Abstract: An image control apparatus in an image display system applies scrambling only to image data which requires content protection and notifies to a display apparatus which pixel or pixels are scrambled. Alternatively, when a plurality of windows are displayed at the same time, the image control apparatus scrambles each window individually using a different key, and notifies to the display apparatus which scramble is applied to each pixel.

Abstract: A system and method for secure wireless cryptographic communication among participants in a wireless computing network is presented. This secure communication method is based on a random modulation technique and a domino match. Once the initial modulation scheme is selected, each data transmission includes an indication of what modulation scheme should be used for the next data transmission. If a given number of bits are to be used, the modulation scheme for the final transmission may be limited to complete the bit transfer. The bit value assignments within particular modulation schemes may also be varied for each subsequent transmission.

Abstract: Provided is an apparatus for controlling storage and playback of digital broadcasting contents. The apparatus can control a broadcasting content to be recorded and stored, temporarily stored, and played back while protecting and managing it securely. The apparatus of the present research includes: a control information providing unit for generating control information for recording storage, temporary storage, and playback of a broadcasting content, using the control information as watermarking information, multiplexing and scrambling the broadcasting content including the control information, and outputting a scrambled transport; and a storing and playback unit for storing the broadcasting content by using the control information, comparing the control information stored together with the broadcasting content with control information added as watermarks, and determining whether to play back the broadcasting content.

Abstract: A secure supervisory control and data acquisition (SCADA) system includes a SCADA control host system and any number of remote terminal unit (RTU) systems. Each RTU system includes an RTU transceiver, an RTU and a remote security device (RSD) coupling the RTU to the RTU transceiver. The SCADA control host system includes a SCADA control host configured to exchange SCADA information with each of the RTUs in a SCADA format, and a host security device (HSD) coupling the SCADA control host to a host transceiver. The host transceiver is configured to establish communications with each of the plurality of RTU transceivers. The HSD communicates with the RSDs to transparently encrypt the SCADA information using a cryptographic protocol that is independent of the SCADA protocol to thereby secure the communications between the HSD and each of the RSDs.

Abstract: A method and a carrier medium instructing a processor to execute a method. The method includes accepting a compressed video stream compressed by a compression method that uses macroblocks of possibly different macroblock types for each frame predictive encoding frames. The method further includes identifying a sequence of frames that are substantially visually indistinguishable and that include a predictively encoded frame and the at least one reference frame of the predictively encoded frame. The method further includes creating an ordered set of macroblocks, with the macroblock types of different macroblocks in the ordered set used to encode digital watermark information. The method further includes replacing the predictively encoded frame of the identified sequence with a newly-encoded predictively encoded replacement frame that contains the created ordered set of macroblocks, including the encoded watermarking information.

Abstract: A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Abstract: A process for secured distribution of video sequences according to a digital stream format stemming from an encoding based on a processing by wavelets including frames including blocks containing coefficients of wavelets describing the visual elements, including analyzing the stream prior to transmission to client equipment to generate a modified main stream by deletion and replacement of selected information coding the original stream and having the format of the original stream, and complementary information of any format comprising the digital information coding the original stream and suitable for permitting reconstruction of the modified frames; and transmitting the modified main stream and the complementary information separately from a server to addressed equipment.

Abstract: A method and system for tuning to a scrambled television channel is provided. One implementation involves receiving a channel selection from a user, tuning to the selected scrambled channel, checking a cache for Conditional Access (CA) descrambling information associated with the selected channel, and in case of a cache hit, then retrieving the descrambling information associated with the selected channel from the cache for descrambling the scrambled channel.

Abstract: A method for combining transfer functions with predetermined key creation. In one embodiment, digital information, including a digital sample and format information, is protected by identifying and encoding a portion of the format information. Encoded digital information, including the digital sample and the encoded format information, is generated to protect the original digital information. In another embodiment, a digital signal, including digital samples in a file format having an inherent granularity, is protected by creating a predetermined key. The predetermined key is comprised of a transfer function-based mask set to manipulate data at the inherent granularity of the file format of the underlying digitized samples.

