Abstract: A method for selectively allowing participation in an auction, implemented at one or more servers, includes steps for receiving a request to participate in the auction, receiving machine fingerprint data related to the request to participate in the auction, saving the machine fingerprint data in a memory, comparing the machine fingerprint data with previously stored machine fingerprint data, and determining, using the machine fingerprint data, whether to allow the participation in the auction.

Abstract: A method for selectively authorizing a transaction at one or more servers comprises steps for receiving a request to authorize the transaction, receiving machine fingerprint data related to the request to authorize the transaction, saving the machine fingerprint data in a memory, receiving associated payment information related to the request to authorize the transaction, saving the payment information in a memory, retrieving previously stored machine fingerprint data associated with the payment information, comparing the received machine fingerprint data with previously stored machine fingerprint data associated with the payment information, and determining, using the machine fingerprint data, whether to authorize the transaction.

Abstract: A system for providing an interface for purchasing ad slots in an executable program operable at a plurality of clients. The system comprises a network interface disposed to receive data associated with an ad slot in the executable program and information associated with the plurality of clients operating the executable program, the plurality of clients each identified by a device fingerprint. The system also comprises a memory holding program instructions operable for determining a price for the ad slot based at least on the data and information associated with the plurality of clients and providing an interface for purchasing the ad slots. The interface identifies at least the executable program, the ad slot and the determined price.

Abstract: A system for dynamically serving ads to one or more client devices in connection with the operation of an executable program. The system comprises a network interface disposed to receive an ad request associated with a device fingerprint that uniquely identifies a client device. The ad request comprises information relating to any one or more of the client device, a user operating the client device and an executable program operating on the client device. The system further comprises a memory and a processor, in communication with the network interface and the memory, the processor configured for operating the program instructions. The program instructions stored in the memory are operable for parsing the information in the ad request, selecting one or more ads based at least in part on the parsed information, and transmitting ad rendering data to cause the one or more ads to be displayed at the client device.

Abstract: System and method for auditing for usage of licensed software in which a client executing the software generates and transmits a license key and a covert key to a server via network connection. The license key is transmitted to the server upon activation of the licensed software at the client. The covert key is generated based on at least a portion of the software code activated at the client and is transmitted to the server at random or at predetermined time intervals after transmission of the licensed key so as to avoid detection by a user. The license and covert keys are each associated with a device fingerprint that uniquely identifies the device transmitting each one of the respective keys. Unauthorized software usage at a client is determined at least when a covert key does not correspond to a device fingerprint having an associated license key.

Abstract: Systems and methods for providing conditional authorization to a plurality of client devices to operate licensed software. A client computer generates and sends a device fingerprint and a license identifier to a license server. The device fingerprint uniquely identifies the client device based on user and non-user configurable parameters relating to the client device. The license server determines if authorization of the licensed software for installation or use at the client software would exceed a limit associated with the license. If authorization would not exceed the limit, the license server sends an unlock key to authorize the client device to install or operate the software. If authorization would exceed the limit, the license server sends an unlock key and ad instructions operable to authorize the client device to install or use the software only in connection with the display of advertisements provided by an ad server.

Abstract: Methods and systems disclosed herein may be used to determine if licensed software has been previously installed or used on a device by monitoring an identifier associated with the device on which the licensed software is to be installed or used. Prior to operation of licensed software, a client device requires authorization from a license server. The license server may retrieve a unique identifying device fingerprint from the client device to authorize installation of the software based on a probabilistic comparison of the identifier with stored device identifiers subject to a license. If the comparison yields a match and if total instances of retrieval of the retrieved device fingerprint does not exceed licensed rights, the authorization is granted.

Abstract: A system for remotely updating a program configuration includes an update server in communication with a client device configured to execute a remote update program. The client device includes a first processor coupled to memory storing the program which, executed, performs physical device recognition on the client device to determine its machine parameters, and generates unique device identifiers based thereon, and a first transceiver configured to send the identifiers to the update server. The update server is configured to collect the identifiers from the client device, and includes a second processor for analyzing the identifiers and determining an updated program configuration based on the collected identifiers matching known identifiers, and a second transceiver configured to deliver data representing the updated program configuration to the client device for storage therein.

Abstract: A method for reducing piracy in software activation may be implemented on a computer readable medium storing software instructions that execute the method, which includes steps for receiving a media identifier of a media and a device identifier from a first remote device executing the media, the device identifier being based on a combination of a user-configurable parameter and a non-user-configurable parameter of the first remote device, granting a usage license for the media to the first remote device, correlating the usage license with the media identifier and the device identifier, generating a sale metric for the media based on a number of usage license granted, determining a piracy metric of the media based on availability of illegal copies of the media, and charging a publisher of the media a fee based on the sale and piracy metrics.

Abstract: A system for emergency communications operates as a static network device for selectively receiving traffic control data from a mobile node. The system includes a transceiver for receiving a device identifier over a network from the mobile node, the device identifier derived from a combination of user-configurable and non-user-configurable parameters of the mobile node, and a processor coupled to the transceiver and to memory storing executable code.

Abstract: A method for ensuring secured communications for embedded platforms includes steps for receiving a device identifier at an authenticating server over a public network from an extended trust device, the authenticating server being communicatively coupled between a secured server and the public network and the device identifier derived from a plurality of machine parameters resident on the extended trust device, accessing a database of authorized device identifiers corresponding to known extended trust devices, and establishing, in response to the device identifier matching one of the authorized device identifiers, a secure private network between the extended trust device and the secured server. The machine parameters may be a combination of a user-configurable parameter and a non-user-configurable parameter. The method may be embodied as a series of process steps stored on a computer readable medium executable by a processor.

