Abstract: User information is encoded on a record carrier in accordance with a first record carrier standard, the encoding of the user information also being in accordance with a second record carrier standard. Also, format information is provided on the record carrier for presenting the user information in a predetermined manner, at least a portion of the format information being according to the second standard and not in accordance with the first standard so that a player in accordance with the first standard and not in accordance with the second standard can not play the user information in the predefined manner.

Abstract: Data items are selected for inclusion in a data set so as to discourage a transmission of the entire set. Each data item includes section(s) which constitute(s) the complete data set. Each section contains a watermark that includes an identifier of the section, and an identifier of the data set. The identifier of the section may be the address of the section, and the identifier of the data set may be the serial number and an indicator of the total size of the data set. The presence of the data set is confirmed by checking the watermarks of randomly selected sections to verify that the original section that formed the data set is present. If a section is discovered to be missing or altered, subsequent processing of data items of the data set is prevented. The identifiers may be stored as a combination of robust and fragile watermarks.

Abstract: A number of data items are selected for inclusion in a data set so as to discourage a transmission of the entire set over a limited bandwidth communications path, such as the Internet. Each data item comprises one or more sections, and the totality of sections constitute the complete data set. Each section of the data set contains a watermark that includes an identifier of the section, and an identifier of the data set. In a preferred embodiment, the identifier of the section is the address of the section, and the identifier of the data set is a serial number and an indicator of the total size of the data set. The presence of the data set is confirmed by checking the watermarks of randomly selected sections to verify that the original section that formed the data set is present. If a section is discovered to be missing or altered, subsequent processing of data items of the data set is prevented. In a preferred embodiment, the identifiers are stored as a combination of robust and fragile watermarks.

Abstract: Apparatus and methods for attacking a screening algorithm. Content to be downloaded is identified. The identified content is then partitioned into at least two sections, wherein each of the at least two sections has a duration which is less than a duration of a threshold duration value assigned by the screening algorithm, and the partitioned content is subjected to a screening algorithm. Once the content has been successfully downloaded, the integrity of the downloaded content may be restored by reassembling the sections.

Abstract: A multi-layered copy protection scheme distinguishes between security failures due to faulty watermark detection schemes and true security failures. At an initial security level, the fault-tolerance is low. If the security test fails at this initial security level, the process enters a next level of security, wherein the fault-tolerance is increased, but at the expense of additional processing time. If the security test again fails at this increased security level, the process enters a higher level of security, wherein the fault-tolerance is further increased, but at the further expense of additional processing time. Eventually, either the security test is passed, and the protected material is rendered, or a determination is made that the failures are not due to faults in the watermark detection process, indicating that the content material is, in fact, copy protected, but not authorized for rendering.

Abstract: In a communication system for a secure transfer of information from a source device to a sink device in a communication session in the form of a plurality of packets from the source device to the sink device, a packet structure is used with a key check block field. During the session, the source device can change the session key used to encrypt data (including the key check block) in the packet. The sink device detects a change of session key by decrypting only the key check block field with a plurality of candidate keys. The key that gave a valid decryption is used for decrypting the remainder of the packet.

Abstract: Access to information is controlled by maintaining, for a given device or other entity through which information may be accessed, a contact list that includes information identifying one or more other entities which have attempted to communicate with the given entity. The contact list further includes a contact count field specifying, for each of the entities on the contact list, the number of times the corresponding entity has attempted to communicate with the given entity. The contact list is utilized in conjunction with a revocation list stored in a memory associated with the given entity in order to determine which of the other entities are authorized to communicate with the given entity. The contact list is updated after a modification of the revocation list, or if a new entity not already included on the contact list attempts to communicate with the given entity.

Abstract: A sufficient number of data items are selected for inclusion in a data set so as to discourage a transmission of the entire set over a limited bandwidth communications path, such as the Internet. Each data item comprises one or more sections, which taken together constitute the complete data set. Each section of the data set is linked to another section of the data set, and each section's link is bound to the section via the use of one or more watermarks. Upon presentation of material for rendering, the presence of the entirety of the data set is verified by ascertaining the presence of linked-to sections. For further security, the links between sections is formed by a random selection of each linked-to section. To verify that each linked-to section corresponds to the original section that was linked-to, each link contains an identifier of the linked-to section that can be used to determine that a retrieval of a linked-to section corresponds to the originally assigned linked-to section.

