Abstract: A system and method is provided for identifying the source of an unauthorized copy of content. The method includes embedding a unique user fingerprint code to into each of a plurality of authorized copies of content and identifying an unknown fingerprint code in an unauthorized copy of the content. Each member of the unknown fingerprint code is compared to each corresponding member in each of the user fingerprint codes. A score is assigned to each of the user fingerprint codes based on the comparison and users associated with scores exceeding a threshold are identified as a source of the unauthorized copy.

Abstract: A conditional access control apparatus for inserting descrambling messages and impulse authorizations to enable requesting subscribers to utilize requested scrambled content. The apparatus includes a content and asset storage module for storing content and assets, and a pre-encryption module for encrypting content to be stored in said content device. A transport processor inserts stored content into a forward application transport channel (FATC), and a controller interacts with a requesting subscriber and inserts into the FATC descrambling messages and impulse authorizations enabling the requesting subscriber to utilize requested scrambled content.

Abstract: A method and apparatus for providing conditional access to media programs is described. An exemplary method comprising the steps of transmitting media information encrypted according to a control word (CW) to a receiver station, transmitting entitlement management information (EMI) to the receiver station, the EMI comprising a service bitmap, and transmitting entitlement control information (ECI) to the receiver station, the entitlement control information including the control word (CW) encrypted according to a key (K) and an index to an element of the service bitmap, wherein the control word (CW) is decrypted by the receiver stations according to a value of the indexed element of the service bitmap.

Abstract: A method and apparatus for restricting access of an application to computer hardware. The apparatus includes both an authentication module and a validation module. The authentication module is within the trusted firmware layer. The purpose of the authentication module is to verify a cryptographic key presented by an application. The validation module is responsive to the authentication module and limits access of the application to the computer hardware. The authentication modules may be implemented in software through a firmware call, or through a hardware register of the computer.

Abstract: The present embodiments provide methods, apparatuses, and systems to distribute content over a network. Some embodiments provide methods to distribute content within a local media network. These methods receive a request for a first content to be transferred to a sink device, request from the source an access criteria for a first content that is protected according to a first digital rights management (DRM), forward the access criteria to the sink device, receive an evaluation of the access criteria from the sink device regarding at least whether the sink device can interpret the first DRM, determine according to the evaluation received from the sink device whether the sink device can utilize the first content that is protected according to the first DRM, and initiate a transfer of the first content from the source device to the sink device when the sink device can utilize the first content.

Abstract: A television content delivery system consistent with certain embodiments has a receiver system that receives television content from a plurality of content suppliers. A selective multiple encrypter selectively multiple encrypts the television content, wherein the resultant selectively multiple encrypted content stream is encrypted under at least one conditional access system (CAS) and at least one digital rights management system (DRMS). A transmitter transmits the selectively multiple encrypted television content stream to multiple receivers, so that the selectively multiple encrypted television content stream can be decrypted under either a system using at least one CAS or at least one DRMS. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A system and method for logon access management that includes capturing a logon id and associated user data, the logon id allowing access to at least one of an application or data outside of a entity, automatically searching for a match of at least a portion of the user data with id data inside the entity, and transforming the logon id into a network id when a match is found. The entity may be a company, business, organization, system, or network.

Abstract: In response to receiving an order (e.g., including payment for one or more software licenses), a license distribution manager allocates a specified number of software licenses for distribution to a corresponding customer's clients that utilize the licenses to operate software associated with a corresponding vendor software application. The license distribution manager can allocate one or more overdraft licenses for distribution to the customer in addition to the specified number of software licenses associated with the order. Accordingly, the license distribution manager can allocate extra software licenses (e.g., the overdraft licenses) and distribute more software licenses than are actually purchased by a respective customer. This enables the customer to use one or more provisional licenses (e.g., overdraft licenses) that support restricted use of the vendor's software application such as until the customer can replace the provisional licenses with corresponding purchased licenses.

Abstract: A classification scheme assigns samples of the watermarked media to classes based on classification criteria indicating a likely presence of a watermarked signal. Once classified, the scheme determines statistical characteristics of the media signal for the classes, and assigns a figure of merit to the samples in each class. A watermark decoder (e.g., reader and/or detector) use the figure of merit to adapt a watermark decoding function to the statistical features of the classes, such as weighting to samples to improve watermark decoding.

