Abstract: A method for determining compliance with a data distribution or usage policy applied with respect to a digital medium is presented. The method comprising: assigning numerical values to breaches of the policy; assigning a quota of breaches of the policy to at least one user subjected to the policy, the quota being expressed in terms of the numerical value; monitoring information distribution or usage covered by the policy in order to detect breaches of the policy by users; upon detection of an action breaching the policy by a given one of the users: determining whether a numerical value has been assigned to the type of the breach; comparing the numerical value assigned to the type of breach with a respective quota assigned to the given user, and allowing the action to be executed only if the comparing indicates that the respective quota assigned to the given user is sufficient to cover the breach.

Abstract: A method for distributed management of phrase-based security policy, the security policy applied with respect to a digital medium, the method comprising: storing at least one phrase together with accompanying security policy; assigning an owner to at least one of the stored phrases; scanning and analyzing the digital medium in order to locate and identify the at least one stored phrase; upon locating the at least one phrase within a digital item in the digital medium: applying the security policy with respect to the digital item, and notifying the owner.

Abstract: A method and apparatus for providing multi-domain control over a digital data item via a first domain security policy assigned to the digital data item at a first domain, the data item being transferred from the first domain to a second domain, the second domain being autonomous from the first domain in respect of security policies. The method comprises assigning the security policy to the digital item within the first domain; transferring the digital items to the second domain together with data defining the first domain security policy; analyzing the first domain security policy within the second domain; and distributing and/or allowing usage of the digital items within the second domain in accordance with analyzed first domain security policy, and/or reporting breaches or attempted breaches of the policy.

Abstract: A method for detecting an information item within an information sequence obtained from a digital medium, the information item comprising any one of a specified set of prestored information items, comprises: transforming each of the set of prestored information items into a respective representation, in accordance with a predetermined transformation format; transforming the information sequence obtained from the digital medium, in accordance with the transformation format; and determining the presence of one or more of the prestored information items within the transformed information sequence, utilizing the respective representation.

Abstract: A method for automatically embedding information in a digital text, said method comprising: identifying a plurality of positions, in said digital text, that are suitable for introducing modifications into said digital text; identifying modifications suitable for introduction into at least some of said suitable positions in said digital text; selecting at least some of said identified modifications for introduction into said digital text, said selection of said modifications being operable to represent said information; and performing said selected modifications on said digital text, thereby to embed said information.

Abstract: A method for secure distribution of digital content (108), the method including the steps of dividing a unit of digital content into at least first and second portions (200), storing the first portion on a first computerized apparatus, digitally watermarking the second portion, and combining the first portion and the digitally watermarked second portion, thereby forming a watermarked (106) version of the digital content.

Abstract: Network interactive distribution auxiliary apparatus for association with content distribution over a network from content sources in accordance with user requests to content distribution sites, said content being held in content holding sites, said apparatus comprising: a database for holding data of placement of content around said content holding sites, a request receiver for receiving requests for said placement data from said content distribution sites, and a content distribution co-ordinator, associated with said database for sending said placement data to said distribution sites to enable said distribution sites to supply said content via said content holding sites.

Abstract: A method for preventing unauthorized access by a requester to data sent via computer networks, including a) requesting, from a requesting computer, access to data from a first server, at the first server b) determining if the request is a valid request, c) receiving a ticket from a ticket server, if the request is a valid request d) providing the ticket identifying the requestor to a second server the data is stored, e) directing the requesting computer to request access to the data from the second server, at the second server f) receiving the request from the requesting computer, g) verifying the ticket as identifying the requester, and h) sending the data to the requesting computer in response to the request.

Abstract: A system and a method for providing uniquely marked copies of data content. The method contain two basic phases: a preprocessing phase, which produces a library of marked segments, and a message embedding phase, which utilizes the stored marked segments in order to efficiently produce a personalized version of the content, by selecting various marked segments and inserting the selected marked segments into the data content.

