Abstract: A configuration is provided which enables usage management and secure data management of data newly generated or obtained that is different from data already stored in an information recording medium. New data such as information which the user has newly generated or downloaded related to content information increments of content management information stored in an information recording medium is recorded as configuration data of the content management unit, in the form of encrypted data to which a unit key corresponding to the content management unit, or a unit key corresponding to a new content management unit, has been applied. According to this configuration, secure data management and usage management is realized for new data the same as with data corresponding to original units.

Abstract: A content transfer system for transferring content between a source device transmitting the content and a sink device receiving the content, includes a content specifying unit for specifying the content to be transferred between the source device and the sink device, an authentication unit for performing an authentication exchange key process between the source device and the sink device, a content transfer unit for performing a content transfer process by encrypting and transferring the content specified by the content specifying unit from the source device to the sink device using the key exchanged by the authentication unit, and a content transfer finalizing unit for performing a content transfer finalizing process by validating the content at the sink device and invalidating the original content at the source device in response to the end of the content transfer process performed by the content transfer unit, the content thus being moved from the source device to the sink device.

Abstract: A method for controlling the release of an as-rendered configuration of a digital work, comprising the steps of presenting said digital work as a composite of a plurality of layers comprising at least a first layer and a second layer; providing a rendering protocol interface which is adapted for defining said as-rendered configuration of the digital work by specifying a first rendering status of said first layer and a second rendering status of said second layer; providing a rendering protocol facility adapted for storing and controlling the release of said first and second rendering status of said first and second layers respectively in accordance with said as-rendered configuration; restricting unauthorized access to the rendering protocol interface, thereby preventing unauthorized modification of said as-rendered configuration; and releasing said digital work with said as-rendered configuration. The method has application in selling books, movies, software, music and other information products.

Abstract: A system and method for preventing piracy of a given software application limits the number of times that such software application is activated. A given software application must be activated in order to become fully functional. The user must provide a unique software identification code, relating to the specific software which the user is attempting to activate, to a remote provider. The remote provider determines the number of times that such specific software has already been activated, and provides an activation code to the user unless the number of activations exceeds a predetermined threshold. Once activated, the software becomes fully operational, and the user is allowed complete access to its functions.

Abstract: A content of Copy Once cannot be copied to an external device or the like, even for the purpose of making a backup. This is inconvenient for the user. However, if copying to another device for the purpose of making a backup is permitted, the content may be copied in an unauthorized manner. The present invention provides the hard disk recorder that transmits the content to the backup device, sets an expiration time in the content stored in the hard disk recorder itself, and deletes the content stored in the hard disk recorder itself after the expiration time expires.

Abstract: A technique for film marking includes coding a print identifier into a binary-coded serial number; identifying particular frames (bit frames) that will be used to convey the bits (binary digits) of the binary-coded serial number and marking these bit frames in accordance with the particular bit values of the binary-coded serial number. The presence of a predefined mark on a bit frame is representative of a binary digit having a value of one, while the absence of the predefined mark on a bit frame is representative of a binary digit having a value of zero.

Abstract: Technologies to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: A storage section stores a data belonging to a first group and data belonging to a second group, the first and second groups being distinguishable from each other. A communication section communicates with another game apparatus. A transmission control section transmits at least one piece of data of the data stored in the storage section to another game apparatus using the communication section. A reception control section receives the data transmitted from another game apparatus using the communication section. In this configuration, a game apparatus stores the data received using the reception control section, as data belonging to the second group, into the storage section.

Abstract: A method and system for encouraging users of computer readable content to register. The method involves embedding in the computer readable content, instruction codes operable to direct a processor circuit to automatically establish a connection to a server, when the content is in use by the processor circuit, to transmit registration information to the server and operable to control further use of the content by the processor circuit in response to a key received from the server.

