Abstract: An integrated circuit device that includes a secure or protected memory component is herein disclosed and enabled. The integrated circuit may be a wireless communication device or a smart card or an USB device. Additionally, the integrated circuit may be part of or in a computing device or mobile device. The integrated circuit device includes a private memory section for storing protected data that is not accessible by a user at the private memory section, but is accessible by a memory controller included in the integrated circuit device. The memory controller accesses the protected data with a combination of security operations that may include cryptography. The integrated circuit device may further include a wireless component for establishing a wireless connection with wireless computing devices or readers for wirelessly transmitting the protected data accessed by the memory controller to the wireless computing devices.

Abstract: The systems and method disclosed herein address introduce identifiers within the individual entitlement management messages (EMMs) addressed to that client that uniquely identify the combination of system and subscriber account to which the client is deployed, and use of them to issue automatic ‘factory reset’ behavior when the client is re-authorized for the new subscriber. In one embodiment, the EMM messages used to trigger the reset behavior are cryptographically signed specifically for the individual client to ensure that such a message cannot be maliciously sent by an untrusted third party. The facility to deliver such a message is already available within the conditional access system (CAS).

Abstract: Systems, methods, and devices for forming networks of interconnected devices are provided. Individual devices of the network are configured to utilize multiple wireless communication standards which may include wireless LAN communication standards, short-range wireless communication standards, and low-power wireless communication standards. User utilize access devices to monitor and control the devices of the network. Communications transmitted to devices of the network may be routed through a server located remotely relative to the network as well as through other devices of the network.

Abstract: In some embodiments, an electronic device presents a plurality of representations of content items that are available on a respective channel in response to successfully subscribing the respective channel. In some embodiments, an electronic device plays content that is provided by a channel in a unified media browsing application. In some embodiments, an electronic device presents information about subscribing to a channel based on content consumption activity of the user on the electronic device in accordance with some embodiments of the disclosure.

Abstract: A URL personalization system allowing a television service provider to dynamically associate multiple URLs with the video content item being viewed by the customer is provided. The associated URLs point to additional content that may be of interest to different customer demographics. A generic URL linking to the associated URLs may be inserted into the video content item. The system may personalize the generic URL by replacing or modifying the generic URL with a personalized URL based on information specific to the customer viewing the content before streaming the content or when additional content is requested. The customer is redirected to the personalized URL to obtain the additional content. This allows the television service provider to send a single video content item to all customers or large groups of customers while providing individual customers with an enhanced interactive television viewing experience.

Abstract: A controller receives an encrypted media stream (“EMS”) and an identifier indicative of a selected content key from a headend. The EMS is encrypted with an encryption key and can be decrypted with a corresponding decryption key which is determinable from the selected content key. The controller receives indexes and content keys from the headend prior to receiving the EMS. Each index respectively corresponds to an identifier with one index corresponding to the identifier indicative of the selected content key. The content keys correspond to the indexes with one content key corresponding to the index corresponding to the identifier indicative of the selected content key. The controller selects the index corresponding to the identifier indicative of the selected content key upon receiving the EMS, determines the selected content key from the selected index, determines the decryption key from the selected content key, and decrypts the EMS with the decryption key.

Abstract: A system and method for encrypting and decrypting information is presented. In some embodiments, an endpoint token management system is provided for facilitating dynamic and random encryption and decryption methods. The system and methods may be employed in virtually any system or network, and may be used to protect virtually any type of data, whether at rest (data storage), in motion (data transfer), or in use. In some embodiments, synchronization points are used as analogs for encryption/decryption keys, enabling the encrypting system and decrypting system to begin randomly altering encryption data in a like-manner, thereby creating a constantly changing encryption field that is virtually impossible to decrypt without authorization.

Abstract: A storage method for storing a multimedia content by an electronic device, the electronic device including a database containing a list of users and a table of recordings, a system adapted to acquire the multimedia content, a calculation system and a storage system, the storage method including allocating a storage space on the storage system by the calculation system; adding an entry relating to the multimedia content stored in the table of recordings; acquiring the multimedia content and writing to memory the multimedia content in the allocated storage space, and creating a table of users relating to the stored multimedia content, the table of users including, for each user of a sub-set of the list of users contained in the database, one or more context data.

