Abstract: A sending device exchanges handshake signals with a receiving device prior to the delivery of compressed digital audio data. The sending and receiving devices are remotely connected using a data network. In one embodiment of the present invention, the sending device sends an access code to the receiving device. The access code is an encrypted data of two components: a digital data associated with the sending device and a digital data associated with the receiving device. The receiving device decrypts the access code. The receiving device stores the compressed digital audio data in its memory if the decrypted access code contains the correct components.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A unified system of programming communication. The system encompasses the prior art (television, radio, broadcast hardcopy, computer communications, etc.) and new user specific mass media. Within the unified system, parallel processing computer systems, each having an input (e.g., 77) controlling a plurality of computers (e.g., 205), generate and output user information at receiver stations. Under broadcast control, local computers (73, 205), combine user information selectively into prior art communications to exhibit personalized mass media programming at video monitors (202), speakers (263), printers (221), etc. At intermediate transmission stations (e.g., cable television stations), signals in network broadcasts and from local inputs (74, 77, 97, 98) cause control processors (71) and computers (73) to selectively automate connection and operation of receivers (53), recorder/players (76), computers (73), generators (82), strippers (81), etc.

Abstract: A recording or playback apparatus classifies privacy-related information such as information concerning an operation of an apparatus and information for identifying an operator into, e.g., an individual identification information category, playback contents information category, apparatus maintenance information category, and photographing environment information category, and controls recording, playback, display, transfer, or erase of the privacy-related information by the apparatus in accordance with the classified categories.

Abstract: Example embodiments relate to a method and system for transmitting messages between an emitter and at least one receiver.

Abstract: Methods and apparatuses for acquiring and demodulating a data stream transmitted in a communication system. A method in accordance with the present invention comprises finding a boundary of a physical layer frame (PLFrame) in the data stream, finding a first 26 bits of a Unique Word (UW) associated with the data stream, finding a scrambling code utilizing the UW, and using a decoding procedure to determine a modulation type and code rate used for desired signals within the data stream.

Abstract: A content processing device is provided. Media content is selectively provided to the content processing device. A profile is used to determine the media content. A software application is included on the content processing device and is configured to receive a message from a remote computer, receive user inputs in response to the message, and update the profile based on the user inputs.

Abstract: A facility for performing an access control check is provided. The facility receives a request to perform an access control check to determine whether authorization exists to access a resource. The access control check is performed against the identity of a principal, a policy that applies to the principal, and the identity of the resource the principal wants to access. The principal may either be an application program or a combination of an application program and an identity of a user in whose context the application program is executing.

Abstract: A hierarchical security policy that can be imposed by a policy maker upon a class of entities in an interactive television environment. A general policy is defined for a class of entities. A specific policy may also be defined for any subclass of entities, such as the grouping of advertisements or programs. A specific policy may be defined for any given entity, such as a specific television program as an exception to a class.

Abstract: An apparatus for default encryption of content for distribution, consistent with certain embodiments, has a conditional access system. A conditional access management system communicates with and manages the conditional access system. A memory stores default encryption information for use by transmission equipment containing content encryption capability to encrypt certain content upon a communication failure between the content encryption system and the conditional access management system controlling it. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract without departing from certain embodiments of the invention.

Abstract: A method of processing content in a video on demand (VOD) system consistent with certain embodiments of the invention, wherein the content is identified by a first set of packet identifiers (PIDs), involves receiving content, the content having marked packets designating packets that are to be encrypted by a first encryption system by setting an encryption flag for all packets designated to be encrypted. Packets are selected in the content according to a selective encryption selection criterion to produce selected packets. The selected packets are duplicated to produce duplicate copies of the selected packets and these duplicate copies are identified using a second set of PIDs. The duplicate copies identified by the second set of PIDs are inserted into the content. All encryption flags in the content are cleared except for the selected packets having the first set of PIDs, so the encryption to follow is selective.

Abstract: An integrated plug-in card is configured to process subscription video programming. The card consists of multiple integrated technologies. A micro analog tuner/demodulator receives the subscription video programming and provides output to a vertical blanking interval (VBI) device. The vertical blanking interface device separates an unused portion of the subscription video programming to extract an encoded proprietary programming. Conditional access/decryption technology controls user access to the encoded proprietary programming. Video and audio decompression technology decompresses video and audio data from the encoded proprietary programming. An encoder provides the video and audio data in a desired protocol. A control interface controls video programming properties and a memory is utilized for storing video programming information.

