Abstract: There is provided a device for protecting a cryptographic program implemented in a cryptographic computing device, the cryptographic computing device includes one or more processors, the cryptographic program comprising instructions and being associated with an initial execution order of the instructions. The device comprises a compiler to compile the cryptographic program, which provides an intermediate representation of the cryptographic program comprising instructions and variables used to execute the instructions.

Abstract: Disclosed is an improved systems, methods, and computer program products that use a cluster-based probability model to perform anomaly detection, where the clusters are based upon entities and interactions that exist in content management platforms.

Abstract: Disclosed is an improved systems, methods, and computer program products that performs user behavior analysis to identify malicious behavior in a computing system. The approach may be implemented by generating feature vectors for two time periods, performing scoring, and then performing anomaly detection.

Abstract: The concepts and technologies disclosed herein are directed to a website verification service. A system can receive, from a web server that hosts a website, a query for a set of authentication credentials (“credentials”) to be used to verify that the website is trustworthy. The system can generate and provide the credentials to the web server. The web server can, in turn, provide the credentials to a web browser device for presentation to a user via a web browser application executing on the web browser device. The system also can provide the credentials to a verifier device. The verifier device can present the credentials to the user via a verifier application executing on the verifier device. The user can compare the credentials presented via the web browser application to the credentials presented via the verifier application executing on the verifier device to determine whether the website can be trusted.

Abstract: Information may be presented on a display device about program content substantially concurrently, substantially contemporaneously, or otherwise in conjunction with the presented program, or with portions of the presented program. This presentation of information about program content may occur dynamically in response to a voice query or other query from a user while the presented program is playing or paused on the same or different presentation device on which the information about the program content is being presented.

Abstract: The present disclosure discloses an image encryption method comprising: acquiring a row encryption sequence and a column encryption sequence, and acquiring, from a pixel array component of a sensor, pixel rows corresponding to the respective elements of the row encryption sequence; encrypting and sorting pixels in each of the pixel rows by using the column encryption sequence to obtain encrypted pixel rows corresponding to the respective pixel rows; and arranging the encrypted pixel rows according to a preset arrangement order to obtain an encrypted image. The method may perform encryption when generating an original image to obtain an encrypted image. In addition, the present disclosure also provides an image encryption apparatus, a sensor, and a computer readable storage medium, which also have the above-mentioned beneficial effects.

Abstract: A method for executing a user application is disclosed. The method is implemented within a communications terminal of the type having a trusted environment. The trusted environment has a secured storage space and a secured applications execution module. The method has: a step of reception, within the trusted environment, of an instruction for launching a user application; a step of transmission, to a server, of a request for executing said user application; a step of reception, from the server, by a video-rendering application that is executed within the trusted environment, of a video stream resulting from the execution, on the server, of said user application; and a step for displaying said video stream on a screen of said communications terminal accessible from said trusted environment.

Abstract: Diversity receiver front end systems with fixed impedance matching circuits to improve signal processing. The fixed impedance matching circuits can be configured to reduce out-of-band metrics such as noise figure and/or gain for a plurality of out-of-band frequency bands while reducing or not increasing above a certain threshold an in-band metric for the associated in-band frequency band. Each of a plurality of paths through the front-end systems can include fixed impedance matching circuits that accomplish this tuning to improve performance for the front-end systems.

Abstract: This invention provides a method for providing trusted display to security sensitive applications on untrusted computing platforms. This invention has a minimal trusted code base and maintains full compatibility with the computing platforms, including their software and hardware. The core of our invention is a GPU separation kernel that (1) defines different types of GPU objects, (2) mediates access to security-sensitive GPU objects, and (3) emulates accesses to security-sensitive GPU objects whenever required by computing platform compatibility.

Abstract: Information may be presented on a display device about program content substantially concurrently, substantially contemporaneously, or otherwise in conjunction with the presented program, or with portions of the presented program. This presentation of information about program content may occur dynamically in response to a voice query or other query from a user while the presented program is playing or paused on the same or different presentation device on which the information about the program content is being presented.