Abstract: A method for delivering content to be locked in a user device is provided. The method includes receiving a content selection. A device identifier that is operable to identify a specified user device is received. A lock message is generated based on the content selection. The lock message is sent to the user device identified by the device identifier.

Abstract: A content playback apparatus reduces load concentration on a specific server apparatus that manages content keys of encrypted content, while protecting copyrights of the content. The content apparatus makes playback of content recorded in a recording medium sold possible after the specific server breaks down. A key acquisition control unit (204) reads a playback control information table (211) from a recording medium (102) via a reading unit (201). The key acquisition unit (204) acquires a rights key via a key acquisition intermediation unit (223) from an apparatus specified by an acquisition-destination type and a request-destination type that are stored in the playback control information table (211) and that corresponding to the content to be played. The key acquisition unit (204) generates a content key using the acquired rights key and, when required, a medium key recorded in a medium. A decryption unit (203) decrypts encrypted content using the content key.

Abstract: A system for scrambling/descrambling packets of a stream of content, each packet having a must stay clear (MSC) section, the system including an input handler including a receiving module to receive the stream, a characteristic analyzer to analyze the stream in order to determine a data independent characteristic of each packet, and a scrambling /descrambling device operationally associated with the input handler, the scrambling/descrambling device including a receiving module to receive the data independent characteristic for each packet from the input handler, and an Initial Value module to determine an Initial Value for each packet as a function of the data independent characteristic of one of the packets being processed, wherein the scrambling/descrambling device is adapted to scramble and/or descramble the packets based on the Initial Value and a Control Word. Related apparatus and methods are included.

Abstract: A computer-based process for product selection optimization by displaying various security features available for a security document, for evaluating the impact that the selection of one security feature has upon the selection of other features, and for optimizing the selection of each security feature or a combination of features in meeting a protection goal for the security document.

Abstract: To provide a content playback device capable of protecting content according to DRM, when decrypting encrypted content recorded on a recording medium and playing the decrypted content. If key generation information is “00”, a key control unit 104 concatenates a decrypted media key and content information in this order, and applies a one-way function to the concatenation result to generate a content key. If the key generation information is “10”, the key control unit 104 sets a rights key as the content key. If the key generation information is “01”, the key control unit 104 concatenates the decrypted media key and the rights key in this order, and applies a one-way function to the concatenation result to generate the content key.

Abstract: A system and a method for providing variable security mechanisms for securing digital content, in which a single security mechanism is not used for all content. Instead, at least one characteristic or feature of the security mechanism is varied between units, instances or categories of content. Therefore, even if unauthorized access is gained to a single unit of content, the overall integrity and security of the system for content distribution is not compromised. Preferably, security is provided though a general mechanism, which is then varied in order to provide variable, dissimilar security schemes for different types of content. By “type of content”, it is meant any of a single unit of content, a single instance of content or a single category of content. For example, for a category of content, the content may be characterized according to the identity of the content itself, such as the title of a movie for example, and/or according to the owner of a particular copy of the content.

Abstract: The invention concerns a method for controlling access to encrypted data by control words (CW), said control words being received by a security module in control messages (ECM) and returned to a unit operating on (STB) the encrypted data.

Abstract: A method of detecting a version of input data content, there being a plurality of different versions of said data content, in which: said data content is arranged as two or more segments according to a segmentation pattern; and said versions of said data content are identifiable by corresponding identification data patterns by which at least some of said segments have respective identification data; said method comprising the steps of: (i) detecting said identification data in respect of said segments of said input data content; (ii) comparing said detected identification data with said identification data patterns corresponding to said different versions of said data content; and (iii) detecting that said input data content comprises at least a contribution from a certain version of said data content if a sum of matches obtained between said detected identification data and said identification data pattern for said certain version exceeds a threshold number.

