Abstract: A method for identifying additional content information to a content consumer, is disclosed. The additional content information relates to a content item selected for consumption by the content consumer. The method comprises: receiving data published by a content provider (203,205), wherein said data describes content information (207) available from said content provider; indexing said data thereby producing indexed data; storing said indexed data in a database (217); receiving a search request from a content consumer, said search request requesting said additional content information; searching said database (217) for data describing said additional content information; and identifying said additional content information by returning data identified during said searching to said content consumer.

Abstract: Apparatus comprising a secure time element comprising a timing device that outputs to a plurality of delay devices, wherein the delay devices have characteristic delay times which are alterable as a result of a tampering attempt to tamper therewith, and wherein a characteristic delay time of one of the delay devices changes differently from another one of the delay devices as a result of the tampering attempt.

Abstract: A method for frustrating piracy of a movie, the movie including a plurality of filmed frames, each of the filmed frames including an image, the method including editing the movie prior to projection such that different regions of the image of one of the filmed frames are in different frames so that the different regions will be projected at different times, and repeating the editing for other ones of the filmed frames. Related apparatus and methods are also described.

Abstract: A data modeling method for modeling data for an electronic program guide (EPG) at a broadcast headend is described.

Abstract: A rights validator system for controlling access to content, the system including a query processor to receive a rights query and to provide a result to the rights query based on an estimated time, and a time-based query response module operationally connected to the query processor, the time-based query response module being operative to determine the estimated time as a function of a most recently updated time, and a plurality of indications of elapsed time since the most recently updated time, the indications of elapsed time being from a plurality of different sources of time indication. Related apparatus and methods are also included.

Abstract: A method and system of optimizing strings comprised in program guide data for transmission is described. The method includes sharing, in the program guide data, a plurality of strings, each string among the plurality of strings including a shared sorting key, implementing an order access of a sorted sharing index, wherein the program guide data and the shared sorting key are comprised in the same data storage structure. Related methods and apparatus are also described.

Abstract: A key production system to determine a cryptographic key for a selected cryptoperiod being later than or equal to a cryptoperiod-A, and earlier than or equal to a different cryptoperiod-B, the system including a first receiver to receive a first key-component, associated with cryptoperiod-A, forming part of a first hash-chain progressing via a first one-way function, progressive key-components corresponding to later cryptoperiods, a second receiver to receive a second key-component, associated with cryptoperiod-B, forming part of a second hash-chain progressing via a second one-way function, progressive key-components corresponding to earlier cryptoperiods, first and second key-component determination modules to determine key-components in the first hash-chain and the second hash-chain, respectively, for the selected cryptoperiod, and a key determination module to determine the cryptographic key based on the key-components in the first and second hash chain for the selected cryptoperiod.

Abstract: A method for controlling access to content, including preventing access to content that corresponds to a blacked out event, until at least one of a time criterion and payment criterion is met. Related methods and apparatus are also disclosed.

Abstract: A method for protecting content on a medium (120), the method including providing a medium (120) including a token (130), the token (130) implementing at least a portion of a keyed function, providing a plurality of token inputs, each token input being suitable for input to the token (130), providing a first encryption method and a first encryption key, for each one of the plurality of token inputs inputting the token input to the token and receiving a token output from the token, and converting the token output to a function output, the function output representing a result of performing the keyed function on a function input corresponding to the token input, and storing an ordered pair including the function input and the function output, thereby producing a plurality of ordered pairs (160), encrypting the plurality of ordered pairs (160) using the first encryption method and the first encryption key, thereby producing an encrypted plurality of ordered pairs (170), and storing the encrypted plurality of ord

Abstract: A method for enforcing use of certificate revocation lists in validating certificates, the lists being associated with a series of list generation indices such that each list is assigned one index which advances according to a time of generation of the list, the lists and the indices being cryptographically signed, the method including receiving one of the lists and an associated index as an identifier of the one list, checking the certificates against the list, associating each of the certificates, which have been checked against the list, with the index, receiving an enforcement generation index (EGI) associated with a latest list in use, storing the EGI as a last known EGI, and refusing performance of an action associated with a certificate if the one index of the one certificate is earlier in the series than the last known EGI. Related apparatus and methods are also included.