Abstract: A method of digital watermarking which can resist against local geometrical distortions such as random bending attack, global geometrical distortions as well as projective transforms, but does not necessary require the recovering of global affine transform or even the repetition of the same watermark pattern. Further, the watermark can resist common global affine transformations such as rotation, scaling, and changes of aspect ratio, cropping as well as other types of operations such as filtering, lossy compression, printing/scanning or detection of watermark in front of video, web or photo camera or any imaging device.

Abstract: The present invention relates to methods for protecting a data signal using the following techniques: applying a data reduction technique to reduce the data signal into a reduced data signal; subtracting the reduced data signal from the data signal to produce a remainder signal; embedding a first watermark into the reduced data signal to produce a watermarked, reduced data signal; and adding the watermarked, reduced data signal to the remainder signal to produce an output signal. A second watermark may be embedded into the remainder signal before the final addition step. Further, cryptographic techniques may be used to encrypt the reduced data signals and to encrypt the remainder signals before the final addition step.

Abstract: A subscription broadcast security system for preventing theft of an encrypted program datastream utilizes an encryption protocol with steganographic supplementation. A decoder includes a decryption chip containing numerous decryption codes and an ID chip having a continually changing unique identification code for authenticating subscriber access. The ID chip and the decryption chip each receive decoding instructions through a combination of hidden data in the audio signal and from service provider communication directly with the ID chip.

Abstract: A method for delivering audio/video data through a hardware device using a software application comprises, at the hardware end, receiving an encrypted application key, an encrypted random session key, and encrypted audio/video data from the software. The hardware then decrypts the encrypted application key using a secret encryption key, decrypts the encrypted random session key using the application key, and decrypts the encrypted audio/video data using the random session key. The hardware may then deliver the unencrypted audio/video data by way of a display and speakers. The secret encryption key is securely embedded within the hardware device at an earlier point in time.

Abstract: A method and system for encoding visual information are described. An image is divided in to n number of patterns. Each pattern is mapped on a matrix i.e positioned on X and Y-axis. The patterns are then arranged in a different and new shape for e.g. a rectangle, to that of the original shape of the image but having the same number of patterns or same area. The patterns of pixels are then relocated in the new shape and a matrix is again mapped for the new arrangement of patterns. A key is then generated comprising the information of the encrypted and earlier image. In order to decrypt the encrypted visual content or the encrypted image, the player reads the key or encrypted visual content and decrypts the encrypted visual content or image by means of the information provided by the key.

Abstract: A data outputting method, including the steps of converting input data into sector unit data that starts with a start code and a header preceded by the start code, the header being composed of two bits, at least one of which represents an encryption control; when the converted data is to be encrypted, setting at least one of the two bits preceded by the start code to a state that represents that the data has been encrypted; encrypting the converted data; encoding the encrypted data; and outputting the encoded data.

Abstract: Disclosed are a method and apparatus capable of reducing the computational complexity of encryption and decryption by encrypting only data of scalable video coding contents for each coding layer in terms of temporal, spatial, and SNR scalabilities to provide a service for protected scalable video coding contents, and capable of protecting contents by generating and distributing an encryption key for encryption and decryption depending on a class of a contents consumer.

Abstract: A terminal data loading device on a mobile platform includes a media unit for receiving a transportable media element containing media data and outputting a media signal to a control processor unit. The control processor unit outputs an information signal to a wireline communication unit. The wireline communication unit outputs a wireline signal to a network on the mobile platform.

Abstract: There is provided a system including a plurality of content distribution servers for distributing scrambled contents and streaming-distributing an encrypted scramble key used for releasing the scrambling, a license server for providing a work key for decoding the encrypted scramble key distributed from the predetermined content distribution server, a portal server for providing address information of the predetermined content distribution server, and a content reception terminal for obtaining address information of the predetermined content distribution server from the portal server, referring to the address information to obtain the contents and the scramble key from the predetermined distribution server, decoding the scramble key by using the work key obtained from the license server and descrambling the scrambled contents by using the scramble key.

