Abstract: Systems and methods of controlling and optimizing system latency in order to minimize system latency between remotely operating computing devices over a communications network are disclosed. A method of controlling and optimizing latency over a computer network from a first computing device to a second computing device includes identifying a condition associated with the transmission of a video signal, receiving the video signal at a computing device, determining whether the condition is met after receiving the video signal, and displaying the video signal on a display device when the condition is met.

Abstract: A data processing system, method and computer program product are provided. In use, data on a network is identified. In addition, a policy is identified. Further, the data is processed based on the policy for maintaining a confidentiality of the data.

Abstract: A method, a network element, and a client device for creating a trusted connection with a network are disclosed. A client device 104 may attempt to access a sub-network 106. The client device 104 may determine that a certificate of the sub-network 106 is issued by a certification authority absent from a device certificate trust list. The client device 104 may receive via the sub-network 106 a certificate trust list update 400 from a certificate trust list provider 108.

Abstract: A method and a device for receiving a High-Definition Multimedia Interface (HDMI) signal from an HDMI source via a first HDMI interface is disclosed. The HDMI signal includes data in a first format. The data is converted to a second format and transmitted wirelessly to a wireless device. The HDMI signal is transmitted to an HDMI destination via a second HDMI interface.

Abstract: Systems and methods for encrypting a media file for streaming and/or downloading over a network are disclosed. These systems and methods may be part of a larger media servicing network that can be used to, among other things, process uploaded media content, provide it for streaming, and collect metric information regarding the streaming. The disclosed systems and methods provide for receiving requests for a media file or a chunk of a media file and responding to these requests by encrypting the requested chunks dynamically and providing the chunks to the requesting entity. These systems and methods, which can be utilized with a dynamic chunk generation and dynamic index file generation, enable a high degree of flexibility in streaming chunked media files and preclude the need to encrypt the chunks prior to streaming. The systems and methods may also be applied to encrypting files for continuous streaming protocols as well as for progressive download.

Abstract: A method for content playback and recording may include using a computer to obtain media content from a recorded medium. Concurrently with obtaining the media content, the method may include reencrypting the encrypted media content using a secondary encryption key and storing the reencrypted media content in a storage device.

Abstract: Signals may be communicated with A/V Bridging services between an upstream link partner and a down stream link partner, each comprising an asymmetric multi-rate Ethernet physical layer (PHY). High bandwidth A/V signals may be transmitted from the upstream link partner and low bandwidth signals may be transmitted from the downstream link partner. One or more of a time stamp, a traffic class and/or a destination address may be utilized in generating PDUs as well as data rate request and a resource reservation messages via the asymmetric Ethernet PHY. The receiving link partner may register for deliver of the PDUs. An aggregate communication rate may be distributed evenly or unevenly among one or more links for transmission and aggregated upon reception via asymmetric multi-rate Ethernet PHY operations. Compressed, uncompressed, encrypted and/or unencrypted signals may be handled. Signal processing may comprise echo cancellation, cross talk cancellation, forward error checking and equalization.

Abstract: A method for authenticating video content includes: receiving a digital signature, an unsecured video fingerprint, and an unsecured video content from a transmitting node at a receiving node in a communication network; determining if the digital signature is consistent with the unsecured video fingerprint at the receiving node to verify the unsecured video fingerprint; and determining if the unsecured video fingerprint is consistent with the unsecured video content at the receiving node to verify the unsecured video content in a manner that tolerates a predetermined measure of loss in the unsecured video content. If the unsecured video fingerprint and the unsecured video content are verified, the unsecured video content is authenticated for subsequent use at the receiving node. A receiving node associated with the method includes an input module, a fingerprint verification module, a content verification module, and a controller module.

Abstract: A system for encoding a video stream into a processed video signal that includes at least one image, includes a pattern detection module for detecting a pattern of interest in the at least one image and identifying a region that contains the pattern of interest when the pattern of interest is detected. An encoder section, generates the processed video signal and wherein, when the pattern of interest is detected, a higher quantization is assigned to the region than to portions of the at least one image outside the region.

