Abstract: A method for mobile payment includes generating, by a financial institution, a unique credential based on user access information and media binding information that is cryptographically bound to media using a unique media identification. The financial institution stores the credential and media binding information in the form of authentication code in a memory used by an electronic device. The stored credential and media binding information is accessed using the user access information for a payment transaction. A digital certificate is generated using the credential and media binding information. The digital certificate is presented to the financial institution for the payment transaction. The memory is authenticated and binding of the credential to the memory is verified prior to completing the payment transaction.

Abstract: A method for mobile payment selecting a payment method for a purchase request using an application, sending a request including identification information for the selected payment method to a financial entity server in a cloud computing environment, responding to an attestation request sent from the financial entity server to the application, providing mobile subscriber information to the financial entity server from a network operator, receiving a signed digital certificate for the selected payment method from the financial entity server, sending the digital certificate for payment processing from the electronic device to a payment method reader, and completing the purchase request upon verification of the digital certificate.

Abstract: A secure authentication channel (SAC) between two nodes in a communication network is created by the nodes themselves using mutual authentication. The network has two nodes, a coordinating entity, two PKI-based SACs, and one non-PKI SAC which is created by the two nodes and is for use by the nodes. The coordinating entity generates a master key which is transmitted to two nodes via a PKI-based SAC established between the coordinating entity and each of the two nodes. One node uses the master key to generate a first random number and the second node uses the key to generate a second random number. The second node also has an encrypted third random number. The network also has a third SAC, which is not solely based on PKI, between the first node and the second node and is created when the two nodes have authenticated each other. The mutual authentication process occurs without the intervention of the coordinating entity.

Abstract: A secure platform is enabled in which DRM modules can be downloaded and securely installed onto a consumer electronic device, such as a TV. Downloadable DRM solutions are supported for CE manufacturers. The problem of making downloadable DRM modules operate securely on a trusted generic hardware platform without compromising the security of DRM systems is addressed. The downloadable DRM solution uses secure trusted computing-based mechanisms thereby enabling a service provider to perform remote static and dynamic (run-time) attestation of the downloaded DRM module and DRM license in the media device and of content protection application (CPA).

Abstract: A system and method of providing content protection for OMA Broadcast smartcard profiles. When an electronic device has a content item for encryption, the device generates a random number. The electronic device then transmits a content encryption key request message, including the random number and a service encryption key identifier, to a smartcard, which then responds with a a content encryption key response message. The content encryption key response message includes the random number and a content encryption key. The electronic device can then use the content encryption key to manage the encryption of the content item. The electronic device stores random number, service key identifier and encrypted content item into a certain file format. The electronic device sends again content encryption key request at the time of rendering. The content encryption key returned by the content encryption key response message is used for the decryption of the stored content item.

Abstract: In a first embodiment of the present invention, a method for registering a new device to a control point in a home network is provided, the method comprising: generating a first self-certified identification at the control point, the generation using a pseudo-random generated number and using an identification of the control point; and sending a secure message to the new device containing the first self-certified identification.

Abstract: A user playing a media file having ads on a playback device is able to automatically skip the ads during playback depending on the user's subscription level, as indicated in a user license or user account information. Whether an ad is automatically skipped may depend not only on the user license but also on attributes of the ad. An ad may have a skip-level which indicates the “importance” of the ad. If the advertiser wants to ensure that the ad will be seen and not be automatically skipped by a media playback unit, it can pay a higher price for the ad and the ad will be assigned a higher skip-level value. On the user subscription side, a user who wants to avoid ads may pay a higher subscription fee and have a user license that determines, via an auto-skip level value (“user level”), how many ads the user can automatically skip during playback of the media file. With a higher the auto-skip level value, the user is able to automatically skip more ads on the playback device.

Abstract: In a first embodiment of the present invention, a method of establishing end-to-end Quality of Service (QoS) is provided, the method comprising: receiving minimum QoS requirements for a connection between a local device in a local network and a remote device in a remote network; requesting that a QoS connection between the local device and a local gateway in the local network be established; computing remaining QoS requirements by deducting achieved QoS between the local device and the local gateway from the minimum QoS requirements; requesting that a QoS connection between the remote device and a remote gateway in the remote network be established, using the remaining QoS requirements; and requesting to configure a QoS connection between a local gateway and a remote gateway.

Abstract: A method for processing an image such as a computer wallpaper identifies a characteristic color representative of the image. Image pixels with similar colors are separated into groups, and the average value of the R,G,B color components in each group is determined, after filtering out pixels with R,G,B values representing white, black, or grey. The group with the maximum difference between the highest average color component value and the lowest average color component value is identified as the characteristic color. Groups representing a number of pixels less than a certain percentage of all of the pixels are not considered. The characteristic color can be used in other displayed images at an intensity ? determined by setting maximum and minimum values of ?, with ? being the lesser of ?max and ?min plus the average color span of all pixels in the image.

