Abstract: A memory controller encrypts contents of a page frame based at least in part on a frame key associated with the page frame. The memory controller generates a first encrypted version of the frame key based at least in part on a first process key associated with a first process, wherein the first encrypted version of the frame key is stored in a first memory table associated with the first process. The memory controller generates a second encrypted version of the frame key based at least in part on a second process key associated with a second process, wherein the second encrypted version of the frame key is stored in a second memory table associated with the second process, the first process and the second process sharing access to the page frame using the first encrypted version of the frame key and the second encrypted version of the frame key, respectively.

Abstract: The timing for displaying a mid-roll advertisement during a video is determined based on analysis of viewer retention data for the video. In an aspect, a system is provided that includes a reception component configured to receive viewer retention information for a video, the viewer retention information indentifying amounts of viewers that have watched respective frames of the video, an identification component configured to identify high interest segments of the video based on analysis of the viewer retention information, wherein the high interest segments are associated with relatively higher viewer interest over other segments of the video. The system further includes an advertisement component configured to select a point to insert a mid-roll advertisement during playback of the video at or near at least one of the high interest segments.

Abstract: In one embodiment, a method includes receiving, from a beacon associated with a third-party content provider (e.g., a business), session information of the first user of an online social network. The first user's mobile device may be proximate to and in a wireless communication session with the beacon, which may be located at the third-party content provider. One or more second users, who are each connected to the first user in a social graph, may be selected. A communication session is not active between the beacon and the mobile devices of the second users. The selection may be based on selected second users being located within a predefined distance of the beacon (e.g., in the same neighborhood). A notification referencing selected second users (e.g., a prompt to invite the selected second users to the beacon location) may be sent to the first user's mobile device.

Abstract: In one embodiment, a method includes sending, via a beacon of a third-party content provider (e.g., a business), a request to associate with a user's mobile device. The request may be sent when the mobile device is proximate to the beacon, which may be located within a place of business. The request may include an attribute of the business (e.g., the type of business). A wireless communication session may be established between the beacon and the mobile device, and, in response, social-networking information of the user may be received, via the beacon. The particular information sent may be tailored to the business based on the received attribute, and a set of user-specified permissions may delimit what information is sent and to whom the information is sent. Third-party content may be customized based on the received social-networking information and sent to the mobile device for display.

Abstract: A system for wirelessly transmitting and receiving customized data broadcasts comprising at least one computer apparatus running an application for customized data broadcasts. The computer apparatus uses the application to transmit and/or receive at least one broadcast. The system is further comprised of a server network infrastructure with: the application, at least one application server, at least one web server; and at least one database/information server. The infrastructure, servers, and application comprise a distributed computing environment in a secure server network model wherein the environment utilizes the application as a secure communicator of the broadcasts, thereby enabling secure communication of the broadcasts between any computer apparatus running the application.

Abstract: A system for wirelessly transmitting and receiving customized data broadcasts comprising at least one computer apparatus running an application for customized data broadcasts. The computer apparatus uses the application to transmit and/or receive at least one broadcast. The system is further comprised of a server network infrastructure with: the application, at least one application server, at least one web server; and at least one database/information server. The infrastructure, servers, and application comprise a distributed computing environment in a secure server network model wherein the environment utilizes the application as a secure communicator of the broadcasts, thereby enabling secure communication of the broadcasts between any computer apparatus running the application.

Abstract: Segmentation messages indicative of locations of upcoming events, such as the start and end of programs and program portions, and/or rights related to the programs and program portions, are used by cable systems and the like to store programs and program portions for later retrieval and transmission to customers on request. Storage, retrieval and management of programming is thereby facilitated. Methods and systems are disclosed.

Abstract: Example communication systems and methods are described. In one implementation, a method receives a message from a message server. The method identifies constituent data contained in the message and accesses supplemental information associated with the message based on the constituent data. The message is modified to include at least one of a portion of the supplemental information and a reference to the supplemental information. The modified message is then communicated to a client device.