Abstract: The invention relates to an access control method controlling access to a broadcast digital dataflow previously scrambled. The method according to the invention includes the following steps: On transmission: generating an entitlement control message R-ECMc for recording the content of the flow as a function of a key KRc and at least one criterion CRR defining a right to the record, generating an entitlement control message P-ECMc controlling access to play back the content of the recorded flow as a function of a key KPc and at least one criterion CRP defining a right to play back, and on reception: analysing the messages P-ECMc and P-ECMc, authorizing the recording and playback if the criteria CRR and CRP are verified.

Abstract: An apparatus, system, method, and article for shuffling video information are described. The apparatus may include a media processing node to receive video information. The media processing node may include a shuffling module to shuffle the video information according to a shuffle order and a trusted entity programmed based on the shuffle order to provide access to the video information. The video information may be provided in an unshuffled manner when accessed through the trusted entity. Other embodiments are described and claimed.

Abstract: A processing system to serve as a source device for protected digital content comprises a processor and control logic. When used by the processor, the control logic causes the processing system to generate cipher data, based at least in part on (a) a session key and (b) at least one constant value obtained from a certificate authority. The processing system may use the cipher data to encrypt data, and the processing system may transmit the encrypted data to a receiving device via a wireless connection. Other embodiments are described and claimed.

Abstract: Provided is a system far receiving a initialization packet containing an initial vector for initializing stream encryption algorithm and an identifier of a key for decrypting an encrypted stream, initializing a decryption modules and decrypting the encrypted stream, wherein the system stores an identifier of a key which is needed to decrypt a next program in a initialization packet of a current program and informs a user of whether a desired key has been acquired or not at timing close to start time of the next program.

Abstract: The invention relates to a method of transmitting at least one additional piece of data D in a list of access control words CWi to a scrambled content transmitted by a content server of an operator to a user equipment (2) including a reception terminal (4) associated with a security processor (6), each control word CWi of said list being designed to descramble said contents during a determined cryptoperiod, this method includes the following steps: a) prior replacement of at least one of the control words of said list with a magnitude X resulting from the treatment of said additional piece of data D by a function G having a dual function H, and, at the reception of said list by the reception terminal (4), b) retrieve said additional piece of data D by treating said magnitude X with dual function H.

Abstract: A television signal receiver device consistent with certain embodiments has a receiver that receives a digital television signal including a plurality of unencrypted packets, and a plurality of encrypted packets, wherein the encrypted packets are of at least one selected packet type. The at least one selected packet type has packets occurring in a star pattern approximately situated at an upper center of an image. A decrypter decrypts the encrypted packets. A decoder decodes the unencrypted packets and the decrypted packets to produce a signal suitable for play on a television set. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A combined digital versatile disc (DVD)/hard disk drive (HDD) system controls a HDD assembly and a DVD assembly comprises a DVD/HDD control module controls operation of the HDD assembly and the DVD assembly. Volatile memory communicates with the DVD/HDD control module and stores volatile data relating to the operation of the DVD assembly and the HDD assembly. Nonvolatile memory communicates with the DVD/HDD control module and stores nonvolatile data relating to the operation of the DVD assembly and the HDD assembly.

Abstract: A process for distributing a video stream to a multitude of destinations including marking by adding to the video stream at least a visual element such that the marking is applied to an original video stream common to selected recipients, and personalized for a least portion of the recipients by addition of a visual element specific to destination equipment.

Abstract: The use of a variety of devices to render multimedia content is on the increase. It is important ensure that the content owners/providers get their share of return on investment in order to achieve the unlimited global distribution of content. However, illegal use of the delivered content could affect such a return on investment. One of the important requirements is to protect a content and allow for rendering of the protected content in an efficient manner on target devices. A system for protected content rendering involves ensuring that the unprotected content is not available for misuse.

Abstract: The present invention discloses a method and apparatus for checking consistency between digital contents, pertaining to digital rights management technologies. The method includes: extracting feature values from an original digital content; extracting feature values from a digital content under check; comparing the feature values of the original digital content with the feature values of the digital content under check; and determining whether the digital content under check is consistent with the original digital content according to a comparison result. The apparatus includes: a first extracting module, a second extracting module, a comparing module, and a first determining module. With the present invention, it is feasible to determine whether a digital content under check is illegal according to a user policy. The check process does not require any change to the terminal. The user experience is assured and the security is high.

