Abstract: Methods, systems and architectures for processing renderable digital content are described. The various embodiments can protect against unauthorized access or duplication of unprotected content (i.e. decrypted content) once the content has reached a rendering device such as a user's computer. A flexible framework includes an architecture that allows for general media sources to provide virtually any type of multimedia content to any suitably configured rendering device. Content can be protected and rendered locally and/or across networks such as the Internet. The various embodiments can provide a standard platform that can that can be leveraged to protect content across a wide variety of rendering environments, content types, and DRM techniques.

Abstract: The present invention is a video on demand service enabled from a near video on demand service. A desired program is split into portions, or clips. The first clip is delivered a priori to the customer's Digital Video Recorder (DVR) using a hidden channel and it is made available for purchase on demand. The remaining portion is broadcast regularly using the start time of the Near Video On Demand service, for as long as the program is available for Video On Demand purchase. Upon purchase, the remaining portion is authorized for capture by the DVR. The clips are spliced together upon playback to form a complete program.

Abstract: In a particular embodiment a method is disclosed for inserting data objects into a video stream. The method encrypts a first portion of the video stream at a server, suspends encryption of a second portion of the video stream, and sends the first and second portions of the video stream to a client device for insertion of the object into the video stream. In another embodiment a system is disclosed for inserting data objects into a video stream. The system encrypts a first portion of the video stream at a server, suspends encryption of a second portion of the video stream, and sends the first and second portions of the video stream to a client device for insertion of the object into the video stream.

Abstract: A system and method of retrieving a watermark in a watermarked signal are disclosed. The watermarked signal comprises odd and even overlapped blocks where the watermark is contained in the even blocks. The method comprises, for each k-th even block, subtracting the two adjacent odd numbered blocks from the k-th even block of the watermarked signal to retrieve s *k(n), transforming s *k(n) into the frequency domain to generate S k(f), calculating a phase of S k(f) as ? (f) and a phase of Sk(f) as ?(f), calculating the difference ? (f) between ? (f) and ?(f), unwrapping ? (f) to obtain the phase modulation {tilde over (?)} k(f), and using a Viterbi search to retrieve the watermark embedded in {tilde over (?)} k(f).

Abstract: In certain embodiments, a selective encryption encoder has a packet identifier that identifies packets of a specified packet type. The specified packet type includes packets carrying data representing a video slice wherein the video slice contains a larger amount of data than a threshold amount of data. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. Packets are sent and received to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: To play back a content while managing the right of use of the content, such as a total time of playback of the content, an electronic device stores right information in a right temporary storage unit 59 and judges whether or not use of the content is permitted, in a process of decoding a frame. Also, the electronic device updates the right information stored in the right temporary storage unit 59. When the frame to be played back is the one at a predetermined position in order, the electronic device stores the right information stored in the right temporary storage unit 59 into a storage area 20.

Abstract: A method inserts synchronization markers into a standardized stream of compressed and ciphered data, wherein at least one part of the compressed data stream is ciphered bit by bit, by block cipher, and wherein a synchronization marker is only inserted into the compressed data stream after the number of ciphered bits has reached or exceeded the number of bits of the cipher block.

Abstract: In a digital recording apparatus including a data control circuit 2a, a memory 4, an encryption circuit 5, an interface 6, a DVD drive 8, and a CPU 3, when encryption is required during recording, data is temporarily stored in the memory 4. After the encryption circuit 5 is enabled, the data is encrypted and recording by the DVD drive 8 on a recording medium is resumed. Thus, it is possible to make the encryption circuit operate only when recording a program requiring a content protection and to perform recording or reproducing from the required timing without interrupting the recording or reproducing even during start-up of the encryption circuit.

Abstract: A method for enabling at least one of a plurality of user devices to provide a service flow is described. In one example, a code is transmitted to a home identification device (HID) to be combined with an HID identification number. The combined response, which is comprised of the code and the HID identification number, is then transmitted from the HID and received by the user device(s). If the combined response is equivalent to at least one predetermined match key, which is stored in the user device(s), that user device(s) provides the service flow to a respective television(s).

Abstract: Various systems and methods for distributing rights managed content objects arc disclosed. For example, some embodiments of the present invention provide methods for distribution that include providing a mobile storage device that includes a wireless interface and a storage component maintaining a rights managed content object. A first request to provide the rights managed content object to a first mobile application device via the wireless interface is received, and a second request to provide the rights managed content object to a second mobile application device via the wireless interface is received. The rights managed content object is accessed from the storage component, and a digital rights management tool associated with the accessed content object is accessed. The rights managed content object is decrypted using the digital rights management tool, and streamed to both the first mobile application device and the second mobile application device via the wireless interface.

