Abstract: A wearable video recording system with time-bracketed authentication is provided and includes a article, including a spine, wearable by a user, a recording device, supported on the spine, to generate a recording of a scene, an affecter subsystem, supported on the spine, to influence the scene being recorded with unpredictable data and an untrusted controller coupled to the recording device and the affecter subsystem, the untrusted controller being receptive of the unpredictable data, which the untrusted controller communicates to the affecter subsystem, and being configured to transmit at least hashed digests of the recording to one or more repositories.

Abstract: A tuning device uses a counter mode encryption cipher to encrypt counters associated with media content in order to protect the media content when it is sent to requesting device or controller. The encrypted counters are decrypted in order to consume the media content. The controller may send particular direction to the tuning device as to how the media content, encrypted counters, and other associated data are sent to the controller.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked-out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: A public key cryptography (PKI or other similar system) is used to sent partial or multiple of encryption or decryption algorithm (cipher or decipher) to the data sender or receiver to encrypt or decrypt the data to be sent or received and destroy itself after each or multiple use. Since the encryption algorithm is protected, it can be devised very small in size in compare to the data to be sent and the user can afford to use large key size in it's transmission to increase protection without significant compact to the overall speed. Without knowing the encryption algorithm, which may also be changing from time to time, it will be impossible to use brut force to break the code provided that the algorithm scheme is designed properly. It is due to that there are unlimited numbers of new or old algorithms with countless variations and it takes years of supper fast computing time to break even few algorithms.

Abstract: The process comprises the steps consisting in: (a) receiving data in a first device, the data containing at least one anticopy protection system identifier; (b) verifying whether the first device is connected to a data recording device by a digital bus; and in case of positive verification: (c) verifying whether the first device comprises a module implementing an anticopy protection system whose identifier is included in the data; and in case of positive verification: (d) offering a user access to the data according to a first mode of access (PPVR) authorizing the recording of the data; and in case of negative verification in step (b) or step (c): (e) offering a user access to the data according to a second mode of access (PPV) not authorizing the recording of the data.

Abstract: A method of facilitating transport of partially encrypted video is disclosed. The method re-packetizes or otherwise de-concatenates packets carrying the partially encrypted video into packets where all the video in each packet is either encrypted or unencrypted. The re-packetized video packets may include data that identifies whether the packet is carrying encrypted or unencrypted video.

Abstract: Provided are a conditional access system and a method of using a conditional access image. The conditional access system according to an exemplary embodiment of the present invention includes: a service key management client allocated with a service key from a service key management server using a service key distribution protocol; a download client downloading a conditional access image using the service key and requesting updating the service key to the service key management server through the service key management client when the downloading is completed; and an execution controller encrypting and storing the conditional access image using the service key updated in accordance with the request and recovering the conditional access image using the service key reacquired through the service key management client before executing the stored conditional access image.

Abstract: A method of verification of rights is disclosed, contained in a security module associated to an apparatus processing broadcasted digital data. The apparatus is connected to a management center transmitting encrypted rights messages for accessing the digital data. The method includes reception and reading by the security module of all or part of a rights message including at least one right and means for verifying the right, decryption and verification of the rights message and updating of a rights memory, and storage of all or part of the rights message in a messages memory. During a further verification step, the method includes identification of at least one right present in the rights memory, search of the corresponding stored rights message and verification of the rights message, comparison of the right contained in the rights message with the corresponding right stored in the rights memory, and determination of a default state when the result of the comparison indicates a difference.

Abstract: A selective encryption encoder consistent with certain embodiments of the invention has vertical and/or horizontal stripes encrypted. In one embodiment, packets are examined in the digital video signal to identify a specified packet type, the specified packet type being both packets carrying intra-coded data representing a pattern of horizontal stripes across an image and packets carrying intra-coded data representing a pattern of vertical stripes across an image. The packets identified as being of the specified packet type are encrypted using a first encryption method to produce first encrypted packets. These first encrypted packets are then used to replace the unencrypted packets in the digital video signal to produce a partially encrypted video signal. The packets of the specified type can also be multiple encrypted and replaced in the data stream to produce a multiple encrypted video data stream.