Abstract: Methods, systems, and computer readable media can be operable to facilitate the encryption of a device identifier using an identification property of a SoC. A unique identifier of a cable modem may be encrypted using a unique key or other unique property of a SoC associated with the cable modem. When an authentication process is initiated at the cable modem, the encrypted unique identifier of the cable modem may be decrypted using the unique key or other unique property of the SoC, thereby producing the unique identifier of the cable modem. The decrypted unique identifier of the cable modem may be output from the cable modem to an upstream controller during the authentication process. In embodiments, an obfuscation key may be used to encrypt and decrypt the unique identifier of the cable modem, and the obfuscation key may be generated using a unique identifier of the SoC.

Abstract: Techniques are described for efficient delivery and reception of information, such as an Entitlement Management Message (EMM), that is related to Digital Rights Management (DRM) in a terrestrial broadcast system such as ATSC 3.0.

Abstract: A data custodian and curation system may store data from a data supplier in encrypted form and may allow users to consume the data when the consumers obtain access to the data through an agreement. The curation system may manage access to the data, even allowing a consumer to use the data as if it were their own, but may track each usage of the data to implement a payment scheme or various usage restrictions. The curation system may encrypt downstream uses of the data and operate as a digital rights management system for the data. The custodian and curation system may operate as a cloud service that may contain encrypted data from many data providers but where the data providers may individually control access to their data in a managed system at any granular level.

Abstract: The invention is directed to secure content delivery. A device (10) sends (4) a content request to a CP (14) identifying targeted content and a public key (K PUB) of the device. A response (8) identifies a Content Delivery Network (18-1, 18-2), CDN, and includes an authorization token (TOKEN A) and a content key (K-NEW) derived from the public key of the communication device and a private key of the CP. The authorization token is sent (10) to the CDN and a delivery token (TOKEN B) and delivery node address are received (15). The delivery token and content key are sent (18) to the delivery node and encrypted content is received (30), the encrypted content comprises content as initially encrypted by the CP and as further encrypted by the CDN using the content key. The encrypted content is decrypted (31) using a private key of the device (10).

Abstract: Presented is a system and methods for receiving metadata, a decryption module and encrypted content from a cable headend, decrypting the encrypted content with the decryption module and presenting the decrypted content to a user. The client device can receive, load and execute any decryption module compatible with the system framework allowing flexibility in the choice or changing of client device manufacturer and/or Digital Rights Management system vendor.

Abstract: A hearing instrument includes: a radio for reception of a broadcasted signal having a message, at least a part of the message has been encrypted with a first key, wherein the first key has been encrypted with a second key; an authenticator configured for authentication of the message by decrypting the first key with a third key, and decrypting the at least a part of the message with the first key; and a processing unit for converting the message into an acoustic signal for transmission towards an eardrum of a user of the hearing instrument.

Abstract: A system and method for encrypting and decrypting information is presented. In some embodiments, an endpoint token management system is provided for facilitating dynamic and random encryption and decryption methods. The system and methods may be employed in virtually any system or network, and may be used to protect virtually any type of data, whether at rest (data storage), in motion (data transfer), or in use. In some embodiments, synchronization points are used as analogs for encryption/decryption keys, enabling the encrypting system and decrypting system to begin randomly altering encryption data in a like-manner, thereby creating a constantly changing encryption field that is virtually impossible to decrypt without authorization.

Abstract: A method of filtering authenticated synthetic transactions comprises receiving over a network, at a server providing a first networked application, a plurality of requests for the first networked application, wherein the plurality of requests includes a first synthetic transaction. The method further comprises analyzing a respective header of each of the plurality of requests; identifying a synthetic token in the respective header of the first synthetic transaction in response to analyzing the respective header of each of the plurality of requests; determining that the identified synthetic token corresponds to the first networked application; and bypassing usage monitoring for the first synthetic transaction in response to determining that the identified synthetic token corresponds to the first networked application.