Abstract: Storage end points, whether they are local, remote, network, or cloud, such as DROPBOX and APPLE, present security issues for the general public and corporate consumers. These storage end points are not always encrypted. Even when the end user does perform encryption, the drawback to normal implementations is that the entirety of the file, the file key, and the key store are encrypted and stored in a single location. Computers can be hacked and encryption can be broken when given access and time. Disclosed is a system and method that enhances file level security by shredding the file, file pointers, and key store into parts, allowing the parts to be stored in different storage end points specified by the user.

Abstract: A system and method for tracking data security threats within an organization is proposed. A threat aggregator process executing on an analysis computer system within the organization receives events indicating possible threats observed by and sent from different user devices and aggregates related events into threats. This enables the threats to be analyzed and acted upon at a level of the organization (e.g., across user devices) rather than at the level of the individual user devices. An endpoint telemetry system analyzes threats sent from the aggregator and provides security policies for responding to the threats. In examples, the system can identify attacks of related threats and act upon the related threats of the attack collectively, and can characterize false positive threats sent from multiple user devices as a single extraneous threat. This has advantages over the per-user device focus for responding to threats provided by current systems and methods.

Abstract: A method for generating, from initial content data, output content data for provision to one or more receivers, wherein the initial content data is encoded according to a coding scheme, wherein for a quantity of data encoded according to the coding scheme, the coding scheme provides a mechanism for including in the quantity of encoded data additional data such that a decoder for the coding scheme, upon decoding the quantity of encoded data, does not use the additional data to generate decoded data, the method comprising: selecting one or more portions of the initial content data; for each selected portion, generating a data construct that comprises a plurality of data structures, each data structure comprising data, including a version of the selected portion, that is encrypted using a corresponding encryption process different from each encryption process used to encrypt data in the other data structures, wherein the data construct is arranged such that using a decryption process that corresponds to the encr

Abstract: Diversity receiver front end system with tunable input and output matching circuits. A receiving system can include a controller configured to selectively activate one or more of a plurality of paths between an input of the receiving system and an output of the receiving system. The receiving system can include a plurality of amplifiers. Each one of the plurality of amplifiers can be disposed along a corresponding one of the plurality of paths and can be configured to amplify a signal received at the amplifier. The receiving system can include one or more tunable matching circuits. Each one of the one or more tunable matching circuits can disposed at the input or the output and configured to present an impedance based on a tuning signal received from the controller.

Abstract: Information may be presented on a display device about program content substantially concurrently, substantially contemporaneously, or otherwise in conjunction with the presented program, or with portions of the presented program. This presentation of information about program content may occur dynamically in response to a voice query or other query from a user while the presented program is playing or paused on the same or different presentation device on which the information about the program content is being presented.

Abstract: A method for enhancing resiliency of a service includes: decomposing at least one component associated with the service into a plurality of corresponding smaller elements; encrypting the elements to generate a corresponding plurality of encrypted elements; decomposing each of the encrypted elements into a corresponding plurality of smaller fragments; replicating each of the fragments; encapsulating the fragments into respective intelligent components, each of the intelligent components corresponding to a given one of the encapsulated fragments, each of the intelligent components being configured to independently determine a location of a first storage element in which to store itself; storing each of the intelligent components; and moving the intelligent components from the first storage element location to a second storage element location.

Abstract: Aspects of the subject technology relate to exiting a full screen mode of a web browser. A system is configured to provide for display on a screen a web page in a full screen mode of a web browser. The system is further configured to detect a content-based event in the web browser and, in response to the detection, exit the full screen mode of the web browser.

Abstract: A user terminal is provided, including a communication interface unit which receives an application content at least part of which is encrypted, a storage unit which stores the received application content, a decryption unit which decrypts the application content, a user interface unit which receives a command to execute the application content, and a controlling unit which controls the decryption unit to install an application content stored in the storage unit in an encrypted state and decrypt the installed application content according to the execution command. Accordingly, an application, which is an executable content, may be downloaded and installed in a user terminal, and used and updated safely.

