Abstract: When captured content is detected, the captured content is analyzed to determine whether any portion of the content is subject to digital rights management protection specified for content captured. Responsive to determining that the captured content is subject to a first digital rights management protection, a database is queried to select at least one digital rights management rule associated with a first restricted element specifying at least one first criteria for combining the first restricted element with at least one other element. A determination is made whether the first restricted element is combined with the at least one other element in the captured content. Responsive to detecting the first restricted element is combined with the at least one other element, the captured content rights controller determines a combined digital rights management protection rule reconciling the at least one first criteria for combining the first restricted element with the presence of the at least one other element.

Abstract: Techniques for distributing digital content include receiving provider content over a network connection at a customer premises node located on premises of a first customer. The provider content is offered by a network service provider different from the first customer. Provider data based on the provider content is stored in non-volatile storage on the customer premises node of the first customer. It is determined whether conditions are satisfied for sending the provider content to a second customer different from the first customer. If it is determined that such conditions are satisfied, then the provider data is retrieved from the non-volatile storage, and data based on the provider data is sent over the network connection for receipt by the second customer. Thereby a customer premises node serves as a cache of provider content for other customer premises nodes on the same last mile segment or access network.

Abstract: An information processing device that executes processing for outputting recording data to an information recording medium includes a storing unit that stores common data that includes encrypted content, key information applied to decoding of the encrypted content, and content management information and, data content of which is unchanged even if a medium as a data recording destination is changed, a media-specific-data generating unit that generates media specific data, data content of which is changed according to the medium as the data recording destination, an output-data generating unit that generates output data based on the common data and the media specific data, and a data outputting unit that outputs the data generated by the output-data generating unit.

Abstract: A system and method are provided for imaging job authorization. The method comprises: an authorization server receiving a request from a first node print subsystem to communicate an imaging job; in response to analyzing imaging job information, sending an access inquiry to a second node; the authorization server receiving an authorization, including a one-time use public encryption key, from the second node; sending a confirmation, including the public key, to the first node print subsystem; the first node encrypting the imaging job using the public key; sending the encrypted imaging job to the second node from the first node; and, the second node decrypting the imaging job using a private key corresponding to the public key. The analyzed imaging job information used for access control may include user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, or imaging job options.

Abstract: An information processing apparatus is provided. The information processing apparatus includes content verification means for executing a verification processing of a recording content recorded on an information recording medium, and content play means for executing a content play processing on a condition that validity of the recording content is checked on the basis of the verification processing. The content verification means acquires from the information recording medium a content hash table having registered therein hash values generated on the basis of legal recording content data and executes a processing for verifying a presence or absence of an illegal recording content whose hash value is not registered in the content hash table.

Abstract: The present invention encrypts authentication information into an image, document or recording. Briefly described, in architecture, one embodiment is a method comprising generating the original work; generating authentication data when the original work is generated, the authentication data comprising at least location information identifying the location where the original work is generated, the location information provided by a received signal from a remote device, date and time information identifying when the original work is generated, the date and time information provided by a received signal from a remote device, and biometric information identifying an originator of the original work; and encrypting the original work with the authentication data using a secret private key when original work is generated.

Abstract: A process for secure distribution of digital audiovisual streams according to a standard, normalized or proprietary format, on which streams a separation of the stream into two parts is made prior to transmission to equipment of an addressee to generate a modified main stream having a format of the original stream and complementary information of any format including digital information suitable to permit reconstruction of the original stream, wherein a transmission is made, by separate paths during distribution of the modified main stream from a distribution server and of the complementary information to the equipment of the addressee from a secure central server passing via at least one local server connecting the equipment of the addressee to the local server via at least one access point.

Abstract: A system and method is provided for identifying the source of an unauthorized copy of content. The method includes embedding a unique user fingerprint code to into each of a plurality of authorized copies of content and identifying an unknown fingerprint code in an unauthorized copy of the content. Each member of the unknown fingerprint code is compared to each corresponding member in each of the user fingerprint codes. A score is assigned to each of the user fingerprint codes based on the comparison and users associated with scores exceeding a threshold are identified as a source of the unauthorized copy.