Abstract: A multimedia client/server system includes a multimedia server module that is coupleable to a plurality of multimedia sources that produce at least one multimedia signal. The multimedia server module includes an encoder module that asserts a protection present signal when the at least one multimedia signal includes a copy protection signal, that generates an output signal with the copy protection signal removed when the protection present signal is asserted, and that encodes the output signal to produce an encoded signal. A server transceiver module produces a radio frequency (RF) signal that includes the encoded signal and the protection present signal, and that wirelessly transmits the RF signal.

Abstract: A content providing server connected to a home network or the like is configured in such a way as to store a content key, which is encrypted by a network key shared by network-connected devices and appropriately updated, in a storage together with encrypted content, and as to hold a network key table in which all network keys including all pre-update network keys, which are being applied to encrypted content keys, are registered and stored. This server performs a key changing operation of changing a content key, which is encrypted by a pre-update network key, to an encrypted key, to which an updated network key is applied, only when needed, for example, at an occurrence of utilization of the content. Consequently, this configuration prevents key changing operations from being wastefully performed. Thus, the processing load on the server is alleviated.

Abstract: A block key to encrypt block data is generated using an ATS (arrival time stamp) appended to each of TS (transport stream) packets included in a transport stream correspondingly to the arrival time of the TS packet. The ATS is a random data depending upon an arrival time, and so a block-unique key can be generated, which enhances the protection against data cryptanalysis. A block key is generated from a combination of an ATS with a key unique to a device, recording medium or the like such as a master key, disc-unique key, title-unique key or the like. Since an ATS is used to generate a block key, any area for storage of an encryption key for each block may not be provided in a recording medium.

Abstract: A unified broadcast encryption system divides a media key tree into S subtrees, divides digital content into segments, and converts some of the segments into variations; the number of segments and variations is q. The system subdivides each of the subtrees into q/|S| subdivided subtrees, assigns a key media variant to each of the subdivided subtrees, and generates a unified media key block (MKBu). The system decrypts digital content by obtaining required key media variants from the MKBu, using the key media variant to find an entry in a variant key table, decrypt a title key, and locate a variant number from the variant key table. The system uses the variant number to identify which of the variations may be decrypted by the title key and uses the title key to decrypt segments and variations.

Abstract: An on-line service manages downloads of purchased digital content. Information regarding the digital content items that are purchased by each user and the terms of use of those purchased items is maintained. Information regarding the formats of digital content items that each device is adapted to receive is maintained. Upon determining that a user wishes to download a digital content item, the requested digital content is downloaded in an appropriate format for a particular digital device provided the recorded information indicates the content item has been purchased by the user and the download is within the quantity of downloads authorized by the terms of the purchase.

Abstract: A system and method of managing external content that is used within a software product or software development process is disclosed. In some approaches, the system and method manages and tracks the use of external content, as well an approval process for determining whether the external content is to be used or incorporated. The system and method manages and tracks compliance with terms and restrictions of the external content.

Abstract: Method and apparatus for controlling subsequent permitted use, such as storage, of video on a digital storage device such as a personal video recorder (PVR). An analog video signal is provided with at least one modification to its video characteristics, for instance in the horizontal blanking interval and vertical blanking intervals, which is of the type having the capacity to inhibit making an acceptable analog video recording of the analog video signal. Examples of these modifications are the well known pseudo-sync (automatic gain control), color stripe (color burst modifications), and added back porch pulses.

Abstract: A brokerage for digital media distribution allows initial recipients of digital media to promote and generate additional distribution of the digital media. The brokerage may involve transferring a copy of the digital media from the device of the initial recipient to a device of an entity interested in obtaining the same digital media, and the device of the entity may then complete the transfer by submitting a record of the transaction that identifies the recipient who has generated the sale such that this initial recipient is compensated by the digital media distributor. The brokerage may alternatively involve directing the device of the receiving entity to a network link that provides access to the digital media and that is associated with the initial recipient. The device of the entity may then complete the transfer that causes the initial recipient to be compensated by the digital media distributor.

Abstract: Methods, systems, and computer program products for providing media content delivery audit and verification services are disclosed. In one example, a monitoring system analyzes messages associated with communications in a wireless communications network. The monitoring system identifies, from the messages, messages that are associated with the request for or delivery of media content to a wireless communications device via the network. Copies of the messages relating to media content delivery are generated, correlated, and analyzed in order to provide a network operator with information that may be used to verify media content delivery transactions and associated revenues.