Abstract: A digital broadcast video receiving circuit includes a plurality of decoder circuits configured to decode an encoded digital broadcast video signal according to respective plurality of encoding formats to provide a digital data packet based on the encoded digital broadcast video signal. An encoding circuit is coupled to the plurality of decoder circuits and is configured to encode the digital data packet to provide a re-encoded digital data packet, related methods, and computer program products.

Abstract: A method of transporting an encrypted stream of multimedia content is provided. In the method, when a packet contains data of a predetermined length including selected data from pieces of data corresponding to the multimedia content and a header, key information, and first time information from among pieces of information included in a selected packet from among at least one packet are received, and encryption information is determined from the key information and the first time information, according to a key derivation function. The first time information is variable with time. The at least one packet including data corresponding to the multimedia content is encrypted using the encryption information. The at least one encrypted packet and the key information are transported.

Abstract: A system for personal Internet protocol (IP) broadcasting to which a personal digital rights management (DRM) is applied, and a method thereof are provided.

Abstract: A fast and secure syntax compliant encryption schema, “locally iterative encryption,” can produce compliant ciphertext for a general syntax specification. In one implementation, an engine partitions a data stream into blocks, and encrypts each block iteratively until syntax compliance conditions are met. A system using the schema can utilize either stream ciphers or block ciphers in different modes. Locally iterative encryption methods are fast and remain at approximately the same speed even as the length of the data stream to be encrypted increases. Besides providing superior processing speed, the locally iterative encryption schema is also more robust to errors in the resulting ciphertext and in the resulting decrypted plaintext than conventional syntax compliant encryption techniques. Locally iterative encryption is secure as long as an underlying encryption cipher selected for use in the schema is secure.

Abstract: A method of encrypting a digital television signal carried out in any operative order involves duplicating packets in the digital television signal so as to create first and second duplicate packets; encrypting the first duplicate packets according to a first encryption method to create first encrypted packets; encrypting the second duplicate packets according to a second encryption method to create second encrypted packets; identifying packets in the digital television signal that are of a packet type, while other packets are not of the packet type; replacing the identified packets in the digital television signal with corresponding first and second encrypted packets to produce a multiple partially encrypted digital television signal comprising the other packets that are unencrypted and the first and second encrypted packets; and distributing the multiple partially encrypted digital television signal.

Abstract: A method and apparatus for verifying the authenticity and integrity of an ordered sequence of digital video frames, without having access to the original recording, by embedding therein a respective series of digital signatures based on a secret key, or keys, and on the video content of respective frames. Signatures are camouflaged by embedding in transform coefficients of a transformed representation of the video data in parts of the frame corresponding to motion. If there is sufficient motion to contain all of the signature bits, a supplementary technique embeds in high-texture areas of a frame. A final fall-back is to embed in a pre-defined default zone. A method of predicting when supplementary embedding is needed enables the process to be applied in a single pass allowing real-time operation. Verification is done during decoding by comparing, for identity, embedded signatures with signatures calculated anew using the method employed to embed.

Abstract: A flexible framework for generating “scalable layered access” codestreams allows a bitstream architect to select the number of access types and the number of access layers within each access type. At least some of the access layers are encrypted (or scrambled). Some of the access layers may be left unencrypted or unscrambled to allow free access to those layers. The framework facilitates simultaneous access of multimedia content by different users enjoying selective decryption of different access types and different access layers. An exemplary key schema for the framework sends only one or only a few keys to an end user for a given access layer, from which decryption keys for the content can be derived by hashing and then combining under a Group Diffie-Hellman key agreement. In one implementation, only one key is sent in a license to an end user and other partial key information for Group Diffie-Hellman combination with the licensed key is included in the publicly distributed codestream.

Abstract: A partial multiple encryption device consistent with certain embodiments has an input for receiving a unencrypted video signal. An encryption arrangement produces a partially multiple encrypted video signal from the unencrypted video signal. An output provides the partially multiple encrypted video signal. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A method of processing digital content consistent with certain embodiments involves receiving a signal containing the digital content, wherein the digital content has a first encrypted sample of the digital content, the sample being encrypted under a first encryption method, a second encrypted sample of the digital content, the sample being encrypted under a second encryption method, and an unencrypted portion; and decrypting the first encrypted sample to produce a decrypted sample. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A data receiving apparatus having a digital contents copy protection function and a method for controlling the same are disclosed, in which authentication for the digital contents copy protection function is carried out without any error even if time difference occurs due to a communication error of the data receiving apparatus or a problem in initial stability. The data receiving apparatus includes an interface connected with a data transmitting apparatus and transmitting basic information for determining whether authentication for the digital contents copy protection function has been carried out, a display receiving and outputting digital contents if the authentication has been carried out successfully, and a controller determining again whether the authentication has been carried out, after a lapse of a predetermined time period, if the authentication has been failed.