Abstract: A method and system applies a rating adjustment to ratings by avatars in a virtual universe. The rating adjustment offsets mutual rating collusion between avatars. The ratings may be adjusted based on a weighted value of indicia of association, and may also be adjusted based on rating frequencies between the same avatars. In a rating system having a fee structure, the ratings may be adjusted by scaling the rating/fee payoff to favor higher fees. Where indicia of association are weighted, the weightings are mapped to discrete levels of association between avatars, from no association to close association, with greater reduction of ratings for closer association.

Abstract: A method of enforcing a media content subscription for a media content receiver is presented. In the method, a media content receiver is determined to be a primary receiver or a secondary receiver. If the media content receiver is determined to be a primary receiver, the primary receiver is operated according to a content subscription associated with the primary receiver, and communication with a secondary receiver is attempted. If the media content receiver is determined to be a secondary receiver, and the primary receiver communicates with the secondary receiver, the secondary receiver is operated according to a content subscription associated with the secondary receiver. If the primary receiver does not communicate with the secondary receiver, the secondary receiver is operated at a reduced level than determined by the content subscription of the secondary receiver.

Abstract: Securing encrypted virtual hard disks may include a variety of processes. In one example, a virtual hard disk is created for a user and encrypted with a volume key, and the volume key placed in an administrator header. The administrator header may be encrypted with a protection key, the protection key created from a user identifier corresponding to the user, a volume identifier corresponding to the virtual hard disk, and two cryptographic secrets. The protection key may then destroyed after encrypting the administrator header and therefore, might never leave the encryption engine. The two cryptographic secrets may be stored in separate storage locations, one accessible to the user and the other accessible to administrators. Accordingly, the protection key might never transmitted or can be intercepted, and no single entity may be compromised to gain access to all of the information needed to recreate the protection key.

Abstract: Embodiments relate to systems and methods employing personalized query expansion to suggest measures and dimensions allowing iterative building of consistent queries over a data warehouse. Embodiments may leverage one or more of: semantics defined in multi-dimensional domain models, user profiles defining preferences, and collaborative usage statistics derived from existing repositories of Business Intelligence (BI) documents (e.g. dashboards, reports). Embodiments may utilize a collaborative co-occurrence value derived from profiles of users or social network information of a user.

Abstract: A critical data transmission architecture in avionics systems is disclosed. The system includes a module of production, a module of consumption, and at least one physical pathway linking the module of production to the module of consumption. The module of production is configured to transmit each critical datum by at least two data, one of a first independent type and one of a second independent type that cannot interfere with one another. Each datum of the first type or the second type is transmitted in the form of a data transmission unit including a portion of an application message and a message. The additional message of each transmission unit includes a verification sequence and each datum of the first type and the second type is transmitted by the same physical pathway and is generated by different module of generation.

Abstract: A utility meter and method for metering consumption of at least one utility including: a metering unit, a communication unit for sending/receiving messages to/from a management center, a memory to store a unique identifier pertaining to the utility meter and a first key, an encryption unit for encrypting the utility consumption as a first cryptogram, a message generator for generating a utility message containing the first cryptogram, a key generator for generating a payload key to be used by the encryption unit for encrypting the utility consumption, a second cryptogram generated by the encryption unit by encrypting the payload key with the first key, the second cryptogram being intended to be included, by the message generator, at least once into the utility message to be sent to the remote management center.

Abstract: Systems and methods for saving encoded media streamed using adaptive bitrate streaming in accordance with embodiments of the invention are disclosed. In one embodiment of the invention, a playback device configured to perform adaptive bitrate streaming of media includes a video decoder application and a processor, where the video decoder application configures the processor to select a download stream from a set of alternative streams of video data, measure streaming conditions and request a stream of video data from the alternative streams of video data, receive portions of video data from the requested stream of video data, decode the received video data, save the received video data to memory, when the received video data is from the download stream and separately download and save the corresponding portion of video data from the download stream to memory, when the received video data is not from the download stream.

