Abstract: Systems and methods for encrypting and decrypting a data encryption key are provided. A data encryption key used to encrypt data is encrypted using a first asymmetric key and a policy. The policy includes rules that correspond to attributes. A second asymmetric key is associated with the attributes. To decrypt the encrypted data encryption key, the attributes are used to identify the second asymmetric key. The attributes are also used to pass the rules in the policy included in the encrypted data encryption key. If the attributes pass the rules in the policy, the encrypted data encryption key is decrypted. The decrypted data encryption key can then decrypt the encrypted data.

Abstract: Methods and systems for providing fast random access and/or inspection of records within an encrypted communication session are presented. The encrypted communication session may include encrypted records that were encrypted using rotating encryption keys. A key index is generated for the encrypted communication session. The key index includes the encryption keys used during the encrypted communication session and timestamps associated with the encryption keys. To access a particular record within the encrypted communication session, a particular encryption key is selected from the encryption keys stored in the key index. The particular record is decrypted using the selected encryption key.

Abstract: Systems and methods for encrypting and decrypting a data encryption key are provided. A data encryption key used to encrypt data is encrypted using a first asymmetric key and a policy. The policy includes rules that correspond to attributes. A second asymmetric key is associated with the attributes. To decrypt the encrypted data encryption key, the attributes are used to identify the second asymmetric key. The attributes are also used to pass the rules in the policy included in the encrypted data encryption key. If the attributes pass the rules in the policy, the encrypted data encryption key is decrypted. The decrypted data encryption key can then decrypt the encrypted data.

Abstract: Methods and systems for providing fast random access and/or inspection of records within an encrypted communication session are presented. The encrypted communication session may include encrypted records that were encrypted using rotating encryption keys. A key index is generated for the encrypted communication session. The key index includes the encryption keys used during the encrypted communication session and timestamps associated with the encryption keys. To access a particular record within the encrypted communication session, a particular encryption key is selected from the encryption keys stored in the key index. The particular record is decrypted using the selected encryption key.

Abstract: A system for media content selection. In one embodiment, a home entertainment system for accessing content includes a processor for executing instructions adapted for: (i) receiving a request from a user input for selecting a content title; (ii) displaying formats of the content title, with one format stored in a home network and another stored external to the home network; (iii) receiving a request from the user input device to select one of the formats; and (iv) presenting the selected content in the selected format. The content can be a song in a digital format, for example. Selecting the content can include consideration of user preference information and using one or more of: a content manager, a device manager, a network controller, a purchase controller, a device supporter, a content directory, a connection manager, and a digital rights management (DRM) controller. The user input device can include, for example, a remote control device for a home entertainment system.

Abstract: A system for identifying a principal consisting of a service provider in a first circle of trust, where the first circle of trust is implemented using a first architecture; a first identity provider operatively connected to the service provider in the first circle of trust; and a second identity provider in a second circle of trust, where the second circle of trust is implemented using a second architecture, where the first identity provider is configured to contact the second identity provider, in compliance with the second architecture, as a virtual service provider in the second circle of trust to obtain identity information associated with the principal thereby allowing the first identity provider to identify the principal in the first circle of trust.

Abstract: The invention illustrates a system and method of processing an instrumentation data stream comprising: a sensor for generating an instrumentation data stream; a data collector configured for receiving the instrumentation data stream; and a normalization module configured for formatting portions of the instrumentation data stream into a common standard.

Abstract: A system for identifying a principal consisting of a service provider in a first circle of trust, where the first circle of trust is implemented using a first architecture; a first identity provider operatively connected to the service provider in the first circle of trust; and a second identity provider in a second circle of trust, where the second circle of trust is implemented using a second architecture, where the first identity provider is configured to contact the second identity provider, in compliance with the second architecture, as a virtual service provider in the second circle of trust to obtain identity information associated with the principal thereby allowing the first identity provider to identify the principal in the first circle of trust.

Abstract: A system for media content selection. In one embodiment, a home entertainment system for accessing content includes a processor for executing instructions adapted for: (i) receiving a request from a user input for selecting a content title; (ii) displaying formats of the content title, with one format stored in a home network and another stored external to the home network; (iii) receiving a request from the user input device to select one of the formats; and (iv) presenting the selected content in the selected format. The content can be a song in a digital format, for example. Selecting the content can include consideration of user preference information and using one or more of: a content manager, a device manager, a network controller, a purchase controller, a device supporter, a content directory, a connection manager, and a digital rights management (DRM) controller. The user input device can include, for example, a remote control device for a home entertainment system.

