Abstract: A device may select a password and encrypt it utilizing a public key. The device may provide the encrypted password when an access request is received from a client. The client may obtain an unencrypted version of the password by submitting it to a private key server (which utilizes the private key to decrypt the password) and return the password to the device. When the device receives the unencrypted password from the client, the device may allow access. The device may generate the password once during operation. However, in some implementations, the device may generate a new password for each access request and may only respond to the most recently issued password. The device may generate, encrypt, and transmit a single password. However, in various implementations the device may generate, encrypt, and/or transmit a number of different passwords to support different access configurations.

Abstract: Systems and methods securely provide media content from a media server to a media client via a network. The media content is segmented to create multiple media segments that are each identified in a playlist, and at least one of the media segments is encrypted using a cryptographic key. The cryptographic key is also identified in the playlist, and the playlist is provided from the media server to the media client via the network. The various media segments and cryptographic keys may then be requested from and provided by the media server using hypertext transport protocol (HTTP) or similar constructs to allow the media client to receive and decrypt the various segments of the media content.

Abstract: A computer-implemented system and method for pool-based identity generation and use for service access is disclosed. The method in an example embodiment includes seeding an identity generator with a private key; retrieving independently verifiable data corresponding to a service consumer; using the independently verifiable data to create signed assertions corresponding to the service consumer; generating a non-portable identity document associated with the service consumer, the identity document including the signed assertions; signing the identity document with the private key; and conveying the signed identity document to the service consumer via a secure link.

Abstract: A system and method for facilitating approval of an application and for making the application available for download by mobile computing devices has a first module configured to receive a user input received from a software development environment, a second module configured to initiate an application approval process based on the user input, and a third module configured to make the application available for download by mobile computing devices based on the approval process.

Abstract: Systems and methods are described for enabling documents to be controlled by a sender, in a manner which is transparent to any end recipients. The invention include mechanisms enabling a sender to control documents sent to recipient, in a manner that (1) encrypts the message to ensure its security, and (2) restricts operations the recipient may perform on the received message. The recipient and sender need not agree on a control protocol in advance of the communication. Wide distribution of a Digital Rights Management System may be facilitated by use of self-installing modules, which integrate with existing software used for document publishing and retrieval. The modules are forwarded to unregistered recipients upon authentication of the recipient, and install automatically on the recipient's computer.

Abstract: A method for controlling access to deprecated methods of an implementation is provided. The method includes receiving a request to access a method that has been marked as deprecated and building a call stack for the request. Also included is inspecting the call stack to determine if the request is from an application outside of the implementation. The method further includes acting on the request in accordance with a control policy defined by a pluggable policy.

Abstract: A system for secure communications. Embodiments include systems and methods for registering a recipient providing an encryption key corresponding to a recipient to a sender before the recipient has received the corresponding decryption key. Other embodiments include authenticating the identity of a recipient and assigning trust levels according to the level of authentication. Other embodiments include federating the provisioning of keys across more than one server.

Abstract: Systems and methods are described for enabling documents to be controlled by a sender, in a manner which is transparent to any end recipients. The invention include mechanisms enabling a sender to control documents sent to recipient, in a manner that (1) encrypts the message to ensure its security, and (2) restricts operations the recipient may perform on the received message. The recipient and sender need not agree on a control protocol in advance of the communication. Wide distribution of a Digital Rights Management System may be facilitated by use of self-installing modules, which integrate with existing software used for document publishing and retrieval. The modules are forwarded to unregistered recipients upon authentication of the recipient, and install automatically on the recipient's computer.

Abstract: A method for controlling access to deprecated methods of an implementation is provided. The method includes receiving a request to access a method that has been marked as deprecated and building a call stack for the request. Also included is inspecting the call stack to determine if the request is from an application outside of the implementation. The method further includes acting on the request in accordance with a control policy defined by a pluggable policy.

Abstract: In general, a method and apparatus for decoding an encoded digital image is disclosed. An image decoder receives an encoded digital image and determines if the image can be directly decoded and displayed on a display monitor. By directly decoding the encoded digital image, the image decoder eliminates unnecessary intermediate decoding processes.

Abstract: A method and apparatus in which the appearance and functionality of a virtual remote control panel on a web page is controlled by an applet downloaded in connection with the web page. Because the appearance and functionality of the virtual control panel is controlled by the applet, it is easy to change. The invention also includes a set of methods or functions (an API) that can be used by the applet to interface to the video source. This API uses a PIP abstract Java class and a PIPInfo abstract Java class, where “PIP” stands for “picture in picture.

Abstract: A method for selecting colors to draw a dialog box having a visually differentiable boundary is provided. The method includes determining whether one of the dialog box boundary, a dialog box background, and a dialog box component is being drawn. The method selects a reserved color to draw the dialog box boundary by bypassing a mapping of the reserved color to a previously assigned cross-platform compatible color. The method selects a cross-platform compatible color when drawing the dialog box background, and selects a cross-platform compatible color when drawing the component contained within the dialog box. Bypassing the mapping of the reserved color to a previously assigned cross-platform compatible color is designed to draw a dialog box having a differentiable boundary.

