Abstract: A method and an apparatus for matching corresponding frames in two multimedia streams are suggested. The first multimedia stream is an original multimedia stream for which meta-data are available. The second multimedia stream is broadcasted or multi-casted multimedia stream and has undergone processing steps such that the meta-data of the original video stream are no more available or no longer reliable. The matching of corresponding frames in the two multimedia streams is based on the comparison of audio fingerprints and the detection of shot boundaries. Matching corresponding frames with frame accuracy enables inserting targeted content like advertisements into a sequence of video frames especially in a broadcast or multicast environment where meta-data and time markers cannot be relied upon.

Abstract: An apparatus adaptively connecting devices in a network with gateways coupled to external networks is provided. The apparatus includes a switch for connecting one of the devices with one of the gateways, and a controller for controlling the switch so as to identify the one of the gateways for the one of the devices by using a routing algorithm, the routing algorithm being dynamically determined based on information of the apparatus or received from the devices or the gateways.

Abstract: Isolation of an active participant in a group of participants commences by first capturing images and audio of participants. Thereafter, an active one of the participants in the group of participants (e.g., a participant that is currently speaking) is identified. After identification of the active participant, at least one of participants' images and participants' audio are rendered to isolate the active participant.

Abstract: A method for fingerprinting wireless devices and a method for using a device fingerprint for identifying wireless devices. A monitoring station listens to a channel. For each received frame, the station measures the inter-arrival time from the end of the previously received frame to the end of the present frame, If possible, the station obtains the identity of the sender of the frame. If the sender is known, then the station stores the inter-arrival time in a histogram for the sender; the histogram becomes the fingerprint for the sender. Identification of a device begins by obtaining a number of inter-arrival times for an unknown sender and then matching these to stored fingerprints using a suitable similarity measure. The invention is particularly suitable for IEEE 802.11 and may for example be used to detect so-called MAC spoofing and as an additional layer of an identification protocol.

Abstract: In one embodiment, it is proposed a method for providing information to determine a graph associated with a data item, said graph being representative of a history of said data item in a network, and said graph comprising a set of vertices and a set of edges, each vertex being associated with an electronic device of said network, and each edge linked at least two vertices being representative of a dataflow between said at least two vertices.

Abstract: Video is provided in chunks to a player. Some chunks need to be computed because they are targeted to a particular user. Computing of targeted chunks is done by cloud computing instances that pop jobs from associated queues. Targeted chunks may be required sooner or later than initially expected due to the player using trick modes. In order to have targeted chunks delivered to the player at the right time, a play time tracker regularly inserts overloaded chunk requests in the manifest file. The overloaded requests comprise references to future needed targeted chunks as well as expected play out time of these chunks. Overloaded requests are verified and if it is determined that the future needed targeted chunk has not already been computed, a message for verification is transmitted to a scheduler. The scheduler verifies if measures need to be taken to ensure timely delivery of the targeted video chunks.

Abstract: A method of processing digital content according to a workflow. The digital content is received and information for the workflow is checked to decide if a processing device is authorized to process the content, the workflow imposing that the digital content be processed in a process chain comprising at least two nodes, wherein the processing device is authorized to process the content if it corresponds to the node that according to the process chain is the next node to process the digital content. If the processing device is authorized to process the content, the digital content is processed and the information for the workflow is updated. Also provided is a system.

Abstract: Method for providing targeted content in image frames of a video and corresponding device A scalable and flexible solution for targeting a video through overlaying image frame zones with content that is targeted to individual users according to user preferences is provided. A video sequence is processed to determine sequences of image frames that comprise overlayable zones for overlay with targeted content. Features that describe these frames and these zones for a content overlay operation are stored in metadata that is associated to the unmodified video sequence. When the video is transmitted to a user, the metadata is used to overlay content in the overlayable zones, whereby the content is chosen according to the preferences of the user.

Abstract: A controlled system performs internal taint tracking of data items. When a data item is created, the controlled system computes a name and a taint for the data item and performs an initialization function, thus informing a tracking entity that of the name and data of the data item. The taint is propagated to further data items, while the name may change, and when a data item is exported to or imported from a further device, the controlled system informs the tracking entity of the name and taint of the exported or imported data item as well as its source and destination. A controlled system may request a propagation history from the tracking entity. As the tracking entity is shared by more than one controlled system, it is possible to perform taint tracking across controlled systems even if these do not use the same taint tracking framework.

Abstract: A method and a fingerprinting device for countering fingerprint forgery in a communication system. The fingerprinting device obtains and stores a reference fingerprint for a client device, generates and transmits decoy traffic that appears to originate from the client device, the decoy traffic having different fingerprinting properties than real traffic from the client device, generates a fingerprint for non-decoy traffic purportedly from the client device, and compares the generated fingerprint with a reference fingerprint. A forged fingerprint is detected if there is a mismatch. The decoy traffic preferably comprises frames to which no response is needed. The invention is particularly suited for 802.11 using fingerprints based on duration fields of received frames and the decoy traffic is then preferably probe request frames and null data frames.