Abstract: A contents player including: a reading unit which accesses data carrier and reads out contents including multimedia data and a script from the data carrier; a playing unit which plays the multimedia data included in the contents; an interpreting unit which interprets the script included in the contents; an access unit which accesses an internal or external storing device; an acquiring unit which acquires an access ID of the contents from the read contents or the data carrier when the script includes an access instruction description which instructs access to a specific storing region in the storing device: and a determining unit which determines whether the access to the specific storing region is permitted or not, on the basis of the acquired access ID.

Abstract: A method of managing digital rights in a network without a central license server where each instance of the program broadcasts its identification into the network, and any instance of the program detecting its own license code from another node closes down. A closing program may also generate a close down message to the conflicting program.

Abstract: A BD-ROM stores a video stream and a plurality of pieces of copy control information. The plurality of pieces of copy control information include “CCIforHD with CM”, “CCIforSD with CM”, “CCIforHD without CM”, and “CCIforSD without CM”. The video stream constitutes video composed of a plurality of video streams. Among the plurality of pieces of copy control information, “CCIforHD with CM” and “CCIforSD with CM” indicate whether recording is permitted of a video signal converted from the video stream and output with addition of supplemental information. On the other hand, “CCIforHD without CM” and “CCIforSD without CM” indicate whether recording is permitted of the video output without addition of the supplemental information.

Abstract: The number of releasable licenses is registered in a first entity, the resource to be used being attributed and/or having withdrawn from it, by a second entity, a releasable license for use which is registered in the second entity and/or a license. In a synchronization step the difference between the number of licenses allocated for use since a previous synchronization step and the licenses released again in this time is repeatedly reported from the second entities to the first entity respectively, this difference being taken as a basis for reducing or increasing the number of releasable licenses registered in the first entity, and conversely the resultant number of releasable licenses is reported from the first entity to the second entity and is registered there as the number of releasable licenses.

Abstract: Disclosure of information is controlled selectively depending on users such that a plurality of users having different roles bearing no inclusive relation with one another can access the same area. Content is divided into a plurality of areas. For each of the areas obtained by division, secret keys (encryption/decryption keys in symmetric-key cryptography) are generated. The generated keys are encrypted using public keys in public-key cryptography, which are set in advance for the users depending on their respective roles. In the case where the content is to be disclosed to a plurality of users having different roles, the encryption of secret keys is performed separately for each user. These encrypted contents and encrypted secret keys are used to generate encrypted text.

Abstract: The invention provides techniques to implement unique identifier for an integrated chip and how this ID can be employed to enhance the security of content in personal video recorder type systems. The storage device can be a hard disk, a removable storage medium or any other type of storage medium. An integrated circuit (IC) within the personal video recorder stores a unique identifier that is used in for encryption and decryption of data stored on the storage device. Several embodiments are disclosed herein that maintain the secrecy of the unique ID such that it is not easily accessible thereby defeating the security scheme.

Abstract: The operating and other procedures of a disk or recording medium application system of the type for which a network is used are simplified. Disks or recording media have auxiliary data recording areas, where different IDs for individual disk, and/or cipher keys and/or decoding keys for ciphers are recorded in advance in a factory. By using the IDs to release the soft ciphers, and using the cipher keys when sending the ciphers, and using the decoding keys when receiving the ciphers, user authorization procedures are simplified.

Abstract: The present application relates to a data bus line to secure secrecy of digital data without a complicated exchange of hardware and decreasing processing speed.

Abstract: In an electronic musical apparatus, a media ID (MD1, MD2, MD3, MD4, MD5) is associated with each recording media of a memory card 8, hard disk device 10, flash memory ROM 11, CD-ROM 12 and internet 15. Each media ID is encrypted to be recorded on a different position in a ROM 2. Upon reading a music content, the media ID of the corresponding recording media is decoded to decode the music content based upon the media ID and the secret key, and then, the resultant is temporarily stored in a RAM 3. Upon writing a music content, it is encrypted based upon the media ID corresponding to a recording media and the secret key, and the content in the RAM 3 is deleted. This makes cryptanalysis hard to thereby enhance a protection level of a music content in an electronic musical apparatus.