Abstract: Delivery of conditional access data to a receiver that is able to connect to a plurality of scrambled programs. Conditional access for a current channel is handled using standard ECMs delivered with the channel. In parallel, the receiver retrieves an ECM for a separate stream comprising control words for every channel. The control word of this ECM is used to descramble the separate stream to access the control words for every channel. In a preferred embodiment, these control words are super-encrypted using channel keys and the receiver is only able to obtain channel keys for channels for which it has access rights. In case the control words are super-encrypted, they are decrypted. Upon channel change, the relevant retrieved control word is used to descramble the new channel. Also provided is a receiver device and a transmitter device. According to a variant, the control words received in the separate stream is treated only upon a change of channel.

Abstract: A method and system for securing transfer, storage, and playback of media content. The method and system relate to securing transfer, storage, and playback of all types of media content, including television, music, electronic games, and other types of electronic data.

Abstract: Disclosed are systems, methods and computer program products for protecting applications deployed on a host computer from malware using virtualization. An exemplary malware protection system may include a kernel-level driver configured to intercept system calls addressed to an object of a protected application. The system also includes an analysis engine configured to determine if there are security rules associated with one or more of the intercepted system call, the object of the protected application, and the actions allowed on the object of the protected application. The security rules indicate whether the system call is allowed or not allowed to be executed on the host computer. If there is no security rule associated with the system call, the system call is executed in a secure execution environment of the host computer using a virtual copy of the object of the protected application.

Abstract: Methods and apparatus for mixing encrypted data with unencrypted data are disclosed. A disclosed system receives data from a first media source, such as DVD-Audio content, and encrypts the data from the first media source using a key stream to form an encrypted data stream. The disclosed system may separate the encrypted data stream into a plurality of encrypted data streams and may combine the plurality of encrypted data streams with an unencrypted data stream associated with a second media source to form a mixed data stream. The mixed data stream is formed without decrypting the plurality of encrypted data streams and is transmitted to hardware or a hardware driver.

Abstract: A method for determining whether the terminal is authorized to receive the selected service is practiced in a terminal of a conditional access system in which a user selects a service, the selected service being associated with a frequency, the terminal having a tuner and a secure element with at least one authorized entitlement unit number stored therein. The method includes receiving at least one encrypted entitlement control message corresponding to the service, and decrypting each of the at least one encrypted entitlement control message in the secure element, each decrypted entitlement control message revealing at least one first entitlement number associated with the selected service. The method further includes determining that the terminal is authorized to receive the selected service when any first entitlement number of any decrypted entitlement control message represents any number of the at least one authorized entitlement unit number.

Abstract: [PROBLEM] To provide an information recording/reproducing apparatus, an information recording/reproducing method, an information recording/reproducing program and a record medium, secure contents are reproduced with a mobile device so that a check-out can be made on memory card of a small capacity thereby to prevent an authorized copy of the secure contents. [SOLVING MEANS] The information recording/reproducing apparatus creates a title key, encrypts the contents in accordance with a title key; stores the encrypted contents, stores navigation information on the reproduction of the contents containing the title key, encrypts the title key in accordance with the medium ID of an external medium, outputs the encrypted title key and an externally connecting method to the external medium, and transmits the encrypted contents stored, to the outside in case a request for the contents is received from the outside.

Abstract: A process for distributing a video stream to a multitude of destinations including marking by adding to the video stream at least a visual element such that the marking is applied to an original video stream common to selected recipients, and personalized for a least portion of the recipients by addition of a visual element specific to destination equipment.

Abstract: A data processing system for distributing and authenticating documents from a plurality of parties to a recipient data processing apparatus is disclosed. The system comprises a plurality of document distribution devices each configured to generate an original hash value from the content of a file containing a document to be distributed. A recipient data processing apparatus is configured to generate an original super hash value from the plurality of the original hash values, and to distribute the original super hash value to each of the document distribution devices. The system provides assurance that distributed documents have not been tampered with during communication, by an unscrupulous distributing party, or by an unscrupulous recipient by only submitting a hash value of the document to be distributed. The hash value provides for assurance at the eventual recipient of the document that no changes to the document have been made.

