Abstract: A method authenticates at least one of a media and data stored on said media in order to prevent at least one of piracy, unauthorized access and unauthorized copying of the data stored on said media. At least one predetermined error is introduced with the data resulting in mixed data. The mixed data is optionally stored on the media. The at least one predetermined error includes at least one authentication key or component thereof, for authenticating whether the media and/or data is authorized. The method includes the following sequential, non-sequential and/or sequence independent steps: reading the mixed data from the media, detecting the at least one predetermined error from the mixed data, and comparing the at least one predetermined error to the at least one authentication key or component thereof.

Abstract: One embodiment of the present invention provides a system that facilitates marking content during distribution of the content to a client. The system starts by receiving a request for the content from the client at the server and then obtaining a content identifier for the content. Next, the server generates a version identifier that uniquely identifies the version of the content that is sent to the client. Once the version identifier has been generated, the server stores the version identifier in a database along with information to facilitate identification of the requesting client. Finally, the server creates the version of the content by marking the content with the version identifier and delivers the version to the client. Note that the markings on the content facilitate subsequent identification of the client by examining the version of the content.

Abstract: Software lineages arise through purchase and reproduction. Lineages are tracked by storing lineage-relevant information in variable regions of software instances and/or in a central database according to methods disclosed.

Abstract: A method of encrypting data, a telecommunications terminal and an access authorization card are described, which permit utilization of services of one or more service providers independently of a network operator or manufacturer of the telecommunications terminal. Encrypted data is transmitted between a service provider and the telecommunications terminal over a telecommunications network. Data to be transmitted over the telecommunications network is encrypted as a function of the service provider selected.

Abstract: Enhancements to a video anticopying process that causes an abnormally low amplitude video signal to be recorded on a illegal copy. The enhancement in one version include a negative going waveform that appears to the television receiver or videotape recorder to be a sync signal, thereby causing an early horizontal or vertical retrace. In another version, selected horizontal sync pulses are narrowed, causing irregular vertical retraces. In another version, post-pseudo sync pulses that have a minimum level above the minimum level of sync pulses are added to enhance anti-copy effectiveness. The post pseudo-sync pulses may be amplitude modulated.

Abstract: Software lineages arise through purchase and reproduction. Lineages are tracked by storing lineage-relevant information in variable regions of software instances and/or in a central database according to methods disclosed.

Abstract: A communication installation for communal reception of digital television and/or of multimedia data, which receives a plurality of signals emanating from separate sources. The installation of the invention comprises a network linking a multiplicity of descrambler/decoder devices, available to the users of the community, to a local server capable of demodulating the signals received so as to despatch them over the network in the form of a stream of packets of common modulation, with software applications allowing the descrambling/decoding of the signals. Thus, off-the-shelf descrambler/decoder devices of similar designs can process the various signals received.

Abstract: Integrated computer services and software licensing processing methods and systems are provided. A license processing service (LPS) receives a services or software license request from a user via a client computer. The LPS communicates the request to a billing system for the services or software provider to obtain an expiration date for use of a desired service or software product. The LPS receives and forwards the expiration date from the billing system to a licensing clearinghouse operated by the provider of the desired service or software product. The clearinghouse, in turn, provides a use license for the desired service or software application to the client computer via the LPS.

Abstract: The invention relates to a method of copy-protection of information stored on an information carrying medium. The method allows a reading device (e.g. a DVD drive) and an application device (e.g. an MPEG decoder) to exchange copy-protection information regarding the information carrying medium (e.g. an optical record carrier like a CD or DVD) and the content on that medium. The method is cryptographically secure, taking into account the situation where reading device and application device are connected to an open bus in a personal computer. In view of the high-volume nature of the drive, the method can be implemented cheaply. The inventive method is robust against a so-called man-in-the-middle attack. The invention relates also to a method of exchanging copy-protection information, to a copy-protection system and to devices for carrying out these methods, in particular a reading device, an application device and a device for playback and/or recording of information.