Abstract: Concepts and technologies disclosed herein are directed to privacy-preserving location corroborations. According to one aspect, a localized corroborator system can receive a message digest from a user device. The message digest can be generated by the user device using a cryptographic hash function based upon bitwise XOR of a user identifier and a location proof identifier. The location proof identifier can uniquely identify a location proof to be created by the system. The system can concatenate a corroborator identifier, a location, a time, and the message digest to create a concatenated message. The system can sign the concatenate message using a private key to create the location proof and can send the corroborator identifier and the location proof to the user device. The user device can use the location proof to prove that the user was located at the location at the time.

Abstract: A hearing instrument includes: a radio for reception of a broadcasted signal having a message, at least a part of the message has been encrypted with a first key, wherein the first key has been encrypted with a second key; an authenticator configured for authentication of the message by decrypting the first key with a third key, and decrypting the at least a part of the message with the first key; and a processing unit for converting the message into an acoustic signal for transmission towards an eardrum of a user of the hearing instrument.

Abstract: Median values for a stream of received data values in a data processing system (e.g. an image processing system) are determined. A first median value of the received data values within a first subset of data values of the received stream is determined, and intermediate data used for determining the first median value is stored. The stored intermediate data is used to determine a median value of the received data values within a second subset of data values of the received stream, wherein the second subset at least partially overlaps with the first subset. The determined median values are outputted for use in the data processing system, e.g. for further processing.

Abstract: The present disclosure provide technology for encoded signal localization. One claim recites an apparatus comprising: memory for buffering image data, the image data having been captured with a camera and depicting product packaging or a product label; one or more processors programmed for: generating a spatial domain feature set representation of a portion of image data; evaluating the spatial domain feature set with a classifier to predict whether the portion of image data includes a transform domain encoded signal. Of course, other claims, and various combinations and embodiments are disclosed in this patent document.

Abstract: Disclosed herein is a control word protection method for a conditional access system. There is provided a method for allowing a chipset of a receiver to securely obtain control words for descrambling scrambled content transmitted from a content delivery network.

Abstract: A reception device includes: a receiver unit which receives a program that is encrypted, handles confidential information and includes identification information for identifying a target of use of the program, and a notification signal for notifying of delivery of the program and including delivery destination information for identifying a delivery destination of the program; a processor which determines whether the reception device is a delivery target of the program on the basis of the delivery destination information included in the notification signal, and prepares for receiving the program when the reception device is the delivery target of the program; and an information protection unit which determines whether the reception device is the target of use of the program with reference to the identification information included in the program, and decrypts the program when the reception device is the target of use of the program.

Abstract: Methods and systems for providing user defined content transmissions are disclosed. An example method can comprise receiving a request for first content and receiving a first preference. First content can be retrieved from a first source based on the request for first content. Second content can be retrieved from a second source based on the first preference. The first content and second content can be packaged for transmission in response to receiving the request and the first preference.

Abstract: An integrated circuit device that includes a wireless component and a secure element is herein disclosed and enabled. The integrated circuit device includes a protected memory area for storing protected data that is implemented to be not accessible by a user, but is accessible by a memory controller included in the integrated circuit device. The memory controller accesses the protected data with a combination of security operations that may include cryptography, decryption, or encryption. The integrated circuit device further includes a wireless interface for establishing a short range wireless point-to-point communication with wireless computing devices or readers for transmitting the protected data that is encrypted. The integrated circuit device functions as a security key requiring the presence of the integrated circuit device when accessing and using the protected data. The wireless integrated circuit device can be included in, or embodied as, any wireless communication device, such as a smart phone.

Abstract: Runtime computer software product management system including a computer database, an access control system and a composite model including an integrated entitlement-service state model with first state data specifying access to a subscription of a computer software product of a host and second state data specifying permissible actions involving the subscription based at least in part upon the first state data. The access control system is in communication with the computer database and generates grants for an accountant and client based on the entitlement-service state model and receives a request from the computer software product for the client to access the product. The access control system determines a grant status based at least in part upon the first grant status and the second grant status and responds to the request with the determined grant status which governs client access to the computer software product.

