Abstract: A method of handling security key change for a user equipment in a wireless communication system includes applying a radio resource control procedure to activate key change, where the radio resource control procedure covers two conditions where the key change is accompanied with an authentication and key agreement run and without an authentication and key agreement run.

Abstract: A computer-implemented method to identify the spreading of sensitive data from a suspicious application is described. At least one security attribute for an application programming interface (API) is defined. Sensitive data passed through the at least one security attribute to the suspicious application are marked. The marked sensitive data being passed through the at least one security attribute from the suspicious application are detected. A notification is generated regarding the spreading of the sensitive data by the suspicious application.

Abstract: An image forming apparatus is configured to receive user authentication information and perform image formation based on an image formation request and is connected to an external authentication server which performs authentication based on the user authentication information. The image forming apparatus comprises an authentication querying unit that queries the external authentication server for the authentication based on the user authentication information; an authentication result receiving unit that receives a result of the authentication performed by the external authentication server; an authentication result storage unit that stores the result of the authentication received by the authentication result receiving unit; and a control unit that controls the authentication querying unit, the authentication result receiving unit, and the authentication result storage unit.

Abstract: A method and apparatus for secure software installation to boot a device authorized by a ticket are described herein. A ticket request including a device identifier of the device is sent for the ticket which includes attributes for one or more components to boot the device into an operating state. The ticket is cryptographically validated to match the one or more components with corresponding attributes included in the ticket. If successfully matched, the one or more components are executed to boot the device.

Abstract: This invention relates to an advertisement machine which provides advertisements to a user searching for desired information within a data network. The machine receives, from a user, a search request including a search argument corresponding to the desired information and searches, based upon the received search argument, a first database having data network related information to generate search results. It also correlating the received search argument to a particular advertisement in a second database having advertisement related information. The search results together with the particular advertisement are provided by the machine to the user.

Abstract: The present invention comprises a novel system for managing changes to a graph of data bearing objects. In one embodiment, an object graph manager object referred to as an editing context is used to identify changes made to data bearing enterprise objects and to notify other interested objects when changes occur. As a result, data bearing objects need not themselves contain code necessary for monitoring changes. In another embodiment of the invention, the editing context is used to provide event-based “undo” capabilities. In another embodiment of the invention, each enterprise object has a primary key that is used to maintain the identification between an enterprise object instance and a corresponding database row. In another embodiment of the invention, multiple levels of editing contexts are used to provide multiple isolated object graphs, each of which allows independent manipulation of the underlying data bearing objects.

Abstract: An information processing apparatus includes a storage unit that stores a first user identifier that identifies respective users in the information processing apparatus, and plural second user identifiers stored in respective authentication apparatuses and identify the users in each authentication apparatus, so as to correspond with each other; a first authentication request unit that transmits authentication information input by a user to at least one of the authentication apparatuses and requests authentication of the user; a first user identifier acquisition unit that, when authentication of the user has been successful, acquires the second user identifier of that user stored in that authentication apparatus; and a use allowing unit that specifies the first user identifier stored in the storage unit corresponding with the second user identifier acquired by the first user identifier acquisition unit, and allows the user identified by the specified first user identifier to use the information processing appa

Abstract: Systems and methods for mapping threats (or vulnerabilities to attacks) based on a correlation of location data, such as wireless location data or a physical location, with an network address associated with a threat are provided. In one aspect, methods and systems include receiving threat data, retrieving location data, correlating the threat data with the location data to create map data, and generating a map, based on the map data, displaying a geographical location of the threat. Threat locations may be determined for wired and wireless telecommunications systems.

Abstract: A computer-implemented method for creating in the encoded domain one or more video frames from a compressed still video image wherein image content in the created video frames is translated in location by panning or scrolling or a combination thereof on a non-block basis (i.e. pixel-level). A new block formed from portions of two other blocks is created by processing the original two blocks with identity matrices based upon the shift amount. By performing the creation process in the encoded domain processing power requirements are reduced and image quality is increased.

Abstract: Computer systems and methods are provided in which an agent executive, when initially executed in a virtual machine, obtains an agent API key from a user. This key is communicated to a grid computer system. An agent identity token, generated by a cryptographic token generation protocol when the key is valid, is received from the grid and stored in a secure data store associated with the agent executive. Information that evaluates the integrity of the agent executive is collected using agent self-verification factors. The information, encrypted and signed with a cryptographic signature, is communicated to the grid. Commands are sent from the grid to the agent executive to check the security, compliance, and integrity of the virtual machine processes and data structures. Based on these check results, additional commands are sent by the grid to the agent executive to correct security, compliance or integrity problems and/or to prevent security compromises.

Abstract: Methods and apparatus for providing protection of pre-designed electronic components or modules (“intellectual property”) provided on target hardware devices are described herein. According to various embodiments, the component and the target hardware device include mechanisms for providing a first sequence and a second sequence respectively. While the component is running on the target hardware device, a comparator accesses and compares the first sequence with the second sequence. The comparator may either be included with the component or the target hardware device. If the first and second sequences match, a function of the component is allowed to operate with the target hardware device; otherwise, the function is prevented from operating with the target hardware device. As such, unauthorized use of intellectual property can be controlled.