Abstract: A broadcast receiving apparatus comprises a broadcast receiving unit (1, 4˜13) for receiving a digital broadcast; a communication unit (1˜3) for performing two-way communication through a network; an operation unit 15 for performing an acquisition operation of a key for decrypting an encrypted broadcast program received by the broadcast receiving unit; and an address generating unit 16 for generating an address of an acquisition location of the key which is accessible with the communication unit, by using program arrangement information corresponding to the broadcast program based on the acquisition operation of a key by the operation unit.

Abstract: In a conditional access system, a headend transmits content to one or more receivers in encrypted transport streams. The system provides a multi-layer security architecture, rendering the system resistant to key replay attacks; if one layer is circumvented, subsequent layers remain intact. A first layer prevents unencrypted keys from being recorded by shielding the unencrypted keys from users and encrypting the path from the receiver's conditional access module to the transport decryption module; a second layer prevents a key recorded on one receiver from being played back to the transport decryption module on a second receiver; a third layer prevents a user from decrypting transport streams without the encryption module by encrypting the stream a second time prior to being passed through any user-accessible memory or processor. Event tables are transmitted with the transport stream, either unencrypted for immediate use or encrypted, to prevent unauthorized use.

Abstract: In certain embodiments, a television receiver circuit has a tuner circuit and a demodulator circuit that cooperatively produce a digital transport stream for a tuned channel as an output therefrom. A transport processor in an SOC receives the digital transport stream and switches the digital transport stream to an IEEE1394 bus if it is conditional access encrypted, or else if the content is unencrypted, the content is sent to a decoder residing in the SOC. A connector is permanently affixed to the circuit board that is in communication with the IEEE1394 bus. A removable crypto micro-module is installed in the connector, having an IEEE1394 compliant bus providing interconnections to the connector, receiving the digital transport stream for the tuned channel and managing conditional access keys for descrambling the tuned channel and for descrambling the tuned channel, and copy protecting the clear channel for delivery across the IEEE 1394 bus back to the transport processor in the SOC.

Abstract: A time delay that occurs when an application is launched in a mobile handheld display device (MHDD), when the application or content is downloaded, before the MHDD is ready for the user to interact with it, wastes the user's time and, in an embodiment of the invention, this time delay constitutes an interval that is used to display targeted advertisements that are already stored on the MHDD, and that are rendered and displayed to the user on the screen while the user waits for completion of downloading of the application or content to the MHDD. An embodiment of the invention provides a micro-splicer that inserts alternate content for display on an MHDD, and renders and displays pre-stored advertisements during application launch time.

Abstract: Before a device key generation procedure is updated in response to execution of revoke, a recorded transport stream is decrypted using an unupdated device key and is stored in a memory unit after being re-encrypted. In this manner, broadcast programs that are recorded before the revoke can be viewed while maintaining a copyright protection function.

Abstract: A communication system for transmitting and receiving a sequence of bits, and the methodology for transferring that sequence of bits are provided. The communication system includes a transmitting circuit and a receiving circuit. Within the transmitting circuit is a scrambler that comprises a shift register, an enable circuit, and an output circuit. The shift register temporarily stores n bits within the sequence of bits, and the enable circuit enables the shift register to store bits that arise only within the payload section of a frame. The output circuit includes a feedback, and several taps within the n stages to scramble logic values within the sequence of n bits output from the shift registers thus effectively preventing in most instances the sequence of bits from exceeding n number of the same logic value. Within the receiving circuit is a descrambler also having a shift register, an enable circuit, and an output circuit. The descrambler recompiles the scrambled data back to its original form.

Abstract: A method for processing video content is disclosed. The method comprises: receiving, in a hardware device connected in operation to a computer, encrypted, encoded video content; decrypting the encrypted, encoded video content to form decrypted, encoded video content; decoding a first portion of the decrypted, encoded video content to form a decrypted, decoded video content portion; re-encrypting the decrypted, decoded video content portion to form a re-encrypted, decoded video content portion; re-encrypting a second portion of the decrypted, encoded video content to form a re-encrypted, encoded video content portion; and outputting the re-encrypted, decoded video content portion and the re-encrypted, encoded video content portion to the computer.