Abstract: Information or contents cannot be reproduced even from a regular storage medium which is encrypted in accordance with a predetermined encryption system, due to erroneous detection of watermarks. Detection of the watermarks and restriction over reproduction depending thereon is conducted only in a case where the medium is not encrypted. In case of detecting that the data is not encrypted in accordance with a predetermined encryption system by an encryption detection circuit and when the watermarks are detected by a watermark detection circuit, reproduction of the data is stopped by a reproduction restricting circuit. In a case that it is detected to be encrypted in the predetermined encryption system by the encryption detection circuit, the reproduction restricting circuit will not stop the reproduction thereof.

Abstract: The invention, an electronic book selection and delivery system, is a new way to distribute books and other textual information to bookstores, libraries and consumers. The primary components of the system are a subsystem for placing text in a video signal format and a subsystem for receiving and selecting text that is placed in the video signal format. The system configuration for consumer use contains additional components and optional features that enhance the system, namely: (1) an operation center, (2) a video distribution system, (3) a home subsystem, including reception, selection, viewing, transacting and transmission capabilities, and (4) a billing and collection system. The operation center and/or video distribution points perform the functions of manipulation of text data, security and coding of text, cataloging of books, messaging center, and uplink functions.

Abstract: An effective electronic settlement system in which the number of checks is small. The electronic settlement system includes a data storage device such as an IC card in which value information is stored, a client device provided with an information input/output function to the data storage device, a store device for providing commodities or services, a settlement management device for managing settlement between the data storage device and the store device, and a communication system for connecting the client device, the store device, and the settlement management device so as to enable bidirectional communication.

Abstract: A hard disk A has is constructed to include: a disk 10 in which copy protection information is written in advance in a surface shape such as slits or corrugations in a pre-recording region 13 over a substrate 11 other than a data storage region 12; a pickup unit 20 for reading the copy protection information on the disk 10; and a copy protect unit 42 made operative, when it copies the encrypted data over the data storage region 12 of the disk 10 in response to the demand of the external device B: to perform an authentication with reference to the copy protection information read by the pickup unit 20; and to output the information on the secret key, as contained in the copy protection information, to the external device B which has been recognized to be correct by that authentication.

Abstract: A digital data file encryption apparatus and method, where a digital data server identifies the user and supplies an encrypted digital data file to the user in accordance with the identified result. A personal computer decrypts the encrypted digital data file supplied from the digital data server and reproduces the decrypted digital data file or re-encrypts it using an encryption key. The encryption key is generated on the basis of an identification number of a data storage medium or digital data playing device. A digital data playing device stores the re-encrypted digital data file downloaded from the personal computer in the data storage medium and decrypts the stored digital data file using the encryption key to reproduce it. A first internal key is added to the identification number to convert the identification number into the encryption key, which is then encrypted according to an encryption algorithm based on a second internal key.

Abstract: In an optical disc having an RFID tag, disc control information needed for control of reproduction of the content recorded in the disc body of the optical disc is stored in the RFID tag. Thereby, even if the content recorded in the disc body is illegally copied in some way, common optical disc apparatus incapable of reading RFID tags cannot read and copy the disc control information stored in the RFID tag. Accordingly, unauthorized copying of the content recorded on the optical disc can be reliably prevented without the use of special cryptographic technology.

Abstract: A method enables a recipient of JPEG image data to authenticate the JPEG image data by producing a hashing function from a first section of the JPEG image data. A first integrity checking value is produced from the hashing function produced from the first section of JPEG image data and, from a least significant transmitted bit-plane of a second section of the JPEG image data, an embedded encrypted signature string is extracted and decrypted to generate a second integrity checking value. The first and second integrity checking values are compared and the first section of the JPEG image data is authenticated when the second integrity checking value matches the first integrity checking value.

Abstract: A network device and method are directed towards providing one time content encryption for Video on Demand (VOD) broadcast services and Networked Personal Video Recorders (NPVRs) using unique encryption keys. As content is received by the network device, it is determined whether the content is for broadcast distribution to a consumer and to be ingested into an NPVR/VOD server for possible unicast distribution. If the content is for both distributions, it is encrypted using at least one control word (CW) key. The encrypted content is then copied into at least two streams, with the CW being encrypted with at least two different keys, one for broadcast distribution, and one for NPVR Programs. One stream may then be ingested by the NPVR/VOD server, while the other stream may be broadcast to a consumer. The encryption keys may be provided through EMMs to a consumer based on a purchase.

