Abstract: A method, system and device for transferring usage rights associated with digital works, including generating, by a first party, first usage rights and hierarchical rights for a digital work, the first usage rights defining a use for the digital works, the first hierarchical rights specifying rights to derive usage rights or other hierarchical rights; presenting the first usage rights and hierarchical rights to a second party; receiving a selection from the second party indicating desired rights of the first usage rights and hierarchical rights; and granting the desired rights of the first usage rights and hierarchical rights to the second party.

Abstract: A content provider, such as a document publisher or distributor, provides, for example, protected content to a user, for consumption within a trusted user environment. By providing integrity certification and verification services, the authenticity of the content consumption environments can be verified. The content provider forwards to the user a protected version of the digital content which includes, for example, a license agreement and an integrity profile identification. The profile includes, for example, the applications and system components that are allowed to be used in conjunction with the protected content. Additionally, the content provider initiates a request for an integrity profile. This request for the integrity profile is forwarded to an integrity certification and verification device.

Abstract: A method, system and device for transferring rights adapted to be associated with items from a rights supplier to a rights consumer, including obtaining a set of rights associated with an item, the set of rights including meta-rights specifying derivable rights that can be derived from the meta-; determining whether the rights consumer is entitled to the derivable rights specified by the meta-rights; and deriving at least one right from the derivable rights, if the rights consumer is entitled to the derivable rights specified by the meta-rights, wherein the derived right includes at least one state variable based on the set of rights and used for determining a state of the derived right.

Abstract: A system and method for processing a rights expression for association with an item for use in a system for controlling use of the item in accordance with the rights expression. A rights expression is specified in a conventional manner in an original format. An intermediate format of the rights expression is generated based on at least one of syntax information and semantics information associated with the original format. The rights expression specifies a manner of use of said item for enforcement on a device. The intermediate format can be converted to a device specific format or a simplified format for resource constrained devices to permit rights enforcement on various devices.

Abstract: A method and apparatus for dynamically protecting content in a system for managing use of the content in accordance with usage rights. A request is received from a user device for content stored on a server. Information is gathered from at least one source to build the content in accordance with the request and the content is mapped to usage rights. A reply including the usage rights is sent to the user device, and use of the content is permitted based on the usage rights under control of a security module for enforcing usage rights.

Abstract: A method and apparatus for managing and accomplishing on-line transactions while preserving the privacy of user information. User information is stored at a trusted Web site. A user logs on to a transacting Web site with a user device and requests a transaction from the transacting Web site. The user is verified through the trusted Web site using an anonymous identifier corresponding to the user information and the transaction is accomplished between the user device and the transacting Web site using the anonymous identifier without transferring the user information to the transacting Web site.

Abstract: A system and method for securely distributing content by automatically deploying security components. The system includes a server having content stored thereon, a client device having a standard application program for accomplishing a task related to the content, and a rights management module operatively coupled to the server and said client device and configured, upon a request to access the content, to determine if security components are coupled to the application program. The rights management module downloads and installs the security components on the client device if the security components are not coupled to the application program.

Abstract: A system and method of controlling use of content in accordance with usage rights associated with the content. A request for content is analyzed by looking for a signature from a user device making the request to determine if the user device has security components for enforcing the usage rights. If the request does not have the signature, a software agent is sent to the user device to determine if the user device is secure and the request is resent with the signature if the user device is secure. Content is rendered with a rendering engine of the user device in accordance with the usage rights in response to the resent request.

Abstract: A method and apparatus for dynamically applying digital watermarks. Requested content is sent to a security module of a user device. A digital watermark is dynamically determined based at least on instance information about a rendering engine of the user device. The digital watermark is then rendered with the content using the rendering engine of the user device.

Abstract: A method and apparatus for processing transactions related to content distribution. A content request is made through a user device and, in response to the request, the user device receives a direction to request a security component required to render the content. The user device then requests the security component from a computer associated with a transaction aggregator and billing information of the user is collected. The requested security component is returned to the user device and a protected instance of a rendering engine is created on the user device with the security component. The content is then rendered within the protected instance and the rendering operation is reported to the transaction aggregator.

