Abstract: This invention presents a method and apparatus for securing a computer system by bounds and other run-time checks. The method can be implemented in hardware to remove the performance penalties previously associated with run-time checks.

Abstract: This invention presents a method or system for the secure distribution and use of electronic media. The method can be used to enforce a distributor's license and copyrights with any form of electronic media including music, software and books but is particularly suited to large media formats such as digital movies. The invention as presented can also be used to ensure that distributed files are not tampered with and are secure to give users peace of mind against viruses, trojans and the like.

Abstract: This invention presents a method or system for rapidly indexing and searching data. The method can be used to quickly return all locations with a data set where a group of bytes is to be found. The invention works by creating a special index on the data structure. The index can be synchronised with the data source as inserts and deletions are performed so that there is no need to rebuild the index. The method according to the invention performs with a similar speed to a traditional optimised search tree but has at most the same number of elements as the data it indexes making the method of the invention ideal for indexing and searching large quantities of dynamic or static data.

Abstract: This invention presents a method and apparatus for securing electronic information by encryption. The method presented can be used to encrypt and decrypt information at any encryption strength, in either stream or file format, and can be easily parallelised for efficient implementation in either hardware or software.

Abstract: This invention presents a method or system for the secure distribution of electronic media through a network. The method is unique in that it protects a distributor's license and copyrights even when distributing random-access electronic media such as software and books. To achieve this benefit, the invention uses 3 components: a Licence Media Service (LMS), a Client Log-in Component (CLC) and a secure Client Instantiation Component (CIC). The client uses the CLC to identify itself to the LMS and request the media. The LMS validates the user and sends only allowed media components back to the client. The CLC then passes these components on to the CIC which instantiates them directly in client memory, without first saving them to disk, drastically reducing the risk of piracy as the media is never stored per-sea on the client machine.

Abstract: A method affording privacy or anonymity on an Internet-type or other communications medium. The method affords users with standard client applications and network components privacy and anonymity by routing application requests and responses through a secure connection with a special intermediary machine. The intermediary machine is preferably on a different network segment to the client (for example on the Internet). The secure client-intermediary connection prevents “sniffers” watching the client from seeing the contents of client request and responses even where the true destination service site is not capable of secure communications itself and the intermediary-service site connection is insecure. Clients requests may be specially formatted so that they can be routed by the standard client applications to the intermediary instead of going directly to the true service site.

Abstract: This invention provides a method allowing communications to pass between private network segments without the need for holes in the firewalls of those networks. The method uses an Intermediary machine located somewhere on a public network as described herein. A component in the private service network opens one or more outbound connections to the Intermediary and leaves these connections open waiting for a response. These outbound connections pass transparently through any restrictive firewalls on the private service network as they these firewalls are typically set-up to block only unprompted inbound requests. A component on the client private network then connects to the same Intermediary with an outbound connection and sends it a request that should be serviced by a server located on the otherwise inaccessible private service network.