Abstract: An apparatus and a method of generating a video-reproducing clock signal from a 480p signal. The apparatus generates a video-reproducing clock signal from a 480p signal that includes a vertical synchronization signal, horizontal synchronization signals, and copy guard signals. The apparatus includes a coast signal generating unit and a clock signal generating unit. The coast signal generating unit generates a plurality of coast signals with pulse widths, each of which covers the different number of copy guard signals on the basis of the present copy guard signal in one frame signal of the 480p signal. The clock signal generating unit generates horizontal synchronization signals at the same period as that of the horizontal synchronization signals generated in a previous frame, while the corresponding coast signal is being generated.

Abstract: A method of identifying material comprises the step of inserting an identifying code into a signal as a watermark, and deriving a signature from the material. The code and signature are stored in a database. The watermarked signal may be distributed and/or transmitted through a network. The signal may be processed in the network. A monitor derives from the received signal, the signature and the code. They are compared with the stored signature and code to check the provenance of the material.

Abstract: An imaging apparatus includes an image data generating unit, a verification data generating unit, a first slot, a second slot, a first interface and a second interface. The image data generating unit generates image data. The verification data generating unit generates first verification data used to detect whether the image data is changed. A recording medium is inserted to the first slot. An image verification apparatus is inserted to the second slot. The first interface unit stores a first image file in the recording medium, the first image file including the image data and the first verification data. The second interface unit that transfers the first image file to the image verification apparatus. The image verification apparatus is capable of detecting, using the image data and the first verification data, whether the image data is changed.

Abstract: Methods, apparatus, and articles of manufacture for media monitoring are disclosed. In particular, the example methods, apparatus, and articles of manufacture generate digital spectral signatures for use in identifying media information. Initially, a frame of media samples is obtained. A first frequency component having a first spectral power and a second frequency component having a second spectral power are identified by performing a spectral transform operation on the frame of media samples. A descriptor of the first frame of media samples is determined based on a comparison of the first spectral power and the second spectral power. A first signature is then generated based on the descriptor.

Abstract: A robust technique to prevent illicit copying of video information notwithstanding the use of image scaling. A watermark is embedded into the video signal (e.g., DVD's content or other video sources) at different scales (i.e., sizes). The watermark is maintained at each scale for a predetermined time duration that is sufficient to allow the detector circuit in a DVD-recorder, DVHS recorder, DVCR, or any other digital format recorder to detect, extract, and process information contained in the watermark. At the end of the predetermined time duration, the watermark is changed to a different scale preferably on a pseudo-random basis to ensure that each one of all the scales in a predetermined scaling range is achieved a predetermined number of times.

Abstract: In an exemplary embodiment, digital content is mastered as a combination of encrypted data and data processing operations that enable use in approved playback environments. Player devices having a processing environment compatible with the content's data processing operations are able to decrypt and play the content. Players can also provide content with basic functions, such as loading data from media, performing network communications, determining playback environment configuration, controlling decryption/playback, and/or performing cryptographic operations using the player's keys. These functions allow the content to implement and enforce its own security policies. If pirates compromise individual players or content titles, new content can be mastered with new security features that block the old attacks. A selective decryption capability can also be provided, enabling on-the-fly watermark insertion so that attacks can be traced back to a particular player.

Abstract: In an exemplary embodiment, digital content is mastered as a combination of encrypted data and data processing operations that enable use in approved playback environments. Player devices having a processing environment compatible with the content's data processing operations are able to decrypt and play the content. Players can also provide content with basic functions, such as loading data from media, performing network communications, determining playback environment configuration, controlling decryption/playback, and/or performing cryptographic operations using the player's keys. These functions allow the content to implement and enforce its own security policies. If pirates compromise individual players or content titles, new content can be mastered with new security features that block the old attacks. A selective decryption capability can also be provided, enabling on-the-fly watermark insertion so that attacks can be traced back to a particular player.