Abstract: Embodiments relate to processing streams of encrypted data received from multiple users. As a stream is received, smaller partitions in the form of data chunks, including a first data chunk, are created and subject to individual decryption. The first data chunk is placed into sub-stream according to a first master key associated with a first owning entity. Prior to processing, the first data chunk is decrypted into plaintext, and the plaintext is transformed by applying one or more advanced data functions. The transformed plaintext is organized into a first data unit, and a first encryption unit is created from the first data unit. The first encryption unit has a space allocation in persistent storage. Accordingly, confidentiality of data is maintained, and the ability of storage systems to perform data reduction functions is supported.

Abstract: Multilevel secure communication systems and methods for providing multilevel security to such communication systems are disclosed. More specifically, communication systems and methods configured in accordance with the inventive concepts disclosed herein may be utilized to provide support for N levels of secure communications using processors (may also be referred to as nodes) that may only have (N?M) levels of security separation (where N and M are integers and M is strictly less than N). In other words, processors that have less than N levels of security separation may be configured to form a communication system that is capable of supporting N levels of secure communication.

Abstract: A satellite dish assembly may comprise a reflector, feed horn, receive module, and wireless module. The reflector and feed horn may be operable to receive satellite signals. The receive module may be operable to recover content from the received satellite signals. The wireless module may be operable to communicate the content directly to a mobile device via a wireless connection between the mobile device and the system. The wireless module may be operable to communicate directly with a service provider network via a wireless connection between the satellite dish assembly and the service provider network. The communications with the service provider network may be to obtain security information for descrambling and/or decrypting the content and/or for providing billing information.

Abstract: Systems and techniques for modifying a subsection of uploaded media are presented. An instruction component receives a media file and a media enhancement instruction that includes enhancement data and media interval data for a first segment of the media file. A processing component modifies the first segment of the media file associated with the media interval data based on the enhancement data to generate an edited first segment of the media file. A finalization component generates an edited version of the media file that includes the edited first segment of the media file and at least a second segment of the media file that is not modified based on the enhancement data.

Abstract: A platform for providing authorization of electronic communication of secure data to external entities, e.g., vendors, third parties or the like based on an assessment of the data risk associated with communicating the data to the external entity. The secure data that is to be communicated, in the form of specific data items, are identified as well as the associated security standards. The external identity is assessed to ensure their capabilities to properly meet the enterprise/sender's information security, business privacy and continuity standards, along with applicable industry standards. Based on the results of the assessment, remediation action may be required to address critical vulnerabilities or recommendations may be presented to a decision-making entity to grant authorization to electronically communicate the data in question to the external entity. In response to granting authorization, secure communication channels are allocated and established to allow for communication of the data.

Abstract: A proxy that encapsulates computer code transmitted between a client and a server is disclosed. The proxy encapsulates one portion of the computer code within another portion of computer code, such as encapsulating Javascript within HTML or encapsulating Javascript within VBScript within HTML. The proxy could selects portions of the computer code to encapsulate in accordance with a selective algorithm or a randomizer, and could randomize function names that are executed to produce the encapsulated code. If the proxy detects a response from a client that is malformed, the proxy could trigger appropriate security measures to adjust communication protocols with the client.

Abstract: Systems and methods generate a perceptual image hash of an image. The perceptual image hash can be generated from multiple features extracted from a DCT transformation of the image. The perceptual image hash can be compared to other perceptual image hash values using a weighted Hamming distance function.

Abstract: Content that is significant to a user may be determined. An indication that a user finds content within a document significant may be received. In response to the received indication, the document may be analyzed to identify a set of topics associated with the content of the document. From the set of topics, a subset of topics responsible for the user finding the document significant may be identified. A user profile associated with the user may be updated based on the subset of topics.

Abstract: A semiconductor memory apparatus is provided. The semiconductor memory apparatus does not require additional identification information to perform data scrambling and improves the reliability, where the identification information is used to identify whether it is an erased data or a programmed data. A flash memory of the present disclosure includes a scrambling unit 120 scrambling data between an input/output buffer 110 and a page buffer 160. The scrambling unit 120 includes a writing encoder 200 and a reading decoder 220. When an input data is equal to a predetermined bit string, the writing encoder 200 skips the scrambling of the input data. When a read data of the page buffer 160 is equal to the predetermined bit string, the reading decoder 220 skips the descrambling of the read data.