Abstract: The present invention concerns a device and a process for signing digital streams, each of them comprising contents, related to audiovisual information, and a signaling. The device applies encrypting to selectively determined descriptors of the signaling, called authenticated descriptors, to obtain signature. The invention also concerns corresponding authentication device and process. Application to authentication of DVB/MPEG digital streams, notably for MHP.

Abstract: A method of processing content in a video on demand (VOD) system consistent with certain embodiments of the invention, wherein the content is identified by a first set of packet identifiers (PIDs), involves receiving content, the content having marked packets designating packets that are to be encrypted by a first encryption system by setting an encryption flag for all packets designated to be encrypted. Packets are selected in the content according to a selective encryption selection criterion to produce selected packets. The selected packets are duplicated to produce duplicate copies of the selected packets and these duplicate copies are identified using a second set of PIDs. The duplicate copies identified by the second set of PIDs are inserted into the content. All encryption flags in the content are cleared except for the selected packets having the first set of PIDs, so the encryption to follow is selective.

Abstract: A system for multi-stream security processing and distributing digital media streams includes a headend, a network, and at least one receiver. The headend is generally configured to generate encrypted digital media streams. The network may be coupled to the headend and configured to receive the encrypted digital media streams. The at least one receiver may be coupled to the network and configured to receive the encrypted digital media streams and present a decrypted version of the encrypted digital media streams. At least one of the headend and the at least one receiver include a security processor that may be configured to provide at least one of simultaneous multiple encryption and simultaneous multiple decryption processing of the digital media streams.

Abstract: Subject matter includes methods of using conventional set-top boxes that receive streaming video modulated on coaxial cable rather than over an IP-based LAN as nodes in a media network. In one implementation, an exemplary adapter is used to integrate a conventional set-top box into a media network. In one implementation, an exemplary filter is used to reserve frequencies for communications between a conventional set-top box and a hub and to prevent communications from leaving a media network. In one implementation, an exemplary content protection method provides a way of encrypting program content on the media network in a manner that a conventional set-top box can decode.

Abstract: An AV data transmission apparatus comprising: an encryption unit which encrypts AV data; an AV data transmission unit which transmits the encrypted AV data; a cipher-type-information switching unit which switches cipher type information indicating a cipher scheme used for the AV data, to other cipher type information; and a cipher-type-information transmission unit which transmits cipher type information. When transmitting AV data which is prohibited from being used in a reception apparatus that does not support new usage control information, the AV data transmission apparatus assigns different cipher type information to be notified to the reception apparatus, so that even the reception apparatus which cannot recognize the new usage control information can recognize that being unable to perform decryption is due to new encryption performed by the AV data transmission apparatus.

Abstract: An initialization vector (IV) is employed to decrypt a block of a stream that has been encrypted with Cypher Block Chaining (CBC) encryption, without requiring decryption of previous blocks within the stream. For example, a listener who accesses a distribution point to retrieve encrypted content authenticates himself to an application server that regulates access to encrypted content on the distribution point, and responsively receives a key. The listener then requests access to a reference point within the encrypted content stream somewhere after its beginning (e.g., using preview clips). The distribution point relates the reference point to a corresponding block of the encrypted stream, and identifies an IV previously used for encryption of that block. The distribution point provides the associated encrypted block of content and the IV to the listener to enable mid-stream rendering of the encrypted content, without requiring the listener to decrypt previous blocks within the encrypted stream.

Abstract: An apparatus includes a controller for enabling replicating of media content from encoded content received, and a recorder responsive to the controller for recording content on media readable by a device other than said recorder.

Abstract: The invention provides for a method of encrypting and executing an executable image, comprising; flagging sections of the executable image to be encrypted using commands in source files and compiling said executable images so as to generate object files, linking one or more of said executable images using a linker to produce a final executable image, passing said linked executable images to a post-linker encryption engine to encrypt a relocation fix-up patch table and sections of executable images flagged for encryption, and at load time decrypting relocating and executing the executable images.

