifiers to the user, and receives a selection of one or more of the provided items or identifiers from the user. The system associates for display or replay the one or more selected digital content items with the one or more words in the block of text. Other embodiments of the system are also disclosed.