Abstract: A conditional access control apparatus for inserting descrambling messages and impulse authorizations to enable requesting subscribers to utilize requested scrambled content. The apparatus includes a content and asset storage module for storing content and assets, and a pre-encryption module for encrypting content to be stored in said content device. A transport processor inserts stored content into a forward application transport channel (FATC), and a controller interacts with a requesting subscriber and inserts into the FATC descrambling messages and impulse authorizations enabling the requesting subscriber to utilize requested scrambled content.

Abstract: A method and apparatus for providing conditional access to media programs is described. An exemplary method comprising the steps of transmitting media information encrypted according to a control word (CW) to a receiver station, transmitting entitlement management information (EMI) to the receiver station, the EMI comprising a service bitmap, and transmitting entitlement control information (ECI) to the receiver station, the entitlement control information including the control word (CW) encrypted according to a key (K) and an index to an element of the service bitmap, wherein the control word (CW) is decrypted by the receiver stations according to a value of the indexed element of the service bitmap.

Abstract: A method of controlling copying of an information signal, comprises the steps of: prior to recordal and/or transmission, applying to the information signal a substantially imperceptible modification representing copy control data including a password securely encoded according to a predetermined algorithm; upon reproduction for copying by a user, deriving (S1, S3) the copy control data from the modified information signal; comparing (S8, S9, S11, S13, S15) the derived securely encoded password with a reference password securely encoded according to a predetermined algorithm; and enabling (S5) copying of the information signal if the securely encoded password derived from the information signal and the securely encoded reference password have a predetermined relationship, otherwise disabling copying (S7). The reference password is sent to the user via a channel which is separate from a channel used to send the information signal to the user.

Abstract: A controller receives an encrypted media stream (“EMS”) and an identifier indicative of a selected content key from a headend. The EMS is encrypted with an encryption key and can be decrypted with a corresponding decryption key which is determinable from the selected content key. The controller receives indexes and content keys from the headend prior to receiving the EMS. Each index respectively corresponds to an identifier with one index corresponding to the identifier indicative of the selected content key. The content keys correspond to the indexes with one content key corresponding to the index corresponding to the identifier indicative of the selected content key. The controller selects the index corresponding to the identifier indicative of the selected content key upon receiving the EMS, determines the selected content key from the selected index, determines the decryption key from the selected content key, and decrypts the EMS with the decryption key.

Abstract: A recorder system contains a media key block (MKB) and selectively writes protected content into a recording medium according to the following content protection logic, to combat theft of the protected content: If the medium does not have a MKB, then the recorder writes its stored MKB into the medium and writes protected content into the medium. If the medium has a MKB that is older than the stored MKB in the recorder, then the recorder writes its stored MKB into the medium before re-encrypting and writing protected content into the medium. If the medium has a MKB that is newer than the stored MKB, then the MKB in the medium is used for content protection. The recorder may store the newer MKB in non-volatile memory, effectively updating its previous stored MKB, so the recorder will have the most recently observed MKB for content protection use.

Abstract: A client computer requests plural program parts from various servers. The plural parts are authorized in accordance with usage rights and combined to create a new computer program. The parts can be executed as the new computer program on the servers, on the client, or on both the servers and the client.

Abstract: A sink may be to used to process multimedia digital data. The sink may include a plurality of input ports, an output port, a switchably-enabled selector to select an input port from a plurality of HDMI input ports to couple to an output port, a control circuit to detect encrypted data in a channel of the input ports; and a plurality of decryption engines. Each of the decryption engines may be coupled to respective input ports to synchronize with a corresponding encryption engine of a data source after the control circuit detects encrypted data in the channel of the respective input port. Additional circuitry may be included to operate the sink in a power saving mode. Also, methods for processing the data in both power saving and non-power saving modes.