Abstract: A management server has: an identification-information reproducing unit which reproduces identification information from an optical disk; an invalid-unit intrinsic-information registration section which registers the reproduced identification information; and a restriction-lifting decision section which decides, on the basis of the registered identification information and unit intrinsic information given intrinsically to every recording unit, whether the identification information can be recorded on a master optical disk.

Abstract: Generally, the present disclosure provides a system and method configured to prevent unauthorized copying of video content in a mobile device. The method may use virtualization technology to prevent unauthorized copying of the premium video content. A user OS may operate in a virtual machine. A hypervisor may be configured to prevent an application and/or a corrupted OS from reading premium video content from video memory. The hypervisor may be configured to prevent direct memory access to the video content in the video memory.

Abstract: Systems and methods for enabling a user to obtain rights in a legitimate copy of a digital content unit without downloading the copy from a digital content store are provided. The systems and methods provide an encrypted copy of a digital content unit to a first user and transcript the encrypted copy to generate the legitimate copy to a second user. The encrypted copy is encrypted with a first encrypt key that may be associated with the first user and the legitimate copy is encrypted with a second encrypt key that may be associated with the second user.

Abstract: A method of broadcasting a scrambled multimedia program, by way of a broadcast network, in which before transmitting a license key; a network head carries out a step of authenticating a terminal, and if the terminal has successfully authenticated, the network heads sends the terminal a license transmission message containing the license key or cryptogram of the license key, by way of a point-to-point link, and if the terminal is not successfully authenticated, the network head acts (at 200) in such a way as to prevent the complete descrambling by this terminal of the scrambled multimedia program broadcast.

Abstract: A method and system is provided for encrypting an image compressed with a JPEG2000-based compression with minimal overhead so that the encrypted codestream is compliant with the syntax of the JPEG2000-based compression and can be scaled without decrypting. The encryption system generates, for each independent encryption segment of a codestream for an image, a unique initialization vector from a global initialization vector in such a way that the initialization vectors can be generated during decryption from the global initialization vector, even after truncation. The encryption system encrypts each independent encryption segment using its unique initialization vector. The encryption system ensures that the encrypted codestream is compliant with the syntax of the JPEG2000-based compression both as originally generated and as truncated by an encryption-unaware device.

Abstract: An authorization system of a navigation device includes a first identification (ID) module and a second ID module. The first ID module is arranged to perform authorization for a first portion of the navigation device, and the second ID module is arranged to perform authorization for a second portion of the navigation device. The first and the second ID modules perform bidirectional authorization of the first and the second portions, and further determine behavior of the navigation device according to a result of the bidirectional authorization. An associated authorization method for controlling the navigation device is further provided.

Abstract: A process of cryptographically securing a data object including one or more respectively tagged data elements includes selecting a tagged data element from among a plurality of tagged data elements, based on an associated data tag. A plurality of cryptographic key splits is generated from seed data. The cryptographic key splits are bound together to produce a first cryptographic key. A second cryptographic key is generated based on security requirements of the data object. The tagged data element is encrypted using the first cryptographic key. The data object encrypting using the second cryptographic key. At least one of the cryptographic key splits is based on the associated data tag.

Abstract: An apparatus for secured playback is presented. In one embodiment, the apparatus includes a controller that includes a key derivation module to manage authentication and key derivation. In one embodiment, the apparatus provides a video decryption key to a graphics engine if video data portions in a data stream are retrievable without having to decrypt the data stream. In one embodiment, the apparatus also includes a decryption module to decrypt a part of data in conjunction with an encryption key to generate video information and video data. The controller then writes an encrypted version of the video data to a video buffer of a graphics engine.

Abstract: Embodiments protect user data in its entirety from unauthorized access when an authorized user does not access a medium for a predetermined length of time by making encryption key data used to encrypt the user data unavailable. In one embodiment, using a magnetic disk in which a data losing time of an encryption key data recording area is shorter than a user data recording area, recording is performed to the magnetic disk while encrypting user data during recording, and encryption key data for use with encryption is recorded in the encryption data recording area. For reproduction of the user data, the encryption key data is read from the encryption key data recording area, and the user data encrypted during the recording is output while being decrypted using an encryption key generated by the encryption key data, and the encryption key data is overwritten on the encryption key data recording area.