Abstract: Detection of watermarks in digital content by a system having a recording device and a playback device may be accomplished in such as a way as to improve the interoperability of the recording and playback devices. In one embodiment, a recording device having a first watermark detection component of a first sensitivity for detecting the watermark in digital content, interoperates with a playback device having a second watermark detection component of a second sensitivity for detecting the watermark in a digital content recording made by the recording device; such that the first sensitivity is more sensitive than the second sensitivity.

Abstract: An output system having a data processor and an printer or other output device for outputting data in a specific format, which is sent from the data processor, to which is installed driver software for controlling the output device. Whether the data on output request passes the driver software is determined in sending data to the output device. Data are prohibited from being sent to the output device for output requests on which data bypasses the driver software.

Abstract: According to one embodiment, a method is disclosed. The method includes storing a first list of hardware registers, receiving video data at an application program, receiving a second list of hardware registers from a device driver, determining whether the first list of hardware registers matches the second list of hardware registers, and if so, streaming the video data to a video decoder.

Abstract: Often, during an event, such as a movie, play, concert, opera, etc., viewers of the event attempt to illicitly record the event. Such illicit recording attempts may be interfered with by using emitters that emit radiation that interferes with recording and/or operation of the recording devices. For example, infrared emitters may be used to saturate an event viewing area. The infrared, while non-visible to human viewers, is received and recorded by recorders using charge-coupled devices (CCDs), such as conventional digital cameras, movie cameras, television cameras, telescopes, etc. Other radiation can be emitted based on the type of recorder with which one desires to interfere. Alternatively, or in addition thereto, emitters may also be used to send commands to recorders, such as stop, rewind, eject, etc., to interfere with operation of the recorders.

Abstract: A method, apparatus and system for securely providing material to a licensee of the material are described. In each, at least one license key is provided, preferably along with a license including usage rights for requested content or material to the licensee. The material requested and licensed by the licensee is provided to the licensee encrypted with at least one content key. To achieve a second-level of security, the at least one content key is provided to the licensee encrypted with the at least one license key so that both the at least one content key and the at least one license key are necessary for the licensee to decrypt and use the encrypted material.

Abstract: A method for uniquely identifying a copy of a motion picture disposed on a medium. A first sequence and a second sequence of the motion picture each can be selectively marked with an identifier mark to collectively define a uniquely identifiable marking pattern. A third sequence of the motion picture can be selectively marked with an error correction mark correlating to the uniquely identifiable marking pattern. The uniquely identifiable marking pattern is determinable absent at least one of the identifier marks by processing the error correction mark and remaining ones of the identifier marks. The error correction mark can be determined from values correlating the identifier marks.

Abstract: In the case that a bridge unit is connected to a network such as an IEEE 1394 bus, copyright holders want to limit the number of apparatuses that can receive a signal. The invention provides at least one reception unit, or more, that is utilized for receiving data requiring copyright protection, connected to a network and by providing a transmission unit for transmitting data requiring copyright protection to a reception unit by utilizing a network, wherein the transmission unit has an authentication means on the transmission side for carrying out authentication for a reception unit and an authentication number counting means for counting the authentication number that is the number of the authentications carried out by the authentication means on the transmission side while the reception unit has an authentication means on the reception side for carrying out authentication for the authentication means on the transmission side and wherein the above authentication number is limited.

Abstract: A method and system for protecting digital images copied from a video RAM, including the steps of transmitting stored pixel data from a computer memory to a video RAM, identifying protected pixel data within the stored pixel data, modifying the stored pixel data, thereby generating modified pixel data within which individual pixel datum is recognizable as being protected or unprotected, and, in response to pixel data being copied from the video RAM, replacing individual pixel datum copied from the video RAM, that is protected, with substitute pixel datum.