Abstract: A television content delivery system consistent with certain embodiments has a receiver system that receives television content from a plurality of content suppliers. A selective multiple encrypter selectively multiple encrypts the television content, wherein the resultant selectively multiple encrypted content stream is encrypted under at least one conditional access system (CAS) and at least one digital rights management system (DRMS). A transmitter transmits the selectively multiple encrypted television content stream to multiple receivers, so that the selectively multiple encrypted television content stream can be decrypted under either a system using at least one CAS or at least one DRMS. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: The present embodiments provide methods, apparatuses, and systems to distribute content over a network. Some embodiments provide methods to distribute content within a local media network. These methods receive a request for a first content to be transferred to a sink device, request from the source an access criteria for a first content that is protected according to a first digital rights management (DRM), forward the access criteria to the sink device, receive an evaluation of the access criteria from the sink device regarding at least whether the sink device can interpret the first DRM, determine according to the evaluation received from the sink device whether the sink device can utilize the first content that is protected according to the first DRM, and initiate a transfer of the first content from the source device to the sink device when the sink device can utilize the first content.

Abstract: A method of transmitting and receiving data in which cipher-transmission of digital information data for which forbidden codes including timing identification codes are predetermined can be carried out with enciphered digital information data without containing undesirable forbidden code. Digital information data contained in word sequence data which also contain time reference code data composed of the timing identification codes are subjected to enciphering process without producing the forbidden code to produce the enciphered digital information data which do not contain any forbidden code. Enciphered word sequence data are constituted with the enciphered digital information data and the time reference code data to be transmitted.

Abstract: A client device for use in a system having a server, the client device including: a receiving device configured to receive information material from the server, the information material containing a reversible modification providing a visually perceptible disturbing effect having been applied to the information material by using an invertible algorithm which uses values generated from one or more keys, and to receive identifying information that distinguishes the information material from other information material available from the server and condition information which defines a predetermined condition that should be met in order for the reversible modification to be reversed.

Abstract: An information processing apparatus allowing proper communication with a communication partner in accordance with a communication time of the communication partner. A reception control unit receives a random challenge (RC) from a transmission terminal and supplies it to a generation unit. The reception control unit transmits an RC reception message indicating an RC reception to a transmission side. The generation unit executes a Hash process relative to RC and supplies resultant authentication data to a generation unit. A transmission control unit controls the generation unit at a timing before a response request command from the transmission side is received, to make the generation unit generate a response message containing authentication data corresponding to the response request command, and when the response request command is received, transmits the response message to a transmission destination terminal. The apparatus is applicable to a content providing system.

Abstract: In response to receiving an order (e.g., including payment for one or more software licenses), a license distribution manager allocates a specified number of software licenses for distribution to a corresponding customer's clients that utilize the licenses to operate software associated with a corresponding vendor software application. The license distribution manager can allocate one or more overdraft licenses for distribution to the customer in addition to the specified number of software licenses associated with the order. Accordingly, the license distribution manager can allocate extra software licenses (e.g., the overdraft licenses) and distribute more software licenses than are actually purchased by a respective customer. This enables the customer to use one or more provisional licenses (e.g., overdraft licenses) that support restricted use of the vendor's software application such as until the customer can replace the provisional licenses with corresponding purchased licenses.

Abstract: A recording medium, apparatus for decrypting data and method thereof are disclosed. The present invention includes downloading encrypted data associated with a recording medium to a local storage, decrypting data recorded in the recording medium using a first type key within a key file stored in the recording medium and decrypting the downloaded data using a second type key within one of the key file stored in the recording medium or a key file stored in the local storage. And, the present invention includes downloading the data encrypted with a key associated with a recording medium to a local storage, reading out a decryption key using link information between the data and the key, and decrypting the data using the decryption key. Accordingly, by the present invention, unauthorized copy, redistribution and the like of contents can be prevented. Hence contents can be safely provided and data can be efficiently reproduced, whereby more convenient functions can be provided to a user.

Abstract: A method to procure and audit digital rights management (DRM) event data by collecting a first set of event data in a first event data format, converting the first set of event data to one or more standardized event data formats, and communicating the first set of event data to an event data collection server for storage. The method may also include collecting a second set of event data in a second event data format, converting the second set of event data to one or more standardized event data formats, and communicating the second set of event data to the event data collection server for storage. The method may also include storing the first and second sets of event data in a centralized repository, authorizing access to the event data, and performing an event data audit corresponding to the event data.