Abstract: A configuration is provided which enables usage management and secure data management of data newly generated or obtained that is different from data already stored in an information recording medium. New data such as information which the user has newly generated or downloaded related to content information increments of content management information stored in an information recording medium is recorded as configuration data of the content management unit, in the form of encrypted data to which a unit key corresponding to the content management unit, or a unit key corresponding to a new content management unit, has been applied. According to this configuration, secure data management and usage management is realized for new data the same as with data corresponding to original units.

Abstract: The present invention provides a scrambled compressed data distribution device that can perform a high-resistance scrambled compressed data distribution by selectively using a plurality of types of scramble information and a playback device thereof. A scrambling section scrambles compressed data by unique one of a plurality of scrambling methods. A hash value calculating section determines a hash value based on data b in a position where digital watermark data is not embedded, and an encrypting section encrypts the hash value with a secret key Sk(n) corresponding to the scrambling method and outputs an encrypted hash value c. A watermark data embedding section embeds the encrypted hash value in a watermark data embedding position of the data b and transmits the same as a compressed data stream d.

Abstract: Compressed entertainment content such as audio or video or both includes additional aspects and operations associated their way. The compressed audio may be used to signal computers such as a telephone or reminder for an appointment. A melody line may be extracted from the audio, or the audio may be used exactly as it is. Another aspect stores traders within the entertainment content such as in MP3. Those traders are used to trigger the system to retrieve other parts of the content to be displayed at the same time that that particular part of the MP3 is being play. The content may include video or text, or maybe links to other content such as broadband content four times sensitive content. Another aspect describes encryption which is keyed to the disk ID to prevent playing oven illegally copied disk. Another aspect reads a specified amount of information then spins down the disk to conserve battery power.

Abstract: A conventional AV data receiving device switches to a key for distribution to an outdoor device when a network environment is switched to an outdoor network environment, thus resulting in high key switching frequency. In view of this, an AV data receiving device according to the present invention determines, after switching the network environment from indoors to outdoors as a result of moving the AV data receiving device, whether or not key switching should be performed, before a command for restricting a hop count on a route from an AV data transmission device located indoors is transmitted, and performs authentication and key exchange processing for outdoor device distribution, so as to switch to the key for outdoor device distribution.

Abstract: Systems and methods are disclosed for inserting programs into broadcasted primary programs by a conditional access (CA) module that is inserted into a host device, such as a digital-ready television. The CA module utilizes primary and secondary program map tables and/or primary and secondary packet identifiers. A splicer splices the secondary packet identifiers, which is associated with a secondary program, into the primary packet identifiers, which is associated with a program, such as a broadcasted program. Additionally, the CA module may contain memory that is capable of storing the secondary program's packet identifiers and/or program map table that can be used for insertion into the primary program.

Abstract: There is disclosed a process for encrypting a data stream to secure the data stream for single viewing and to protect copyrights of the data stream. Specifically, there is disclosed a process for protecting streaming multimedia, entertainment and communications in an Internet-type transmission. There is further disclosed a streaming server component operably connected with a streaming server that interacts with a client system to affect the inventive process.

Abstract: One embodiment of the invention sets forth an encoding server including components configured to encode a video stream associated with a content title for adaptive streaming. The video stream is first processed by a VC1 encoder to generate an encoded video stream comprising a multiple GOPs, each GOP including a key frame and having a different playback offset. The encoded video stream is then packaged such that the GOPs are stored in data packets of the packaged encoded stream. An SHI generator generates an SHI associated with the packaged encoded stream that includes a switch point associated with each GOP. Each switch point includes the playback offset associated with the corresponding GOP and the data packet storing the key frame of the corresponding GOP. The SHI associated with multiple packaged encoded video streams associated with the same content title and encoded to different playback bit rates have corresponding switch points.

Abstract: A method and system of securing content is described, the method including establishing communication between a secure module source and a content rendering device, loading a dynamically generated pseudo-unique secure module to the content rendering device from the secure module source, establishing communication between the secure module source and the dynamically generated pseudo-unique secure module, and transferring a decryption key from the secure module source to the dynamically generated pseudo-unique secure module, thereby enabling decryption of encrypted content, the encrypted content being encrypted according to the decryption key. Related methods and apparatus are also described.