Abstract: Systems and methods for secure delivery of output surface bitmaps to a display engine. An example processing system comprises: an architecturally protected memory; and a processing core communicatively coupled to the architecturally protected memory, the processing core comprising a processing logic configured to implement an architecturally-protected execution environment by performing at least one of: executing instructions residing in the architecturally protected memory and preventing an unauthorized access to the architecturally protected memory; wherein the processing logic is further configured to provide a secure video output path by generating an output surface bitmap encrypted with a first encryption key and storing an encrypted first encryption key in an external memory, wherein the encrypted first encryption key is produced by encrypting the first encryption key with a second encryption key.

Abstract: A system for fast secured searching may include a user interface, a web layer configured for executing application logic and configured for interacting with a user via the user interface and configured to perform user authentication, and a database layer in communication with and accessible by the web layer and comprising a database configured for storing data, and a search engine configured for searching the database, wherein, communication to and from the database layer from and to the web layer is controlled by secure socket layer certificate authorization. The database layer may also include an inverted index in communication with the database and the search engine and configured for maintaining updated snapshots relating to the data in the database and an encryption/decryption layer for selective encryption of the data and configurable for field level, document level, and/or chunk level encryption.

Abstract: A system, method and various user interfaces enable visually browsing multiple groups of video recommendations. A video stream includes a group of videos to be viewed and commented by users who join the stream. Users who join a stream form a stream community. In a stream community, community members can add videos to the stream and interact collaboratively with others community members, such as chatting in real time with each other while viewing a video. With streams, a user can create a virtual room in an online video content distribution environment to watch videos of the streams and interact with others while sharing videos simultaneously. Consequently, users have an enhanced video viewing and sharing experience.

Abstract: A memory controller encrypts contents of a page frame based at least in part on a frame key associated with the page frame. The memory controller generates a first encrypted version of the frame key based at least in part on a first process key associated with a first process, wherein the first encrypted version of the frame key is stored in a first memory table associated with the first process. The memory controller generates a second encrypted version of the frame key based at least in part on a second process key associated with a second process, wherein the second encrypted version of the frame key is stored in a second memory table associated with the second process, the first process and the second process sharing access to the page frame using the first encrypted version of the frame key and the second encrypted version of the frame key, respectively.

Abstract: A system, method and various user interfaces enable visually browsing multiple groups of video recommendations. A video stream includes a group of videos to be viewed and commented by users who join the stream. Users who join a stream form a stream community. In a stream community, community members can add videos to the stream and interact collaboratively with others community members, such as chatting in real time with each other while viewing a video. With streams, a user can create a virtual room in an online video content distribution environment to watch videos of the streams and interact with others while sharing videos simultaneously. Consequently, users have an enhanced video viewing and sharing experience.

Abstract: A method of providing a searchable parts database includes collecting component part data from a plurality of users to form a component part database. An exclusive group is formed including a subset of the users. User members of the exclusive group are provided with access to the component part data contributed to the database by other user members of the exclusive group. Users excluded from the exclusive group are denied access to the component part data contributed to the database by the user members of the exclusive group. The user members in the exclusive group are enabled to provide images of desired component parts and to search the component part database based upon the images of desired component parts.

Abstract: Methods and systems are disclosed for distributing video sequences in a coded stream. The methods and systems include analyzing an original coded stream, generating at least one modified coded sub-frame, generating, based upon the analysis, a modified stream and a second stream by replacing an original coded sub-frame by the modified coded sub-frame, so that the modification from the original coded sub-frame results in a visually altered video sequence, transmitting the first and the second generated streams, and reconstructing the original stream using the modified coded sub-frame contained in the second stream.

Abstract: In accordance with the teachings of the present invention, a system and method for transporting an ancillary data packet in the active area of a video stream are provided. In particular embodiments of the present invention, the method includes coupling a playback server and a digital video projector with a DVI link; placing an ancillary data packet of link encryption metadata in a false line of video in an active area of a frame of video at the playback server, a remainder of the active area comprising true lines of video; transmitting the ancillary data packet from the playback server to a digital video projector through the DVI link; extracting the ancillary data packet from the frame of video at the digital video projector; and displaying the remainder of the active area of the frame of video at the digital video projector.