Abstract: A conditional access device is provided. The conditional access device typically includes conditional access decryption, interface, timing and control logic. The conditional access decryption logic decrypts an incoming signal for use in a consumer electronics device in accordance with previously received entitlement management messages. The interface logic receives a control signal including an entitlement management message window from a headend control system through a receiver in the consumer electronics device. The timing logic asserts an awake signal responsive to the entitlement management message window becoming active. The control logic sends a request to the consumer electronic device to activate a receiver coupled to the headend control system in expectation of receiving an entitlement management message via the control signal in response to assertion of the awake signal. The control logic also communicates the entitlement management message to the conditional access decryption logic.

Abstract: A method and apparatus for remote control and/or monitoring of a multimedia system includes processing that begins when a hand held device transmits a remote control/monitoring request to a server. The processing continues once a communication path is established between the hand held device and the server by having the server determine remote control and monitoring privileges of the hand held device. If the hand held device has at least a minimum level of remote control and monitoring privileges, the processing continues as the server processes the remote control/monitoring request with respect to at least one client to produce operational monitoring data. The processing continues as the server provides the operational monitoring data to the hand held device via the communication path.

Abstract: Disclosed herein is a data transmission system permitting secure and more reliable transmission of data from a data transmitter to a data receiver or receivers. The system comprises: a data transmitter for encrypting data and transmitting the encrypted data; data receivers for receiving the encrypted data from the data transmitter; satellite links used for data transmission from the data transmitter to the data receivers; and bidirectional communication channels which are also used for transmitting data from the data receivers to the data transmitter and which have a smaller capacity of data transmission than the satellite links. The satellite links are used to transmit encrypted data from the data transmitter to the data receivers. At least the bidirectional communication channels are used to communicate restrictive data transmission control information between the data transmitter and the data receivers.

Abstract: A communication system 10 includes a head end 12. The head end communicates with a system gateway 26. A plurality of user devices 28 is coupled to the gateway 26 that includes a memory device 94 for storing content therein. The gateway 26 receives the plurality of first encrypted signals and stores the signals in the memory device 94. The storing in the memory device 94 may be performed after further encryption. One of the user devices 28 generates a request for content and communicates the request to the gateway 26. The gateway 26 communicates content corresponding to the request to the user device 28.

Abstract: A communication system 10 includes a head end 12. The head end communicates with a system gateway 26. A plurality of user devices 28 is coupled to the gateway 26. The gateway receives the plurality of first encrypted signals, decrypts the plurality of first encrypted signals to form unencrypted signals and encrypts the unencrypted signals with a second encryption to form a plurality of second encrypted signals and communicates the second encrypted signals to the plurality of user devices. The signals may also be super-encrypted signals. That is, rather than un-encrypting at the gateway, the first encrypted signals may be again encrypted.

Abstract: A server in a subscriber television network receives service instances from a headend of the subscriber television network. The server is adapted to encrypt according to an encryption scheme and re-transmit service instances to a client-receiver. The server reformats the service instance from a first format into a second format the client-receiver can access the service instance.

Abstract: Systems, apparatus, and methods to track end-user content viewing and navigation in a distributed computing environment are described. In one aspect, a document for communication to a data warehouse is generated during transcoding of Web content. The document includes characteristics of Web content interface pages and links. The characteristics identify the links within scope of respective ones of the interface pages. Identifiers (IDs) in the document map the characteristics to specific ones of the interface pages and links. Transcoded source content representing the Web content is communicated to a client. Responsive to end-user presentation and navigation of the transcoded source content, the client records corresponding ones of the IDs to a log for subsequent uploading to the data warehouse. The data warehouse maps particular ones of the characteristics to corresponding log recorded ID(s) to identify specific ones of the interface pages and the links of interest to the end-user.

Abstract: An IC card (processing terminal) divides a process into process blocks, and holds a time period required for processing each process block. A receiver (receiving terminal) notifies the IC card of a time period which can be spent for processing non-real-time process data when causing the IC card to perform the processing. The IC card processes the process blocks which can be processed within the notified time period. After the processing, the IC card once sends a response back to the receiver, and then transitions into a state in which it can receive a new request. Accordingly, it becomes possible for the IC card to process real-time process data such as an ECM. In the case where the receiver continues the suspended processing, it notifies the IC card of the continuation of the processing so that it causes the IC card to continue the processing of non-real-time process data.

Abstract: Systems and methods that prevent unauthorized access in a communications network are provided. In one embodiment, a system that prevents unauthorized access to a network device may include, for example, a network device and a headend. The headend may be coupled to a communications network. The network device may be deployed in a home environment and may be communicatively coupled to the communications network via the headend. The headend may be adapted, for example, to determine whether a request to access the network device is authorized.