Abstract: A content recording apparatus includes a key selecting unit that selects an encryption key for performing an encrypting process to adjunct data from pieces of information recorded on a recording medium, when a user generates the adjunct data which is data derived from a title content, wherein the recording medium records thereon a title key for encrypting the title content as program content and content data including the title content encrypted by the title key. The content recording apparatus also includes an encryption processing unit that performs an encrypting process to the adjunct data by the selected encryption key; and a recording unit that records the adjunct data to which the encryption process is performed and the selected encryption key in the recording medium.

Abstract: Access to content may be administered by storing content, the content comprising one or more selections, accessing a passive optical out-of-band token associated with the content, determining an access right for the content based on the passive optical out-of-band token, and enabling access to the content in accordance with the access right.

Abstract: A block-level storage device is provided that implements a digital rights management (DRM) system. In response to receiving a public key from an associated host system, the storage device challenges the host system to prove it has the corresponding private key to establish trust. This trust is established by encrypting a secure session key using the public key. The host system uses its private key to recover the secure session key. The storage device may store content that has been encrypted according to a content key. In addition, the storage device may encrypt the content key using the secure session key.

Abstract: A method of preventing use of an illegally copied optical medium comprises the step of identifying the media type of the optical medium to determine whether the optical medium is an original version or an unauthorized copy. If the media type indicates that the optical medium is an original version, use of the optical medium is not prevented. If the media type indicates that the optical medium is an unauthorized copy, use of the optical medium is inhibited. The media type can be identified by reviewing a medium-type code field contained in a mode parameter header of the optical medium, which corresponds to the media type of the optical medium, and is a feature integrated into the media that cannot be copied.

Abstract: A method to apply a protection mechanism to a binary object includes using operating system resources to load a binary object from a storage medium along with a manifest and a digital signature. Authentication of the binary object is performed using the digital signature and the manifest is read to determine a category of protection for the binary object. The operating system selects a protection mechanism corresponding to the protection category and injects protection mechanism code, along with the binary object into a binary image on computer RAM. When the binary image is accessed, the protection mechanism executes and either allows full access and functionality to the binary object or prevents proper access and operation of the binary object. The protection mechanisms may be updated independently from the information on the storage medium.

Abstract: In one embodiment, a storage device with biometric access includes: a biometric scanner adapted to scan a biological feature of a user to provide a corresponding extracted biometric template; and a storage engine adapted to retrieve an encrypted biometric template from a storage medium and to retrieve a corresponding encrypted content key from the storage medium. The storage engine generates a first key and combines the first key with a media identifier from the storage medium to provide a content key. Using the content key, the storage engine decrypts the retrieved encrypted biometric template. If the extracted biometric template matches the retrieved biometric template, the storage engine grants a user access to content on the storage medium.

Abstract: A system for protecting software against piracy while protecting a user's privacy enables enhancements to the protection software in a user device and extended protections against piracy. The protection system allows the user device to postpone validation of purchased tags stored in a tag table for installed software and to re-establish ownership of a tag table to recover from invalidation of a tag table identifier value resulting from revelation of a tag table identifier value. Continued use of the tag table is provided by the use of credits associated with a tag table. A protection center is protected against denial of service attacks by making calls to the protection center cost time or money to the attackers.

Abstract: A method, apparatus and computer program product for providing protection for a document is presented. Document content of the document is obtained. An occurrence of a security code within the document content is detected, the security code associated with the document content. A security policy associated with the security code is identified. The identified security policy is then applied to the document content.

Abstract: In one embodiment, the present invention includes a method for executing an application to perform voice over Internet protocol (VoIP) telephony, requesting a hardware key from a line interface device, comparing the hardware key to a software key associated with the application, and enabling the VoIP telephony if the keys match.

Abstract: An information processing device that executes processing for outputting recording data to an information recording medium includes a storing unit that stores common data that includes encrypted content, key information applied to decoding of the encrypted content, and content management information and, data content of which is unchanged even if a medium as a data recording destination is changed, a media-specific-data generating unit that generates media specific data, data content of which is changed according to the medium as the data recording destination, an output-data generating unit that generates output data based on the common data and the media specific data, and a data outputting unit that outputs the data generated by the output-data generating unit.

