Abstract: Modified firmware is registered and controlled, and, when a download request is received from a terminal device, unupdated firmware is determined and downloaded to the terminal device. User identification information obtained from the download request is acquired, and, if the user identification information matches the user identification information of another terminal device that is already carrying out download, the download to the terminal device that output the download request is stopped. Even when the user identification information matches the user identification information of the other terminal device that is already carrying out download, if it is determined to be a download request by an operator operation, stopping the download is cancelled so as to execute the download, and a forcible termination notification is transmitted to the other terminal device that is already executing download so as to interrupt the download thereof in the process.

Abstract: A system and method for communicating information or a cryptographic key therefore between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party.

Abstract: A computer-implemented method for ensuring non-repudiation of a payment request and/or other action may include a step of receiving, over a network, the payment request together with a digital certificate identifying a user having caused the payment request to be generated. The certificate may include certificate-identifying information, user-identifying information, authority information that defines and delimits the authority of the user to make the payment request. The certificate-identifying information and the user-identifying information included within the received certificate may be validated. The authority information included within the received certificate may then be validated. The payment request and/or other action is then only executed when the certificate-identifying information, the user-identifying information and the authority information within the received certificate are successfully validated.

Abstract: A system, method, and computer-readable medium are disclosed for automatically provisioning a virtual image on a target system. A service operating system comprising a virtual machine monitor and a personalization agent is installed on a target system. A set of digital assets entitlement data is provided along with an associated set of digital assets data contained in a virtual software image, which is then installed on the target system by the personalization agent.

Abstract: A method including receiving, by a processor of a computing system, a submission from a user, authenticating, by the processor, the submission received from the user with a unique identifier of the submission, tracking, by the processor, the unique identifier to detect a presence of the submission, determining, by the processor, whether the presence is authorized, and distributing, by the processor, a portion of proceeds to the user if the presence is authorized is provided. Furthermore, an associated computer program product and computer system is also provided.

Abstract: A system conducts anonymous negotiations and supports indications of interest in trading stock. The system includes a database for storing public orders received from a public stock trading system; and a server for receiving hidden orders from a plurality of users and for conducting anonymous negotiations between first and second users with the hidden orders. The server repeatedly accesses the database to determine a match of any one of the hidden orders with any one of the public orders, and to execute a pair of orders selected from the hidden orders and the public orders. The system also transmits indications of interest (IOI) into a trading environment using the server for processing a trading order from a first user and for maintaining a profile of a user. The profile includes a current IOI setting for controlling transmission of the IOI from the user. The server responds to a toggle command from the first user to control transmission of the IOI opposite to the current IOI setting.

Abstract: A method and apparatus for enforcing software licenses for resource libraries such as an application program interface (API), a toolkit, a framework, a runtime library, a dynamic link library (DLL), an applet (e.g., a Java or ActiveX applet), or any other reusable resource. The resource library can be used by authorized end user software programs. A “per-program” licensing scheme for a resource library can allow a resource library to be licensed only for use with particular software programs.

Abstract: A system to present secure expandable advertisements using an API and cross-domain communication. A content publishing system that hosts a website can implement an expandable advertisement using IFRAMEs that are expanded upon receiving an API call from a third party rich media vendor that hosts the expandable advertisement when the content publishing system and the third party media vendor are of differing domains.

Abstract: Character spacing values in a document image are extracted and a variance is calculated for fluctuations in the character spacing values. When the calculated variance is lower than a preset threshold value, the document image is determined as having watermark information embedded therein. Such use of the variance in the character spacing values enables high-speed determination of the presence or absence of character-spacing watermark information. At this time, it is possible to speed up the determination by using only some character spacing values in the document, instead of using all character spacing values.

Abstract: A client-side on-board computing device is partitioned into a trusted computing module, and a private computing platform. When a metric report is required, the private computing platform retrieves an original data file and transfers the original data file to the trusted computing module. The original data file includes a global positioning system coordinate stream and time information. Communication between the private computing platform and the trusted computing module is via an unencrypted serial link. The private computing platform applies at least one billing algorithm to the original data file to determine a billing charge. The private computer platform signs and hashes the billing charge using a private key of a public-private endorsement key pair to create a signed metric report. The private computer platform forwards the signed metric report to the trusted computing module via the unencrypted serial link.