Abstract: A broadcast of an event is enhanced with synthetic scenes generated from audio visual and supplemental data received in the broadcast. A synthetic scene is integrated into the broadcast in accordance with a depth map that contains depth information for the synthetic scene. The supplemental data may be sensing data from various sensors placed at the event, position and orientation data of particular objects at the event, or environmental data on conditions at the event. The supplemental data may also be camera tracking data from a camera that is used to generate a virtual camera and viewpoints for the synthetic scene. The present invention describes systems, clients, servers, methods, and computer-readable media of varying scope. In addition to the aspects of the present invention described in this summary, further aspects of the invention will become apparent by reference to the drawings and by reading the detailed description that follows.

Abstract: A method and apparatus to filter a plurality of multimedia streams of a presentation is described. According to one embodiment, a filtering apparatus receive user profile information describing user preferences and a plurality of multimedia streams including metadata streams. The metadata streams describe each of the plurality of multimedia streams. The filtering apparatus filters the plurality of multimedia streams to select a multimedia stream based on the metadata and the user profile information.

Abstract: A broadcast of an event is enhanced with synthetic scenes generated from audio visual and supplemental data received in the broadcast. A synthetic scene is integrated into the broadcast in accordance with a depth map that contains depth information for the synthetic scene. The supplemental data may be sensing data from various sensors placed at the event, position and orientation data of particular objects at the event, or environmental data on conditions at the event. The supplemental data may also be camera tracking data from a camera that is used to generate a virtual camera and viewpoints for the synthetic scene.

Abstract: The invention illustrates a system and method of simultaneously displaying a virtual scene and a real scene comprising: sensing an instrumentation data stream from a sensor; capturing a video stream of a real event from a camera; and rendering a virtual image including a display area for displaying the video stream wherein the display area is positioned in response to the instrumentation data stream.

Abstract: The invention illustrates a system and method of processing an instrumentation data stream comprising: a sensor for generating an instrumentation data stream; a data collector configured for receiving the instrumentation data stream; and a normalization module configured for formatting portions of the instrumentation data stream into a common standard.

Abstract: Video content is provided from a video source, and an attribute identifying the subject of a selected segment of the video content is identified. The attribute is coded into a metadata tag that is associated with the selected segment of the video content. The selected video segment and the associated metadata tag are then transmitted or stored for later transmission. At the client end, the selected video content portion and the associated metadata tag are received. A show flow engine uses the attribute information in the metadata tag to create a script that is used by a rendering engine to output video to a viewer. One output format is a compressed version of at least a portion of a long program. Another output format is a “virtual television program” that is assembled using preselected viewer preferences. In some instances the output content of the virtual program is modified by the viewer in real time.

Abstract: An apparatus and a method of automatically displaying multiple assets on a screen comprising receiving a composite video feed, the composite video feed including a plurality of assets, obtaining user preference data to determine which of the plurality of assets to display on each of a plurality of display regions, aligning and scaling assets to be displayed in corresponding display regions according to the obtained user preference data, and displaying the aligned and scaled assets with the elementary video feed.

Abstract: A method for enhancing broadcasts, such as sporting events. In one embodiment, data is received to create a synthetic scene comprising at least one dynamic synthetic object. Data reflective of at least one real dynamic object corresponding to the at least one dynamic synthetic object is also received. A synthetic scene is generated comprising the at least one dynamic synthetic object using data reflective of the at least one corresponding real dynamic object.

Abstract: A method of sharing computation load within a distributed virtual environment system. According to the present invention, entities within a virtual environment are gathered in groups based on their interactions. All the entities that can potentially interact together are gathered in one group based on the Area of Interest (or aura) of each entity. The groups are then mapped onto the available servers of the network. Once a group is mapped to a server, the server will become responsible for managing interaction between the entities of the group. In addition, a server has to perform collision detection for the entities of the group associated with it. According to the present invention, the server is also responsible for replicating the interaction group it manages so that every client related to the group can see all the entities within this group. Thus, by mapping the groups to the server, computation load can be evenly distributed among the servers.