Abstract: An arrangement for managing a media file having an associated DRM license is provided by enabling the copying of the media file stored on a source medium to a target medium only when both the source medium and the target medium are held in custody by a media server. The media server writes a copy of a media file and a copy of the associated DRM license from the source medium to the target medium. Upon confirmation that the copy of the DRM license was successfully written to the target medium, the DRM license and media file on the source medium are overwritten. The result is that the target medium contains both the media files and the DRM licenses which are locked to the target medium.

Abstract: A system and method are provided for imaging job authorization. The method comprises: an authorization server receiving a request from a first node print subsystem to communicate an imaging job; in response to analyzing imaging job information, sending an access inquiry to a second node; the authorization server receiving an authorization, including a one-time use public encryption key, from the second node; sending a confirmation, including the public key, to the first node print subsystem; the first node encrypting the imaging job using the public key; sending the encrypted imaging job to the second node from the first node; and, the second node decrypting the imaging job using a private key corresponding to the public key. The analyzed imaging job information used for access control may include user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, or imaging job options.

Abstract: Methods and apparatuses for time-based access to digital content are provided. Access to a set of digital content is provided for a predetermined period of time. During the predetermined period of time, a user can access (e.g., download, play) any digital content in the set of digital content. At the end of the predetermined period of time, the user is denied access to the digital content regardless of where the content is stored (e.g., in a digital content library, on a computer system controlled by the user, on a playback device controlled by the user). Simplified access and control of digital content is thereby provided in the form of time-based access.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for controlling capabilities of a user software application. A user software application is provided, the user software application including a set of disabled operations. Content capable of being operated on by one or more of the disabled operations in the set of disabled operations is received. Application rights information operable to enable an operation in the set of disabled operations to operate on content within a context specified in the application rights information are received and the operation in the set of disabled operations is enabled to operate on the received content. Methods and apparatus for providing content to be operated on by a user software application and methods and apparatus for providing a configurable, context-dependent user software application are also described.

Abstract: A Trusted Activation License (TAL) can be comprised of a key unique to a Trusted Platform Module (TPM) and identifying information of the software applications bundled with the computing device having that TPM. To activate the software applications, the identifying information in the TAL can be compared against that of the software applications being activated, and the unique TPM key in the TAL can be compared against that of the TPM on the computing device on which the activation is taking place. Subsequent validations can be based on a protected association between the TAL and an Attestation Identity Key (AIK) that can be generated by the TPM as part of the activation step. Optionally, Platform Configuration Registers (PCRs) of the TPM can be periodically changed during validation to protect against useage of one TPM for validations on multiple computing devices.

Abstract: A method of deactivation after software being activated online is provided, including: online-activated software sending a deactivation request message and its license key to a network server; the request being validated by the server inquiring its file system; if the request being valid, the server changing the status of the license key into “deactivated” or deleting the license key and its associate information in its file system and sending a deactivation permission message to the software; after receiving the deactivation permission message the software deleting or modifying local activation information promptly to ensure the software cannot run in activated status any more. By this method, an activated software user could initiatively deactivate the software on its current hardware device and then activate the software on another hardware device. The method of the invention enables user to transfer the software license to another hardware device initiatively.

Abstract: Systems and methods related to concealing mathematical and logical operations in software. Mathematical and logical operations are disguised by replacing them with logically equivalent expressions. Each equivalent expression has at least two expression constants whose values are based on scaling and bias constants assigned to variables in the original mathematical or logical operation. Each of the expression constants may also be based on additive or multiplicative inverses modulo n of the scaling and bias constants. By replacing the original operations with more complex but logically equivalent expressions containing variables that also involve more operations, the true nature of the original operations is disguised.