Abstract: An approach for multi-stream data compression comprises receiving packets of a data stream, wherein the packets comprise respective packets of source data streams compressed on an aggregate basis and in a successive order. A one of the packets is decompressed, and a determination is made whether the packet has been received in a proper order of succession compared to the successive order of compression. When it is determined that the packet has been received in the proper order, the packet is stored at a next location in a decompressor cache. When it is determined that the packet has not been received in the proper order, the packet is stored at a location in the decompressor cache, allowing for subsequent storage of one or more further packets in the proper order of succession, wherein the further packets were processed via the compression process before, but were received after, the one packet.

Abstract: Methods, devices, systems, and non-transitory process-readable storage media for a watermark client executing on a media receiver device to manage access to data related to watermark data from broadcast streams. An embodiment method performed by a processor of the media receiver device may include operations for receiving a broadcast stream from a broadcast channel, identifying watermark data within the received broadcast stream, obtaining data via a wide area network based on the identified watermark data, receiving a request for the obtained data from a resident application executing on the media receiver device, and determining whether the resident application is eligible to access the obtained data.

Abstract: A system and method for encrypting and decrypting information is presented. In some embodiments, an endpoint token management system is provided for facilitating dynamic and random encryption and decryption methods. The system and methods may be employed in virtually any system or network, and may be used to protect virtually any type of data, whether at rest (data storage), in motion (data transfer), or in use. In some embodiments, synchronization points are used as analogs for encryption/decryption keys, enabling the encrypting system and decrypting system to begin randomly altering encryption data in a like-manner, thereby creating a constantly changing encryption field that is virtually impossible to decrypt without authorization.

Abstract: In a general aspect, a method for data communication over a data channel on a data path between a first node and a second node includes maintaining data characterizing one or more current or previous data communication connections traversing the data channel and initiating a new data communication connection between the first node and the second node including configuring the new data communication connection at least in part according to the maintained data.

Abstract: A method of authenticating or controlling a software application on an end user device. The method includes, at the end user device, downloading software application data from a remote server, the data including application code, a cryptographically derived signature obtained using said application code, and an identity of an application developer. The identity is then used as a look-up key to obtain or authenticate a public key of the application data, and to obtain one or more associated installation and/or operation conditions. The cryptographically derived signature is authenticated using said application code and said public key, and, in the event that authentication is successful, authentication of the application code is performed and/or installation and/or operation of the application controlled using said conditions.

Abstract: A method of transmitting a broadcast signal includes encoding mobile service data to build a Reed-Solomon (RS) frame according to an RS frame mode, wherein the mobile service data is either a mobile service data of a base layer or a mobile service data of the base layer and at least one enhancement layer, wherein each layer is specified by a layer identifier, wherein a layer identifier value of the base layer is set to 0 and a layer identifier value of the at least one enhancement layer starts from 1; and encoding signaling data, wherein the signaling data includes fast information channel (FIC) data and transmission parameter channel (TPC) data, and the FIC data includes information for rapid mobile service acquisition.

Abstract: There is provided a video delivery method for a server that delivers to a terminal device a video signal based on a plurality of videos obtained by shooting an identical scene from a plurality of different viewpoints over a plurality of successive periods, the method including: selecting a selected video from among the plurality of videos for each of the plurality of periods in accordance with rating values of the plurality of videos, the rating values being given by a plurality of users; and transmitting to the terminal device the video signal for successively replaying a plurality of the selected videos respectively selected for the plurality of periods.

Abstract: Provided are a video display device and a method of operating the same. The video display device request content recognition configuration information to a third party server that is not dependent on any single channel, and receives the content recognition configuration information from the third party server. The video display device extracts a plurality of content recognition configuration information items from the content recognition configuration information and configures the plurality of content recognition configuration information item in the video display device. The video display device obtains contents information of uncompressed content on the basis of the plurality of content recognition configuration information item, obtains an application on the basis of the content information, and executes the application.

Abstract: A digital video recorder (DVR) has a memory manager to determine a particular date and a particular video program in a download schedule for which the DVR will reach a low memory condition based on the download schedule and an amount of unoccupied memory space in the DVR. The DVR outputs a display signal to indicate the particular date and the particular video program.