Abstract: Methods, systems, and apparatus are disclosed which enable flexible insertion of forensic watermarks into a digital content signal using a common customization function. The common customization function flexibly employs a range of different marking techniques that are applicable to a wide range of forensic marking schemes. These customization functions are also applicable to pre-processing and post-processing operations that may be necessary for enhancing the security and transparency of the embedded marks, as well as improving the computational efficiency of the marking process. The common customization function supports a well-defined set of operations specific to the task of forensic mark customization that can be carried out with a modest and preferably bounded effort on a wide range of devices. This is accomplished through the use of a generic transformation technique for use as a “customization” step for producing versions of content forensically marked with any of a multiplicity of mark messages.

Abstract: There is provided a device for protecting a digital content. The device includes a digital content processing section that causes a digital content to be protected using security information; and an encrypting section that encrypts the security information, using a key acquired from a Digital Right Management system of an electronic ticket system.

Abstract: An adaptive security policy based scalable video service apparatus includes a video streaming server, an adaptive security policy server and a terminal. The video streaming server receives a service demand via a network and generates an encrypted streaming data. The adaptive security policy server analyzes a media structure and the service demand, by using a service profile received from the video streaming server, so as to generate a security policy description. The terminal generates and transmits the service demand to the video streaming server or the adaptive security server, obtains the encrypted streaming data from the video streaming server and decrypts the encrypted streaming data for playback, storing and retransmission.

Abstract: This specification describes technologies relating to imparting cryptographic information in network communications.

Abstract: In one aspect, a method includes: obtaining compressed video content within a video content processing module, a portion of a document structure of the compressed video content conforming to a predefined codec, the portion of the document structure including a plurality of video frames; decrypting the compressed video content in accordance with a digital rights management data encryption applied to the compressed video content; adding information in an extension frame associated with a portion of the document structure; and applying an encoding technique to content of one or more of the plurality of video frames after the decrypting, wherein the extension frame flags the applied encoding technique; and providing the compressed video content, including the encoded content, to a media player including a codec conforming to the predefined codec.

Abstract: The present invention relates to a method that uses a motion vector of a predictive video frame of a sub-layer to encode a video signal and decode encoded video data. The method encodes a video signal using a preset method to a bit stream of a base layer while encoding the video signal using a scalable MCTF method to a bit stream of an enhanced layer. When an arbitrary frame of the video signal is encoded, information, enabling at least one vector, derived from a first motion vector of a first block included in the bit stream of the base layer in the same direction as the first motion vector, to be used as a motion vector of an image block in the arbitrary frame, is recorded in the bit stream of the enhanced layer. The first motion vector is directed in the same direction as a temporal direction from the arbitrary frame to the first block.

Abstract: An information processing system and a method for use therewith, an information processing apparatus and a method for use therewith, and a program which are capable of decrypting desired portions of encrypted data are provided. Of packets 211 through 216 constituting a bit stream of layered-encoded image data 201 according to JPEG 2000, the packets 211 through 213 are each encrypted independently of the packets 214 through 216 which are also encrypted each. This produces encrypted split data 262 with the resolution at level zero (corresponding to R0) and encrypted split data 263 with the resolution at level one (corresponding to R1). The header (ranging from SOC to SOD) of layered-encoded image data 201 is appropriated for a header 261, followed by encrypted split data 262 and 263 and an EOC 264, in that order, the whole data array constituting data 251 that is output as the definitive encrypted data. This invention is particularly applicable to image delivery apparatus.

Abstract: The usability while performing copy control can be enhanced in the case of recording a digital broadcast program for which recording of one generation is permitted (“Copy One Generation”). When an output route in the case of copying digital contents from a first recording apparatus to a second recording apparatus is via LAN, authentication is executed between the first recording apparatus and the second recording apparatus. The capability of a move process with a predetermined copy number of multiple copies being kept is confirmed, and dedicated key information is shared to be used for encryption and decryption of the digital contents moved with the predetermined copy number of multiple copies being kept. Then, the digital contents recorded and managed in the first recording apparatus is added with the information about the predetermined copy number of multiple copies, and transmitted.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: A method and system of securing content is described, the method including establishing communication between a secure module source and a content rendering device, loading a dynamically generated pseudo-unique secure module to the content rendering device from the secure module source, establishing communication between the secure module source and the dynamically generated pseudo-unique secure module, and transferring a decryption key from the secure module source to the dynamically generated pseudo-unique secure module, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key. Related methods and apparatus are also described.