Abstract: A method for digital rights management includes receiving a selection input from a user, associating a customer number with a file based on the selection input, embedding the customer number and a file identifier associated with the file in the file, and sending the file with the embedded customer number and file identifier to the user. One embodiment includes receiving a customer number change request, revising the central database in response to the customer number change request, determining a new customer number responsive to the customer number change request, and embedding the determined new customer number in the file. Another embodiment includes receiving an authorization request associated with a file, determining an authorization based on the central database and authorization request, and sending an authorization notice response to the determined authorization.

Abstract: This invention provides a privilege delegation mechanism, which allows a privilege and associated control attributes to be delegated from a security token to another security token or an intelligent device such as a computer system. The privilege may be in the form of an attribute certificate, a key component of a cryptographic key, a complete cryptographic key, digital certificate, digital right, license or loyalty credits. The purpose of the delegation is to allow another security token or computer system to act as a surrogate for the security token or to access a resource which requires components from both units before access is permitted. Attributes associated with the delegated privilege control the scope and use of the privilege. The delegation may allow the surrogate to perform authentications, access data or resources included on another security token or computer system. Authentications are performed prior to transferring of the delegable privileges.

Abstract: A method for validating and securing transactions involving multiple agents separated by physical space or scheduling constraints is presented. In the invention messages (informational tokens) are communicated at key junctures during a transaction (a transfer of goods or provision of services) to provide confirmation of the transaction to parties that are not present during the transaction. The transfer of informational tokens may occur by attachment to products or service related packages, through telephone, Internet or other inter-party communications channels.

Abstract: Embodiments of the present invention provide a method, system, and computer program product for authorizing a financial transaction. A financial institution can identify financial risk associated with the financial transaction based on product details. The product details are sent to the financial institution by a merchant along with the authorization request. The financial institution, then, notifies the merchant regarding authorization of the financial transaction based on the risk assessment. Finally, the merchant fulfills or terminates the financial transaction based on the notification received regarding authorization request.

Abstract: A method and apparatus for providing limited access to data objects or files within an electronic software delivery and management system are described. A data object is transmitted to the system for storage in a library. Input of one or more restriction parameters is further requested for the stored data object. A user interface is displayed in a display window for facilitating input of the restriction parameters. At least one customer is selected, such as, for example, one or more users authorized to receive the stored data object. The stored data object is further designated as restricted data object for the selected users. Finally, the user restriction information is stored in appropriate tables within a database.

Abstract: The present invention enables the purchase of upgrades by ascertaining and attaching a value to the certainty that the upgrade will be available and adjusting the value of the product or service for purchasers willing to pay a reduced value on the condition that the upgrade may not be available at the time of expiration. Rather than paying the certainty value, the prospective purchaser is given the opportunity to enroll in a pool for the perishable upgrade. At a certain time the perishable is released to the pool of purchasers, who are then selected to purchase the item.

Abstract: A system and method facilitates purchase transactions over a computer network, including the purchase of electronically storable items. The embodiments herein encrypt “customer information” in an encryption stream and cause the encryption stream to be transferred from the customer to a merchant in the purchase transaction. A verification entity receives the encryption stream which is sent by the merchant for identity verification and payment authorization. Then, the verification entity verifies the identifiers contained in the encryption stream and transfers an identity verification and payment authorization from the verification entity to the merchant. The encryption stream or unique transaction identifier can be added, by the merchant, to a purchased electronic item to create a personalized electronic item.

Abstract: A certified distribution stored on a computer-readable medium for use in a stochastic information system includes stochastic data providing a series of trials for at least one uncertain variable such that the series of trials maintains the relationship between the trials of each of the at least one uncertain variable, and a digital imprimatur associated with the stochastic data to certify the stochastic data. A distribution database includes a database stored on a computer-readable medium and a communications interface operable to receive a database query, to determine a result set of the at least one stochastic models satisfying the database query, and to respond to the database query. The database includes at least one stochastic model providing a series of trials for at least one uncertain variable such that the series of trials maintains the relationship between the trials of each of the at least one uncertain variable.

Abstract: A method for providing curriculum enhancement using a computer-based media access system according to one embodiment is described. The method comprises accessing a playlist assembly component and creating a playlist indicating at least one instance of media. The playlist is then accessed and the instance of media is selected. A usage compliance mechanism then accesses the instance of media in accordance with a usage restriction.

Abstract: An automated payment system and clearinghouse for effecting payment on online transactions without having to divulge sensitive financial information to a merchant. The payment system and clearinghouse provides a secure and safe vehicle to perform e-commerce transactions worldwide independently of the customer and merchant locations. This allows banks to offer their clients a new and alternative way to pay for internet purchases without the need to use a credit card or to divulge credit-card information or bank account information.