Abstract: An information processing apparatus includes a storage device configured to store data, an encryption chip configured to store an encryption key therein, a nonvolatile memory configured to store a backup encryption key, and a control unit configured to confirm whether the data stored in the storage device has been correctly decrypted by using the encryption key, and when the data has not been correctly decrypted, restore the backup encryption key to the encryption chip, and when the data has been correctly decrypted, back up the backup encryption key, which is a backup of the encryption key, stored in the encryption chip into the nonvolatile memory.

Abstract: Embodiments of the invention provide an improved method and an improved receiver for obtaining a control word. Two or more subkeys are obtained in a receiver. Each subkey was encrypted under control of a key received in an entitlement message or transformed under control of a seed received in an entitlement message. After decryption or transformation, the subkeys are combined to obtain the control word. Typically at least one of the entitlement messages is a positive entitlement message and at least one of the entitlement messages is a negative entitlement message. Embodiments of the invention can be used in a conditional access system such as a Pay-TV system.

Abstract: In an example embodiment, login credentials are received from a user. These login credentials are validated. Sensitive information is received from the user. The sensitive information is then stored in a cloud-based database. One or more access limitations are established for the sensitive information. A request for the sensitive information is received, from a first third party entity, via an application program interface (API) distributed to a plurality of third party entities. It is then determined if providing access to the sensitive information to the first third party entity would violate the one or more access limitations for the sensitive information. In response to a determination that the providing access to the sensitive information to the first third party entity would not violate the one or more access limitations for the sensitive information, the sensitive information is transmitted to the first third party entity.

Abstract: Techniques to ensure that a content stream will be encrypted prior to it being served it to the stream receiver if either the stream receiver returned an initial status to the stream caster indicating that only encrypted streams will be accepted or if the user of the stream caster optioned that only encrypted streams will be cast. A stream casting device is capable of locally sourcing and encrypting streams. A content stream server is capable of sourcing encrypted streams and encrypting streams on the fly. A stream receiver device is also described. The system manages key exchanges, encryption, and decryption across the devices serving streams, and stream receiving devices. The casted streams, residing on either a content stream server or on the stream casting devices will be encrypted prior to being served.

Abstract: An alternative content system receives a primary content data stream and a secondary content data stream associated with an event. The alternative content system provides an alternative content data stream associated with the event. The alternative content system extracts a primary content identifier from the primary content data stream. The alternative content system identifies an alternative content identifier based on the alternative content data stream. The alternative content system synchronizes the alternative content data stream to the primary content data stream based on the alternative content identifier and the primary content identifier. The alternative content system transmits the synchronized alternative content data stream based on the primary content identifier.

Abstract: A digital information recording apparatus includes a recording circuit for recording information of a retention period included in the digital information and indicating a period for permitting the digital information to be held in the recording medium, starting with a time at which the digital information is recorded on the recording medium; and information of a playback permission period included in the digital information and indicating a period for permitting the digital information to be played back starting with a time at which the information is reproduced initially following recording of the digital information on the recording medium, permitting temporary recording or copying for the information permitted for “copy never” or “copy one generation.

Abstract: A set of media playback and device settings data from each home appliance of a first set of home appliances is stored on a central server and/or sent to a remote control device upon initiation of a suspend command by a user. The stored media and devices states may be used at a later time to control the first set of home appliances, or a user may, after relocating to a second set of home appliances, initiate a resume state command whereupon media playback and device settings data from the central server and/or remote control device controls each home appliance in the second set of home appliances to bring about the same or substantially similar media and device states as in the first set of home appliances.

Abstract: Methods and systems described herein play multi-source media content. A multi-source media content includes digital assets from multiple media sources. The digital assets may include a video digital asset, an audio digital asset, or a textual digital asset. The digital assets may be provided by different media content providers. The digital assets from multiple media sources may be played such that various components (e.g., a video component, an audio component, or a textual component) of a media content are synchronized. When a digital asset or a digital asset segment for a media content is retrieved from a media content provider into the domain, an index is created to associate the digital asset with the media source from which the digital asset or the digital asset segment may be retrieved. As such, a media content may be played without retrieving, from a media content provider, those digital assets or digital asset segments already existing in the domain.