Abstract: Methods and apparatus provide for: decrypting a first of a plurality of operating systems (OSs) within a first processor of a multiprocessing system using a private key thereof, the plurality of OSs having been encrypted by a trusted third party, other than a manufacturer of the multiprocessing system, using respective public keys, each paired with the private key; executing an authentication program using the first processor to verify that the first OS is valid; and executing the first OS on the first processor.

Abstract: The present invention provides an apparatus for securely acquire a circuit configuration information set corresponding to a new cryptosystem without increasing the number of reconfigurable circuits. A content playback apparatus 100 includes an FPGA 122 that is reconfigurable. The content playback apparatus 100 stores a decryption circuit program that shows the structure of a decryption circuit that executes decryption in accordance with a prescribed cryptosystem. The FPGA is reconfigured in accordance with the program to configure the decryption circuit. The playback apparatus 100 acquires, from outside, an encrypted file that has been generated by encrypting a file including a decryption circuit program corresponding to the new cryptosystem in accordance with the prescribed cryptosystem, and decrypts the encrypted file by the decryption circuit.

Abstract: The invention relates to a method of copy detection of a record carrier. In one particular embodiment the table of content entries are mastered on the record carrier in a detectable non-standard way, e.g. the sequence of table of content entries is mixed or the number of repetitions is varied. According to another embodiment additional synchronization symbols are used in one or more subcode frames which can be detected by a read-out device in order to distinguish between an original or a copy of a record carrier.

Abstract: A method for delivering content to be locked in a user device is provided. The method includes receiving a content selection. A device identifier that is operable to identify a specified user device is received. A lock message is generated based on the content selection. The lock message is sent to the user device identified by the device identifier.

Abstract: This invention relates to an information providing system which is designed to be able to realize secondary utilization of broadcasting contents, along with copyright of the broadcasting contents being protected. A broadcasting receiving and picture recording device 5-1 records broadcasting contents that a broadcasting device 4 broadcasted, and a terminal 6-1 edits the broadcasting contents which were recorded, and generates corresponding metadata. The metadata is transmitted from the terminal 6-1 to a metadata delivery server 2 through Internet 1, and registered. The metadata delivery server 2, on the basis of utilization availability information of broadcasting contents which is held in advance, in case that the broadcasting content that the metadata targets can be utilized, registers the metadata. The registered metadata is delivered through the Internet 1 on the basis of a request of a terminal 6-2. This invention is applied to an information providing system which delivers the metadata.

Abstract: A system and method for processing a digital audio signal is disclosed. The system includes an input to receive a digital audio signal and a first output to provide a first digital output signal. The digital audio signal has a first fidelity characteristic and the first digital output signal has a second fidelity characteristic. The second fidelity characteristic is determined in response to security information extracted from the digital audio signal. The first digital output signal is provided to a digital to analog converter.

Abstract: A method for securing data transmitted over a network to an image display device. In one embodiment, the method may include identifying at least one image display device on the network, selecting the at least one image display device for transmission of data, activating a data protection process to generate locked data and transmitting the locked data to the image display device. The method may further include receiving a key to unlock the locked data such that the data is available to the image display device.

Abstract: A distribution server distributes meteorological data to a first game apparatus. The first game apparatus obtains, from the distribution server, meteorological data corresponding to region data set by region data setting means and transmits the meteorological data to a second game apparatus. The first game apparatus executes an on-line game with the second game apparatus using the obtained meteorological data. The second game apparatus receives the meteorological data transmitted from the first game apparatus. Using the received meteorological data, the second game apparatus executes the on-line game with the first game apparatus.

Abstract: A system and method is disclosed for detecting distribution of multimedia content. The volume level of data traffic is monitored for a plurality of users to select any users with high-bandwidth usage. The time of day and the day of the week may be considered when determining whether a user is a high-bandwidth user. Upon selecting a user as one with high-bandwidth usage, such user may be subject to packet inspections of data traffic streams. In some embodiments, content identification parameters or watermarks are added to one or more packets in a data traffic stream carrying multimedia content.