Abstract: A method of distributing digital content or service over a communication network is provided. The method is effected by: (a) analyzing a request for distribution of the digital content or service; (b) generating a policy associated with the digital content or service; and (c) assembling a distribution syndicate of distribution entities, the distribution entities being selected according to the policy associated with distribution of the digital content or service, the distribution syndicate being for distributing the digital content or service over the communication network.

Abstract: A method for classification and enforcement of security requirements in an information dissemination system, said information dissemination system not being designed for said security requirements and enforcement. The method comprising the steps of: accepting a user specification of said security requirements for dissemination of respective information, said specifying is done using a user interface; Associating with said dissemination system an enforcement module, said module being operable to receive said security requirements and apply them to control dissemination via said dissemination system, and then enforcing said dissemination via said module.

Abstract: A method for secure distribution of digital content held in at least one content server over an electronic network comprising the steps of: on said network setting up at least one centralized trusted entity for at least one of verifying, authenticating and auditing transactions; at said centralized trusted entity receiving a request from a vendor to verify a transaction involving a transaction client identified in said request; at said centralized trusted entity sending a verification request to said identified transaction client, receiving at said centralized trusted entity a verification reply from said transaction client, and, upon receipt of said verification reply sending a transaction approval signal to said vendor and to said content server, thereby to signal to said content server approval to release said digital content.

Abstract: A method for dynamic embedding of objects into context selectable locations in digital media items to form versions of said digital media items, said method comprising the steps of: finding context suitable locations in said visual media; dynamically selecting a subset of said objects for at least one location; and embedding one object of said subset of objects in said at least one location, thereby to form a version of said digital media item.

Abstract: A system for network content monitoring and control, comprising: a transport data monitor, connectable to a point in a network, for monitoring data being transported past said point, a signature extractor, associated with said transport data monitor, for extracting a derivation of said data, said derivation being indicative of content of said payload, a database of preobtained signatures of content whose movements it is desired to monitor, and a comparator for comparing said derivation with said preobtained signatures, thereby to determine whether said payload comprises any of said content whose movements it is desired to monitor. The monitoring result may be used in bandwidth control on the network to restrict transport of the content it is desired to control.

Abstract: A method for making an anonymous computerized commerce transaction involving the delivery of digital merchandise including the steps of sending first sensitive information from a first entity to a first intermediate entity, processing the first sensitive information at the first intermediate entity, creating first non-sensitive information operable to approve the transaction by the first intermediate entity, sending the first non-sensitive information to a third entity operable to perform the transaction, performing the transaction at the third entity, and transferring the digital merchandise to the first entity via a delivering entity including information operable to deliver the digital merchandise to the first entity without revealing the first sensitive information to the third entity.

Abstract: A method for secure distribution of digital content to an untrusted environment, comprising the steps of: constructing a relatively trusted environment within the untrusted environment; constructing at least two digital inputs, the digital inputs are operable in order to reproduce the digital content; transferring digital media to the relatively trusted environment such that each of the inputs is transmitted via a different path, and combining the inputs in order to reproduce the digital content.

Abstract: A method for secure distribution of digital content, the method including the steps of dividing a unit of digital content into at least first and second portions, storing the first portion on a first computerized apparatus, digitally watermarking the second portion, and combining the first portion and the digitally watermarked second portion, thereby forming a watermarked version of the digital content.

Abstract: A system for external monitoring of networked digital file sharing to track predetermined data content, the system comprising: at least one surveillance element for deployment over said network, said surveillance elements comprising: surveillance functionality for searching said digital file sharing and identification functionality associated with said search functionality for identification of said predetermined data content, therewith to determine whether a given file sharing system is distributing said predetermined data content.

Abstract: A system for locating an online digital content user's geographical and/or virtual location is presented. In one embodiment of the present invention, Geolocation is performed by extracting the user's ISP's DNS IP address. The extracted information may thereafter be correlated with existing data so as to determine and authenticate the user's identity, and/or other properties. The system may also be used to enable electronic commerce bodies such as digital media distributors operating on the Internet to better manage network resources and/or to prevent possible implications of erroneous or fraudulent transaction of digital goods and/or to comply with business rules.