Abstract: A system for transmitting a transport stream including a robust stream is provided. The transmitting system includes an adaptor for, when receiving a first stream, making a space in the first stream to insert a second stream; a Reed-Solomon (RS) encoder for RS-encoding the input second stream; a Cyclic Redundancy Check (CRC) processor for converting the RS-encoded second stream to a stream comprising an added CRC bit sequence; and a stuffer for inserting the stream to the space in the first stream and outputting a transport stream. Hence, the robust stream can be efficiently transmitted.

Abstract: There is disclosed a method for generating data for a recording medium. The method includes receiving original content data representing a plurality of still images and identifying a first subset of the still images to be recorded with copy-protection and a second subset of the still images to be recorded without copy-protection. The method also includes converting data representing the first subset into moving image data and copy-protecting the moving image data. The method also includes generating new content data, the new content data including the copy-protected moving image data and data representing the second subset.

Abstract: Methods of providing a transport streams are disclosed. In one embodiment, among others, a method comprises receiving an input transport stream having a plurality of packet identifier (PID) streams included therein, the plurality of PID streams comprising first, second, third, and fourth PID streams, decrypting the first PID stream, statistically multiplexing the second PID stream, encrypting the third PID stream, and transmitting the fourth PID stream, wherein the receiving, decrypting, statistically multiplexing, encrypting, and transmitting are implemented at a transport stream apparatus.

Abstract: An input processing circuit decodes a digital video signal selected by an input signal selector. Decryption circuits each decrypt the encryption of a video signal output from the input processing circuit, and generate an authentication key of the encryption. A video signal selector selects and outputs one of the video signals output from the decryption circuits, to a monitor. The decryption circuits each include a pseudo-signal generation circuit which extracts information from the video signal, and based on the extracted information, generates a pseudo-video signal.

Abstract: Systems and method for partial encryption are disclosed. One example method comprises: creating a program association table to include a first program number which identifies a program encrypted in accordance with a first encryption scheme, and a second program number which identifies the same program encrypted in accordance with a second encryption scheme; and creating a program map table for the same program to include first audio and video identifiers associated with the first encryption scheme and second audio and video identifiers associated with the second encryption scheme.

Abstract: A method of distributing video sequences according to a nominal flow format including a succession of frames each including at least one I block corresponding to a complete digital I image and at least one N block corresponding to differences between a digital N image and at least one other image including analyzing the flow of sequences to generate a first modified flow having a format of a nominal flow and having modified N blocks and a second flow of any format including digital information required to reconstruct the modified blocks; and transmitting the first and second flows from a server to destination equipment, and calculating on the destination equipment a synthesis of a flow in a nominal format as a function of the first flow and the second flow.

Abstract: A copy protection apparatus and method enabling storage of copy protection information separately from protected content is disclosed. One embodiment includes a digital data signal receiver to receive a digital data signal, the digital data signal receiver also to receive a copy protection signal produced from a copy protection information file being storable on a copy protection information storage device, a digital to analog converter operatively connected to the digital data signal receiver for converting the digital data signal to an analog signal, and a signal modifier connected to the digital to analog converter and the digital data signal receiver to produce a viewable copy protected analog signal from the analog signal and the copy protection signal, the copy protection signal specifying a modification to the analog signal to change video lines of the analog signal.

Abstract: The present invention is directed to a streaming system for encrypting compression-encoded image data to distribute it via network of a predetermined transport protocol, and a streaming server used in this system transmits, to a client terminal, on the RTP packet basis, stream data encrypted so that encryption is performed every encryption block size from the leading portion of each GOP without encrypting the last data having less than encryption block size. In this instance, portions of prior and/or posterior stream data are stored into an extended area of RTP header so that size of stream data transmitted every RTP packet is integral multiple of encryption block size. Further, size information of added prior additional data and/or posterior additional data are also stored into the extended area. This streaming server suppresses increase in size by encryption to have ability to support both real time production and down-load reproduction without replacement of encryption.

Abstract: The present invention is directed to a streaming system for encrypting compression-encoded image data to distribute it via network of a predetermined transport protocol, and a streaming server used in this system transmits, to a client terminal, on the RTP packet basis, stream data encrypted so that encryption is performed every encryption block size from the leading portion of each GOP without encrypting the last data having less than encryption block size. In this instance, portions of prior and/or posterior stream data are stored into an extended area of RTP header so that size of stream data transmitted every RTP packet is integral multiple of encryption block size. Further, size information of added prior additional data and/or posterior additional data are also stored into the extended area. This streaming server suppresses increase in size by encryption to have ability to support both real time production and down-load reproduction without replacement of encryption.