Abstract: A method and apparatus for controlling use of content by sharing secure communications. A user device receives a challenge token from a first server and forwards the challenge token to a second server in association with a request for use of content. A signature of the challenge token is analyzed to determine an origin of the challenge token and the request is authorized by a second server to use the content if the first server is related to the second server.

Abstract: A system and method for controlling the rendering of content by automatically deploying a rendering engine. A request for content is received and the content is packaged with a filename extension that is capable of being rendered by a rendering engine but is different than a file extension of the requested content. A program having a rendering engine for the content is opened based on instructions in the packaged content.

Abstract: A system and method for controlling use of content in accordance with usage rights associated with the content and determined in accordance with the environment of a user device. A request is received for secure content from a user device and the integrity of the environment of the user device is verified. Appropriate usage rights are retrieved based upon the results of the verification of integrity and the content is rendered on the user device in accordance with the appropriate usage rights.

Abstract: A method and system for managing the state of a protected resource in a system for granting access to a protected resource in accordance with usage rights. The usage rights include at least one state variable indicating a status of an associated protected resource. A message related to the state variable is transmitted from a resource control device to an interface framework. The resource control device is coupled to the resource to control use of the resource by enforcing the usage right. A state controller operative to track the value of the state variable is loaded into the framework and instructed to manipulate the value of the state variable in accordance with said message. For example, the message can be a query of the current value of the state variable.

Abstract: A system and method for encrypting content in an adaptive manner. Portions of data to be encrypted are identified and an encryption ratio that specifies the one or more portions of data to encrypt and other portions of data to not encrypt is determined. The data is then encrypted based on the encryption ratio.

Abstract: Extensible grammar-based rights expression system for processing rights expressions including an interpreter with plug-in subcomponents, a validator, and a framework. In another embodiment, system includes a framework having an extensible architecture with extensibility points for adding extensions to the grammar, and an interpreter, the extensions defining semantics and syntax of new rights expressions. A method for processing rights expressions is also provided having the steps of registering plug-in components, making a programmatic call, finding and invoking appropriate plug-in components, evaluating the request against the grant, and returning an authorization result. In another embodiment, method includes the steps of providing an extensible grammar-based rights expression system having an extensible architecture with an interpreter, evaluating the request against the grant using the interpreter, and returning an authorization result.

Abstract: A method and apparatus for managing the transfer of rights associated with items from a rights supplier to a rights consumer. A set of rights is associated with an item and includes meta-rights specifying derivable rights that can be derived therefrom by the rights consumer. The set of rights is transferred, in the form of a license to the item, from the rights supplier to the rights consumer. If it is determined that the rights consumer is entitled to derive the derivable rights specified by the meta-rights, the derivable rights are derived and a license including the derived rights is generated with the rights consumer designated as a principal.

Abstract: A rights management system including one or more consequential rights associated with digital content, and specifying a manner of use of the digital content, a right management module that enforces the rights permitting use of the digital content in accordance with the rights upon occurrence of a consequential event. The consequential event is based on another usage right. In one embodiment, the consequential event is the exercise, expiration, or possession of another usage right.

Abstract: A bioreactor having an outer shell compartment containing many coaxial pairs of hollow microporous fibers. An annular compartment exists between an outer surface of the inner hollow microporous fiver and the inner surface of the outer hollow microporous fiber. The annular compartment preferably contains blood or plasma. The blood or plasma is, thus, exposed to two microporous hollow fibers which have fluids which can purify or otherwise affect the blood through the walls of two different microporous hollow fibers. An artificial liver or kidney can result when liver or kidney cells are placed in the shell compartment.

Abstract: A method and apparatus for verifying data integrity. A compression parameter, such as the average code length of compressed data, is obtained. The parameter is transmitted to a recipient of the data to permit the recipient to again determine the parameter and compare the value of the parameter to the originally determined value. If the value of the parameter has changed, the data may have been modified or otherwise manipulated.