Abstract: A method of securely receiving data on a user's system from a web broadcast infrastructure with a plurality of channels. The method comprising receiving promotional metadata from a first web broadcast channel, the promotional metadata related to data available for reception; assembling at least part of the promotional metadata into a promotional offering for review by a user; selecting by a user, data to be received related to the promotional metadata; receiving data from a second web broadcast channel, the data selected from the promotional metadata, and wherein the data has been previously encrypted using a first encrypting key; and receiving the first decrypting key via a computer readable medium, the first decrypting key for decrypting at least some of the data received via the second web broadcast channel. In another embodiment, a method and system to transmit data securely from a web broadcast center is disclosed.

Abstract: A device that secures a token from unauthorized use is disclosed. The device comprises a user interface for accepting a personal identifier, a processor, communicatively coupled to the user interface device, and a token interface. The token interface includes a token interface IR emitter that produces an IR signal having information included in the PIN. The token IR emitter is coupled to the processor and is further communicatively coupled to a token IR sensor when the token is physically coupled with the token interface. The token interface also includes a shield, substantially opaque to the IR signal, for substantially confining the reception of the IR signal to the token IR sensor. In one embodiment, the shield substantially circumscribes the IR emitter. In another embodiment, the interface also comprises a token interface IR sensor, which allows communications from the token to the device as well.

Abstract: A method and apparatus for dynamically applying digital watermarks. Requested content is sent to a security module of a user device. A digital watermark is dynamically determined based at least on instance information about a rendering engine of the user device. The digital watermark is then rendered with the content using the rendering engine of the user device.

Abstract: The present invention enhances user friendliness of a system which is controlled by use of on-screen display by disabling the operation of these devices if it not permitted. According to the invention, when a recording of a received program is attempted, the program is checked for copy protection. If the program is found copy protected, a warning thereof is displayed and control of a recording/reproducing device concerned is disabled. This warning display allows the user to determine whether or not a program being received is copy protected beforehand, thereby preventing the video signal containing a copy protection control signal from being recorded on the recording/reproducing device. In addition, according to the invention, when a record button is pressed, it becomes a record stop button, being put in the selected state. This further enhances the user friendliness.

Abstract: Example embodiments relate to exchanging data between several computers or multimedia units through a public network while guaranteeing at the same time the confidentiality of these data. Specifically, the creation and use of a virtual private network (VPN) is disclosed. The virtual private network (VPN) may have a plurality of units connected to a public network, each unit having a security device which may have a unique number UA1. The method may include generating a right Dn associated to the unique number UAn, by the security device of a unit Un, transferring the right Dn to the security device of at least one second unit Um, encrypting the data sent by unit Un and the description of the Dn right by a encryption data key KS, and receiving the encrypted data by the second unit Um, wherein the encrypted data is presented to the security device of the second unit Um to verify if the right Dn is present, and if the right Dn is present, then decrypting the data by the encryption data key KS.

Abstract: A semiconductor device capable of deleting data already recorded on a recording medium when information indicative of prohibition of copying is detected from picture signal. Input portion receives an input picture signal, and copy protection information detecting portion detects copy protection information included in the picture signal input from the input portion. Compressing portion compresses the picture signal, and compressed data output portion outputs compressed data obtained by the compressing portion. Specification information output portion generates and outputs specification information specifying a position of the compressed data where the information indicative of prohibition of copying was detected first by the copy protection information detecting portion. A device for recording the compressed data can specify the head of unnecessary compressed information by looking up the specification information, whereby the unnecessary information can be deleted from the recording medium.

Abstract: A contents database 114 memorizes the discriminating information for discriminating contents and the temporal information as to the time of content duplication associated with the discriminating information. A recording program 113 acquires the discriminating information of contents to be duplicated and duplicates the contents in association with the acquired discriminating information and with the temporal information memorized in the contents database 114. This substantially prohibits duplication in large quantities without significantly impairing the interests of a user.

Abstract: A method for key verification through time varying item presentation based on a key hash result comprises generating a key hash result partially based on both a global identifier provided from a source and an estimated current time at that source. After generating the key hash result, a first time-varying item is produced using the key hash result as an index for a table lookup or generated based on Certain bit patterns forming the key hash result. Thereafter, the first time-varying item is presented for comparison with a second time-varying item being contemporaneously presented at the source. These computations are repeated, giving the impression of two views or instances of the same time-varying item. An attacker might be able to match one small portion of such a time sequence of presentations, by luck, but not any large portion of the sequence.

