Abstract: There is provided a system operable to execute automatic synchronization therein. The system comprises a first data memory (20) for storming a first data set, said first memory (20) being coupled to a communication network (10). The system further includes a portable device (100) including a second data memory (130) for storing a second data set, said portable device being provided with a wireless transceiver (150) wherein said transceiver (150) includes a data memory (320) for storing a record of synchronization updates required to synchronize the first and second data sets into mutual conformity. The transceiver (150) is operable when introduced together with the portable device (100) within communication range of the communication network (10, 30a) to at least partially synchronize automatically said first and second data sets.

Abstract: A means of delivering software comprises at least two storage media comprising at least two different versions of a software program. A first version of the software program comprises a full version of the program and a second version comprises a limited version of the program. Due to the presence of identification means, such as a security tag, the first version of the software program can only be executed in the presence of to second storage medium, or vice versa. The security tag may be an RF-ID dongle. Also, a system and a method is provided, for executing data stored on a data carrier, and wherein related data are stored on two separate data carriers. At least one of the data carriers comprises identification means, and the presence of this identification means authorizes the use of one of the data carriers in one of the devices.

Abstract: The present invention relates to a method and a device for determining access to multimedia content from an entry identifier, in a domain which comprises a number of entry identifiers, and where the multimedia content is assigned an access number n indicating the number of entry identifiers which may access the multimedia content. This is obtained by accessing a domain list indicating at least some of said entry identifiers in said network domain and by further determining that the entry identifier may access said multimedia content if said entry identifier is between the n entries in said domain list determined by an evaluation rule.

Abstract: This invention relates to a method and a system for evaluating proximity. A reference object is moved such that it enters at least two different proximity areas of two different proximity indicators, whereby proximity indications are generated. The time difference between the indications is measured. If the time difference is within predefined range it is ascertained that the reference object is within a well defined area. Thus, the fact that the speed of movement of a physical object is significantly limited is used for obtaining reliable proximity evaluations.

Abstract: This invention relates to a system and a method of generating an Authorized Domain (AI)), the method comprising the steps of selecting a domain identifier (Domain ID) uniquely identifying the Authorized Domain, binding at least one user (P1, P2, . . . , PN1) to the domain identifier (Domain ID), and binding at least one device (D1, D2, . . . , DM) to at least one user (P1, P2, . . . , PN1), thereby obtaining a number of devices (D1, D2, . . . , DM) and a number of users (P1, P2, . . . , PN1) that is authorized to access a content item (C1, C2, CN2) of said Authorized Domain (100). Hereby, a number of verified devices (D1, D2, . . . , DM) and a number of verified persons (P1, P2, . . . , PN1) that is authorized to access a content item of said Authorized Domain (100) is obtained. Additionally, it is possible to enable automatic assignment of imported content being imported on a device belonging to the Authorized Domain (AD) since it now is given to which person a given authorized device belongs to.

Abstract: This invention relates to a system and method of providing conditional access to a data content item for a number of users, where the data content item is associated with a digital right that provides a user the right to access the data content item a predetermined number of times. The data content item is arranged in a number of subparts and the digital right is arranged in a number of sub-rights (100), initially designated as available sub-rights (101), where each available sub-right (101) provides a user the right to access a subpart of the data content item. When a user is granted (new) access to a content item a number of available sub-rights (101) is reserved. In this way, it is ensured in a very simple way that if a user in a multi-user scenario pauses access (also for a prolonged time) to the data content item then there will be sub-rights available so that the content may be accessed at a later time even if another user of the group starts spending sub-rights immediately after.

Abstract: A method of and system for digital rights management, in which access to a piece of content is granted in accordance with a license owned by a license owner to a client who is a member of a domain. This requires successfully verifying that a membership relation exists between the client and the domain as reflected in a first state variable, and that an association relation exists between the license owner and the domain as reflected in a second state variable. Both relationships are revoked by executing an online protocol between the parties in the relationship after which both remove the corresponding state variable. The domain controller propagates the state administration relating to the domain is propagated to the client so that the client can update its state administration.

Abstract: The invention proposes a method to provide privacy for users or a user from a group of users with respect to authorizations they are granted, where such authorizations are expressed using digital authorization certificates, and with respect to domain certificates in case of groups of users. The idea is to conceal the user identity in the certificates, while the certificate itself remains in the clear. In this way, certificates can be widely and openly available, e.g. in a public network, without a random observer being able to link a user to an authorization or to identify a user within a domain. Privacy is also provided towards the certificate verifier by means of zero-knowledge protocols, which are carried out between the user and the verifier in order for the verifier to check a user's entitlement to a certificate. Privacy is further provided towards the certificate issuer as well, by means of a mechanism that allows the anonymous (buying or) issuing of certificates from the issuer.

Abstract: In an apparatus and a method for reproducing user data stored in encrypted form on a recording medium, in order to provide a higher level of protection against hacking of user data and, in particular, of decryption keys, which are used for encrypting said user data and which are also stored on the recording medium, an integrated unit calculates a decryption key using key data read from the recording medium, decrypts the user data read from said recording medium using the calculated decryption key, andre-encrypts the decrypted data using a re-encryption key. The re-encrypted data and the re-encryption key are then transmitted to an application unit for decrypting the re-encrypted data using the re-encryption key and for reproducing the decrypted data.