Abstract: An apparatus includes a memory; and a processor coupled to the memory and configured to generate a first common key whose key value varies based on a first elapsed time when a notification of the first elapsed time after a start-up of another apparatus to which a data frame to be encrypted is to be transmitted has been made, generate a second common key whose key value varies based on a second elapsed time after a start-up of the apparatus when a notification of the first elapsed time has not been made, and encrypt the data frame by any one of the first common key and the second common key as a common key and transmit the encrypted data frame to the another apparatus.

Abstract: Embodiments relate to deduplication and compression on data performed downstream from where the data is encrypted. Confidentiality of data is maintained, and the ability of storage systems to perform data reduction functions is supported. Encrypted data to be written to a storage system is separated into one or more data chunks. For a data chunk, a master encryption key for an owning entity associated with the data chunk is retrieved. The data chunk is decrypted into plaintext, and the plaintext is transformed by performing one or more advanced data functions. A private key is created and used to encrypt the transformed plaintext, which is stored as a first encryption unit. A wrapped key is created by encrypting the private key with the master key, and is stored as metadata for the encryption unit to limit data access to the owning entity.

Abstract: A reception apparatus configured to receive content data including a plurality of pieces of segment data includes a metadata reception unit configured to receive metadata indicating a reproduction order of the segment data, an acquisition unit configured to acquire storage information indicating whether the reception apparatus is in a storage mode for storing the content data, and a control unit configured to, if the storage information does not indicate the storage mode, perform control to transmit a request for acquiring a piece of segment data that is later in the reproduction order than a piece of the segment data to be requested to be acquired if the storage information indicates the storage mode.

Abstract: An exemplary media service personalization system maintains profiles for multiple media service access devices associated with an end-user account with a media service, generates a merged profile based on the profiles for the media service access devices, and directs a communal media service access device associated with the end-user account to personalize the media service based on the merged profile.

Abstract: Systems and methods are disclosed for protecting user privacy in, for example, online advertising environments. The method includes receiving data related to a user in a first communication session between a host server and a client device, and generating a user profile associated with the user. The method further may include encrypting the user profile to produce encrypted user profile data and generating a decryption key for decrypting the encrypted user profile data. Thereafter, either the decryption key or a portion of the encrypted user profile data may be transmitted to the client device and then deleted from host server before ending the first communication session. The method further may include establishing a second communication session between the host server and the client device and retrieving the transmitted content. Then targeted advertising may be provided by decrypting the encrypted user profile data.

Abstract: A program vector can represent attributes of a program to be generated. EPG data can be received, and metadata necessary for generation of a program vector PP can be extracted from the EPG data. A morphological analysis can be carried out on contents and title included in the metadata to disassemble the contents and the title into words. Items included in the metadata can be subjected to a vector creation process to generate the program vector PP. An effect vector can be extracted on the basis of a genre of a program associated with the metadata. The extracted effect vector can be associated with the generated program vector PP and the processing can be ended. This can be applied to a distribution server for distributing contents.

Abstract: Some embodiments provide a forwarding element that inspects the size of each of several packets in a data flow to determine whether the data flow is an elephant flow. The forwarding element inspects the size because, in order for the packet to be of a certain size, the data flow had to already have gone through a slow start in which smaller packets are transferred and by definition be an elephant flow. When the forwarding element receives a packet in a data flow, the forwarding element identifies the size of the packet. The forwarding element then determines if the size of the packet is greater than a threshold size. If the size is greater, the forwarding element specifies that the packet's data flow is an elephant flow.

Abstract: Methods and apparatus for extracting information from an electronic document, such as, for example, a webpage. An outline, such as, for example, the document object model, of a web page is analyzed for objects of interest, such as, photos, dates, email addresses, etc. The instructions defining which objects are objects of interests can be predetermined by the user and/or the network content provider. The user can be given the option to save objects of interest to their network account and the webpage and/or browser can be augmented with additional content related to identified objects. Objects transmitted to the network content provider are saved with an appropriate network service, for example, photos are saved in an online photo album.

