Abstract: A system for managing use of digital content within a trusted community. An access list defines the trusted community. License requests for use of content made from outside the trusted community are handled in accordance with a license request policy process.

Abstract: A method and apparatus for managing and accomplishing on-line transactions while preserving the privacy of user information. User information is stored at a trusted Web site. A user logs on to a transacting Web site with a user device and requests a transaction from the transacting Web site. The user is verified through the trusted Web site using an anonymous identifier corresponding to the user information and the transaction is accomplished between the user device and the transacting Web site using the anonymous identifier without transferring the user information to the transacting Web site.

Abstract: A system and method for encrypting content in an adaptive manner. Portions of data to be encrypted are identified and an encryption ratio that specifies the one or more portions of data to encrypt and other portions of data to not encrypt is determined. The data is then encrypted based on the encryption ratio.

Abstract: A system and method for processing a rights expression for association with an item for use in a system for controlling use of the item in accordance with the rights expression. A rights expression is specified in a conventional manner in an original format. An intermediate format of the rights expression is generated based on at least one of syntax information and semantics information associated with the original format. The rights expression specifies a manner of use of said item for enforcement on a device. The intermediate format can be converted to a device specific format or a simplified format for resource constrained devices to permit rights enforcement on various devices.

Abstract: A disposable mass transfer system includes a source of dialysis fluid, a waste fluid reservoir, at least one semi-permeable tubular membrane residing in at least one fluid flow channel carrying a flow of a dialysis fluid, and a configurable pump and tubing. The pump and tubing may be configured to pump fresh dialysis fluid into the fluid flow channel, or may be configured to re-circulate partially spent dialysis fluid through the fluid flow channel. The fluid flow channel may be the interior of a flexible sealed reservoir, or may be a semi-rigid or rigid tubular enclosure.

Abstract: Legality expressions are systematically pre-processed, organized, and stored to achieve faster real-time response, improved predictability, and increased reliability for queries against a large volume of legality expressions. Exponential improvements in both the time to locate the set of legality expressions matching specified search criteria and the processing costs of evaluating the request against the matching legality expressions are achieved using the disclosed systems, devices, and methods. The systems, devices, and methods are unique to the optimization of legality expression processing, but they can also enable the use of other optimization techniques for processing large amounts of data.

Abstract: A method and apparatus for dynamically applying digital watermarks. Requested content is sent to a security module of a user device. A digital watermark is dynamically determined based at least on instance information about a rendering engine of the user device. The digital watermark is then rendered with the content using the rendering engine of the user device.

Abstract: A method, system and computer program product for transferring a digital work, including receiving by a first device a first digital work including digital content which is associated with usage rights and transfer permission information; sending to a server a request to transfer the digital content to a second device, the request indicating an identification of the second device; receiving from the server permission to transfer the digital content, the permission being generated based on the identification indicated by the request and the permission indicating new usage rights associated with the digital content; and transferring the digital content associated with the new usage rights to the second device.

Abstract: A system and method for securely distributing content by automatically deploying security components. The system includes a server having content stored thereon, a client device having a standard application program for accomplishing a task related to the content, and a rights management module operatively coupled to the server and said client device and configured, upon a request to access the content, to determine if security components are coupled to the application program. The rights management module downloads and installs the security components on the client device if the security components are not coupled to the application program.

Abstract: The invention relates to method for deriving a sub-right from a right, the right comprising a plurality of components, each of which specifies an aspect of the right. A component may be, for example, a principal, an action, a resource, and a condition. The invention also relates to a method for integrating a first right with a second right. Furthermore, the invention relates to a method of sharing rights by deriving a sub-right from a right, allowing use of the sub-right, and integrating the sub-right with the right.

Abstract: A system and method of controlling use of content in accordance with usage rights associated with the content. A request for content is analyzed by looking for a signature from a user device making the request to determine if the user device has security components for enforcing the usage rights. If the request does not have the signature, a software agent is sent to the user device to determine if the user device is secure and the request is resent with the signature if the user device is secure. Content is rendered with a rendering engine of the user device in accordance with the usage rights in response to the resent request.

Abstract: A self-contained device for protecting content, the content having usage rights associated therewith, includes a usage rights portion having usage rights that control the use of the content; a rights management module that authorizes a request to access to the content based on the usage rights; a rights assignment module that generates and updates the usage rights based on the content access; and an interface module that allows accessing of the content.

Abstract: A mass transfer device having a fluid permeable core wound with many stands of a hollow fiber. A bulk fluid enters the interior of the core, passes through the side wall of the core, and along the outer surfaces of the hollow fibers. A baffle positioned in the center of the core so that the bulk fluid passes outwardly upstream of the baffle and inwardly through the core along the downstream of the block.

Abstract: A method and system for managing the state of a protected resource in a system for granting access to a protected resource in accordance with usage rights. The usage rights include at least one state variable indicating a status of an associated protected resource. A message related to the state variable is transmitted from a resource control device to an interface framework. The resource control device is coupled to the resource to control use of the resource by enforcing the usage right. A state controller operative to track the value of the state variable is loaded into the framework and instructed to manipulate the value of the state variable in accordance with said message. For example, the message can be a query of the current value of the state variable.

Abstract: A rights management system including one or more consequential rights associated with digital content, and specifying a manner of use of the digital content, a right management module that enforces the rights permitting use of the digital content in accordance with the rights upon occurrence of a consequential event. The consequential event is based on another usage right. In one embodiment, the consequential event is the exercise, expiration, or possession of another usage right.

Abstract: Legality expressions are systematically pre-processed, organized, and stored to achieve faster real-time response, improved predictability, and increased reliability for queries against a large volume of legality expressions. Exponential improvements in both the time to locate the set of legality expressions matching specified search criteria and the processing costs of evaluating the request against the matching legality expressions are achieved using the disclosed systems, devices, and methods. The systems, devices, and methods are unique to the optimization of legality expression processing, but they can also enable the use of other optimization techniques for processing large amounts of data.

Abstract: A method and apparatus for managing use of protected content by providing a specific user interface to an application program used to render the content. The method includes identifying a user interface description associated with content, building a specific user interface based on the user interface description, and replacing the standard user interface of an application program used to render the content with the specific user interface. The specific user interface can be unique to the user, unique to a Web site, or otherwise customized.

Abstract: A method and system for integrity certification and verification in a computer environment based on characteristics and behaviors of one or more applications, systems or system components as compared with a profile of characteristics and behaviors, including determining a behavior integrity profile (BIP) specifying characteristics and behaviors of one or more applications, systems or system components; determining based on the BIP whether or not characteristics and behaviors of one or more applications, systems or system components are compliant with characteristics and behaviors defined in a behavior integrity profile specification; and determining access rights to the one or more applications, systems or system components based on the step of determining the compliance.

Abstract: A rights management system including one or more consequential rights associated with digital content, and specifying a manner of use of the digital content, a right management module that enforces the rights permitting use of the digital content in accordance with the rights upon occurrence of a consequential event. The consequential event is based on another usage right. In one embodiment, the consequential event is the exercise, expiration, or possession of another usage right.

Abstract: Usage rights for a digital work are established prior to creation of the corresponding content. The rights can be associated with the content after the content is created. A content creation, such as a video recorder or a still camera, device can store labels of the rights and can associate usage rights with content in real time as the content is created.