Abstract: A method to procure and audit digital rights management (DRM) event data by collecting a first set of event data in a first event data format, converting the first set of event data to one or more standardized event data formats, and communicating the first set of event data to an event data collection server for storage. The method may also include collecting a second set of event data in a second event data format, converting the second set of event data to one or more standardized event data formats, and communicating the second set of event data to the event data collection server for storage. The method may also include storing the first and second sets of event data in a centralized repository, authorizing access to the event data, and performing an event data audit corresponding to the event data.

Abstract: Techniques and mechanisms for controlling copying of content from a secured file or secured document are disclosed. In one embodiment, the techniques or mechanisms operate to control clipboard usage such that content from a secured document of one application is not able to be copied to another application or a different document of another application by way of a clipboard. According to another embodiment, alternate content is copied to another application or a different document of another application instead of the content from the secured document.

Abstract: Generation/non-generation of print data for a printer driver is controlled in correspondence with an external print policy for a document to be printed. The print policy includes a print policy file, and defines print-inhibited items in a predetermined description. The predetermined description includes a description directly stored in the print policy file, and a description that requires an external reference.

Abstract: If it is not a time zone of confidential mode and there is a print job to be executed, a print process is performed based on the print job, but if there is not a print job to be executed, non-confidential data stored in a HDD device is completely deleted. In the time zone of confidential mode, a determination is made as to whether or not there is non-confidential data, and after deleting the non-confidential data, a print process based on a print job to be executed is performed. The confidentiality of data is maintained without decreasing the processing efficiency of image formation.

Abstract: A recording medium, such as a high-density and/or read-only recording medium, such as BD-ROM, which includes copy protection indicating information, which can identify whether copy protection information is needed or not for the playback of contents stored on the recording medium, and to methods and apparatuses for forming, recording, and reproducing data on the recording medium.

Abstract: Described is a method for secure data disposal. Data stored in storage volume(s) is encrypted with a specific encryption key. Before the key is disposed of, a clear text string is encrypted with the same key and the encrypted data is associated with the clear text string and stored in a repository. When a new key is created to encrypt a new volume, each of the encrypted data in the repository is checked to determine whether the encryption of the associated clear text string using the new key generates the same encrypted string as the stored encrypted data. If the result of the encryption of the clear text string matches at least one stored encrypted string, the associated new key is not used and another key is generated until the new key results in an encrypted string which does not match any stored encrypted strings.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for controlling capabilities of a user software application. A user software application is provided, the user software application including a set of disabled operations. Content capable of being operated on by one or more of the disabled operations in the set of disabled operations is received. Application rights information operable to enable an operation in the set of disabled operations to operate on content within a context specified in the application rights information are received and the operation in the set of disabled operations is enabled to operate on the received content. Methods and apparatus for providing content to be operated on by a user software application and methods and apparatus for providing a configurable, context-dependent user software application are also described.

Abstract: A recording apparatus according to the present invention comprises converting means 15, 18, and 19 and recording means 23, 24, 32, and 33. The converting means 15, 18, and 19 convert the data structure of data into a file structure handled by software. The recording means 23, 24, 32, and 33 record data on a record medium. The file structure has a first data unit as entity data, a second data unit as a set of a plurality of first data units, and a data portion describing management information for managing the relation of the plurality of first data units and attributes of entity data of the first data units. The data portion contains security information for protecting intangible property rights of data.

Abstract: A method of recognizing an audio and/or visual format in a digital transmission network such as the Internet wherein formats include a quasi-continuous or divided in packets sequence of data, at least part of the sequence of data is analyzed for the presence of one or more bit patterns, and a notice is given in response to recognition of a predetermined format in an analyzed bit pattern.