Abstract: The invention provides a recording media player and a recording media recorder provided with a high-security copy protection system of less complexity. A recording media player and/or recorder provided with a copy protection system stubborn to attacks and highly flexible in dealing with recording media of various copy conditions. For this purpose, various distributed copyright protection information (DCPI) values are used. The DCPI values include water marks in case of an MPEG stream, Copy Generation Management System (CGMS) codes, EMI (encryption mode indicator) in case of an IEEE1394-1995 interface, and user defined DCPI values. The recording is achieved such that DCPI values are recorded in user-unrewritable (or user-inaccessible) areas of the recording medium as long as possible.

Abstract: Contents data that have been enciphered and transmitted are recorded as they are on a recording medium, and the contents key used to encipher these data is enciphered in a way used in this recording system and is recorded on the medium. Moreover, a step is taken to ensure that fine trick plays can be performed. In recording contents data that have been enciphered and transmitted, the contents data themselves are recorded in the enciphered state on the recording medium. However, the contents data are decoded by a contents data decoding circuit 46, and a map file containing necessary management information for reproduction is created by a map file creating circuit 47 and this file is recorded together with the contents data.

Abstract: A unidirectional function circuit generates a first encryption key according to the device identification information stored in a device identification information holding unit. Another unidirectional function circuit generates a second encryption key that depends on a write block address. A contents key generator generates a contents key using the first encryption key, second encryption key, and relation information. An encryptor records contents, which are encrypted using the contents key, onto a HDD.

Abstract: Copyright of contents to be transmitted may be protected for an analog signal produced by converting a digital signal representative of the contents. A signal transmission apparatus determines whether the contents are protected by copyright by detecting copyright protection information of a digital image signal of the contents at a protection information detecting unit, and scrambles an analog image signal converted from the digital image signal to output when the copyright is protected, or prohibits outputting of the analog image signal. When a receiving apparatus receives a transmitted signal, the apparatus generates a digital image signal and the analog image signal based on the transmitted signal.

Abstract: This invention relates to a reproducing apparatus compatible with a storage medium storing copyright-protected and copyright-unprotected files, the reproducing apparatus being capable of reproducing any one of the files stored on the medium, the reproducing apparatus comprising: demodulating means for demodulating any one of the copyright-protected files in one way and any one of the copyright-unprotected files in a different way; selective operation executing means operated to select either any one of the copyright-protected files or any one of the copyright-unprotected files as a file to be reproduced; and controlling means for causing the demodulating means to select one of the two different ways of demodulation depending on whether a copyright-protected file or a copyright-unprotected file has been selected by operation of the selective operation executing means.

Abstract: An added information encoding part repeatedly arranges two kinds of copy inhibition code arrays of the unit two-dimensional arrays to which copy inhibition codes are assigned, and condition code arrays of the unit two-dimensional arrays to which codes for removing the copy inhibition are assigned, into a two-dimensional array according to given rules. A background image formation part generates a background image in which copy inhibition pattern image areas and condition pattern image areas are repeatedly and two-dimensionally arranged according to given rules, while referring to this array, and the pattern images corresponding to respective codes stored in the background image formation part, and stores the generated background image into a background image buffer. An image composing part reads out document images from a document image buffer, and the background image from the background image buffer, and superimposes them into a composite image.

Abstract: According to a copy protection method of the present invention, as for a component video signal which is composed of a luminance signal and two color-difference signals, copy inhibition information is superimposed upon a first color-difference signal and information indicating that the copy inhibition information is included in the first color-difference signal is superimposed upon a second color-difference signal. Or copy inhibition information is superimposed upon the luminance signal, a vertical blanking interval, or a horizontal blanking interval. Accordingly, it can be judged whether or not the video is capable of copying, without making the viewers conscious, whereby component video signals can be easily copy protected.