Abstract: A method for allowing a consumer to access an advertiser's location over a global communication network. A normal broadcast program is broadcast to a class of consumers having a unique signal embedded therein, which unique signal embedded therein is associated with a particular advertiser and a predetermined location on the network. Additionally, the unique signal has encoded therein a unique code that correlates with the location of this predetermined location on the network. When the unique signal is received at a consumer's location, the unique signal is decoded to extract therefrom the unique code. In response to this decoding, routing information to the predetermined location on the network from a consumer's computer on the network at the consumer's location is determined. This determined routing information is then archived in the consumer's computer.

Abstract: An Internet Box Office (IBO) system and technique vends digital content via a computer network, such as the Internet. The IBO system comprises a viewing system that cooperates with a Digital Rights Management system and various deployment enhancements within the Internet to provide an infrastructure that facilitates access to digital content in a manner that comports with copyright law and the control of intellectual property by the copyright owner. The IBO system enables a content copyright owner to retain control of its intellectual property while allowing a consumer to have transparent access to the copyright-protected content via the network. To that end, the IBO system operates to download and stage the copyrighted digital content on the viewing system of a consumer.

Abstract: According to certain embodiments consistent with the present invention, a method of processing digital video content, wherein the digital video content comprises intra-coded frames and inter-coded frames, involves selecting a plurality of the intra-coded frames for encryption to produce selected frames; encrypting the selected frames under a first encryption algorithm to produce first encrypted frames; storing the inter-coded frames in a first file; and storing the intra-coded frames, whether encrypted under the first encryption algorithm or unencrypted, in a second file. For a multiple encryption embodiment consistent with the present invention, the method further involves duplicating the intra-coded frames; encrypting duplicates of the selected frames under a second encryption algorithm to produce second encrypted frames; storing the intra-coded frames, whether encrypted under the second encryption algorithm or unencrypted, in a third file.

Abstract: A communication installation for communal reception of digital television and/or of multimedia data, which receives a plurality of signals emanating from separate sources. The installation of the invention comprises a network linking a multiplicity of descrambler/decoder devices, available to the users of the community, to a local server capable of demodulating the signals received so as to despatch them over the network in the form of a stream of packets of common modulation, with software applications allowing the descrambling/decoding of the signals. Thus, off-the-shelf descrambler/decoder devices of similar designs can process the various signals received.

Abstract: A method and apparatus is disclosed for introducing alterations or distortions in projected images. The distortions on the projected image are imperceptible to a human viewer. The distortions are recorded on recording devices and observable upon viewing the recorded images.

Abstract: In a video on demand (VOD) system, methods and apparatus are provided for seamlessly switching back and forth between two pre-encrypted files having changing encryption keys. Such switching back and forth may be required when a VOD server stores both a “normal” copy of a movie and a “special” copy such as a “trick-play” version for, e.g., fast forward and rewind effects. Instead of using keys with changing parities in both streams, the special stream is encrypted with keys using the same parity (even or odd), while the normal stream is encrypted with one dynamic key (odd or even) and one fixed key (even or odd). Other special streams, such as scene branch streams and alternate angle streams can also be accommodated.

Abstract: A selective encryption encoder and method of dual selective encryption and detection of intra-coded slices in video content. The selective encryption encoder has a packet identifier that identifies packets of at least one specified packet type, the at least one specified packet type being packets in a set of N consecutive slices in a frame wherein the a second byte after a slice start code is identical in all N consecutive slices. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. The packets are sent to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method.

Abstract: A Video On Demand (VOD) method consistent with certain embodiments involves processing content to be delivered in a VOD method by selecting first portions of the content for encryption under a selective encryption system and selecting second portions of the content to remain unencrypted. The first and second portions are stored until receiving a request for delivery of the content, the request being from a terminal having decryption capabilities associated with a first decryption method. The first portions are then bulk encrypted to produce encrypted first portions. The encrypted first portions are stored in a buffer. The second portions are queued for delivery to the terminal. A stream of selectively encrypted content is assembled from the encrypted first portions and the second portions. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: A method for forwarding messages containing cryptographic keys from a conditional access system that controls a population of set-top boxes to an encryption renewal system. The method includes storing a fictitious address of a virtual set-top box; generating a message based on the fictitious address, the message containing a cryptographic key; and forwarding the message to the fictitious address of the virtual set-top box. The encryption renewal system has information regarding the virtual set-top box, and is the recipient of the message. In addition, the encryption renewal system is for controlling access to pre-encrypted content generated by an encryption device.