Abstract: A system, apparatus, and method are directed towards allowing ingestion of encrypted content into such as a VOD server, or PVR, or the like by selectively encrypting portions of a content stream based on various selection rules. In one embodiment, the selection rules include leaving selected portions of the content stream unencrypted, including packets that include a PES header; or video packets that include various trick play data such as picture start, GOP start, sequence start, sequence end data; PIDs associated with a PAT, PMT, or the like; while other portions of the content stream may be encrypted, including video and/or audio PIDs, or other video and/or audio portions. In still another embodiment, Entitlement Control Messages (ECMs) may be inserted that employ an encryption/decryption key rotation scheme, such as odd and/or even scrambling control bit structures, which may also be rotated based on a variety of conditions.

Abstract: A system, method and device for real-time compositing of encrypted video streams without having to decrypt each video stream is disclosed herein. A shared encryption key is derived to encrypt multiple incoming video streams to an encrypted master video stream, while retaining full interoperability with popular incumbent video encryption standards. Compositing video is then possible without having to decrypt the master video stream, thereby preserving the security of the copyrighted material. The invention preferably genlocks a digital video source to a master video stream.

Abstract: An approach is provided for generating composite media and delivering the composite media to a client application. Data is received from one or more external sources, and a portion of the data is selected to be used in the composite media according to the time period of delivery of the client application, user information, or the type of client application requesting the media, if a request has been made. The selected data is integrated into a pre-created template to generate the composite media, such as an advertisement, special offers, or weather and stock information. The composite media may be modified prior to being delivered to the client application. The selection of the pre-created template and the modification of the composite media are made according to requirements of the client application, user information, or the type of client application (e.g., gaming application) requesting the media.

Abstract: The present invention proposes a solution to prevent a program flow in a processing unit from being modified with respect to an intended program flow, thereby ensuring that important steps such as verifying or authenticating are not bypassed. The invention is particularly aimed at security modules within receiver/decoders in a pay-TV system and involves performing a set of predetermined operations during the processing of entitlement management messages and/or entitlement control messages, said operations being redundant with respect to the normal processing of said messages while leading to the calculation of keys which can then be used to verify that the intended program flow has been respected.

Abstract: Disclosed is a system and method for encryption of a scalable video coding (SVC) bitstream, which is the next-generation coding technology. The encryption method encrypts Network Abstraction Layer (NAL) data identified according to multidimensional scalability for space, time, and quality with respect to a bitstream created after an SVC encoding, thereby providing a multidimensional scalability function for space, time, and quality even after the encryption, so that the scalability is also maintained even in a bitstream extraction process after the encryption. According to such a scalable encryption method, a specific portion of an encrypted bitstream is removed in a bitstream extraction process, and user access to the bitstream is limited based on a combination of keys for accessing a specific scalability. Therefore, it is possible to protect scalable video content and to access the video content based on scalabilities.

Abstract: A method of key management in a communication network that includes a plurality of groups with each group including one or several members authorized to have access to key-protected services is provided by an apparatus. The method includes determining when a member starts a switching action from one service to another. A time dependent quantity starting from the switching action is determined. The method includes determining that the member is a member of a switching group when the quantity is less than a threshold value is made, and when the quantity is larger than the threshold, determining that the member has decided to join a new group, and changing the appropriate access key(s).

Abstract: An information processing device, for executing content reproduction processing from an information recording medium, includes a security information processing unit for determining output messages based on security check information in a content reproduction sequence, and outputting a message output command accompanied by selection information of the output message to a user interface processing unit, and a user information processing unit for obtaining message information based on the selection information input from said security information processing unit and outputting to a display unit.