Abstract: A copy-protected-state indicating MPEG-TS data output unit (3) holds a bit stream obtained by previously compressing and encoding image and/or audio data representing that recording desired by the user has ended in failure because the contents is copy-protected. When copy control information (V2) outputted from an IEEE 1394 interface (1) indicates a copy-protected state, a selecting unit (20) selects copy-protected-state indicating MPEG-TS data (V3) outputted from the copy-protected-state indicating MPEG-TS data output unit (3) and outputs it as to-be-recorded MPEG-TS data (V4). Thereby, the data (V3) is recorded.

Abstract: Techniques are disclosed for writing data directly onto a product to record each ownership transfer. As a result, the product itself now carries a traceable, auditable, non-forgeable, non-repudiable proof of ownership (and, optionally, ownership history) that can be used in a variety of ways. This recorded ownership transfer information provides an electronic receipt, which may be used by the present owner to prove his or her ownership. (Optionally, other types of transfers may be recorded in addition to, or instead of, ownership transfers.) A transfer agent or registrar creates a unique transaction identifier to represent the transfer, and preferably creates a cryptographic signature over fields representing the transfer. This information is then recorded in a repository that is external from the product.

Abstract: Consumers may utilize computing devices to assist in the purchase and/or loyalty process, and in particular, the consumer may utilize a PDA to facilitate the purchase and/or loyalty process. During the purchase and/or loyalty process, the consumer may need to insure that any content downloaded or used in association with the PDA is secure in how it is collected, assembled, and delivered to the PDA device. This system and method secures the data from its source to when it is actually viewed or used by the authorized user. The PDA may have direct access to an Internet web site portal that offers secure personal content from a content provider, such as, for example, an on-line banking or financial institution. Using the web site portal, the content provider may offer personal or confidential data, such as financial information, to PDA users in a secure (e.g., encrypted) environment.

Abstract: In a data distribution system, data is divided into a number of application data units. A sequence of keys is generated systematically, and a different key is used to encrypt each data unit at the source. At the receivers, corresponding keys are generated and used to decrypt the data units to gain access to the data. The constructions used to generate the keys are such that an intrinsically limited subset of the entire sequence of keys is made available to the user by communicating a selected combination of one or more seed values.

Abstract: A system for providing rights controlled access to digital media comprises a server data processor and a client data processor connected by a communications network. The user data processor provides access to a data object in accordance with rules associated with the data object by the server data processor. The client data processor comprises a machine key device and a user key device. The machine key device is preferably an installed component of the client data processor that provides encryption, decryption, and authentication functionality for the client data processor. The user key device is preferably a removable, portable device that connects to the client data processor and provides encryption, decryption, and authentication functionality for the user. A method restricts the use of a data object to a particular user and a particular data processor through the use of additional layers of encryption.

Abstract: A method for examining an electronic representation of an item for a watermark, the method including examining at least a first electronic representation of an item for a watermark in accordance with a first watermark definition, receiving a signal indicating that a second watermark definition is to be used for examining electronic representations, and examining at least a second electronic representation of an item for a watermark in accordance with the second watermark definition. Related apparatus and methods are also provided.

Abstract: A storage medium carrying data content has an electronically readable modification-resistant identifier for distinguishing that medium from other storage media. The medium stores a digital signature associated with a data content portion carried by the storage medium. The identifier read from the storage medium generates the digital signature. The identifier and digital signature enable verification of storage of the data content on an authorised storage medium in an authorised manner.

Abstract: In one embodiment of the present invention, there is disclosed a reversible method of processing data comprising the data being encrypted before being written to a non-volatile memory wherein the data cannot be accessed without decryption in the case of a direct physical access to the non-volatile memory.

Abstract: An apparatus generates first shared information that is shared by the apparatus and a recording medium by performing a first bilateral authentication. The apparatus encrypts overwrite data that is used to erase key information item recorded in the recording medium using the first shared information. Encrypted overwrite data is transferred to the recording medium. Second shared information is generated and shared by the apparatus and the recording medium by performing a second bilateral authentication between them. The apparatus receives data that is encrypted using the second shared information and that has been used by the recording medium for erasing key information. Encrypted data is decrypted using second shared information item and key information recorded in the recording medium is erased when the decrypted data is identical to overwrite data.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.