Abstract: A subscriber unit for use in a television system including a television network and transmitting apparatus for transmitting program schedule information, the subscriber unit including a receiving unit for receiving the program schedule information from said television network, an icon-based guide generator for producing a program guide including an icon-based hierarchical program guide including the program schedule information, and display apparatus for displaying the program guide, the icon-based hierarchical program guide including a plurality of hierarchically-arranged screens each including at least one icon. Related apparatus and methods are also disclosed.

Abstract: A method for processing a data stream including receiving a transport stream (TS), storing at least a portion of the TS, the at least a portion of the TS having a beginning and including a plurality of TS packets, determining, from among the plurality of TS packets, at least one TS packet including a candidate access point, storing in an index store a byte offset of the candidate access point; and storing in the index store a plurality of indications of byte offset, each byte offset being associated with an arrival time of a received TS packet.

Abstract: A system and a method for providing variable security mechanisms for securing digital content, in which a single security mechanism is not used for all content. Instead, at least one characteristic or feature of the security mechanism is varied between units, instances or categories of content. Therefore, even if unauthorized access is gained to a single unit of content, the overall integrity and security of the system for content distribution is not compromised. Preferably, security is provided through a general mechanism, which is then varied in order to provide variable, dissimilar security schemes for different types of content. By “type of content”, it is meant any of a single unit of content, a single instance of content or a single category of content. For example, for a category of content, the content may be characterized according to the identity of the content itself, such as the title of a movie for example, and/or according to the owner of a particular copy of the content.

Abstract: A block cipher system for encrypting a plurality of blocks from plaintext to ciphertext, each of the blocks being associated with a constant root key, the system including an encryption key module to determine an input key for each of blocks based on a function having a plurality of inputs including the root key and an initialization vector, for a first one of the blocks, and the plaintext of at least one of the blocks which was previously encrypted and the root key, for the blocks other than the first block, and an encryption module to encrypt each of the blocks based on the input key determined for each of the blocks, respectively. Related apparatus and methods also included.

Abstract: A video substitution method for use with a Digital Video Recorder (DVR) which is operative to store video is disclosed.

Abstract: A method is described for securing a read write storage (RWS) device, the method comprising, providing the RWS device, the RWS device comprising a controller comprising a processor and a bit bucket and employing, in response to a decision making process, a sanction in the RWS device. Related apparatus and methods are also described.

Abstract: Circuitry for protection of an integrated circuit (20) which includes operational-circuits (24) formed on a chip (21). The circuitry includes a plurality of detectors (26), integrally formed on the chip as part of the integrated circuit and dispersed among the operational-circuits on the chip. The detectors are adapted, in response to radiation incident on the chip, to trigger a security measure so as to prevent tampering with the integrated circuit.

Abstract: A method of encrypting a block of data, is described, the method including providing a combining unit operative to combine a key with a block of data, the block of data expressed as a block of bits, providing a mix and condense unit operative to mix bits included in the block of bits among themselves, receiving an input including the block of data expressed as the block of bits, combining, at the combining unit, the block of bits with a key, and mixing, at the mixing and condensing unit, the combined block of bits, wherein the mix and condense unit includes a plurality of layers, each layer among the plurality of layers including a plurality of mini-functions. Related apparatus and methods are described.

Abstract: A method for producing a certificate, the certificate including data, the method including choosing a seed s, the seed s including a result of applying a function H to the data, generating a key pair (E,D), such that E=F(s,t), F being a publicly known function, and including s and t in the certificate. Related methods, and certificates produced by the various methods, are also described.

Abstract: A method of decrypting a scrambled digital data item at a client is disclosed, the method including: receiving actual control messages at the client, wherein each actual control message includes control word generating information for generating a control word associated with the actual control message; storing the actual control messages at the client; receiving the scrambled digital data item at the client independently of the actual control messages, wherein the scrambled digital data item includes a plurality of segments of scrambled digital data, each segment of scrambled digital data being associated with one of the actual control messages and being scrambled with the control word associated with the one of the actual control messages, and wherein the scrambled digital data item further includes a plurality of reference control messages, each segment of scrambled digital data comprising one of the reference control messages, each of the reference control messages including a control message reference va