Abstract: In certain embodiments, a method of partially dual encrypting a digital video signal involves examining unencrypted packets of data in the digital video signal to identify a specified packet type. The specified packet type includes packets occurring in a star pattern approximately situated at approximately a center of an image; encrypting packets identified as being of the specified packet type using a first encryption method to produce first encrypted packets; encrypting the packets identified as being of the specified packet type using a second encryption method to produce second encrypted packets; and replacing the unencrypted packets of the specified packet type with the first encrypted packets and the second encrypted packets in the digital video signal to produce a partially dual encrypted video signal. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A multiple partial encryption device consistent with certain embodiments has an input for receiving a unencrypted video signal. An encryption arrangement produces a partially multiple encrypted video signal from the unencrypted video signal. An output provides the partially multiple encrypted video signal. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: According to one embodiment, a digital stream, inclusive of an Internet Protocol (IP) datagram, is transmitted to a digital device. IP datagram comprises an IP header and a body segmented including a plurality of packets in an MPEG format such as MPEG-2 or MPEG-4 for example. The plurality of packets comprises (i) a first packet including a payload having content and a header that comprises a first packet identifier to indicate a type of the content contained in the payload of the first packet, and (ii) a second packet including a payload and a secondary packet identifier to indicate that its payload includes content duplicative of the content contained in the first packet. The second packet precedes the first packet in the digital stream. Upon detecting the presence of duplicative content, the duplicative content is recovered, but the content contained in the payload of the first packet is disregarded.

Abstract: Copying of visual images by electronic devices is discouraged by metamerically altering the relative weights of the color components forming the visual images in a manner that is not perceptible to the human eye but which is perceptible in the copy. In a preferred technique, the visual images are represented by more than three primary color components whose relative values are varied in this manner. A primary application is to discourage copying by video cameras of movies displayed on theater movie screens, by causing the copies to contain unacceptable spatial or temporal variations in colors perceived by the human eye.

Abstract: A terminal for reproducing a digital content in support of transmitting/receiving the digital content to/from another terminal includes: an encryption unit configured to encrypt the digital content to produce encrypted digital content; a use scope determining unit configured to determine a use scope of a target terminal to which the digital content is to be transmitted; a personal-use authentication information generation unit configured to transform encryption information of the digital content according to a determination result of the use scope determining unit and generate personal-use authentication information; and a communication unit configured to transmit the encrypted digital content and the personal-use authentication information to the target terminal.

Abstract: A method and system of securing content is described, the method including establishing communication between a secure module source and a content rendering device, loading a dynamically generated pseudo-unique secure module to the content rendering device from the secure module source, establishing communication between the secure module source and the dynamically generated pseudo-unique secure module, and transferring a decryption key from the secure module source to the dynamically generated pseudo-unique secure module, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key. Related methods and apparatus are also described.

Abstract: A method and system for embedding data in video frames is described, the method comprising receiving marking information, representing the marking information as a 2-coordinate vector, denoted ?, where the 2-coordinates are denoted, respectively, ?, ?, such that ?=(?, ?), providing a video frame to be marked, the video frame including a plurality of pixels, each pixel of the plurality of pixels being represented as p, where p=(x, y), x and y including coordinates of pixel p, the plurality of pixels being represented as a triad of color elements, denoted, respectively, as R, G, and B, and marking the video frame by transforming each pixel among the plurality of pixels as follows R?(p)=R(p)+R>, G?(p)=G(p)+G>, and B?(p)=B(p)+B>, where R> represents a dot product operation on p and ?R, G> represents a dot product operation on p and ?G, and B> represents a dot product operation on p and ?B.

Abstract: Provided are techniques for migrating data. Contents are sealed to one or more registers. In response to determining that secure backup is enabled, platform metrics are stored in a private store. An out-of-band request is received. A response to the out-of-band request is provided using the stored platform metrics. Other embodiments are described and claimed.

Abstract: An SVC encryption apparatus includes: an encoding/encryption unit for performing SVC (Scalable Video Coding) encoding on input data contents and carrying out encryption for data in accordance with a first encryption condition to generate a corresponding SVC bitstream; and a NAL (Network Adaptation Layer) data analysis unit for analyzing NAL data of the generated SVC bitstream to find out NAL data satisfying a second encryption condition. Further, the SVC encryption apparatus includes a conditional NAL data encryption unit for encrypting the extracted NAL data in accordance with the second encryption condition; and a bitstream transmitting unit for transmitting the SVC bitstream with encrypted NAL data.