Abstract: Methods and apparatus for performing content inspection using multi-pattern packet content inspection mechanisms employing tagged values. Pattern data structures are employed to facilitate multi-pattern searches via corresponding string-search algorithm machines. The pattern data structures include tagged values defining search offsets and depths for corresponding search patterns. Incoming packets are classified to flows, and stored in corresponding flow queues. Flow table entries are used to identify the pattern data structure for a given flow. During content inspection, the algorithm machine employs the tagged values to effectively skip portions of a data stream up to the offset for each search pattern and to cease searching for a pattern upon reaching the depth for the pattern.

Abstract: The invention relates to an electrical system of a motor vehicle with control apparatuses, which communicate with one another by means of a data bus. To recognize manipulations to the electrical system of a motor vehicle, in particular on the software of the control apparatuses of the electrical system, and to derive suitable measures, it is proposed that a master security module is provided in a first control apparatus and a client security module is provided in each case in a plurality of the further second control apparatuses, and the master security module of the first control apparatus, preferably a central gateway control apparatus, signs a message and sends the signed message to at least one of the second control apparatuses by means of the data bus. The client security module of the second control apparatus checks the signed message received from the master security module as to whether it comes from an authorized master security module.

Abstract: A cartridge preferably for use with a game console. The cartridge comprises a ROM, a non-volatile memory, a processor and an encryption unit. An application running on the console may read data from the ROM, read data from the non-volatile memory, and write data in the non-volatile memory. Data to be written in the non-volatile memory is encrypted by the encryption unit, but data to be read is returned in encrypted form for decryption by a decryption function of the game application. Data may also be received encrypted to be decrypted and returned. The encryption or decryption unit may also receive data from the non-volatile memory and send it to the interface. The invention improves on the prior art copy protection as a hacker must reverse engineer the game application in order to copy it, if the encryption unit is unknown. The invention also provides an optical medium equipped with a RFID circuit.

Abstract: A method for transmitting moving image data that includes a plurality of frames each divided into a plurality of pieces of data includes setting a priority to each of the plurality of pieces of data based on a characteristic thereof, determining a transmission order of the plurality of pieces of data to transmit the plurality of pieces of data according to the set priority, wherein a transmission order of the plurality of pieces of data having a same priority is determined not to transmit data which is displayed at a same position in successive frames in a same transmission order, and transmitting the plurality of pieces of data in the determined transmission order.

Abstract: Methods, apparatuses and systems facilitating integration of the functionality associated with a first on-line service entity with the functionality associated with a second on-line service entity. Embodiments of the present invention allow a first on-line service entity having its own membership model to efficiently collaborate with a second on-line service entity to offer its users the services of the second on-line service entity in a seamless and consistently branded manner. One implementation obviates the need for synchronization of the membership models between the first and second on-line service entities. One implementation allows the second on-line service entity to provide services to the users associated with the first on-line service entity in a seamless manner without the first on-line service entity having to proxy the session between the second on-line service entity and the users.

Abstract: A system, method and computer program product, the method includes: locating within a media stream video of interest that starts at a random access point and ends at a packet associated with timing information that corresponds to a decoding time stamp of the random access point; modifying the video of interest to provide modified video of interest; wherein the modifying comprises modifying timing information associated with a beginning of the random access point to reflect a difference between the decoding time stamp and a transmission duration of the modified video of interest to a user; receiving a request, from the user, to perform a channel change and start receiving a channel that comprises the modified video of interest; and transmitting to the user the modified video of interest.

Abstract: A system and a method are disclosed for enforcing a predetermined mapping of addresses in a physical address space to addresses in a virtual address space in a data processing system including a processor in the virtual address space and a memory in a physical address space. During the compilation and linking of an application to be run on the data processing system, in at least one embodiment, the mapping table is generated linking the virtual addresses to physical addresses. This mapping table is kept secret. A second mapping table is generated using a cryptographic function of the physical address with the virtual address as a key to link virtual addresses to intermediate addresses. The second mapping table is loaded into the memory management unit. The data processing system further includes cryptographic hardware to convert the intermediate address to the physical address using the inverse of the cryptographic function which was used to calculate the intermediate address.

Abstract: An information processing apparatus that decodes a coded stream includes a memory storing the coded stream, a decoder generating image data by decoding the coded stream stored in the memory, a memory-transfer controller controlling transfer so that the coded stream is transferred to the memory prior to timing for outputting the image data, and a decoding controller controlling decoding by the decoder so that, in the coded stream stored in the memory, a reference picture that is referred to in picture decoding is preferentially decoded.

Abstract: A method, medium, and system compressing and/or reconstructing image data. The data compression method includes compressing current data according to a plurality of modes for compressing current data, determining whether the current data compressed according to the plurality of modes can be represented by a fixed length of bits, selecting a mode from among modes in which the compressed current data can be represented by the fixed length of bits, and outputting the compressed current data according to the selected mode. Accordingly, it is possible to significantly lower the complexity of an image encoder/decoder system, and exactly meet a picture-based Control Bit Rate (CBR) suitable for a Liquid Crystal Display Dynamic Capacitance Compensation (LCD DCC) device/system.