Abstract: A multimedia client/server system includes a multimedia server module that is coupleable to a plurality of multimedia sources that produce at least one multimedia signal. The multimedia server module includes an encoder module that asserts a protection present signal when the at least one multimedia signal includes a copy protection signal, that generates an output signal with the copy protection signal removed when the protection present signal is asserted, and that encodes the output signal to produce an encoded signal. A server transceiver module produces a radio frequency (RF) signal that includes the encoded signal and the protection present signal, and that wirelessly transmits the RF signal.

Abstract: The tracking control module is adapted to track time usage (e.g., during a user's subscription to a particular service) on a disconnected client over a period of time with limited server interaction in a manner that is not likely to be affected by system clock changes. The module is designed to take an initial read when an executable associated with the service starts. As the program runs, the running time during the service life can be tracked by the module based on computer cycles that occur over the service life rather than on the system clock. In some embodiments, the system clock is only relied upon to track the time between service lives during which the program is asleep, thus minimizing the affect any system clock changes would have on the accuracy of the time estimate. The module adjusts the time left in the service period according to the time determinations.

Abstract: An optical disc is authenticated by measuring physical attributes of the disc. A challenge is presented to the drive comprising the disc. The challenge includes locations on the disc to be used for authentication. The locations are determined each time the disc is to be authenticated. No restriction is placed on the locations on the medium, and no restriction is placed on the number of locations. Locations on the disc are accessed and an answer to the challenge is calculated in accordance with a physical attribute pertaining to the locations. The answer can include an angle between the locations, the physical separation between the locations, an amount of time elapsed between detection of the locations, an amount of time taken to read data between written between the locations, or a number of rotations occurring between detection of the locations. The answer is analyzed to determine the validity of the disc.

Abstract: There is disclosed a method for generating data for a recording medium. The method includes receiving original content data representing a plurality of still images and identifying a first subset of the still images to be recorded with copy-protection and a second subset of the still images to be recorded without copy-protection. The method also includes converting data representing the first subset into moving image data and copy-protecting the moving image data. The method also includes generating new content data, the new content data including the copy-protected moving image data and data representing the second subset.

Abstract: Methods and devices for transferring data from a non-volatile memory to a working memory of an electronic data processing device are provided. Security data is copied from the non-volatile memory to the working memory. The security data is to be write-protected. A blocking function is activated for the security data in the working memory. The activation is triggered by the copying being made to the working memory. All communication with the working memory is monitored. All write attempts to the copied security data stored in the working memory are blocked according to the blocking function. At least activating a blocking function, monitoring communication and blocking write attempts are performed independently of a central processing unit of the electronic data processing device, such that the central processing unit cannot manipulate the security data.

Abstract: A tamper-resistant electronic circuit is configured for implementation in a device. The electronic circuit securely implements and utilizes device-specific security data during operation in the device, and is basically provided with a tamper-resistantly stored secret not accessible over an external circuit interface. The electronic circuit is also provided with functionality for performing cryptographic processing at least partly in response to the stored secret to generate an instance of device-specific security data that is internally confined within said electronic circuit during usage of the device. The electronic circuit is further configured for performing one or more security-related operations or algorithms in response to the internally confined device-specific security data. In this way, secure implementation and utilization device-specific security data for security purposes can be effectively accomplished.

Abstract: Recording information used in determining a licensing fee related payment is disclosed. An application is provided without a component associated with the application, where the component is associated with a licensing fee. Information associated with obtaining the component for use with the application is received. At least some of the received information is recorded, where the recorded information is used in determining licensing fee related payment to be paid for the component.

Abstract: A system and method for using a custom media library to secure digital media content on a computing system is disclosed. The method includes directly linking the custom media library with a copyright compliance mechanism (CCM)-enabled playback/recording application. In addition, the custom media library generates a new pathway distinct from a commonly used data pathway of the CCM-enabled playback/recording application and a media rendering subsystem of an operating system. Also, a CCM is alerted to monitor a plurality of media subsystems of the computing system. In so doing, a raw media file may be securely passed from the CCM-enabled playback/recording application via the custom media library and over the new pathway to a media subsystem of the operating system that is monitored by the CCM, such that the raw media file is rendered, playable and copyable in a secure environment.