Abstract: Usage rights for a digital work are established prior to creation of the corresponding content. The rights can be associated with the content after the content is created. A content creation, such as a video recorder or a still camera, device can store labels of the rights and can associate usage rights with content in real time as the content is created.

Abstract: The present invention is directed to a three-phase encryption method and a three-phase decryption method, and an apparatus implementing the three-phase encryption method and/or the three-phase decryption method. To encrypt a message according to the three-phase encryption method, a content of a message is converted from a first form M to a second form M?; the content of the message is separated according to a spacing pattern; and the content of the message is scrambled according to a scrambling pattern. To decrypt the message encrypted using the three-phase encryption method, the scrambling and spacing patterns are reversed, and the content of the message is converted from the second form M? to the first form M.

Abstract: An information processing apparatus decrypts stream data encrypted according to a first encryption method using a key encrypted according to a second encryption method. In the apparatus, an update instructing unit identifies the update timings of decryption keys and issues an update command. A decryption key output unit outputs a first decryption key before receiving the update command and outputs a second decryption key generated subsequent to the first decryption key after receiving the update command. An update instruction control unit determines whether the second decryption key has been generated before the first decryption key is updated to the second decryption key. When the second decryption key is generated, the update instruction control unit considers the second key generation point in time to be the update timing from the first decryption key to the second decryption key so as to control the update instructing unit to issue the update command.

Abstract: Reinforcement of a system renewability is realized skillfully utilizing properties peculiar to a system. As a result, there is produced such a new effect as to similarly reinforce required specification with respect to copyright protection of a content recorded in a medium for exclusive use in reproduction and a recordable medium. In a system which encrypts information such as a content to record/reproduce the information, design is made so that encryption/decryption processing information differs for a device (software (S/W) main body device) whose main body is software constituted of a recording/reproducing drive of a recording medium and a personal computer (PC), a device (hardware (H/W) main body device) whose main body is hardware integrally containing a drive and data coding/demodulation processing, and the medium for exclusive use in reproduction and the recording medium.

Abstract: The aim of this invention is to be able to recover specific information of a security module when it has been replaced by a new module in a user unit connected to a broadcasting network.

Abstract: To provide a content distribution system which can prevent use of content which has been temporarily stored after the valid period. A content distribution system (1) including a license server (101) which issues a license, a content server (102) which transmits the content, a terminal device (103) which controls use of the content based on the issued license. The terminal device (103) does not allow the use of the received encrypted content when it is judged that the encrypted content received from the content server (102) is not the content received in real time.

Abstract: A correlation-based system for watermarking continuous digital media at the system application level. It is a post-compression process for watermarking where no a priori knowledge of the underlying compression algorithm is required. Per each compressed media frame, a current unique digital signature is generated based on the data from the current compressed frame plus the digital signature that has been previously generated. The signature thus generated is then used in conjunction with the next compressed frame to generate the next unique digital signature. All digital signatures are correlated according to the above process until a “reset” signal is issued. A new chain of correlated digital signatures is produced by the system with a pre-determined initial signature.

Abstract: A two level cross-correlation based system for watermarking continuous digital media at the system application level. It is a post-compression process for watermarking where no a priori knowledge of the underlying compression algorithm is required. Per each compressed media frame, a current unique digital signature is generated based on the data from the current compressed frame plus the digital signature that has been previously generated. The signature thus generated is then used in conjunction with the next compressed frame to generate the next unique digital signature. All digital signatures are correlated according to the above process until a “reset” signal is issued. A new chain of correlated digital signatures is produced by the system with a pre-determined initial signature.

Abstract: The present invention proposes a method for managing rights of subscribers to a pay-television system comprising an access control system to which are connected subscriber management systems each managed by an operator and a plurality of subscriber decoders, said decoders each being equipped with a security module containing the rights for each subscriber allowing him the decryption of encrypted digital data of a stream broadcasted by at least one operator, during a modification of the rights carried out by an operator in the security module of a subscriber, the control access system receives data identifying a subscriber with modification commands of rights of said subscriber coming from a subscriber management system of an operator, generates a management message containing the modified rights and transmits said message to the security module of the subscriber via the stream containing the encrypted data, said method comprising the step of verification of the modifications according the properties and the a

Abstract: A method and apparatus for securing executables and processes having setuid/gid permissions and privileges is presented. A mechanism is provided to track and control operations for files and processes having setuid/gid privileges. A policy rule is defined for controlling the operations on the files and processes. The policy rule is then used to control operations involving the files and processes.

