Abstract: A device for presenting content to a user is utilized in combination with a general purpose computer. The computer has a processor, a computer communications interface, a computer memory and an operating system. The operating system has one or more file management tools. The device has a housing, a device communications interface and a device memory. The device memory comprises a boot partition which includes boot software. The boot software is copied from the device into the computer memory and is executed from the computer memory by the processor. The device memory also comprises a secure partition inaccessible by the file management tools and having content stored thereon. The device memory also comprises content delivery software, which is copied to the computer memory, and when executed by the processor from the computer memory can access the content from the secure partition and present it to the user as sensory data.

Abstract: A method and a configuration are described for mutual authentication of two data processing units. The mutual authentication of two data processing units is normally carried out in two separate authentication processes, which are carried out successively. A challenge and response method is normally used. For this purpose, a first challenge is sent from a first data processing unit to a second data processing unit, which transmits a first response back. A second response is produced by the first data processing unit, and is transmitted to the second data processing unit.

Abstract: An implementation of a technology is described herein for deriving robust non-local characteristics and quantizing such characteristics for blind watermarking of a digital good.

Abstract: A method, apparatus, and computer-readable media for detecting a security breach in a network comprising an access point and a plurality of transceivers each having a different media access control address comprises, at one of the transceivers, receiving a signal from the access point, the signal representing one or more packets of data; determining a source media access control address for each of the packets; and transmitting an alert packet to the access point when the source media access control address of one of the packets is the media access control address of the transceiver.

Abstract: A selective encryption encoder and method of dual selective encryption and detection of intra-coded slices in video content. The selective encryption encoder has a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type being packets in a set of N consecutive slices in a frame wherein the a second byte after a slice start code is identical in all N consecutive slices. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. The packets are sent to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method.

Abstract: In a data communications network, a split proxy can include a split proxy server disposed behind a firewall in a private portion of the data communications network; a split proxy client disposed in a client computing device positioned externally to the private portion of the data communications network; a split proxy client interface to at least one client application in the client computing device, and a split proxy server interface to at least one server application corresponding to the at least one client application in the private portion of the data communications network. A tunnel can be established between the split proxy client and split proxy server. The tunnel can host all Internet Protocol (IP) data traffic between the client application and the corresponding server application in the private portion of the data communications network.

Abstract: Manifest-based trusted agent management in a trusted operating system environment includes receiving a request to execute a process is received and setting up a virtual memory space for the process. Additionally, a manifest corresponding to the process is accessed, and which of a plurality of binaries can be executed in the virtual memory space is limited based on indicators, of the binaries, that are included in the manifest.

Abstract: Security policy manager devices are leveraged by manager objects to use highly secure user transparent communications to provide detection of questionable activities at every node, automatic collection of information related to any potential attack, isolation of the offending object with arbitrary flexibility of response (e.g. flexibly determining the level of certainty of an attack for initiation of a response in accordance with the number of nodes to be partitioned that is determined by the collected data concerning the potential attack), changing trust relationships between security domains, limiting the attack and launching offensive information warfare capabilities (e.g. outbound from the compromised node while limiting or eliminating inbound communications) in log time and simultaneously and/or concurrently in different but possibly overlapping sections or segments of a digital network of arbitrary configuration.

Abstract: An apparatus and a receiver, which is in a broadband communication system, includes the logic necessary for protecting keys used for encrypting content that is received by the receiver. The apparatus validates the keys and denies the receiver the use of the keys if they become invalid.

Abstract: A system and method of generating a watermarked signal are disclosed. The system segments the signal into overlapping blocks using a window function and processes the overlapping blocks according to whether each block is odd- or even-numbered. The system windows the odd-numbered blocks, modulates the phase of each block in the frequency domain, transforms each modulated block in the time domain, windows each block transformed into the time domain and overlap-adds each odd-numbered block with each even-numbered block to generate the watermarked signal.

Abstract: Apparatus for classifying network traffic events in accordance with one or more conditions includes a categorizer for categorizing a plurality of network traffic events, an analyzer for analyzing at least one aspect of the network traffic events and identifying groups in accordance with the analysis; a structure for determining group allocation for the categorized network traffic events, a generator for generating one or more conditions in relation to the group and category of analyzed network traffic events, and a classifier for classifying a newly detected network traffic event in accordance with the one or more conditions generated.

Abstract: A sender device for sending an encrypted signal, the device comprising a chaos generator producing an encrypted electrical signal and a feedback loop comprising delayline-forming means, non-linear means, and mixer means which receive the loop signal on one input and the signal to be encrypted on another input, wherein the feedback loop includes filter-forming means which limit the spectrum of the encrypted signals to one or more spectrum bands.

Abstract: Apparatus and methods for including a code having at least one code frequency component in an audio signal are provided. The abilities of various frequency components in the audio signal to mask the code frequency component to human hearing are evaluated and based on these evaluations an amplitude is assigned to the code frequency component. Methods and apparatus for detecting a code in an encoded audio signal are also provided. A code frequency component in the encoded audio signal is detected based on an expected code amplitude or on a noise amplitude within a range of audio frequencies including the frequency of the code component.

Abstract: A password setting system for a secure system includes a user token server and a communication module. The user token server generates a random token in response to a request for a new password from a user. The server creates a new password by concatenating a secret passcode that is known to the user with the token. The server sets the password associated with the user's user ID to be the new password. The communication module transmits the token to a personal communication device, such as a mobile phone or a pager carried by the user. The user concatenates the secret passcode with the received token in order to form a valid password, which the user submits to gain access to the secure system. Accordingly, access to the system is based upon: nonsecret information known to the user, such as the user ID; secret information known to the user, such as the passcode; and information provided to the user through an object possessed by the user, such as the token.

Abstract: Data is recorded in a first part in accordance with a signal format equivalent to that of an existing CD at the lower limit of an allowable value of a track pitch and the lower limit of linear velocity, so that data can be recorded in the first part for the maximum regeneration time. An existing CD reproducing apparatus can reproduce the audio data recorded in the first part. Compressed and encrypted audio data is recorded in a second part at a single density or at a double density. The single density represents a recording density equivalent to that of an existing CD and the double density represents a density two times larger than the single density. Audio data recorded in the second part is charged when reproduced to protect copyrights. The format of the data recorded in the second part uses the format of a CD-ROM.

Abstract: In order to assuredly prevent illegitimate duplication of a program by a simple technique, license information 304 is created as information in the form of a run-time read module in a data processing apparatus by a creation program that self-destructs after being executed, and a program 300 that is installed without the license information and is incomplete without the license information is executed with the license information 304 read during the execution.

Abstract: A security node disposed in the telecommunications network connecting calling and called parties transforms information (which can be voice, data, facsimile, video and other types of calls or messages) encrypted in a first format to (a) encrypted information in a different format or to (b) non-encrypted information, and vice-versa. The node is accessible from any location connected to the network. By routing calls or messages originated by the calling party and destined for the called party via the security node, and providing appropriate control signals to the node, the information may be encrypted only over a portion of the transmission path between the parties, and clear over the remainder of the transmission path. Alternatively, the information may be encrypted in different portions of the path using different encryption algorithms.