Abstract: The present invention is directed to a method for forensic examination of data access of an information system. The invention allows a user to determine the occurrence and nature of data access. In particular, it allows the user to determine if data were copied. The invention does not require modification of the information system or data beforehand, and requires access to no artifact or evidence other than information system itself.

Abstract: Examples disclose a cable to secure data transmission. Examples of the cable include a connector to connect to a computing device for data transmission. Further, the examples of the cable include an active component coupled to the connector and embedded in the cable. The active component is to at least perform one of encrypt and decrypt the data transmitted on the cable.

Abstract: A method and an apparatus for sending and receiving audio data, so as to solve the problem that in the prior art, a simulating audio and video transmission system is complex in cable connection structure. The audio data is overlaid at a preset position of a video blanking interval of video data, sending and receiving of audio signals are carried out, and co-cable transmission of the audio and video data can be achieved.

Abstract: A physical device, the possession of which may provide access to digital media content in a fashion similar to the possession of a DVD providing access to the media content stored thereupon on a suitable DVD player. The possession of the physical device grants access to digital content stored on a remote server using a suitable device such as e.g., a set-top box or media player having Internet connectivity. The physical device provides for convenient and possibly anonymous access to content stored on a remote server and has certain advantages over known techniques for storing rights to access the content.

Abstract: Methods for session based watermarking of media content using encrypted content streams are provided. At least two content streams of the same media content are watermarked with different watermark information and encrypted using different encryption percentages. During a playback session, a unique sequence is generated and provided to a client device for use by the client device in selecting consecutive content segments from the different content streams to produce the original media content with a watermark that uniquely identifies a user of the client device. When selecting the different content segments, the client device compares the encryption percentage of certain selected content segments with the expected encryption percentage for those content segments to determine whether the content streams have been tampered with.

Abstract: Provided herein is a functionality extending kit of a display apparatus, the kit including a receiver which enables content to be viewed using an inserted card; a tuner configured to tune to a channel; an extending connector including a standard pin area connected to a signal line of a standard card and an additional pin area connected to a predetermined signal line; and a controller configured to control the tuner to tune to a channel that may transmit firmware update data associated with the card when the display apparatus connected to the extending connector is at a picture off state; wherein the functionality extending kit receives standby power from the display apparatus through a power pin provided in the additional pin area.

Abstract: A context aware recommendation system and method for recommending at least one program to the user responsive to dynamically varying user preferences, learned user behavior and contextual information is described. The recommended program is a television program, radio program or music file. The system and method further alert the user about change in user's preferences and guides the user to change stated preferences.

Abstract: A secure linkage between databases allows records of an individual in a first database to be linked to records of the same individual in a second database without disclosing or providing personal information outside of either database or system responsible for controlling access to the respective databases. As such, records of individuals may be securely linked together without compromising privacy or security of the databases.

Abstract: Methods and arrangements for facilitating media playlist generation for a program participant based at least in part on media library inventory information provided by a number of program participants. The system or program in which the individuals are participating is an on-line media store. Those individuals that decide to be program participants are interested in organizing, maintaining and playing their music, based at least in part, on data derived from a population of other participants in the program that have similar or the same music in their libraries. To be a program participant, the individual music holder must send, and the on-line music store receive, data representative of that program participant's media inventory. This data typically contains identification data of the individual media items presently contained in that participant's media library regardless of the individual media item's source.

Abstract: A system for dynamically rendering streaming content is provided. It includes a protocol and a dynamic stitching module to provide a personalized and targeted delivery of play list items responsive to a request made by a player. The protocol inquires the player for user profile information and includes it as part of a request to an adproxy. The inquiry requests the adproxy for recommended content based on the user profile information. The dynamic stitching module, in response to the recommended content from the adproxy then creates a manifest that is specific to the player for rendering a personalized content on the player. The manifest indicates a streaming preference for content fulfillment based on the recommended content via a redirect method or a proxy method. Other embodiments are disclosed.