Abstract: A method and apparatus are described for embedding information in digital cinema content, including accepting a scene from a digital cinema content file, selecting a scene object in the scene to be modified with the information, determining a characteristic for the selected scene object and generating a scene build based on the characteristic, wherein the characteristic is representative of the information. The method and apparatus further include time-stamping, compressing and storing the scene build. Further, a method and apparatus are described for embedding forensic information in digital cinema content, accepting a digital cinema content file having therein a plurality of scene builds, accepting a forensic code and selecting a scene build from the digital cinema content file based on the forensic code. The scene build, having forensic information, is thereafter displayed.

Abstract: In certain embodiments, a method for generating fees using a receiving device, involves distributing censored video from a distributor video to a receiving device; and uncensoring the censored video using the receiving device upon payment of a fee. The receiving device uses overlay data received from the distributor to uncensor the censored video by overlaying the overlay data over the censored video using a video overlay frame to overlay a video frame containing the censored video data in accordance with boundaries determined by an alpha plane within the receiving device. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A traceable method for encrypting and/or decrypting data broadcast by at least one transmitter towards several decoders includes the steps: during encryption of broadcast data, the transmitter implements (in 86) at least one first secret function to transform an unencrypted message into an encrypted message; and during decryption of the broadcast data, all the decoders implement (in 92) at least one common second secret function, each decoder using therefor a mathematical description of the second function stored in a memory (21), the mathematical description of the second function being different from one decoder to another or from one group of decoders to another such that the mathematical description used identifies exclusively the particular decoder or group of decoders.

Abstract: A system and method is disclosed for providing DRM in a broadcast environment. In accordance with the embodiment, a DRM system distributes encrypted service keys over the mobile telephone network to a mobile terminal. The mobile terminal receives the encrypted service key and uses it to decrypt encrypted content keys received from a DVB set top box. The decrypted content keys are sent to the set box over local link where they are used to decrypt encrypted broadcast content. A power management technique for mobile receivers is also disclosed that enables the receiver hardware to power off during a portion of the rendering process.

Abstract: A scrambling system includes a seed finder that selects a scrambling seed. A first scrambler generates a scrambled sequence in response to a user data sequence and the scrambling seed. A code finder generates at least one of a token and an offset of the token from the scrambling seed. An encoder increases a Hamming weight of the scrambled sequence in response to at least one of the token and the offset.

Abstract: In a wireless communication system with an air interface comprised of a plurality of bursts, a communication device (102) receives a burst (200). The burst comprises payload (206, 208), a first indicator (202) and a second indicator (204). Upon receipt of the burst, the communication device determines a value of the first indicator to determine whether end-to-end encryption is applied to at least a portion of the payload, and determines a value of the second indicator to determine whether air interface encryption is applied to at least a portion of the payload.

Abstract: The presently claimed invention relates generally to color signal processing. One claim recites a method including: obtaining a measure or value associated with one or more color characteristics of data representing video or imagery; based at least in part on the measure or value, determining for the data those samples that should receiving steganographic encoding; transforming at least some of the data into a transform domain; and utilizing a programmed electronic processor, altering transform domain coefficients of the at least some data that has been transformed to steganographically encode the data. Of course, other claims and combinations are provided.

Abstract: One embodiment, among others, includes a method for editing video. The method comprises receiving a plurality of media files and receiving specified special effects corresponding to each of the plurality of media files. Based on the received plurality of media files and the specified special effects for each of the plurality of media files, a single output is generated whereby the special effects are incorporated and where the plurality of media files are unmodified.

Abstract: In certain embodiments, a method of detecting a scene change in a digital video signal involves examining a slice of the digital video signal; determining if the slice contains a greater amount of data than a threshold amount of data; and if the slice contains a greater amount of data than the threshold, determining that the slice forms a part of a scene change. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A method for key management for a broadcasting system includes generating a receiver group key (RGK) seed and a plurality of parameters for a receiver group provided by the broadcasting system; and calculating an RGK for the receiver group based on the RGK seed and the plurality of parameters.

Abstract: Techniques for reorganizing security levels without implicating accessibility to secured files classified in accordance to one of the security levels are disclosed. In a case of adding a new security level, the controllability or restrictiveness of the new security level is determined with respect to the most restrictive security level or the least security level in a set of existing security levels. A set of proper security parameters are then generated for the new security level and subsequently the existing security levels are reorganized to accommodate the new security level. In a case of removing a security level from the existing security levels, the security parameters for the security level to be deleted are either folded up or down to an immediate next security level, depending on implementation.