Abstract: An input processing circuit decodes a digital video signal selected by an input signal selector. Decryption circuits each decrypt the encryption of a video signal output from the input processing circuit, and generate an authentication key of the encryption. A video signal selector selects and outputs one of the video signals output from the decryption circuits, to a monitor. The decryption circuits each include a pseudo-signal generation circuit which extracts information from the video signal, and based on the extracted information, generates a pseudo-video signal.

Abstract: Systems and methods providing content having digital rights management (DRM) applications separable from other authorization applications are provided. A system may include a distribution service provider system in communication with a content provider system and consumer premise equipment (CPE) for the transmission of content from the content provider system to the CPE device. The distribution service provider system may: receive A/V content provided by the content provider system, wherein the A/V content includes a DRM application; apply a conditional access system (CAS) application to the A/V content that is independent of the DRM application; and transmit the A/V content including the CAS and the DRM applications to the CPE for presentation. The CPE device can perform DRM authorizations with the content provider or a third-party DRM provider.

Abstract: A method of viewing a content item is provided. The method includes receiving an encrypted content item and a network address of a key management system from a primary client device over a communications network. A session key is obtained over the communications network and the primary client device is notified that the session key has been obtained. An encrypted version of a content key is received over the communication network to decrypt the content item and content rights that determine access to the content item. The content rights restrict the content item from being rendered unless it is rendered in coordination with the rendering of the content item by the primary client device. The encrypted version of a content key is decrypted with the session key. The content item is rendered in accordance with the content rights by decrypting the content item with the content key.

Abstract: A method and system provides arrangements creating a relationship between a real-world entity and a virtual world environment. A participant or player can participate in various virtual world experiences including activities, settings, events, purchases, sales and diverse transactions to acquire virtual products, virtual services, and/or virtual items of value. Feedback may be provided and records kept regarding the virtual world participation. In some circumstances, multiple persons can participate as a group or participate as individuals in the virtual world environment. Some embodiments provide an oversight procedure that enables a supervisory entity to exercise direct or indirect control over certain virtual world aspects of a participant or player. In some implementations the oversight procedure is at least partially based on an attribute related to the participant or player.

Abstract: Methods and systems for a transport single key change point for all package identifier channels are disclosed and may include descrambling a received transport stream comprising multiple package identifier (PID) channels with multiple key change points, and synchronizing at least a portion of the multiple key change points to occur at a common time. The transport stream may be conditional access or copy protect scrambled. The timing of the key change points may be synchronized by modifying one or more scrambling control bits for the descrambled received transport stream. At least one PID channel in said descrambled received transport stream may be re-scrambled utilizing one or more of the scrambling control bits, and a portion of the PID channels may bypass the re-scrambling. The re-scrambling may include one or more of CP re-scrambling and CA re-scrambling. Each PID channel may be de-scrambled and/or re-scrambled utilizing a separate key.

Abstract: Disclosed are a method and apparatus capable of reducing the computational complexity of encryption and decryption by encrypting only data of scalable video coding contents for each coding layer in terms of temporal, spatial, and SNR scalabilities to provide a service for protected scalable video coding contents, and capable of protecting contents by generating and distributing an encryption key for encryption and decryption depending on a class of a contents consumer.

Abstract: A video processing device for encrypting a compressed video signal that includes a key storage device for storing at least one encryption key. An encryption processing device retrieves the at least one encryption key from the key storage device, and directly encrypts an elementary bit stream into at least one encrypted elementary bit stream.

Abstract: A video processing device for decrypting a compressed video signal includes a key storage device for storing at least one decryption key. A decryption processing device retrieves the at least one decryption key from the key storage device, and decrypts an encrypted elementary bit stream into at least one elementary bit stream, wherein first portions of the encrypted elementary bit stream are encrypted and second portions of the encrypted elementary bit stream are unencrypted.

Abstract: A supplier PC transmits a print job together with information on the recipient of the print job and print setting to a printing apparatus. The printing apparatus receives the print job, transmits a notification that print preparation is completed to the recipient PC to accomplish notification. The recipient PC displays pre-print notification, based on the notification contents. The user of the recipient PC views the notification contents, and comes to know that a document addressed to him/her has been transmitted and about to be printed. The recipient PC accepts a change in print setting and the like, and starts printing. Thus, the user of the supplier PC can pass a print to the recipient.