Abstract: A circuit generally comprising a plurality of master modules and a supervisor module is disclosed. The supervisor module may be configured to (i) detect a target address and a particular master module of the master modules initiating a transaction on a bus, (ii) identify a predetermined authorization in response to the particular master module, the target address and a current security mode of at least three security modes and (iii) subvert the transaction in response to the predetermined authorization restricting the transaction.

Abstract: A circuit generally comprising a first memory, a processor and a logic block is disclosed. The first memory may store (i) a write instruction to store a non-highest security value of at least three security values in a register and (ii) a jump instruction to a second memory. The processor may have a pipeline and may be configured to (i) bootstrap to the first memory while the register stores a highest security value of the security values and (ii) execute the jump instruction following the write instruction. The logic block may be configured to (i) detect the write instruction in an execution stage of the pipeline and (ii) store the non-highest security value in the register in response to detecting the write instruction in a write back stage of the pipeline.

Abstract: A reprogrammable subscriber terminal of a subscription television service which can have the control program code of its control processor modified by downloading new program code from the headend. The control processor stores a boot program in an internal read only memory. Upon start up and resets, the boot program determines whether the control program should be changed from a command sent from the headend. The command, termed a parameters transactions, includes the number of expected download program code transactions required to complete the control code modification, the memory space areas where the code is to be loaded, and the channel over which the download program code transactions are to be transmitted. The channel is tuned and when the boot program receives all the download program code transactions accurately and stores them, the boot program will cause the control program to be restarted at a selected address of the new or modified control program code which has been downloaded.

Abstract: The present invention is directed towards providing a partial dual-encrypted stream in a conditional access overlay system. The headend equipment includes an aligner, identifier, and remapper (AIR) device (615) that receives a clear stream and one or two encrypted streams, where the two encrypted streams have been encrypted by two different encryption schemes. The AIR device (615) identifies critical packets associated with the clear stream and subsequently allows two encrypted streams to pass and drops the critical packets of the clear stream. A multiplexer (640) then combines a percentage of the non-critical packets of the clear stream and the critical packets of the two encrypted streams to provide the partial dual-encrypted stream.

Abstract: A system for providing rights controlled access to digital media comprises a server data processor and a client data processor connected by a communications network. The user data processor provides access to a data object in accordance with rules associated with the data object by the server data processor. The client data processor comprises a machine key device and a user key device. The machine key device is preferably an installed component of the client data processor that provides encryption, decryption, and authentication functionality for the client data processor. The user key device is preferably a removable, portable device that connects to the client data processor and provides encryption, decryption, and authentication functionality for the user. A method restricts the use of a data object to a particular user and a particular data processor through the use of additional layers of encryption.

Abstract: An electronic program guide (EPG) hardware card is disclosed. The card is insertable into a television tuning device having EPG capability. A non-volatile memory, such as flash memory, is situated within a case of the hardware card, and has data stored thereon representing one or more loader programs for the device. Each program corresponds to an EPG provider, and gives the device the capability to receive EPG information from this provider. The case of the hardware card may have a form factor such as a Smart Card, a Compact Flash, a Smart Media, or another form factor. Alternatively, the data stored on the card represents non-executable information corresponding to an EPG provider. A business model and a server-based embodiment are also disclosed.

Abstract: A key protected data stream and an encryption key are received at a gateway device. The gateway devices unprotects the data stream based upon the encryption key. The unprotected received data is modified by the gateway to generate a modified data. The modified data is protected based upon the encryption key to generate a key protected modified data. The gateway then transmits the key protected modified data to one or more clients along with the encryption key.

Abstract: The present invention provides a method of broadcasting a message having a text portion to be communicated to a user, the method including broadcasting the message in the form of an entitlement management message for reception by the user.

Abstract: A method for allowing a consumer to access an advertiser's location over a global communication network. A normal broadcast program is broadcast to a class of consumers having a unique signal embedded therein, which unique signal embedded therein is associated with a particular advertiser and a predetermined location on the network. Additionally, the unique signal has encoded therein a unique code that correlates with the location of this predetermined location on the network. When the unique signal is received at a consumer's location, the unique signal is decoded to extract therefrom the unique code. In response to this decoding, routing information to the predetermined location on the network from a consumer's computer on the network at the consumer's location is determined. This determined routing information is then archived in the consumer's computer.

Abstract: A telephony-over-LAN (ToL) system having a graphical user interface (GUI) wherein an authorized or guest user may be locked within a ToL window, having full access to the ToL features, but denied access to other parts of the computer system. In such a system, the terminal user or subscriber may click on a “Guest” button on the ToL client GUI screen before leaving the computer. The ToL guest user may then execute the call normally. According to a first embodiment of the invention, the ToL client locks the user into the ToL client screen. Keystrokes and mouse cursor movements which would allow exiting the ToL client are prevented. According to a second embodiment, of the invention, the ToL client screen is “maximized” and the minimize or resize window functions are blocked. When the terminal subscriber returns, a password is entered to regain full access to the computer.