Abstract: A system and method is provided for identifying the source of an unauthorized copy of content. The method includes embedding a unique user fingerprint code to into each of a plurality of authorized copies of content and identifying an unknown fingerprint code in an unauthorized copy of the content. Each member of the unknown fingerprint code is compared to each corresponding member in each of the user fingerprint codes. A score is assigned to each of the user fingerprint codes based on the comparison and users associated with scores exceeding a threshold are identified as a source of the unauthorized copy.

Abstract: A receiver device consistent with certain embodiments that receives and decrypts digital cable or satellite television signals has a receiver that tunes and demodulates the television signal into a digital transport stream. A decrypter decrypts the digital transport stream using a pair of decryption keys. A first decryption key array stored in a first storage location forming a part of the receiver device, and a second key array stored in a second storage location forming a part of the receiver device, the first and second key arrays representing ordered pairs of keys. An authorization table is stored in a third storage location forming a part of the receiver device, the authorization table containing a mapping, wherein each ordered pair of decryption keys corresponds to a different one of a plurality of Multichannel Video Program Distributors (MVPD). This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: An information processing device, for executing content reproduction processing from an information recording medium, includes a security information processing unit for determining output messages based on security check information in a content reproduction sequence, and outputting a message output command accompanied by selection information of the output message to a user interface processing unit, and a user information processing unit for obtaining message information based on the selection information input from said security information processing unit and outputting to a display unit.

Abstract: A cryptographic method and systems using a keyed one-way function. A sending device uses the keyed one-way function to authenticate one or more receiving devices prerequisite to communication. A multidimensional hypercube is generated, from which is formed a multidimensional vector by randomly selecting one corner of the multidimensional hypercube. The keyed one-way function is computed using the multidimensional vector.

Abstract: A partial multiple encryption device consistent with certain embodiments has an input for receiving a unencrypted video signal. An encryption arrangement produces a partially multiple encrypted video signal from the unencrypted video signal. An output provides the partially multiple encrypted video signal. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: There is provided a method of protecting a virtual community visitor from unauthorized social interaction comprising receiving a request from the virtual community visitor seeking access to a virtual community content, determining whether the virtual community content includes at least one social interaction opportunity, prompting the virtual community visitor to provide a visitor identity if the virtual community content includes at least one social interaction opportunity, associating the visitor identity with a socialization level, and utilizing the socialization level in one or more permission database to regulate social interaction.

Abstract: A system, device and method for allowing protected content to be transferred to end user communication devices that support different digital rights management (DRM) formats or schemes than the DRM format of the content provider. The method includes providing a Limited Rights Issuer (LRI) that issues content and associated digital rights to one or more of the end user devices within a domain defined by a Domain Authority with which the LRI has registered. The Limited Rights Issuer also translates content and associated digital rights information from the DRM format of an upstream DRM system to the DRM format of a downstream DRM system, which includes the end user devices within the defined domain. The system allows select end user devices to enjoy interoperability of content protected under different DRM schemes, while allowing content providers to still maintain a suitable level of DRM protection for their content.

Abstract: An endoscope apparatus includes an endoscope apparatus body portion which includes a first connector, and which is connectable to an insertion portion having an image pickup device disposed at a distal end portion. The endoscope apparatus further includes a connection unit which includes a second connector which is removably connectable to the endoscope apparatus body portion by communicating the second connector with the first connector, a non-volatile memory which stores a program for processing image data inputted from the image pickup device via the second connector, a CPU which controls the processing of the image data in accordance with the stored program to produce processed data, and a display data output section configured to output the processed data.

Abstract: A content recording apparatus includes a key selecting unit that selects an encryption key for performing an encrypting process to adjunct data from pieces of information recorded on a recording medium, when a user generates the adjunct data which is data derived from a title content, wherein the recording medium records thereon a title key for encrypting the title content as program content and content data including the title content encrypted by the title key. The content recording apparatus also includes an encryption processing unit that performs an encrypting process to the adjunct data by the selected encryption key; and a recording unit that records the adjunct data to which the encryption process is performed and the selected encryption key in the recording medium.