Abstract: There are times when a first user may wish to distribute an excerpt of a protected digital content to a second user, for example for criticism. The protected digital content is divided into a plurality of parts, each part being encrypted using a control word specific for the part, wherein each control word can be generated from a master control word for the protected digital content. A device belonging to the first user selects the parts of the excerpt; generates the control words for the selected parts from the master control word; generates a license for the selected parts, the license comprising the control words for the selected parts; and transmits the selected parts and the license to the receiver of the second user. Also provided is the device of the first user.

Abstract: A method for registering a client to a server connected through a network is disclosed wherein the client being assigned with a determined network address. The method comprises sending by the client to the server, a request comprising a first network address among a sequence of at least one network address; denying by the server the request comprising the first network address among the sequence of at least one network address; sending by the client to the server, a request comprising a second network address; a granting by the server the request comprising the second network address when the second network address is derived from the determined network address and when the first network address among the sequence of at least one network address is derived from a first function using a shared secret between the client and the server and said determined network address of the client. A client device and a server device implementing the registration method are further disclosed.

Abstract: It is provided a method for providing content for a video.

Abstract: A method and an apparatus for matching corresponding frames in two multimedia streams are suggested. The first multimedia stream is an original multimedia stream for which meta-data are available. The second multimedia stream is broadcasted or multi-casted multimedia stream and has undergone processing steps such that the meta-data of the original video stream are no more available or no longer reliable. The matching of corresponding frames in the two multimedia streams is based on the comparison of audio fingerprints and the detection of shot boundaries. Matching corresponding frames with frame accuracy enables inserting targeted content like advertisements into a sequence of video frames especially in a broadcast or multicast environment where meta-data and time markers cannot be relied upon.

Abstract: A method of processing content according to a workflow, where a digital content is processed on one of a plurality of processing devices according to process definition associated to the content, includes the steps, iterated at the processing device, of: a) receiving from a server a signed workflow information, a workflow information comprising a status of the content processing, a signature of the process definition and a hash of the content; b) verifying the workflow information; c) when the workflow information is verified, processing the content according to the process definition and according to status of the content processing; d) updating and signing the workflow information; e) sending to the server the signed workflow information; and the steps iterated at the server of: f) receiving from a processing device a signed workflow information; g) publishing the signed workflow information received from the processing device. A system for performing the method is also provided.

Abstract: Enforcing a global access policy, comprising a global access rule for a user's devices, for consumption of a content item. The user's devices advantageously comprise a set-top box, a tablet and a gateway. The gateway is configured to split the global access rule into local access rules for the set-top box and the tablet so that independent consumption of the content item by the set-top box and the tablet according to the respective local access rules does not violate the global access rule; and to send the local access rules to a first and a second enforcement point, which are configured to receive a request to access the content item from a user device; and allow or inhibit access to the content item depending on whether or not access to the content item is authorized by the local access rule for the user device from which the request was received.

Abstract: A method and an apparatus for inserting content into a transmitted video stream without modifying the original content are suggested. The transmission of videos stream is performed by broadcasting or multicasting. The insertion of content works in real-time and does not require computing overhead compared to conventional solutions. Synchronization of the original videos stream and the transmitted video stream is required for properly inserting the content. This synchronization is performed in two steps. A first step involves a coarse synchronization and in a second step a fine synchronization is applied to the result of the coarse synchronization. The coarse synchronization is based on audio-fingerprints while the fine synchronization is based on video fingerprints. The insertion of content is unsusceptible to processing or transformation steps of the original video along the broadcast or multicast chain.

Abstract: A method for fingerprinting at least one network device is disclosed which comprises, in a monitoring device, computing a passive fingerprint from a plurality of parameters of the at least one network device. And in the at least one network device, modifying at least one parameter among the plurality of parameters of the at least one network device by applying to the at least one parameter a diversity function; wherein the diversity function is chosen in such a way that variations of the modified parameter of each network devices are not correlated; and wherein a variation range of the at least one modified parameter is inferior to a first value so that a variation range of the passive fingerprint for each of the at least one network device is limited to a determined range. A network device, modifying at least one parameter among the plurality of parameters of the at least one network device by applying to the at least one parameter a diversity function is further disclosed.

Abstract: A user device encrypts data and privacy attributes associated with the data. A processing device receives the encrypted data and privacy attributes, receives a signed script from a requester and verifies the signature. If successfully verified, the private key is unsealed and used to decrypt the privacy attributes and script attributes, which are compared to determine if the script respects the privacy attributes. If so, the encrypted data are decrypted and the script processes the private data to generate a result that is encrypted using a key of the requester and the encrypted result is then output. The device is preferably configured to inhibit the output of any information while the data is unencrypted. This way, the user can be ensured that the processing of the private data respects the privacy attributes set by the user.

Abstract: A distributed communication and data sharing system that provides anonymity and unlinkability. A group comprising a number of structures, each having a public/private key pair, is stored on a plurality of nodes in a Distributed Hash Table. Advantageous features of the group management system are provided through the use of Cryptographically Generated Addresses (CGA) for the structures, a secure capture method that enables a user to capture an address and be the only one authorized to request certain operations for the address, and an anonymous get/set mechanism in which a user signs messages, encloses the public key in the message and encrypts the message and public key using the public key of the receiver. The distributed communication and data sharing system of the invention can advantageously be used for group management of social networks.