Abstract: A transceiver system for receiving content contained in a secure digital broadcast signal. The transceiver system includes a first component for generating a data stream from a received digital broadcast signal. A first encryption unit is coupled to the first component. The first encryption unit is configured to encrypt the data stream generated from the digital broadcast signal, resulting in encrypted data stream. Transceiver system includes a second component for generating a video signal for a monitor to view that content contained in digital broadcast signal. A second encryption unit is coupled to the second component for decrypting the encrypted data stream received from the first component. A bus is coupled to the first encryption unit and second encryption unit.

Abstract: A video on demand (VOD) method, consistent with the invention involves storing multiple selective encrypted VOD content on a VOD server; receiving an order for the VOD content specifying delivery to a target decoder; determining what CA encryption system is associated with the order; stripping all encrypted segments from the multiple selectively encrypted content that are not associated with the order to produce single selectively encrypted VOD content; and sending the single selectively encrypted VOD content to the target decoder.

Abstract: An Internet Box Office (IBO) system and technique vends digital content via a computer network, such as the Internet. The IBO system comprises a viewing system that cooperates with a Digital Rights Management system and various deployment enhancements within the Internet to provide an infrastructure that facilitates access to digital content in a manner that comports with copyright law and the control of intellectual property by the copyright owner. The IBO system enables a content copyright owner to retain control of its intellectual property while allowing a consumer to have transparent access to the copyright-protected content via the network. To that end, the IBO system operates to download and stage the copyrighted digital content on the viewing system of a consumer.

Abstract: An encryption renewal system for generating entitlement control messages, the system being secured by physical separation of components. The encryption renewal system has a first computing platform for performing non-secure tasks associated with one or more control messages that transmit one or more keys to a subscriber; and a second computing platform physically separate from the first computing platform containing one or more application specific integrated circuit chip for generating the one or more control messages. In addition, a method by the encryption renewal system is used to register an off-line encryption device in order to begin encrypting clear content.

Abstract: The conventional multimedia communication terminals require the implementation of a camera unit for video input and a video encoder for generating encoded video streams. This configuration is expensive and power-consuming, so that the life of battery for driving the transmitter will be short, or otherwise a battery of larger capacity will be required, resulting in a larger size terminal, with less portability. In accordance with the present invention, the video input and encoding process may be implemented in a video information generating apparatus separated apart from the transmitter. The video or audio and video bitstream generated by the video information generating apparatus will be retrieved by the transmitter, or stored once in a server and then forwarded to a receiver.

Abstract: The present invention discloses a method and apparatus for manufacturing trusted devices. A licensing authority provides keying information to a multitude of manufactures that insert the keying information into trusted devices. The trusted devices generate final private and public keys using the keying information. The keys may then be certified by the manufacture and verified by other devices.

Abstract: The security modules used in pay television and in other applications are intended to develop and thus to be replaced. In order to promote the replacement of a previous generation by a new one, the method according to the invention consists in sending by a control center in the data stream a replacement prompt command including the minimal characteristics of the security module of the new generation, establishing the characteristics of the security module being used, and comparing with the minimal characteristics defined by the received command, and according to the results of this comparison, prompting the user to replace the security module.

Abstract: A system for streaming encrypted conditional access (CA) data, such as control words, from a primary or master conditional access provider (CAP) to one or more secondary CAPS. The primary CAP encrypts content (program data) that is to be access-controlled, such as a television program, according to the associated CA data. A first group of user terminals is compatible with the CA data of the primary CAP. The CA data is then provided to the secondary CAPs to provide corresponding CA data for the content in the secondary CAPs' associated formats for compatibility with other groups of terminals. The invention can be used in any packet-based distribution system, including a broadband television network headend, and avoids the need for the secondary CAPs to request the control words on an as-needed basis. Moreover, the CA data for a current crypto-period and a number of future crypto-periods are provided in a “sliding window” to allow the secondary CAP to begin preparing its CA data in advance.

Abstract: A storage area network resistant to spoofing attack has several nodes each having a port, and storage area network interconnect interconnecting the ports. Each port is provided with a hash function generator for providing and verifying an authentication code for frames transmitted over the storage area network, and a key table for providing a key to the hash function generator. The authentication code is generated by applying a hash function to the key and to at least an address portion of each frame. In each node, the key is selected from that node's key table according to address information of the frame.