Abstract: A stream of content has multiple sub-streams, where each sub-stream comprises a part of the content and is divisible into logical blocks bounded by intrinsic partitions. For each sub-stream, a specification of the logical blocks bounded by the intrinsic partitions is defined and the sub-stream is divided into the logical blocks bounded by the intrinsic partitions. Each divided logical block is encrypted and then divided into one or more portions to produce corresponding pieces of data, and each piece of data is placed into a data packet as a payload thereof. Each data packet is transmitted to a recipient thereof, and the recipient can retrieve the pieces of data from the payloads of the packets, reconstruct the encrypted logical blocks, and manipulate the sub-stream on a per-logical block basis without necessarily decrypting each encrypted logical block.

Abstract: Various embodiments provide methods and systems that utilize a protocol which enables media content protection by establishing a secure communication channel and, in some embodiments, a secure data channel, between a device such as a computing device running a protected content playback application, and a downstream component such as an associated driver, such as a graphics driver, of an associated display device such as a monitor, flat panel LCD, television and the like.

Abstract: A stream of content has multiple sub-streams, where each sub-stream comprises a part of the content and is divisible into logical blocks bounded by intrinsic partitions. For each sub-stream, a specification of the logical blocks bounded by the intrinsic partitions is defined and the sub-stream is divided into the logical blocks bounded by the intrinsic partitions. Each divided logical block is encrypted and then divided into one or more portions to produce corresponding pieces of data, and each piece of data is placed into a data packet as a payload thereof. Each data packet is transmitted to a recipient thereof, and the recipient can retrieve the pieces of data from the payloads of the packets, reconstruct the encrypted logical blocks, and manipulate the sub-stream on a per-logical block basis without necessarily decrypting each encrypted logical block.

Abstract: The present invention enforces digital rights within the confines of a content license by validating an entity certificate. Cryptographic information within a entity certificate is utilized to unlock protected content and authenticate the entity certificate. The entity certificate includes personal credentials, which have information that the entity is unwilling or uncomfortable to share publicly. For example, the personal credentials may include private information, or information associated with a personal object that cannot consume the protected content, or both.

Abstract: An application on a computing device to write data to a storage medium associated therewith. The data is to be written to a secure storage area associated with an object on the storage medium, and the secure storage area has a value storage area associated therewith. The application generates a nonce and employs a shared session key (KS) to encrypt the nonce to result in (KS(nonce)). The storage medium receives same and decrypts with (KS) to result in the nonce, locates the value storage area associated with the secure storage area, and stores such nonce in the located value storage area. The application employs the nonce to generate a key (KH), encrypts the data with (KH) to result in (KH(data)), and sends same to the storage medium for storage in the secure storage area. Thus, (KH(data)) is associated with the nonce in the value storage area.

Abstract: In order to ensure that an entertainment access system is enabled to unify and simplify a user's enjoyment of content by managing the user's devices, entertainment content and usage rights, it is important to ensure the user devices, and the services they offer, function in accordance with well-established specifications and standards. Importantly, these specifications need to be the same from one device manufacturer to another. This is needed to ensure that the entertainment access system will be able to provide a consistent, reliable and predictable user experience to its users. In some illustrative examples, a certification program is implemented for user devices that receive and render the entertainment content received from the entertainment access system. The certification program establishes specifications to which the devices are to conform regardless of their manufacturer.

Abstract: An entertainment access system is provided that enables a user to request and receive status reports that present current information concerning a wide variety of items pertaining to the user's devices, entertainment content and usage rights in a standard, predictable and consistent manner that enhances rather than hinders the user experience. In some illustrative examples, the user can request the status report from one of his devices that is registered with the entertainment access system. The entertainment access system responds by collecting and formatting the status information so that is can be conveniently displayed or otherwise rendered on the registered device. For instance, if the request is received from a cell phone device, which generally has a relatively small screen, the information may be presented in a relatively abbreviated format.

Abstract: Systems and/or methods (“tools”) are described that enable encrypted media files to be sent without revocation lists while permitting the encrypted media files to be passed to trusted entities. The tools may also ensure continuation of protection when media files are passed between different protection systems.

Abstract: In accordance with one or more aspects, a first device receives a digital certificate of a second device. The first device generates a digitally signed temporary domain join request and sends the request to a domain controller. The domain controller generates, for the first device, a temporary domain certificate allowing the first device to temporarily consume content bound to the domain. The temporary domain certificate is sent to the first device, allowing the first device to temporarily consume content bound to the domain.

Abstract: Various systems and methods described above permit a user's content experience (e.g. music playing experience) to be monitored and for metadata describing this experience to be collected. This metadata can be dynamically updated as a user experiences media content and then used to impart to the user a personalized experience that is tailored to that specific user. A user's metadata can, in some instances, provided across a wide variety of computing devices on which the user may experience the media content, thus standardizing the user's personalized media experience. In addition, intelligent or “smart” playlists can be provided which, in some instances, can be dynamically and automatically updated to reflect current user experiences, thus providing a highly personalized and enjoyable content experience.