Abstract: An application framework for mobile devices is described comprising a three-tier software architecture for wireless devices to allow high-powered backend services to be accessible by low-powered wireless client devices. The present invention defines a layered end-to-end architecture and an application framework, called mobilet framework, for client devices to allow applications to run on wireless devices in a vendor-neutral and platform independent manner. The wireless device may be viewed as a cache or a viewport through which high-end services can be accessed. The cache may be synchronized periodically with the servers and/or service providers through a gateway portal targeted specifically at low-end wireless devices. The mobilet framework for low-end client devices defines an Application Programming Interface as well as an abstraction for platform independent applications called mobilets.

Abstract: A method and apparatus that allows the user to escape from unwanted Java modal dialog boxes displayed by an applet, even though the Java modal dialog box does not contain a user interface designed to cancel or remove the dialog box from the display. The described embodiment allows the user to use so-called “escape” keys to indicate that the Java modal dialog box should be removed and/or closed. In general, these escape keys have other purposes in addition to removing the Java modal dialog box. A first escape key is a “back” key. Although the back key is typically used within a web browser to return to a previously viewed web page, in dialog box mode, the effect of the back key is to remove the dialog box from the display (under certain circumstances, as discussed below). A second escape key in the described embodiment is the “goto” key.

Abstract: A method and apparatus implementing a separate child context for each applet (or similar element) of a browser. A described embodiment of the present invention provides one or more child contexts that correspond to elements in the HTML for a web page displayed by a browser. For example, each applet executed by the browser has a corresponding and separate child context that points to an associated portion of a browser memory. The browser also has a parent context, which each child context points to. When a graphic is displayed via a widget, the widget draws the graphic (such as a panel or a non-pressed button) in the child context of the applet and sets a “damage” flag in the child context. When the browser performs its main browser loop, it checks the status of the damaged flag for each element (including each applet).

Abstract: A method and apparatus implementing a separate child context for each applet (or similar element) of a browser. A described embodiment of the present invention provides one or more child contexts that correspond to elements in the HTML for a web page displayed by a browser. For example, each applet executed by the browser has a corresponding and separate child context. Each child context has an associated memory buffer. An orphan context is provided for behind the scenes drawing, where contents of the orphan context is indirectly drawn on a display screen via the buffer associated with the child context. The browser also has a parent context, which each child context points to. When a graphic is displayed via a widget, the widget draws the graphic (such as a panel or a non-pressed button) in the child context of the applet and sets a “damage” flag in the child context.

Abstract: A method and apparatus implementing a separate child context for each applet (or similar element) of a browser. A described embodiment of the present invention provides one or more child contexts that correspond to elements in the HTML for a web page displayed by a browser. For example, each applet executed by the browser has a corresponding and separate child context Each child context has an associated memory buffer. The browser also has a parent context, which each child context points to. When a graphic is displayed via a widget, the widget draws the graphic (such as a panel or a non-pressed button) in the child context of the applet and sets a “damage” flag in the child context. When the browser performs its main browser loop, it checks the status of the damaged flag for each element (including each applet). If the browser finds a damage flag that is set, this means that something was written into the child buffer and that the parent buffer needs updating.

Abstract: A system and method for receiving and rendering Unicode text in multiple languages on a set top box is disclosed. The system includes a set top box which receives an application program from a broadcast station. The set top box executes the application program. The application program includes Unicode character encoding text for display on a television coupled to the set top box. An operating environment running on the set top box includes a Unicode encoding engine which the application program invokes to display Unicode text. The encoding engine determines the language of characters in the text and invokes a rendering engine corresponding to the language of each character, thus enabling characters from different languages to be mixed in the same text string. The rendering engine has specific knowledge of the language, such as rendering direction and context.

Abstract: A system and method for receiving and rendering Unicode text in multiple languages on a set top box is disclosed. The system includes a set top box which receives an application program from a broadcast station. The set top box executes the application program. The application program includes Unicode character encoding text for display on a television coupled to the set top box. An operating environment running on the set top box includes a Unicode encoding engine which the application program invokes to display Unicode text. The encoding engine determines the language of characters in the text and invokes a rendering engine corresponding to the language of each character, thus enabling characters from different languages to be mixed in the same text string. The rendering engine has specific knowledge of the language, such as rendering direction and context.

Abstract: A system and method for receiving and rendering Unicode text in multiple languages on a set top box is disclosed. The system includes a set top box which receives an application program from a broadcast station. The set top box executes the application program. The application program includes Unicode character encoding text for display on a television coupled to the set top box. An operating environment running on the set top box includes a Unicode encoding engine which the application program invokes to display Unicode text. The encoding engine determines the language of characters in the text and invokes a rendering engine corresponding to the language of each character, thus enabling characters from different languages to be mixed in the same text string. The rendering engine has specific knowledge of the language, such as rendering direction and context.