Abstract: To provide a content playback device capable of protecting content according to DRM, when decrypting encrypted content recorded on a recording medium and playing the decrypted content. If key generation information is “00”, a key control unit 104 concatenates a decrypted media key and content information in this order, and applies a one-way function to the concatenation result to generate a content key. If the key generation information is “10”, the key control unit 104 sets a rights key as the content key. If the key generation information is “01”, the key control unit 104 concatenates the decrypted media key and the rights key in this order, and applies a one-way function to the concatenation result to generate the content key.

Abstract: In a service enabling viewing of a rental content time-limit-managed by a copyright protection system (DRM) for a certain time period from first-time viewing in a video download service through a network, even possible viewing times for the content under the one and another copyright protection systems when the content is exported to a removable medium in conformity with the other system (CPS) before first-time viewing under DRM management are synchronized. When a content time-limit-managed by a copyright protection system is exported to a removable recording medium in conformity with a different content protection system, a URL for a management server is designated and a request is made of the designated management server to fix a possible viewing time if the URL of the management server is designated when the content is viewed for the first time in a content reproducer in conformity with the content protection system.

Abstract: A content playback apparatus reduces load concentration on a specific server apparatus that manages content keys of encrypted content, while protecting copyrights of the content. The content apparatus makes playback of content recorded in a recording medium sold possible after the specific server breaks down. A key acquisition control unit (204) reads a playback control information table (211) from a recording medium (102) via a reading unit (201). The key acquisition unit (204) acquires a rights key via a key acquisition intermediation unit (223) from an apparatus specified by an acquisition-destination type and a request-destination type that are stored in the playback control information table (211) and that corresponding to the content to be played. The key acquisition unit (204) generates a content key using the acquired rights key and, when required, a medium key recorded in a medium. A decryption unit (203) decrypts encrypted content using the content key.

Abstract: A system for scrambling/descrambling packets of a stream of content, each packet having a must stay clear (MSC) section, the system including an input handler including a receiving module to receive the stream, a characteristic analyzer to analyze the stream in order to determine a data independent characteristic of each packet, and a scrambling /descrambling device operationally associated with the input handler, the scrambling/descrambling device including a receiving module to receive the data independent characteristic for each packet from the input handler, and an Initial Value module to determine an Initial Value for each packet as a function of the data independent characteristic of one of the packets being processed, wherein the scrambling/descrambling device is adapted to scramble and/or descramble the packets based on the Initial Value and a Control Word. Related apparatus and methods are included.

Abstract: A quantum key distribution protocol is provided that reduces the maximum value of the leaked information amount over the same distance when an adversary makes a photon number splitting attack more than the reduction by the BB84 protocol and the SARG protocol, by making use of the advantages of the BB84 protocol and the SARG protocol. By properly proportioning the existing BB84 protocol and the SARG protocol in accordance with the rate determined by the communication distance between the sender and the receiver of the coherent light, a protocol that is more robust against photon number splitting attack than the known existing protocols can be realized, and long distance quantum key distribution, which was not possible until now, becomes possible.

Abstract: To provide a content playback device capable of protecting content according to DRM, when decrypting encrypted content recorded on a recording medium and playing the decrypted content. If key generation information is “00”, a key control unit 104 concatenates a decrypted media key and content information in this order, and applies a one-way function to the concatenation result to generate a content key. If the key generation information is “10”, the key control unit 104 sets a rights key as the content key. If the key generation information is “01”, the key control unit 104 concatenates the decrypted media key and the rights key in this order, and applies a one-way function to the concatenation result to generate the content key.

Abstract: A data transfer device for storing data to a removable data storage item, wherein data are received as records and encrypted by the data transfer device prior to storage. The data transfer device encrypts a first portion of the records using a first encryption key and a second portion of the records using a second encryption key. The encrypted records are then stored to the removable data storage item as a plurality of data blocks, each data block comprising one or more encrypted records, wherein records in a respective data block are encrypted using only a respective one of the encryption keys.

Abstract: A method of generating encryption and decryption keys for a multiple tier, variable key ladder (VKL) hierarchy includes determining a device key based on network connection and configuration data contained in conditional access system firmware, decrypting and extracting a session or category key from an input media stream or an Entitlement Management Message using the device key, and configuring a key ladder in response to at least one Entitlement Control Message (ECM), wherein the key ladder comprises the device key and at least one of (i) a program key, (ii) the session or category key, and (iii) at least one control word.

