Abstract: A system and a method for providing uniquely marked copies of data content. The method contain two basic phases: a preprocessing phase, which produces a library of marked segments, and a message embedding phase, which utilizes the stored marked segments in order to efficiently produce a personalized version of the content, by selecting various marked segments and inserting the selected marked segments into the data content.

Abstract: A method of distributing digital content or service over a communication network is provided. The method is effected by: (a) analyzing a request for distribution of the digital content or service; (b) generating a policy associated with the digital content or service; and (c) assembling a distribution syndicate of distribution entities, the distribution entities being selected according to the policy associated with distribution of the digital content or service, the distribution syndicate being for distributing the digital content or service over the communication network.

Abstract: A method for classification and enforcement of security requirements in an information dissemination system, said information dissemination system not being designed for said security requirements and enforcement. The method comprising the steps of: accepting a user specification of said security requirements for dissemination of respective information, said specifying is done using a user interface; Associating with said dissemination system an enforcement module, said module being operable to receive said security requirements and apply them to control dissemination via said dissemination system, and then enforcing said dissemination via said module.

Abstract: A method and apparatus for secure distribution of information over a network, comprising: encrypting payload information using a first encryption key in a first data processor; sending the payload information encrypted using the first encryption key to a second data processor; encrypting the payload information encrypted using the first encryption key using a second encryption key in the second data processor; and sending the payload information encrypted using the first encryption key and the second encryption key to a third data processor, and generating a decryption key based on the first encryption key and on the second encryption key, such that the decryption key is operable to compute the payload information by decrypting the payload information encrypted using the first encryption key and the second encryption key.

Abstract: A method for robust embedding of information into video content, said method comprising of breaking said video content into a series of at least one unit; selecting at least one of said units, selecting at least one parameter for at least one of said units and performing at least one geometric transformation on said selected units according to said parameters selected for said unit, thereby to embed said information in said video content.

Abstract: A method for dynamic embedding of objects into context selectable locations in digital media items to form versions of said digital media items, said method comprising the steps of: finding context suitable locations in said visual media; dynamically selecting a subset of said objects for at least one location; and embedding one object of said subset of objects in said at least one location, thereby to form a version of said digital media item.

Abstract: A method of encrypting digital content, the method is executed by at least one data processor and comprises selecting one or more segments of said digital content, duplicating said selected segment or segments, creating a plurality of copies of each segment and performing different encryption on said different copies.

Abstract: A system for network content monitoring and control, comprising: a transport data monitor, connectable to a point in a network, for monitoring data being transported past said point, a signature extractor, associated with said transport data monitor, for extracting a derivation of said data, said derivation being indicative of content of said payload, a database of preobtained signatures of content whose movements it is desired to monitor, and a comparator for comparing said derivation with said preobtained signatures, thereby to determine whether said payload comprises any of said content whose movements it is desired to monitor. The monitoring result may be used in bandwidth control on the network to restrict transport of the content it is desired to control.

Abstract: A method for making an anonymous computerized commerce transaction involving the delivery of digital merchandise including the steps of sending first sensitive information from a first entity to a first intermediate entity, processing the first sensitive information at the first intermediate entity, creating first non-sensitive information operable to approve the transaction by the first intermediate entity, sending the first non-sensitive information to a third entity operable to perform the transaction, performing the transaction at the third entity, and transferring the digital merchandise to the first entity via a delivering entity including information operable to deliver the digital merchandise to the first entity without revealing the first sensitive information to the third entity.

Abstract: A method for secure distribution of digital content to an untrusted environment, comprising the steps of: constructing a relatively trusted environment within the untrusted environment; constructing at least two digital inputs, the digital inputs are operable in order to reproduce the digital content; transferring digital media to the relatively trusted environment such that each of the inputs is transmitted via a different path, and combining the inputs in order to reproduce the digital content.

Abstract: A system for external monitoring of networked digital file sharing to track predetermined data content, the system comprising: at least one surveillance element for deployment over said network, said surveillance elements comprising: surveillance functionality for searching said digital file sharing and identification functionality associated with said search functionality for identification of said predetermined data content, therewith to determine whether a given file sharing system is distributing said predetermined data content.

Abstract: A system for locating an online digital content user's geographical and/or virtual location is presented. In one embodiment of the present invention, Geolocation is performed by extracting the user's ISP's DNS IP address. The extracted information may thereafter be correlated with existing data so as to determine and authenticate the user's identity, and/or other properties. The system may also be used to enable electronic commerce bodies such as digital media distributors operating on the Internet to better manage network resources and/or to prevent possible implications of erroneous or fraudulent transaction of digital goods and/or to comply with business rules.