Abstract: A secure key exchange with mutual authentication allows devices on a network to perform, in a single roundtrip over the network, the exchange. A key exchange initiator packet that does not include a key to be established is sent from an initiating device to another device via a network. The key exchange initiator packet is validated and the other device generates the key without requiring any additional packets to be received from the initiating device in order to generate the key. A key exchange response packet that does not include the key is returned to the initiating device, which validates the key exchange response packet and generates the key without requiring any additional packets to be sent to the other device or received from the other device.

Abstract: An architecture is described to manufacture console-based gaming systems in a manner that allows them to be authenticated to a remote entity for online participation. The architecture involves placing pre-established secrets on the game console during console manufacturing that may be subsequently used to guarantee the authenticity of the game console during registration time.

Abstract: A console-based multi-user authentication process allows multiple users of a game console to be authenticated together in a single request/reply exchange with an authentication entity. The results of which is the possession of a single ticket that can be used to prove authenticity of multiple authentication principals to one or more online services. Also described is a handshake process that can be used to initially establish an authentication account for each game console, in which the account creation server can trust that a genuine game console is making the request.

Abstract: A metaserver for managing the delivery of multimedia streams from, a plurality of multimedia servers to multiple clients over a diverse network is disclosed. The metaserver allows one to eliminate the bottleneck problem associated with the limited speed of a single multimedia server, reduce the network congestion and increase the fault tolerance of the whole system.

Abstract: Authorization methods, systems and computer program products ensure that user media streaming requests are implemented to access unmodified original content. Authorization and data collection follow a user streaming request to a media server, including comparison of user password with a remote password maintenance authority, followed by decryption and descrambling of content pursuant to password clearance. Streaming and media content recording are monitored to ensure compliance with bandwidth and stream number policies for all and specific clients. Users are provided with service levels at least at the level of predetermined status.

Abstract: Authentication methods, systems and computer program products ensure that user media streaming requests originate with web documents having an authorized URL. The user makes a streaming request to a media server with a URL including a URL prefix, a path, and the name of a media work to be performed, which URL the media server compares with earlier made URL entries in a pre-established database. If there is a URL correspondence between a URL in the pre-established database and the URL extracted from the HTML document received by the browser from a web server, then streaming of the particular work is authorized.