Abstract: A method of managing the sending of multimedia contents to a mobile terminal (2) equipped with a security module (3), the multimedia contents being sent in encrypted form from a broadcast server (1) and via a communications network (4). The method comprises the following steps: a) sending to the mobile terminal (2) rights-of-use data for a multimedia content, b) storing said rights-of-use data in the security module (3) of the mobile terminal (2), c) generating a series of encryption/decryption keys, the series of decryption keys being generated from rights-of-use data stored in the security module (3), d) sending the multimedia content to the mobile terminal (2), the content being encrypted with successive keys from the series of encryption keys that has been generated, and e) the mobile terminal receiving the multimedia content and decrypting the multimedia content using the decryption keys from the series of decryption keys generated in the security module of the mobile terminal.

Abstract: The invention concerns a terminal (T) comprising an agent (AS) for processing a secure content encrypted with a key (KCN) and transmitted by a first server (SCN). In order to manage a secure access to the secure content, an application (AG) of a portable communicating object, such as a chip card, associated with a terminal stores one type of related digital right (TDN) and a certificate and transmitted by the agent and stores an access right (DA) and the key (KCN) related to the secure content transmitted from a second server (SAD). The application adapts the access right and the key and modifies the secure content, based on the type of right, and produces a secure access file based on the adapted access right and the key and on the certificate, the produced file being accessible by the terminal so that the agent may process the modified content.

Abstract: Key management in a digital cinema system (10, 100 and 1000) occurs by encrypting a feature key associated with encrypted content with a transmission key exchanged with a decryption module (60, 601, 602, 6001, 6002, 6003 and 6004), that serves to decrypt encrypted content. The encrypted feature key undergoes transmission to the decryption module to enable decryption of the encrypted content. In this way, the decryption module will only have the capability of decrypting content based on that module's own key.

Abstract: A method for verifying the authenticity and integrity of an ordered sequence of digital video frames, without having access to the original recording, by embedding therein a respective series of digital signatures based on a secret key, or keys, and on the video content of respective frames. Signatures are camouflaged by embedding in transform coefficients of a transformed representation of the video data in parts of the frame corresponding to motion. If there is sufficient motion to contain all of the signature bits, a supplementary technique embeds in high-texture areas of a frame. A final fall-back is to embed in a pre-defined default zone. A method of predicting when supplementary embedding is needed enables the process to be applied in a single pass allowing real-time operation. Verification is done during decoding by comparing, for identity, embedded signatures with signatures calculated anew using the method employed to embed.

Abstract: A wearable video recording system with time-bracketed authentication is provided and includes a article, including a spine, wearable by a user, a recording device, supported on the spine, to generate a recording of a scene, an affecter subsystem, supported on the spine, to influence the scene being recorded with unpredictable data and an untrusted controller coupled to the recording device and the affecter subsystem, the untrusted controller being receptive of the unpredictable data, which the untrusted controller communicates to the affecter subsystem, and being configured to transmit at least hashed digests of the recording to one or more repositories.

Abstract: Disclosed is a virtual universal decryption (VUD) service that provides a mechanism for allowing users of camera enabled mobile devices to use their camera to decrypt messages. The VUD service can provide a mechanism for a user of a VUD enabled device to authorize one or more other users of VUD enabled and camera enabled devices to use their cameras to decrypt messages sent by the authorizing user. The VUD service may then provide mechanisms for the authorized users to decrypt messages, which have been encrypted by the authorizing users, by simply capturing an image/video of the encrypted text with a camera of their VUD enabled devices.

Abstract: A method and apparatus for managing digital content are provided. The apparatus for managing digital content generated by applying digital rights management (DRM) includes: a content execution unit executing digital content; and a control unit confirming whether or not digital content is in a first period in which the digital content can be normally executed, and controlling the content execution unit so that, if the digital content is in the first period, the digital content can be executed normally, and if the digital content is in a second period which is not in the first period, the digital content can be executed in a manner which can be distinguished from that of execution in the first period. According to the apparatus and method, execution of digital content, which is close to expiration, can be controlled, thereby managing the expiration of the digital content for a user.