Abstract: A conditional access system for controlling the access of receivers of end-users to data transmitted from a data content source in an uplink system. The uplink system comprises a scrambler for scrambling the content supplied from the content source, an entitlement control message generator for generating entitlement control messages containing a control word and an entitlement identification, and a transmitter for transmitting the scrambled content and the entitlement control messages. A descrambler, an entitlement control message decoder and means for storing entitlements are associated to the receiver. The entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled, if a match between the entitlement identification in the entitlement control message and the entitlement of the end-user exists.

Abstract: A source transmits (10) successive keys encrypted in encryption control messages and information in an encrypted form at is successively decryptable with the successive keys. A decoder (122) decrypts the information. A secure device (14) receives the encryption control messages, decrypts the keys from the messages and supplies the keys to the decoder (122). The secure device (14) maintains a time value. The secure device (14) controls the supply of the keys dependent on the time value, and increments the time value in response to reception of respective ones of the encryption control messages.

Abstract: A high-quality signal, for example, a unity-bit coded (DSD) audio signal having a 2.822 MHz bit rate (fs1) is converted to a lower sample rate (fs3) PCM signal by a sample rate converter (102). The watermark is embedded at the lower sample rate by a conventional watermark embedder (101) which is capable of handling signals at this lower rate. The watermark (WM) is not otherwise available. It is subsequently retrieved by subtracting (103) the unwatermarked signal from the watermarked signal, and up-sampled (104) to an intermediate sampling rate (fs2). The DSD signal is converted (110) to a PCM signal at said intermediate sample rate. The retrieved watermark is then added (107) to the PCM signal and the watermarked PCM signal is back-converted (120) to a unity-bit coded DSD signal. The arrangement preferably includes a compensation circuit (105) which compensates the information signal X′ for any (e.g.

Abstract: A conditional access system for controlling the access of receivers of end-users to data content transmitted from a data content source in an uplink system. The uplink system scrambles the content supplied from the content source, generates entitlement control messages containing a control word and an entitlement identification, and transmits the scrambled content and the entitlement control messages. A descrambler, an entitlement control message decoder and storage for recording entitlement identifications are associated to the receiver. The entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled, if a match between the entitlement identification in the entitlement control message and the recorded entitlement identification exists. The content is subdivided into scenes having their own scene identification.

Abstract: The invention relates to an apparatus and a method for reproducing user data stored in encrypted form on a recording medium.

Abstract: The invention relates to a method for authenticating a first unit to a second unit and, in particular, to a method for transmitting data securely over a transmission channel from a security unit to an application unit. Known data transmission methods and systems use a revocation list stored in a security unit, e.g. in a CD drive, listing identifiers of revoked application units.

Abstract: The invention refers to a method for secure super distribution of user data stored on a first data carrier comprising the steps of

Abstract: Distribution of digital information, in particular audio, is controlled as follows. An information carrier (11) like a CD is distributed which has at least part of the digital information encrypted using an encryption key. A decryption key corresponding to the encryption key is also distributed to the user, e.g. on a reserved area of the CD. The user (32) reproduces the audio on a player (31), which decrypts the information using the key. However, at least part of the information is only reproduced after a Personalized Access Code PAC (40) is received by the player. The PAC is generated at a remote access center (33), e.g. an internet site. A database (34) connected the center and a player memory hold a player identifier and secret player key. The user transmits the player identifier and an information identifier identifying the CD to the access center, and the access center calculates the PAC using the identifier and the secret player key.

Abstract: A high-quality signal, for example a unity-bit coded (DSD) audio signal having a 2.822 MHz bit rate (fs1) is converted to a lower sample rate (fs3) PCM signal by means of a sample rate converter (102). The watermark is embedded at the lower sample rate by a conventional watermark embedder (101) which is capable of handling signals at this lower rate. The watermark (WM) is not otherwise available. It is subsequently retrieved by subtracting (103) the unwatermarked signal from the watermarked signal, and up-sampled (104) to an intermediate sampling rate (fs2). The DSD signal is converted (110) to a PCM signal at said intermediate sample rate. The retrieved watermark is then added (107) to the PCM signal and the watermarked PCM signal is back-converted (120) to a unity-bit coded DSD signal.

Abstract: A conditional access system for controlling the access of receivers of end-users to data transmitted from a data content source in an uplink system. The uplink system comprises a scrambler for scrambling the content supplied from the content source, an entitlement control message generator for generating entitlement control messages containing a control word and an entitlement identification, and a transmitter for transmitting the scrambled content and the entitlement control messages. A descrambler, an entitlement control message decoder and means for storing entitlements are associated to the receiver. The entitlement control message decoder supplies a control word to the descrambler for descrambling a part of the received scrambled content for which the receiver is entitled, if a match between the entitlement identification in the entitlement control message and the entitlement of the end-user exists.