Abstract: A system for tracking the use of an application on a computing device comprises a data collection server. In response to a communication link being available between the data collection server and the computing device, the data collection server is configured to: (1) receive from the computing device, via the communication link, data including (a) an application identifier identifying the application, (b) a device identifier identifying the computing device, and (c) an instrumentation call identifier identifying an instrumentation call performed by the application; (2) access a database storing previously received application identifiers, device identifiers, and instrumentation call identifiers; and (3) update the database to include the received data. A method for tracking the use of an application on a computing device is also disclosed.

Abstract: As system for locating a network node may be implemented as a static network device for determining location of a mobile node. The system includes a transceiver for receiving a device identifier over a public network from the mobile node, the device identifier based on a user-configurable parameter and a non-user-configurable parameter of the mobile node, and a processor coupled to the transceiver and to memory containing executable code. When executed, the code effects method steps for: accessing, in response to the transceiver receiving the device identifier, a database of authorized device identifiers corresponding to known mobile nodes, establishing, in response to the device identifier matching one of the authorized device identifiers, a secure private network with the mobile node, and communicating with two additional static network devices, the three static network devices implementing triangulation to determine a location of the mobile node.

Abstract: A system for content delivery operates as a static network device for delivering content to a mobile node. The system includes a transceiver adapted to receive a device identifier over a public network from the mobile node, the device identifier based on a combination of user-configurable and non-user-configurable parameters of the mobile node, a processor operatively coupled to the transceiver and to memory storing executable code. Executed, the code enables the processor to access a database of authorized device identifiers corresponding to known mobile nodes, establish, in response to the received device identifier matching one of the authorized device identifiers, a secure private network (SPN) with the mobile node, the established SPN tunneling across a segment of the public network, obtain the content for the mobile node, and send the content to the mobile node via the SPN.

Abstract: A system for monitoring attempted intrusions into a secure private network (SPN) includes a transceiver adapted to receive a device identifier over a public network from a network node, the device identifier based on a user-configurable parameter and a non-user-configurable parameter of the network node, and a processor coupled to the transceiver and to memory storing executable code. When executed, the code enables the processor to: access a database of authorized device identifiers corresponding to known network nodes, allow, in response to the received device identifier matching one of the authorized device identifiers, the network node to access the SPN, deny, in response to the received device identifier not matching one of the authorized device identifiers, the network node from accessing the SPN and categorize a connection attempt as an unauthorized connection attempt, and store information regarding the unauthorized connection attempt in local or remote memory.

Abstract: An embedded system device comprises a processor operatively coupled to a first memory space, a second memory space, and a plurality of user controls. The processor is configured to execute only executable code residing within the first memory space, and the executable code includes authentication routine configured to generate a device identifier based at least upon non-user-configurable parameters of the embedded system device. The second memory space includes user configurable options for use by the processor when executing the executable code. The user controls are adapted to configure the user configurable options within the second memory space, wherein the user controls cannot configure the first memory space.

Abstract: A system and method for traffic information delivery may be implemented as a static network device for sharing information with network nodes. The system includes a processor in communication with a transceiver and memory, the memory containing code that when executed by the processor effects the method steps for determining an occurrence of a traffic incident within a defined distance from the device, establishing communication with a network node, receiving a device identifier over a public network from the network node, the device identifier based on a user-configurable parameter and a non-user-configurable parameter of the network node, establishing in response to the device identifier matching an authorized device identifier corresponding to a known network node, a secure private network with the network node, and sending information about the traffic incident to the network node via the secure private network.

Abstract: A system for activating the use of software on a computing device comprises an activation server configured so that in response to a communication link being available between the activation server and the computing device, the activation server (1) receives from the computing device, via the communication link, an activation request including (a) a software identifier identifying the software, (b) a device identifier identifying the computing device, and (c) a digital media identifier identifying a digital media, wherein the software is delivered to a user on the digital media, (2) accesses a database storing known software identifiers, device identifiers, and digital media identifiers, (3) determines an activation instruction through a comparison between the activation request and known software identifiers, device identifiers, and digital media identifiers, and (4) sends the activation instruction to the computing device. A related method for activating the use of software is also disclosed.

Abstract: A system for determining efficacy of online advertising includes a server connected to a computer network. The server is specially adapted to provide functions for communicating with a web resource that provides a web media that contains links or JavaScript calls for causing a client device to generate a device identifier in response to a user of the client device retrieving the web media, receiving the device identifier via a network, associating and caching any impressions, clicks or conversions by the user with the device identifier, calculating total cached impressions, total cached clicks and total cached conversions associated with each unique device identifier, and displaying, for each unique device identifier, at least one of the total cached impressions, the total cached clicks, and the total cached conversions. The device identifier may be derived from a combination of a user-configurable machine parameter and a non-user-configurable machine parameter.

Abstract: A method for communicating with traffic signals may be implemented in a system in which a processor detects via transceiver mobile nodes approaching an intersection or toll station, the method providing steps for receiving device identifiers over a public network from the mobile nodes, accessing a database of authorized device identifiers corresponding to known mobile nodes, establishing, when a received device identifier matches an authorized device identifier, a secure private network tunneling across a segment of the public network, receiving node location data for the mobile nodes including distance and velocity data, assigning traffic priorities to each of the mobile nodes based on the node location data, and controlling timing of a traffic signal at the intersection or toll station according to the traffic priorities.