Abstract: A camera system includes: a digital camera; and a key device configured as a unit separate from the digital camera. The digital camera includes a control device that sets a lock mode for encrypting image data and recording the encrypted image data into a recording medium and clears the lock mode in response to a lock release signal input via the key device.

Abstract: Identification of media content, such as audio, can be performed through use of watermarking or fingerprinting (aka content signature) technologies. Aspects of these technologies may be combined to advantageous effect. For example, in dealing with the problem of fingerprint errors arising from object distortion, operations known from digital watermarking systems can be employed.

Abstract: An apparatus and method for implementing a secure quantum cryptography system using two non-orthogonal states. For each qubit, the to emitter station prepares a quantum system in one of two non-orthogonal quantum states in the time-basis to code bit values. Intra- and inter-qubit interference is then used to reveal eavesdropping attempts. Witness states are used to help reveal attacks performed across the quantum system separation.

Abstract: The present disclosure is directed to a system and method of multimedia access. In an embodiment, an authorization signal can be received from a multimedia distribution system at a multimedia receiver having a peripheral device interface. The authorization signal can authorize data transfer via the peripheral device interface.

Abstract: To provide an image verification system which verifies whether image data has been altered. The image verification system has an image generation apparatus, a first verification apparatus, a second verification apparatus, etc. The image generation apparatus generates image data, a hash value of the image data, and first verification data for the image data. The first verification apparatus verifies whether the image data has been altered, by using the hash value and first verification data. The first verification apparatus generates second verification data (a digital signature) for the image data if the image data has not been altered. The second verification apparatus verifies whether the image data has been altered, by using the image data and second verification data.

Abstract: An information processing apparatus includes an additional information conversion means for converting a text of related information into additional information and outputting this additional information, and for outputting an amount of additional information for each point of interest, an embedding region allocating means for outputting region management information including the amount of additional information, for allocating an embedding region for the additional information in an original digital input image on the basis of image size information and the amount of additional information, and for outputting information on the embedding region as region information, and an information embedding means for embedding the region management information in a predetermined region in the original digital input image, and also embedding the additional information in the original digital input image on the basis of the region information to generate and output a watermarked image.

Abstract: Described herein is a search engine that can include a receiver component that receives a query from a user that pertains to a multimedia item and an output component that outputs multiple choices for receiving an instance of the multimedia item to a user. The multiple choices may include a first choice for receiving a first instance of the multimedia item for no charge, wherein the first instance of the multimedia item includes a digital rights management restriction. The multiple choices may also include a second choice for receiving a second instance of the multimedia item for a fee, wherein the second instance of the multimedia item is free of digital rights management restrictions. The search engine can further include a transmitter component that transmits one of the first multimedia item or the second multimedia item to the user.

Abstract: An information recording device uses a data storage device such as media having a built-in flash memory. When data is stored in the data storage device, different encryption keys are used for different sectors. Each encryption key is stored in the header of content. By using a single encryption key for a sector consisting of different blocks, the number of stored encryption keys is limited, and the amount of stored key data is reduced. In accordance with the type of encryption processing, for example, the single DES or the triple DES, one or at least two keys are selected for each sector in order to execute encryption or decryption processing on sector data.

Abstract: A key management of cryptographic keys has a data package including one or more cryptographic keys that are transferred to a personal device 100 from a secure processing point 150 of a device assembly line in order to store device specific cryptographic keys in the personal device 100. In response to the transferred data package, a backup data package is received by the secure processing point 150 from the personal device 100, which backup data package is the data package encrypted with a unique secret chip key stored in a tamper-resistant secret storage 125 of a chip 110 included in the personal device 100. The secure processing point 150 is arranged to store the backup data package, together with an associated unique chip identifier read from the personal device 100, in a permanent, public database 170.

Abstract: A digital content system is disclosed. A security engine disposed in a bridge provides cryptographic services. Clear text digital data received from a central processing unit is encrypted and transferred via the bridge over unsecured data paths as cipher text.