Abstract: A correlation-based system for watermarking continuous digital media at the system application level. It is a post-compression process for watermarking where no a priori knowledge of the underlying compression algorithm is required. Per each compressed media frame, a current unique digital signature is generated based on the data from the current compressed frame plus the digital signature that has been previously generated. The signature thus generated is then used in conjunction with the next compressed frame to generate the next unique digital signature. All digital signatures are correlated according to the above process until a “reset” signal is issued. A new chain of correlated digital signatures is produced by the system with a pre-determined initial signature.

Abstract: A method for a CAD system, a CAD system, and instructions for a CAD system. A method includes loading an object model, the object model including a blend face. The method also includes finding underfaces of the blend face and constructing an intersection curve according to the underfaces. The method also includes trimming the intersection curve according to the blend face to produce a virtual blend curve, and storing the virtual blend curve.

Abstract: Generally, the present disclosure provides a system and method configured to prevent unauthorized copying of video content in a mobile device. The method may use virtualization technology to prevent unauthorized copying of the premium video content. A user OS may operate in a virtual machine. A hypervisor may be configured to prevent an application and/or a corrupted OS from reading premium video content from video memory. The hypervisor may be configured to prevent direct memory access to the video content in the video memory.

Abstract: The present invention describes a method for performing one or more social engineering attacks on a plurality of humans connected in a network for assessing vulnerabilities of the humans, wherein the Network comprises at least one of a plurality of data processing devices, memory devices and a plurality of communication links. The method includes gathering information about human profiles including collecting information about target users from actively used social and search sites and performing an automated Social Engineering (SE) phase and updating an Information Model based on the gathered information. Furthermore, the method includes generating a Multiple Attack Vector (MAV) graph based on the information gathered and one or more scan parameters. Moreover, the method includes launching one or more social engineering attacks based on the MAV graph to assess vulnerabilities in the humans in the Network.

Abstract: In one aspect, a method includes: obtaining compressed video content within a video content processing module, a portion of a document structure of the compressed video content conforming to a predefined codec, the portion of the document structure including a plurality of video frames; decrypting the compressed video content in accordance with a digital rights management data encryption applied to the compressed video content; adding information in an extension frame associated with a portion of the document structure; and applying an encoding technique to content of one or more of the plurality of video frames after the decrypting, wherein the extension frame flags the applied encoding technique; and providing the compressed video content, including the encoded content, to a media player including a codec conforming to the predefined codec.

Abstract: The present invention provides a method of distributing content to a plurality of clients. The method on a server begins with accessing content to be distributed to a plurality of clients and identifying a first type of content to be distributed as crucial content and identifying a second type of content to be distributed as non-crucial content. The crucial content is any content required to properly render, after a decryption process, the content. The non-crucial content is all the other content to be distributed. The crucial content is encrypted with a first encrypting key which is unique to each of the plurality of clients. The crucial content which has been encrypted is transmitted. The non-crucial content is transmitted to the plurality of clients.

Abstract: Generally, the present disclosure provides a system and method configured to prevent unauthorized copying of video content in a mobile device. The method may use virtualization technology to prevent unauthorized copying of the premium video content. A user OS may operate in a virtual machine. A hypervisor may be configured to prevent an application and/or a corrupted OS from reading premium video content from video memory. The hypervisor may be configured to prevent direct memory access to the video content in the video memory.

Abstract: Methods, computer readable media, and apparatuses for preventing unauthorized font linking are presented. A request for a font file may be received. It may be determined whether the request is valid, and this determination may be based on a security token and/or a referrer string. If the request is determined to be valid, a first watermark may be embedded in the font file, and the first watermark may be based on the security token. The first watermark may include at least one point in at least one glyph contained in the font file. A second watermark may be embedded in the font file, and the second watermark may include at least one table that identifies a customer. The font file then may be served to the requestor.