Abstract: Multimedia presentations are multicast using an announcement channel that includes presentation description information along with multiple channels for multiple streams of multimedia data to accommodate clients of different multimedia resources. Clients can use the announcement channel to select channel(s) appropriate for their multimedia resources. The channels are created in a predetermined manner (e.g., preselected logical addresses, preselected ports of an IP address, etc.) so that clients can immediately join a channel without (or concurrently with) joining the announcement channel to reduce startup latency. An acceleration channel may be created that provides blocks of data containing a preselected number of previous units, which may be transmitted at at a bit rate that is “faster than real-time”. This feature allows clients with suitable resources to more quickly buffer sufficient data to begin presenting the multimedia data to users.

Abstract: The described embodiments relate to data security. One exemplary system includes a first component associated with data on which an action can be performed and a second component configured to perform the action on the data. The system also includes a third component configured to ascertain the action and determine, as a function of the action, at least one policy to be implemented prior to allowing the second component to access the data.

Abstract: Systems and methods to license combinations of one or more data streams from an encoded file including multiple data streams are described. In one aspect, the encoded file is accessed from a data source. A header is generated to specify a first group of one or more data streams for licensing independent of a second group of one or more data streams. The data stream content in the first group is not equivalent to the data stream content of the second group. A number of business rules are identified to indicate respective licensing strategies for the data streams in the first and second groups. A data file is generated to encapsulate the header and an encrypted version of the encoded media. An end-user is provided access to the data streams in the first and/or second groups via the data file and the header according to the respective licensing strategies.

Abstract: A sink sends a registration request to a source and the source validates same, and the source sends a registration response including a secret to the sink. The source then sends a proximity message including a nonce to the sink and concurrently notes a start time. The sink employs the secret and the nonce to generate a proximity value and sends same to the sources. The source receives the proximity value and concurrently notes an end time, verifies the proximity value based on the secret and the nonce, calculates from the noted start and end times an elapsed time, compares the elapsed time to a predetermined threshold value, decides from the comparison whether the sink satisfies the proximity requirement, and registers the sink as being able to access content from such source if the sink satisfies the proximity requirement.

Abstract: This document describes tools capable of managing digital content from multiple content providers based on a user's identity. By so doing, the tools may free people from the limitations of their storage media and devices. The tools may perform these and other actions through an indirect relationship with users, such as when third-party content providers use the tools but provide their own direct interface with users.

Abstract: Various embodiments permit policy updates, such as DRM policy updates, to be delivered and updated for a given piece of protected content. In at least some embodiments, various protocols can be extended to permit policy updates to be represented and carried by the protocol. In one embodiment, Hypertext Transport Protocol or HTTP is utilized to carry the policy updates. In another embodiment, Real Time Streaming Protocol or RTSP is used to carry policy updates.

Abstract: This document describes tools capable of managing advertising in the field of digital entertainment content. The tools may enable advertisers to know which advertisements are more effective or are more likely to be effective with all users, users having similar demographic profiles, or a particular user. The tools may do so by building and maintaining profiles for users. These profiles may include many users' interactions with various advertisements, demographic information for the users usable to compare users, explicitly selected preferences of users, users' implicit preferences based on what entertainment content they watch, and other information.

Abstract: A system (and corresponding method) that can enhance a user experience by augmenting real-world experiences with virtual world data to is provided. The augmented reality system discloses various techniques to personalize real-world experiences by overlaying or interspersing virtual capabilities (and data) with real world situations. The innovation can also filter, rank, modify or ignore virtual-world information based upon a particular real-world class, user identity or context.

Abstract: The claimed subject matter provides a system and/or a method that facilitates generating a suggestion for a creative work. An interface component can receive a portion of a creative work. A muse component can evaluate the portion of the creative work utilizing a machine learning technique, wherein the muse component can identify a portion of suggested content based upon the evaluation. A palette can be populated with the portion of suggested content, wherein the portion of suggested content is a subset of content that is available for incorporation into the creative work.

Abstract: A DRM technique involves packaging an advertisement using a data structure that encapsulates a number of advertising segments along with signed information, such as a table of hashes, associated with some of the advertising segments. In one scenario, the data structure and the signed information are separately protected using public key and/or digital signature cryptographic schemes. The advertisement is delivered to a user of a consumer electronic device (CED) separately from delivery of a digital license, which governs user consumption of the advertisement. The digital license includes keys used in connection with the cryptographic scheme, and references a condition to be satisfied with respect to consumption of the advertisement. As advertising segments are verified and consumed by the user/CED, information is recorded and used to determine whether the license condition was satisfied. Satisfaction of the license condition may result in access to program content or additional licenses.