Abstract: In a network user authentication system, a network user is identified for authentication purposes using the unique identifier for a dedicated physical communication line associated with the building in which the network user is located or a digital certificate which is associated with a secure component or communication line physically attached to a building. An authentication server initially verifies the identification of the dedicated communication line to be associated with a network service subscriber or issues a unique digital certificate to be associated with the dedicated communication line for authentication purposes. The digital certificate may be stored in a building gateway or in an edge site module which is connected to the secure components of a plurality of buildings and stores unique digital certificates for each building.

Abstract: In a security system for network communications with client devices, each client device has a communication module for communicating with at least one server over a network, a data storage module for storing one or more covert data values of one or more operational events at the client device, and a covert identifier generating module which creates at least one covert identifier based on the stored covert data values. The covert identifier is provided in one or more network messages to the server, or otherwise sent to the service provider, and may be provided in response to a specific request received over the network, or routinely in one or more messages normally involved in network communications. The server compares covert identifiers received from client devices having the same client identifier in order to detect possible clones.

Abstract: Digital content files containing entertainment media such as movies, TV shows, and the like are distributed from at least one content source primarily responsible for the original creation of the media to subscribers over a network system. The content source is connected over at least one content source network to a plurality of distribution partners, and each distribution partner is connected with a selected group of subscribers over an access network. A requested digital content file is distributed from the content source to a subscriber in a network distribution path comprising at least the content source network, the distribution partner associated with the subscriber, and the second network. A profile information package containing subscriber preferences is transmitted from the subscriber to the content source by way of a proxy over the network distribution path, and the profile information package is stored at the content source.

Abstract: A content delivery proxy system and method delivers content to an unsupported client device within a content delivery system by converting messages and data from the unsupported client device into content delivery system supported messages and data. Client log-in messages received from the unsupported client device are converted into a content delivery system supported format and sent to the content delivery system, and user entitlement information of a user of the unsupported client device is requested from the content delivery system. If the user is a subscriber of the content provider, an unsupported client device identifier is created for the client device. A user interface for selecting content from the content delivery system is displayed on the client device in a client device supported format, and selections on the user interface are sent to the content delivery system. Selected content is provided to the client device in the proper format for playback on the client device.

Abstract: Systems and methods are described for over-encrypting symmetrically pre-encrypted content for off-line delivery to playback devices using portable media drives in accordance with embodiments of the invention. One embodiment of the method of the invention includes symmetrically pre-encrypting the content, receiving a request to issue content for playback on at least one playback device associated with a user account, where each playback device includes a processor containing a private key assigned to the playback device by a conditional access system, generating a content key and over-encrypting at least a portion of the symmetrically pre-encrypted content in response to the request, obtaining a public key for each playback device, encrypting a copy of the content key using the public key of each playback device associated with the user account, and delivering the over-encrypted content and the at least one encrypted copy of the content key to a playback device associated with the user account.

Abstract: Systems and methods are described for aggregating information obtained from messages between playback devices and content protection systems, including but not limited to conditional access systems, downloadable conditional access systems, and digital rights management systems, that include a unique identifier and applying user modifiable rules to the aggregated information to identify abnormal behavior associated with the unique identifier including but not limited to one or more clone playback devices utilizing the unique identifier or a rogue playback device utilizing a unique identifier. One embodiment includes a plurality of playback devices connected to a headend via a network, where the headend includes at least one content protection system, and a clone monitor configured to register playback devices based upon a unique identification supplied by each playback device, when communicating with the at least one content protection system.

Abstract: Systems and methods are described for repeatedly embedding information in media that is recoverable by emphasizing subtle variations between the media. In many embodiments perceptual models are used to identify portions of the media in which the embedded information is unlikely to be apparent to a human observer. One embodiment of the invention includes rendering the information in the form of a media, selecting a plurality of portions of media from the carrier media, combining at least part of the rendered media with each of the selected portions of the carrier media to form modified media portions, where the modifications to the modified media portions are not apparent to a human observer and creating a modified carrier medium using the modified media portions.

Abstract: In a security system for network communications with client devices, each client device has a communication module for communicating with at least one server over a network, a data storage module for storing one or more covert data values of one or more operational events at the client device, and a covert identifier generating module which creates at least one covert identifier based on the stored covert data values. The covert identifier is provided in one or more network messages to the server, or otherwise sent to the service provider, and may be provided in response to a specific request received over the network, or routinely in one or more messages normally involved in network communications. The server compares covert identifiers received from client devices having the same client identifier in order to detect possible clones.

