Abstract: A system and method is provided for detecting unauthorized actions with respect to encrypted data on a media disk, the media disk including a first portion for prerecorded content and a second portion for written content. The method includes reading an identifier on the media disk, wherein the identifier includes one or more sections located in one of the first portion for pre-recorded content, the second portion for written content, and both the first portion for pre-recorded content and the second portion for written content, determining whether the identifier includes a section located in the second portion written content, comparing the identifier with one or more predetermined types of identifiers for which a section is located in the second portion for written content, and if the identifier is of a type that is one of the one or more predetermined types of identifiers, detecting an unauthorized action.

Abstract: A system and method is provided for revoking a device. A method includes receiving a certificate from the device, the certificate including one or more of fields, at least one of the fields holding a signature, attempting to verify the signature, receiving a revocation list from a source, the revocation list identifying one or more data on the certificate as valid or invalid, the data including at least one of the fields of the certificate; and if one of one or more signatures identified unsuccessfully verified and one or more data is identified as invalid, preventing the transmission of a session key to the device, the session key being required to establish a secure communication channel.

Abstract: A system and method is provided for authenticating a device. A method includes receiving a certificate from the device, the certificate including a plurality of fields, including a field holding a digital signature from a certifying authority, verifying the digital signatures in the certificate, the verifying including at least one of verifying the certifying authority digital signature using the certifying authority public key; and verifying a device digital signature using a device public key, and receiving validation data from a source, the validation data identifying one or more data in the certificate as valid or invalid according to predetermined criteria, and if the digital signatures are verified and validated, transmitting a session key to the device to establish a secure communication channel.

Abstract: A secure electronic content system and method is provided. The system includes a controller including an interface component, a host system coupled to the controller, the host system configured to present content under predetermined conditions, the host system operable with a navigation protocol, the host system further including a system manager operable with an associations component configured to be at least partially run by the host system, a translator configured to provide meanings and generate commands within the host system at least a first digital rights management (DRM) component configured to provide encoding and access rules for the content; and a file system component including a file system application programming interface (API) configured to provide a logical interface between a plurality of components.

Abstract: A system and method is provided for authenticating a device. A method includes receiving a certificate from the device, the certificate including a plurality of fields, including a field holding a digital signature from a certifying authority, verifying the digital signatures in the certificate, the verifying including at least one of verifying the certifying authority digital signature using the certifying authority public key; and verifying a device digital signature using a device public key, and receiving validation data from a source, the validation data identifying one or more data in the certificate as valid or invalid according to predetermined criteria, and if the digital signatures are verified and validated, transmitting a session key to the device to establish a secure communication channel.

Abstract: A system and method of identifying one or more vendors associated with a media disk includes providing instructions for the media disk, during a first install of the media disk into a host according to the instructions, installing an identifier on the media disk, the identifier including a code identifying the vendor from which the media disk originated, and after transmitting data to a server, reading the identifier to find a location associated with the vendor. An embodiment of a system and method of identifying a location via a media disk having at least a writeable portion and a non-rewriteable portion includes writing the location on the writeable portion, distributing one or more of the media disks to one or more entities, the location associating the media disks to the one or more entities, and if a return of the media disks occurs, altering the location according to predetermined conditions.

Abstract: A system and method is provided for altering secured data on a storage medium. The method includes establishing a secure session with a host, receiving, via a communications channel, a command to unlock the secured data governed by at least one of a plurality of content storage models, and unlocking the secured data wherein the command responds to an identifier on the medium, the identifier configured to govern access to the secured data, and at least one of the plurality of content storage models is a secure content manager. A system includes a plurality of content storage models for locked data stored on the storage medium, and an engine capable of unlocking secured data wherein the engine modifies attributes of the data on the storage medium to unlock the secured data according to a content storage model in response to a command to unlock the data.

Abstract: A system and method is provided for revoking a device. A method includes receiving a certificate from the device, the certificate including one or more of fields, at least one of the fields holding a signature, attempting to verify the signature, receiving a revocation list from a source, the revocation list identifying one or more data on the certificate as valid or invalid, the data including at least one of the fields of the certificate; and if one of one or more signatures identified unsuccessfully verified and one or more data is identified as invalid, preventing the transmission of a session key to the device, the session key being required to establish a secure communication channel.

Abstract: A system and method is provided for securing content stored on media. One method includes attaching content privileges to the media, wherein the privileges govern a plurality of levels of access, and configuring the media to permit access to the content according to the content privileges and predetermined conditions. An apparatus for securing content stored on media includes at least one tool for transferring content onto the media, the tool configured to attach a plurality of levels of access, wherein content privileges and predetermined conditions govern access to the content.

Abstract: A secure electronic content system and method is provided. The system includes a controller including an interface component, a host system coupled to the controller, the host system configured to present content under predetermined conditions, the host system operable with a navigation protocol, the host system further including a system manager operable with an associations component configured to be at least partially run by the host system, a translator configured to provide meanings and generate commands within the host system at least a first digital rights management (DRM) component configured to provide encoding and access rules for the content; and a file system component including a file system application programming interface (API) configured to provide a logical interface between a plurality of components.

Abstract: A system and method is provided for detecting unauthorized actions with respect to encrypted data on a media disk, the media disk including a first portion for prerecorded content and a second portion for written content. The method includes reading an identifier on the media disk, wherein the identifier includes one or more sections located in one of the first portion for pre-recorded content, the second portion for written content, and both the first portion for pre-recorded content and the second portion for written content, determining whether the identifier includes a section located in the second portion written content, comparing the identifier with one or more predetermined types of identifiers for which a section is located in the second portion for written content, and if the identifier is of a type that is one of the one or more predetermined types of identifiers, detecting an unauthorized action.

Abstract: A system and method for avoiding deadlock in a non-preemptive multi-tasking application program, wherein the application program operates in an operating system that provides a non-preemptive multi-tasking environment. All components of the application program that require resources from other components within the application program, and that will not yield to internal timeslicing within the application program, are placed in separate executables (i.e., application programs). Thus allowing maximum background processing and the avoidance of deadlock.