Abstract: Key rotation required for adaptive streaming of data is described. Metadata is added or provides extensions to two file formats, namely, ISO-based FF (also known as MP4 FF) and MPEG2-TS. A new Sample Group Type box in ISO-based FF is introduced to support key rotation required in adaptive streaming use cases, especially for live adaptive streaming. A mapping from MPEG2-TS FF to ISO-based FF is also enabled with the introduction of this new Sample Group Type by embedding metadata required for key rotation. Key rotation needed for live adaptive streaming in a broadcast environment is enabled.

Abstract: A method of organizing a plurality of servers defines a set of servers. The method also defines one of the servers of the set of servers as a server which is configured to control the communication of information to other servers in the set to support heterogeneous application requirements and interoperability between hardware and software systems.

Abstract: A Digital Rights Management (DRM) service system providing digital content to which DRM technology is applied, when one or more DRM content is provided to a client device, download information for a DRM module capable of installing a DRM agent corresponding to a DRM system applied to the DRM content is provided together, making it possible for the client device to download the DRM module based on the download information, install the DRM agent, and use the DRM content.

Abstract: A system and method for transmitting protected real-time content from one user to another is described. In a first aspect, a user sends a Rights Object to another user. In a second aspect, a user sends a Rights Object to another user via an intermediate server for a multiparty communication. In this second aspect, the users may be able to switch between designated Rights Objects as needed.

Abstract: A system and method for transmitting protected real-time content from one user to another is described. In a first aspect, a user sends a Rights Object to another user. In a second aspect, a user sends a Rights Object to another user via an intermediate server for a multiparty communication. In this second aspect, the users may be able to switch between designated Rights Objects as needed.

Abstract: A system and method for transmitting protected real-time content from one user to another is described. In a first aspect, a user sends a Rights Object to another user. In a second aspect, a user sends a Rights Object to another user via an intermediate server for a multiparty communication. In this second aspect, the users may be able to switch between designated Rights Objects as needed.

Abstract: In a first embodiment of the present invention, a method for providing single sign-on in a network having a HyperText Transfer Protocol (HTTP) portion and a Session Initiation Protocol (SIP) portion is provided, the method performed at a gateway and comprising: receiving an HTTP request for an assertion from a requester over the HTTP portion; generating a SIP request using the request for assertion; sending the SIP request to a SIP registrar over the SIP portion; receiving a SIP response including information regarding an assertion from the SIP registrar; and sending the information regarding the assertion in an HTTP response to the requester, such that the requester can use the information regarding the assertion in authenticating the requester to a web server.

Abstract: In one embodiment, a method for establishing Quality of Service (QoS) in a home network is provided. The method comprises: receiving a request for bandwidth in a virtual private network (VPN); receiving a traffic specification of an application on a control point retrieving a traffic policy; retrieving path characteristics of the VPN; and reserving resources in the VPN based on the path characteristics, the traffic policy, and the traffic specification.

Abstract: A user playing a media file having ads on a playback device is able to automatically skip the ads during playback depending on the user's subscription level, as indicated in a user license or user account information. Whether an ad is automatically skipped may depend not only on the user license but also on attributes of the ad. An ad may have a skip-level which indicates the “importance” of the ad. If the advertiser wants to ensure that the ad will be seen and not be automatically skipped by a media playback unit, it can pay a higher price for the ad and the ad will be assigned a higher skip-level value. On the user subscription side, a user who wants to avoid ads may pay a higher subscription fee and have a user license that determines, via an auto-skip level value (“user level”), how many ads the user can automatically skip during playback of the media file. With a higher the auto-skip level value, the user is able to automatically skip more ads on the playback device.

Abstract: In a first embodiment of the present invention, a method for registering a new device to a control point in a home network is provided, the method comprising: generating a first self-certified identification at the control point, the generation using a pseudo-random generated number and using an identification of the control point; and sending a secure message to the new device containing the first self-certified identification.

Abstract: In a first embodiment of the present invention, a method of establishing end-to-end Quality of Service (QoS) is provided, the method comprising: receiving minimum QoS requirements for a connection between a local device in a local network and a remote device in a remote network; requesting that a QoS connection between the local device and a local gateway in the local network be established; computing remaining QoS requirements by deducting achieved QoS between the local device and the local gateway from the minimum QoS requirements; requesting that a QoS connection between the remote device and a remote gateway in the remote network be established, using the remaining QoS requirements; and requesting to configure a QoS connection between a local gateway and a remote gateway.