Abstract: A content stream transmission apparatus with reverse traceability comprises a pattern insertion unit dividing the original content in units of segments and inserting at least two patterns to each segment and creating at least two pattern contents; an encryption unit encrypting the at least two pattern contents; a content selection unit selecting one of the at least two pattern contents based on user identification information; and a transmission unit transmitting the selected pattern content to a user device. Therefore, as copyright and leakage tracking information are enabled to be inserted into the contents in real-time, the present invention not only provides security-enhanced contents but also services real-time content streaming services.

Abstract: An imaging device includes an illumination unit that irradiates a moving object with light A, an optical system that focuses into an image of the object, a detection unit having a light receiving plane on which the image of the object by this optical system is formed, and an analysis unit. The detection unit includes a plurality of light receiving cells d1 to dN which are arrayed in an x direction on the light receiving plane, and is disposed such that the image moves in a y direction on the light receiving plane, the detection unit receives light or does not receive light according to pseudo noise code sequences along the y direction respectively on the plurality of light receiving cells.

Abstract: Often, for reasons of wireless bandwidth conservation, incomplete messages are provided to wireless messaging devices. Employing cryptography, for secrecy or authentication purposes, when including a received message that has been incompletely received can lead to lack of context on the receiver's end. By automatically obtaining the entirety of the message to be included, an outgoing message that includes the received message can be processed in a manner that securely and accurately represents the intended outgoing message. Alternatively, a server can assemble a composite message from a new message and an original message and, in cooperation with a wireless messaging device, encrypt and sign the composite message. Conveniently, security considerations are maintained even in view of bandwidth optimization measures.

Abstract: A rule set for client-applied encryption is created and deployed to a client device by a network device over a communications network. Encryption applied by the client in accordance with the rule set may form the basis of a secure connection in which encrypted information is encapsulated and tunneled across a network that includes a wireless or wired interface through which the client obtains network connectivity. The client may monitor operating conditions, including operating conditions of the communications network, client device, and/or service provider. The rule set includes one or more rules that may be used by the client in combination with the detected operating conditions to select the appropriate encryption protocol. The rule set may persist at the client for use over multiple sessions in which a range of communication protocols and/or access points are used by the client to obtain network connectivity.

Abstract: A method and system for modeling the interests of an individual television viewer based on logging the user's television usage activities for the purpose of determining personalized recommendations is presented. According to one aspect of the claimed subject matter, user input in response to a questionnaire, the user's recorded television usage, the user's previous interactions with the personalized recommendations and contextual data such as external events and social group influences are used to model the probability of a user's interest in available media content. Data from the model is subsequently arranged to display units of available media content with the highest probabilities of user interest to the user. According to further embodiments, specific user behavior in previously consumed media content such as a user's selection, a user's continuous consumption, and a user's discontinuation of consumption is tracked and used as input.

Abstract: The disclosure herein provides systems, methods, and devices for identifying and presenting identifications of significant attributes of unique items. A significant attributes system for identifying and presenting identifications of significant attributes of unique items comprises an item analysis engine, at least one driver models database, and a model building engine, wherein the item analysis engine comprises an item description receiver and one or more driver calculators.

Abstract: Techniques for search with more like this refinements are disclosed. In some embodiments, search with more like this refinements includes receiving a product and a context (e.g., the context can include related category information, user context, and/or other context related information); generating a search query based on the product and the context; and determining a plurality of products that match the search query to generate more like this search results.

Abstract: In a method for providing differential access to a digital document among workflow participants, in which at least one of the workflow participants is outside of a common secure environment (300), a first set of keys including an encryption key, a signature key, and a verification key is associated with atomic unit(s) (304). The atomic unit(s) is encrypted using the encryption key and signed using the signature key (306, 308). A level of access to the atomic unit(s) to be granted to each of the workflow participants and the keys in the first set of keys to supply to each of the workflow participants based upon the identified level of access are identified (310, 312). In addition, each of the workflow participants is supplied with the identified one or more keys (314) and the encrypted and signed atomic unit(s) is supplied to a first workflow participant (316).