Abstract: When a channel which is not scrambled is selected, an error occurs in a digital stream processed in a CA processing module, which causes noises to occur in video and audio signals to be viewed. If a FAT channel to be received is a channel that is not CA-scrambled, a digital stream is directly supplied from a FAT demodulator to a demultiplexer without passing the digital stream through an external processing module. As a result, no noise occurs in video and audio signals to be viewed because the video and audio signals are not influenced by an error of the digital stream that occurs in the processing module.

Abstract: In a conditional access system, a headend transmits content to one or more receivers in encrypted transport streams. The system provides a multi-layer security architecture, rendering the system resistant to key replay attacks; if one layer is circumvented, subsequent layers remain intact. A first layer prevents unencrypted keys from being recorded by shielding the unencrypted keys from users and encrypting the path from the receiver's conditional access module to the transport decryption module; a second layer prevents a key recorded on one receiver from being played back to the transport decryption module on a second receiver; a third layer prevents a user from decrypting transport streams without the encryption module by encrypting the stream a second time prior to being passed through any user-accessible memory or processor. Events tables are transmitted with the transport stream, either unencrypted for immediate use or encrypted, to prevent unauthorized use.

Abstract: An apparatus 10 for generating wartermark signals to be embedded as a digital watermark in real-time contents includes: input means 12 for inputting the real-time contents; an input buffer 14 for storing the real-time contents; generation means for generating wartermark signals corresponding to predicted intensities of the real-time contents from divided real-time contents; and an output buffer 18 for storing the generated wartermark signals to be outputted. The generation means is configured by including prediction means 16 for predicting intensities of the wartermark signals; control means 20 for controlling embedding by use of a message to be embedded as the digital watermark in the divided real-time contents; and means 22 for generating the wartermark signals to be outputted.

Abstract: A system for providing secure services to a user via a communications network comprises an applications device including a data processor operable to provide a user service in accordance with an applications program requiring sensitive data. The system includes a smart card access device for accessing a smart card uniquely associated with the user, the smart card including an encryption key pre-stored in the smart card and a communications interface for communicating data securely via the communications network using the smart card encryption key. A trusted server is operable to communicate sensitive data to the smart card via the communications network by encrypting the sensitive data using the smart card encryption key. The sensitive data is decrypted and stored on the smart card. The applications program is operable to access the sensitive data on the smart card only following a successful mutual authentication between the smart card and the applications program.

Abstract: Detecting loss of stream cipher synchronization between a transmitter and a receiver in a video processing system may be achieved by receiving, by the receiver, an encrypted video frame from the transmitter, obtaining an encrypted value for a selected pixel in the encrypted video frame, decrypting the encrypted pixel value using a first portion of the receiver's current key stream, re-encrypting the pixel value using a second portion of the receiver's current key stream, sending the re-encrypted pixel value from the receiver to the transmitter, obtaining, by the transmitter, a plaintext value for the selected pixel from a corresponding original video frame and encrypting the plaintext pixel value using a second portion of the transmitter's current key stream, and comparing the re-encrypted pixel value received from the receiver with the encrypted pixel value generated by the transmitter and detecting a loss of cipher synchronization when the values do not match.

Abstract: A sub-scrambling/descrambling method and device enhances the degree of scrambling of linear PCM data. Data is delimited at predetermined times, and the minimum value of a run is found and used as annex information. The run part is replaced with an arbitrary irreversible random data string, which is processed by a main scrambling device to generate transmission data. After main descrambling of the transmission data, a descrambling device takes out the annex Information and replaces the random data string with a predetermined “0” or “1” run according to the annex information. Thus, the degree of scrambling of linear PCM data is enhanced as much or more than compressed video data.

Abstract: A digital video broadcasting receiver comprising a first input for receiving a first transport stream of data (TS#1) and a second input for receiving a second transport stream of data (TS#2), each transport stream comprising a plurality of packets and each packets having a header including a packet identifier PID. A de-scrambling device (12) receives packets of a transport stream for de-scrambling. A router (20) is arranged to pass packets alternately from the first TS#1 and the second TS#2 transport streams to the de-scrambling device 12 and to pass packets alternately to a first a second output, so restoring the first and second transport streams of data in a descrambled form.