Abstract: A system and method of secure copy and/or playback control of a usage protected frame-based work is disclosed. The method includes accessing serial copy management system information for the usage protected frame-based work. In addition, the method validates the serial copy management system information. Copy management information of the usage protected frame-based work is also accessed. In so doing, the copy management information is utilized to determine if a secure copy/playback application is authorized to generate a copy of the usage protected frame-based work. Thus the copy management information acts as a technological measure which “effectively controls access to a work” by requiring the application of information, with the authority of the copyright owner, to gain access to the work.

Abstract: An image processing apparatus authorizing the use thereof by carrying out user authentication prevents fraudulent use of the processor and/or a data leak due to a user's forgetting invalidation of authentication or other reason. When a user is authenticated, whether the user is authorized to use a DMFP is determined by comparing the user's input information with the information of an access-authorized person stored in the DMFP. When both information matches, a range of functions available for the user are specified, and the user is authenticated. Subsequently, for example, operation of copy setting is carried out in making setting on the DMFP. When the setting operation is over, whether authentication on the user is invalidated is determined to execute processes of copy setting, etc. In response to a trigger of invalidation of authentication on the user, the processes of copy setting, etc., are started.

Abstract: A rights management system is described in which, subsequent to recording a media resource, client-side equipment receives and stores recording definition information (RDI). The RDI provides information that can be used to recover the keys used to decrypt the media resource. When a client device subsequently wishes to consume the media resource, it can forward the RDI to an operations center. At the operations center, a transcription module validates the client device's rights and converts the RDI into client targeted information (CTI) by recovering the keys used to decrypt the media resource. The client device receives the CTI from the transcription module and uses it to consume the media resource. The CTI has an expiration date, after which it can no longer be used.

Abstract: A system and method for conducting electronic commerce are disclosed. In various embodiments, the electronic transaction is a purchase transaction. A user is provided with an intelligent token, such as a smartcard containing a digital certificate. The intelligent token suitably authenticates with a server on a network that conducts all or portions of the transaction on behalf of the user. In various embodiments a wallet server interacts with a security server to provide enhanced reliability and confidence in the transaction. In various embodiments, the wallet server includes a toolbar. In various embodiments, the digital wallet pre-fills forms. Forms may be pre-filled using an auto-remember component.

Abstract: Providing subscription management in local communication regions. Upon detecting a computing device of a user within a predefined proximity, a media server provides the user with access to a corresponding user profile maintained by a media service. The user profile includes subscription information defining access by the user to media content items available from the media service. The user creates or renews a subscription to the media service while connected to the media server, and subsequently receives media content items from the media service.

Abstract: Subversive DSV (SDSV) sequences of data symbols having a large absolute value of DSV are extremely valuable in the copy protection of optical discs as they can induce uncorrectable read errors. However, very few SDSV sequences of data symbols can be found in multimodal codes such as Eight-to-Sixteen Modulation (ESM) utilised in DVDs. It is required to select data symbols, for encoding using a multimodal code, which are capable of forcing an encoder to produce at least one subversive sequence of code words. A possible code word for a data symbol is selected if the code word has a large absolute value of DSV and there are no alternative code words, or all alternative code words are equivalent, or all alternatives except one are ruled out by RLL rules.

Abstract: A method, computer program product and computer platform for delivering allowing an advisory services provider to provide advisory services to an organisation is described. Information relating to a plurality of different topics is accessible over a computer network by a plurality of end users of the organisation. Access to the information by the end users is monitored. It is determined when information relating to a topic identified as being high risk or complicated has been accessed by an end user. The method then ensures that a communication between the end user and an individual authorised to advise on the topic is initiated to allow advice to be provided to the end user. The advisory services platform can include a content delivery module operable to provide a website to the end users and also operable to monitor and track access to the information by end users.