Abstract: A source device determines content rights for encrypted content in the first encoding standard using a first rights data file. The source device creates a second rights data file for transcoded content in the second encoding standard. The source device performs a key management operation including communicating a decryption key for the encrypted content in the first encoding standard to a transcoder. The source device transfers the encrypted content in the first encoding standard to the transcoder. The transcoder decrypts the encrypted content, transcodes the content from the first encoding standard to the content in the second encoding standard, and re-encrypts the content in the second encoding standard using a second encryption key. The transcoder then transfers the encrypted content in the second encoding standard to an indicated device.

Abstract: Some embodiments of the application provides methods and systems for providing camera fingerprinting by receiving a video frame from a camera, generating a confidence map based on an image characteristic associated with the video frame, generating a signature based on a sensor imperfection in the camera, weighting the signature based on the confidence map for each frame and generating a key based on the weighted signature over the plurality of video frames received. Other methods and systems are disclosed.

Abstract: In a system, a server provides a digital signal processing function ƒ to an executing device in an obfuscated form. The function ƒ includes a function cascade of signal processing functions ƒi, 1?i?N (e.g., FC1(x)?ƒN? . . . ?ƒ1(x)). The server includes a processor for selecting a set of 2N invertible permutations pi, 1?i?2N; calculating a set of N functions gi, where gi is functionally equivalent to p2i?1?ƒi?p2i?1, for 1?i?N; and calculating a set of N?1 functions hi, where hi is functionally equivalent to p2i?1?1?p2i?2, for 2?i?N. The server equips the executing device with an execution device function cascade that includes yN?hN?yN?1?hN?1? . . . ?y1, where y1, . . . , yN are function parameters (e.g., ED1(y1, . . . , yN)?yN?hN?yN?1?hN?1? . . . ?y1), and provides the functions g1, . . . gN to the executing device. The executing device obtains the functions g1, . . .

Abstract: Electronic document classification is disclosed. A toolbar adds the ability to classify documents based on specific properties such as security classification, information type, document type, document retention, document caveats, and the like associated. The toolbar through dropdown selections allows users to select the appropriate classification and properties based upon the content of the document and have appropriate classifiers added to the document. Document classification properties are generated that are associated with the document in the document properties and by inserting visual markings that allow users to quickly identify the security, sensitivity, intended distribution or retention. By utilizing the classification toolbar a user can classify an document by one or more classification levels and be ensured that the classification will be visible to any person viewing the document.

Abstract: A traitor tracing system generates a hypothesized model of the circumvention device that models a hypothesized set of device keys compromised by the circumvention device. The system iteratively invokes a subset tracing system to identify a compromised device key until substantially all the compromised device keys in the set of compromised device keys are identified so as to disable the circumvention device. A subset tracing system generates a circumvention device model that models behavior of a circumvention device using prior knowledge and The system iteratively selects and applies to the circumvention device a test based on the hypothesized model and the circumvention device model and receives a response from the circumvention device indicating a success of the test in playing protected content on the circumvention device.

Abstract: An apparatus (14-1, 50) for encrypting image data is disclosed, which includes: a processor (42) configured to divide encoded still image data or video data into a first element (a) and a second element (b); generate a first key (k1); generate a second key (k2) for at least every one image of the still image data or video data; encrypt a first portion (b1) of the second element (b) of the image using the first key (k1) and the second key (k2) corresponding to the at least one image; replace a second portion (b2) of the second element (b) of the at least one image other than the first portion (b1) with the second key (k2) corresponding to the image; and compose the first element (a) of the image, the encrypted first portion (b1?) of the second element (b), and the second key (k2), for at least every one image to generate encrypted data. An apparatus (16-2, 17-2, 70) for decrypting which decrypts the encrypted data generated by the encryption apparatus is also disclosed.

Abstract: Disclosed is a A system and method for joint source-channel encoding, symbol decoding and error correction, preferably utilizing an arithmetic encoder with operational error detection space; and a combination sequential, and arithmetic, encoded symbol decoder structure.