Abstract: A content output apparatus of the invention comprises an encryption processing unit configured to apply an encryption processing to the content, a recording unit configured to record the content to which the encryption processing has been applied and identification information which identifies the content itself on the network in the storage device on the network so as to be related with each other, and an output unit configured to read a requested content from the storage device on the basis of a content acquisition request supplied via the network, decrypt the encryption, further apply a predetermined processing to the content, and transmit it on the network.

Abstract: A design/evaluation support tool 100 is constructed from a table link use unit 110 identifying linkages between a threat-to-component correspondence table 125, a risk-value table 126, a component contribution rate table 127, and a risk-to-assurance level correspondence table 128, based on their respective duplicate items; and a component assurance level deriving unit 111 deriving an assurance level of each of components that conforms to a risk value of a threat that a security function of each of the components counters by weighting the risk value of the threat by a component rate of contribution based on linkages of the tables.

Abstract: Provided is a method and apparatus for transmitting/receiving broadcasting program ID for identifying a broadcasting program along with a broadcasting program. The method for transmitting a broadcasting program, includes: acquiring audio/video bitstream for at least one broadcasting program; acquiring a broadcasting program identification (ID) corresponding to the broadcasting program; generating a media file including the audio/video bitstream and metadata; and transmitting the media file, wherein the metadata includes the broadcasting program ID and reference information for the audio/video bitstream.

Abstract: Communication information transmitted in the broadband communication system may be in a packet format and secured using encryption techniques, for example encryption software, including a means for providing an initial security key and updated security keys to the various pieces of communication equipment located throughout the broadband communication system. When communication equipment, for example a gateway, is first registered with, for example, an IP central station, the IP central station assigns an initial encryption key to the gateway that is assigned and retained by a server, for example a call manager server, and the gateway (e.g., broadband residential gateway). This initial encryption key may be used to establish a secure two way communication between two pieces of communication equipment as an originating point communication equipment and a terminating point communication equipment.

Abstract: A DVD player 11 reads disc control information recorded on a DVD medium M and causes a display 12 to display a start menu screen, thereby prompting a viewer to perform authentication (1). The viewer uses a remote controller 11a to display a first viewer authentication screen (2). Then, an acquisition code is indicated and an input of a password is requested. Here, the viewer uses a mobile telephone 13 to access the website indicated by an URL shown on the first viewer authentication screen (substantially, a server computer 2) and inputs a user ID and an acquisition code, thereby acquiring a password required for viewing the content of the DVD medium M ((3) and (4)). The viewer inputs the acquired password into the first viewer authentication screen (5). While a program recorded on the DVD medium M is executed, the DVD player 11 authenticates the password which has been input. If the password is judged to be valid, reproduction of the specified content is started.

Abstract: In certain embodiments, a method for generating fees using a receiving device, involves distributing censored video from a distributor video to a receiving device; and uncensoring the censored video using the receiving device upon payment of a fee. The receiving device uses overlay data received from the distributor to uncensor the censored video by overlaying the overlay data over the censored video using a video overlay frame to overlay a video frame containing the censored video data in accordance with boundaries determined by an alpha plane within the receiving device. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: Secure presentation of media streams includes encoding the media streams into digital content, encrypting a portion of that digital content, the portion being required for presentation, in which the encrypted version is substantially unchanged in formatting parameters from the clear version of the digital content. Selecting those portions for encryption so there is no change in distribution of the media stream: packetization of the digital data, or synchronization of audio with video portions of the media stream. When encoding the media stream into MPEG-2, refraining from encrypting information by which the video block data is described, packet formatting information, and encrypting the video block data using a block-substitution cipher. A block-substitution cipher can be used to encrypt each sequence of 16 bytes of video data in each packet, possibly leaving as many as 15 bytes of video data in each packet in the clear.

Abstract: Techniques for reorganizing security levels without implicating accessibility to secured files classified in accordance to one of the security levels are disclosed. In a case of adding a new security level, the controllability or restrictiveness of the new security level is determined with respect to the most restrictive security level or the least security level in a set of existing security levels. A set of proper security parameters are then generated for the new security level and subsequently the existing security levels are reorganized to accommodate the new security level. In a case of removing a security level from the existing security levels, the security parameters for the security level to be deleted are either folded up or down to an immediate next security level, depending on implementation.