Abstract: A device and method of string a disc-ID on a record carrier. The record carriercomprises tracks. Information is stored on the record carrier. A disc-ID that comprises I groups of disc-ID bits is stored on the record carrier in a scattered way. I comprises at least 1 group. At least one of the I groups of disc-ID bits comprises a plurality of disc-ID bits.

Abstract: An information carrier, e.g. an optical disc, comprises information arranged according to a recording format. The information includes format information indicative of parameters of the recording format such as start and stop addresses of user information. The information is recorded according to predefined encoding rules, which correspond to rules of a different recording format, e.g. CD-ROM or DVD, that prescribes a predefined location (12) on the information carrier for recording the format information. However the predefined location (12) comprises a confusion pattern (CON) and the format information is recorded at a second location (CPS1) different from the predefined location. A non-compliant player is unable to read or copy the information carrier because the reading is disturbed by the wrong parameters of the recording format.

Abstract: An information carrier includes information arranged according to a recorded format. The information includes format information indicative of parameters of the recording format such as start and stop addresses of user information. The information is recorded according to predefined encoding rules, which correspond to rules of a different recording format that prescribes a predefined location on the information carrier for recording the format information. However the predefined location includes a confusion pattern and the format information is recorded at a second location that is different from the predefined location. A non-compliant player is unable to read or copy the information carrier because the reading is disturbed by the wrong parameters of the recording format. A recorder is arranged for recording the confusion pattern and relocating format information, whereas a player is arranged to retrieve the relocated format information.

Abstract: A “buy” button is provided on devices that receive content material to facilitate a purchase of content related material as the content material is being presented to a consumer. If, while listening to or viewing content material from a provider, the consumer decides the purchase the content material, or an item associated with the content material, the consumer activates a “buy” button on the device that is rendering the content material. The rendering device associates an item identifier associated with the content material to this “buy” command, and forms a purchase request containing this item identifier. If the rendering device has a receive-only capability relative to the provider of the content material, the purchase request is stored until the rendering device is brought in contact with a content access device that is able to transmit to the provider.

Abstract: Apparatus and methods for detecting illicit content that has been imported into a secure domain, thereby preventing an attack on a screening algorithm. A method of preventing an attack on a screening algorithm includes the steps of determining whether content submitted to a screening algorithm contains indicia indicating that the content is protected, admitting the content into a segregated location of a secure domain if it is determined that the content does not contain indicia indicating that the content is protected, and monitoring the content within the segregated location to detect whether any editing activity is performed on the content. The content is admitted into the segregated location only when it is determined that the content does not contain indicia indicating that the content is protected. The method also includes the step of determining whether the edited content contains indicia indicating that the content is protected, after editing activity is detected.

Abstract: Apparatus and methods for attacking a screening algorithm. Content is transformed within a first transformation device, then subjected to a screening algorithm, and finally transformed within a second transformation device. A watermark within the content is manipulated within the first transformation device by, for example, adding a pseudo-random sequence. The second transformation device removes the pseudo-random sequence or otherwise reverses the manipulation performed on the content after the content has been admitted into the secure domain.

Abstract: A multi-layered copy protection scheme distinguishes between security failures due to faulty watermark detection schemes and true security failures. At an initial security level, the fault-tolerance is low. If the security test fails at this initial security level, the process enters a next level of security, wherein the fault-tolerance is increased, but at the expense of additional processing time. If the security test again fails at this increased security level, the process enters a higher level of security, wherein the fault-tolerance is further increased, but at the further expense of additional processing time. Eventually, either the security test is passed, and the protected material is rendered, or a determination is made that the failures are not due to faults in the watermark detection process, indicating that the content material is, in fact, copy protected, but not authorized for rendering.

Abstract: A key is generated to control the access to information on an information carrier. The key is derived from an M-bit master key and an information carrier key. Apparatus to read and/or write information on an information carrier generates the M-bit master key. The information carrier key is derived from the information carrier. The M-bit master key is derived from only a part of an N-bit string, the part being determined by a number p derived from an identifier R associated with recording information on the information carrier.

Abstract: In a communication system for a secure transfer of information from a source device to a sink device in a communication session in the form of a plurality of packets from the source device to the sink device, a packet structure is used with a key check block field. During the session, the source device can change the session key used to encrypt data (including the key check block) in the packet. The sink device detects a change of session key by decrypting only the key check block field with a plurality of candidate keys. The key that gave a valid decryption is used for decrypting the remainder of the packet.