Abstract: A first information recorder comprises a limited number-of-times of copying information setting unit for setting information on the limited number-of-times of copying electronic data, a first limited number-of-times of copying information updating unit for reading out the electronic data from a first information recording medium containing electronic data set with limited number of times of copying information by the limited number-of-times of copying information setting unit and updating the limited number-of-times of copying information set with respect to the electronic data, and a first transmitter for transmitting electronic data whose limited number-of-times of copying information is updated by the first limited number of times of copying information updating unit.

Abstract: A method for compressing and transmitting a sequence of video frames represented by arrays of digital pixel values includes the following steps: transmitting a representation of a first frame (I1) of the sequence; deriving a sorting permutation P1 of the first frame; using the sorting permutation of the first frame, P1, to approximately sort a second frame (I2) of the sequence, to obtain approximately sorted frame P1(I2); and compressing and transmitting the approximately sorted frame P1(I2).

Abstract: A data file reproduction system has a data file supplying apparatus that extracts video data and audio data from a received data file, compresses the extracted video and audio data and produces a compressed data file containing the compressed audio and video data together with meta data or navigation data determined from the received data file for enabling navigation of the original data file. The compressed data file is then copy-protected. Upon request, the copy-protected compressed data file is communicated to a reproduction apparatus.

Abstract: A method and system for performing document image correction using a document reader is disclosed. The method includes generating a document image representative of a document having a deformation; decoding an optical pattern embedded in the document from the document image to determine an optical signature for the document; receiving document classification data associated with the optical signature; and applying an image correction technique to the document image based on the document classification data to generate a corrected document image. A document capable of being read by a document reader is also disclosed. The document includes a substrate and an optical pattern embedded on the substrate. The optical pattern is part of a background pattern printed on the substrate. The optical pattern defines an optical signature unique to the particular class of document and is associated with document classification data for the document.

Abstract: The present invention is concerned with detection of a “fragile watermark” in a printed image to aid in a determination whether a document under examination is an original or a copy. The watermark may be applied by phase-space encoding data to be included in the watermark. The image may be examined on a block-by-block basis after scanning. Correlation of detected watermark strength with block brightness and/or with wave vectors used for encoding may be used to detect that the image is a copy.

Abstract: Certain embodiments consistent with the present invention involve a method of selectively encrypting digital video content that involves receiving a plurality of packets containing the digital video content; identifying packets containing start of frame (SOF) headers; inserting padding into the packets containing SOF headers to move the content of the packets containing the SOF headers to a previous or subsequent packet and create padded packets containing the SOF headers; selecting certain of the packets for encryption according to a selection criterion, wherein the selected packets exclude the padded packets containing SOF headers; encrypting the selected packets; and retaining the padded packets containing the SOF headers unencrypted to form selectively encrypted digital video content. Corresponding decoding method as well as encoding and decoding apparatus are also taught. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Abstract: Techniques are described herein for securing communications in a television transmission network. A television receiver receives encrypted content from a transmission network and the encrypted content is input into a decryption device. The decryption device decrypts the encrypted content and generates supplemental data in order to pad the size of the decrypted content. The padded content may then be output from the decryption device to other components of the television receiver, for further processing, such as decoding and output to an associated presentation device.

Abstract: A system and method of retrieving a watermark in a watermarked signal are disclosed. The watermarked signal comprises odd and even overlapped blocks where the watermark is contained in the even blocks. The method comprises, for each k-th even block, subtracting the two adjacent odd numbered blocks from the k-th even block of the watermarked signal to retrieve s *k(n), transforming s *k(n) into the frequency domain to generate S k(f), calculating a phase of S k(f) as ? (f) and a phase of Sk(f) as ?(f), calculating the difference ? (f) between ? (f) and ?(f), unwrapping ? (f) to obtain the phase modulation {tilde over (?)} k(f), and using a Viterbi search to retrieve the watermark embedded in {tilde over (?)} k(f).