Abstract: Systems and methods are described for rendering information to be embedded in media content at a first location and for embedding the rendered information into the media content at a second location. In many embodiments, the embedding process is less processor intensive than the rendering process and can be performed on a consumer electronics device such as a set top box, using existing processing mechanisms. One embodiment of the invention includes rendering the information into an image at a first location and embedding the image in the media at a second location in order to achieve efficient marking of the media content.

Abstract: A content delivery proxy system and method delivers content to an unsupported client device within a content delivery system by converting messages and data from the unsupported client device into content delivery system supported messages and data. Client log-in messages received from the unsupported client device are converted into a content delivery system supported format and sent to the content delivery system, and user entitlement information of a user of the unsupported client device is requested from the content delivery system. If the user is a subscriber of the content provider, an unsupported client device identifier is created for the client device. A user interface for selecting content from the content delivery system is displayed on the client device in a client device supported format, and selections on the user interface are sent to the content delivery system. Selected content is provided to the client device in the proper format for playback on the client device.

Abstract: A method and system for transferring electronic media information over a public network in such a way as to provide safeguards for inappropriate distribution of copyright or otherwise protected materials are described. The media information is transparently watermarked with a unique ID, such as one generated from X.509 Digital Certificate and public-key cryptography public/private key pairs, such that the information can be identified as belonging to a particular individual. A system and method for monitoring the movement of such watermarked files, positively identifying people who have inappropriately distributed copyright materials over a public network without permission, and taking appropriate enforcement action against such people.

Abstract: Systems and methods for protecting data being sent between a client and a server include the capability of defining programmable processing steps that are applied by the server when protecting the data and the same steps are applied by the client when unprotecting the data. The programmable processing steps can be defined uniquely for each client, and the programmable processing steps are selected from a number of functions using sequencing data that defines the processing steps. The programmable processing steps allow for each client to process encrypted data in a different manner and the programmable processing steps are defined by what is called a digital rights management (DRM) Sequencing Key, and as such the system and method introduces a key-able DRM whereby each DRM message can be processed in a unique (or pseudo unique) manner.

Abstract: A game cartridge includes instructions designed to transform a state-of-the-art game player device into a platform for numerous pay television-related services and offerings. In one aspect the systems and methods described may include the leveraging of emerging state-of-the-art and highly secure game players to create applications targeted toward Pay Television subscribers. The system may generate a log configured to create a user profile based upon previous tendencies of the user. The log may be used to recommend offerings for products or services to the user.

Abstract: Systems and methods are described for repeatedly embedding information in media that is recoverable by emphasizing subtle variations between the media. In many embodiments perceptual models are used to identify portions of the media in which the embedded information is unlikely to be apparent to a human observer. One embodiment of the invention includes rendering the information in the form of a media, selecting a plurality of portions of media from the carrier media, combining at least part of the rendered media with each of the selected portions of the carrier media to form modified media portions, where the modifications to the modified media portions are not apparent to a human observer and creating a modified carrier medium using the modified media portions.

Abstract: A method and system for transferring electronic media information over a public network in such a way as to provide safeguards for inappropriate distribution of copyright or otherwise protected materials are described. The media information is transparently watermarked with a unique ID, such as one generated from X.509 Digital Certificate and public-key cryptography public/private key pairs, such that the information can be identified as belonging to a particular individual. A system and method for monitoring the movement of such watermarked files, positively identifying people who have inappropriately distributed copyright materials over a public network without permission, and taking appropriate enforcement action against such people.

Abstract: A system and method for the distribution of content to subscribers while maintaining the distribution rights associated with the content. Tags identifying aspects and features, including distribution rights, of the content are associated with the content. The tagged content is aggregated into a centralized data center that receives requests from subscribers to access the content. The tags associated with the requested content are evaluated to determine if the subscriber is authorized to access the content before the content is provided to the subscriber.

Abstract: A system and method for providing protection of ownership rights of digital content files while also providing distribution of the content files to consumers that are authorized to receive the digital content files. A system and method for preventing or deterring the unauthorized distribution of digital content files. Several possible protection schemes include, for example, proactive protections such as encryption, SSL or VPN technologies, and reactive protections such as watermarking, PKI, piracy watch systems, or legal action management.