Abstract: A content access device and system may allow portable remote devices to be paired with a variety of different devices, allowing remote control through a network connection. Content access devices may expose application program interfaces, allowing incoming network traffic to control operation of the device much in the same way that a local infrared remote would. Routing content commands through an external application server may also yield other benefits, such as allowing more customized selection of information and advertising content to users based on their viewing history.

Abstract: A system obtains assurance by a content provider that a content control key is securely stored in a remote security module for further secure communications between the content provider and the security module. A security module manufacturer, which has a pre-established trustful relation with the security module, imports a symmetric transport key into the security module. The symmetric transport key is unique to the security module. The content provider shares the symmetric transport key with the security module manufacturer. The content provider exchanging messages with the security module through a security module communication manager in order to get the proof that the security module stores the content control key. At least a portion of the messages exchanged between the content provider and the security module are protected using the symmetric transport key. The symmetric transport key is independent of said content control key.

Abstract: A method for downloading at least one software component onto a computing device, and associated computer program product, computing device and computer system are disclosed. In one aspect, the method is implemented by the computer device including an information processing unit having a memory. The downloading method includes downloading to the memory of a first application from a first distribution capability and connection to a second distribution capability via the first application. The connection to the second distribution capability is performed in a secure manner using an authentication code. The downloading method further includes downloading to the memory of a second application from the second distribution capability, secure connection to a third distribution capability via the second application, and downloading to the memory of each software component from the third distribution capability.

Abstract: The present disclosure relates to a telecommunication method for controlling data access to a telecommunication server, the telecommunication server being connected to at least one first client terminal via at least a digital cellular telecommunication network, wherein the telecommunication server and the first client terminal communicate via a stateless protocol within at least a first communication session, the first client terminal being a battery powered device, the telecommunication server comprising an electronic document, the electronic document having a plurality of input fields for entry of electronic data, wherein a first lock and a session ID are assigned to the electronic document, the session ID being indicative of the first communication session, wherein the first lock is released by the telecommunication server upon ending the first communication session, the telecommunication server comprising multiple applications for accessing the electronic document, the telecommunication server further com

Abstract: Methods and systems for device notarization and verification are provided. In one implementation, various integrity values are concatenated to generate a concatenated value that is used to generate a transaction data signature (TDS). In one implementation, the concatenated value is a concatenation of a device value, an application value, an application encryption (AE) module value, and an authentication generation (AG) module value. The TDS or notarization code is generated by applying the concatenated value to the AG module. In one implementation, subsequent use of the application on the device involves generation of a new TDS, which is compared against the notarization code to determine whether use of the application on the device is authorized. In one implementation, the AE module and the AG module are seeded with a seed value which includes a device value, an application value, a user specific value, and a pseudo random number.

Abstract: A method and system for confidentially providing a software component which is encrypted using a secret cryptographic key of a software component manufacturer, and the key is then encrypted using a first cryptographic system key, wherein the encrypted software component and the encrypted key are transported by the software component manufacturer to a destination system device. After decrypting the transported encrypted key using a second cryptographic system key, the transported encrypted software component is decrypted using the decrypted key, wherein the decrypted software component is provided for execution on the destination system device. The method can be used to protect source codes or object codes of a developed software component from access by a third party and still allows for processing using standard tools.

Abstract: A digital video recorder (DVR) has a memory manager to determine a particular date and a particular video program in a download schedule for which the DVR will reach a low memory condition based on the download schedule and an amount of unoccupied memory space in the DVR. The DVR outputs a display signal to indicate the particular date and the particular video program.

Abstract: Systems and methods are described for, e.g., providing a statutory audio content service on a portable device that complies with the provisions of the Digital Millennium Copyright Act (DMCA). The user can select a playlist subject to DMCA restrictions but cannot access individual items. Content playback, including skipping of content, is restricted to enforce relevant DMCA provisions. Encryption used to implement digital rights management (DRM) may be modified to enforce such content play rules or, alternatively, an additional layer of encryption may be imposed. Limitations on playback are stored along with the playlist structure in a form that is protected against modification. Information logging content playback is maintained in protected form to be uploaded and relayed to the service provider for the purpose of calculating royalty payments.