Abstract: In certain embodiments, a selective encryption encoder has a packet identifier that identifies packets of a specified packet type. The specified packet type includes packets carrying data representing a video slice wherein the video slice contains a larger amount of data than a threshold amount of data. A packet duplicator duplicates the identified packets to produce first and second sets of the identified packets. Packets are sent and received to and from a primary encryption encoder to encrypt the first set of identified packets under a first encryption method. A secondary encrypter encrypts the second set of identified packets under a second encryption method. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A copy protection system and method enabling storage of copy protection information separately from protected content is disclosed. One embodiment includes a mechanism for playing a recording medium, the recording medium having stored thereon a digital content file and a copy protection information file, the mechanism producing a digital content signal from the digital content file and a copy protection signal from the copy protection file; a digital to analog converter operatively connected to the mechanism for converting the digital content signal to an analog signal; a copy protection detector connected to the mechanism for detecting a copy protection trigger present in the digital content signal; and a signal modifier connected to the copy protection detector for modifying the analog signal to include the copy protection signal in response to detection of the copy protection trigger.

Abstract: Example embodiments are directed to a digital audio/video (AV) data processing unit and a method of controlling access to the digital AV data. The processing unit of AV digital data includes a deciphering unit of the AV data, a decompression unit, an input/output interface of the processed AV data and communication device towards a security module. The deciphering and decompression units respectively include an encryption unit and a decryption unit, each having at least one personal key and a common encryption key. Deciphering the AV data using the control words and re-encrypting the deciphered AV data occurs only after a successful verification of the control word and the common key. After temporary storage, the re-encrypted AV data cannot be decrypted by the decryption unit unless the common key has been positively verified by the security module by way of a random number generated by the decryption unit.

Abstract: An RTP packet generating unit 11 packetizes data into packets, and adds identification information to the header of each of the packets, the identification information identifying each of the packets. An RTP packet encrypting unit 13 divides data included in each of the generated packets into blocks, and encrypts the data included in each of the packets on a block-by-block basis using an encryption key which an encryption key sharing unit 12 shares with a receiving client in such a manner that, when encrypting a first block of the data, the packet encrypting unit encrypts it using the identification information for identifying each of the packets, which is contained, as an initial vector, in the header of each of the packets, and, when encrypting each subsequent block of the data, encrypts it according to an encryption method which uses an immediately-previously-encrypted block.

Abstract: In certain embodiments, a method of detecting a scene change in a digital video signal involves examining a slice of the digital video signal; determining if the slice contains a greater amount of data than a threshold amount of data; and if the slice contains a greater amount of data than the threshold, determining that the slice forms a part of a scene change. This abstract should not be considered limiting since embodiments consistent with the present invention may involve more, different or fewer elements.

Abstract: A method and a carrier medium instructing a processor to execute a method. The method includes accepting a compressed video stream compressed by a compression method that uses macroblocks of possibly different macroblock types for each frame predictive encoding frames. The method further includes identifying a sequence of frames that are substantially visually indistinguishable and that include a predictively encoded frame and the at least one reference frame of the predictively encoded frame. The method further includes creating an ordered set of macroblocks, with the macroblock types of different macroblocks in the ordered set used to encode digital watermark information. The method further includes replacing the predictively encoded frame of the identified sequence with a newly-encoded predictively encoded replacement frame that contains the created ordered set of macroblocks, including the encoded watermarking information.

Abstract: A delivery and display system 10 prepares and delivers daily film rushes and/or film “cuts” (i.e., rough edits) in full motion video to users via the Internet in a collaborative application and display interface. The delivery and display system includes a system server 32, parsing and embedding software 34, an encryption system 36, and a collaborative display interface 70. The system server receives and stores digital media files 50 and AV log files 60. The parsing and embedding software 34 reads meta-data in an AV log file 60 and segments the digital media files 50, wherein the parsing and embedding software is capable of reading meta-data from both .FLX AV log files and .ALE AV log files. The parsing and embedding software 34 embeds meta-data from an AV log file 60 into the segmented digital media files 50. The encryption system 36 secures the digital media files 50, which have been embedded with meta-data from an AV log file 60, using digital rights management encryption.