Abstract: A method and system for secure distribution of digital media files including text, video, audio and combinations of these is described. A particular embodiment involves the distribution of audio tiles (particularly music) which are presently being widely distributed over the internet without compensating the various rights holders. In some embodiments, audio content (except for an optional preview section) is encrypted in a single executable file, allowing it to be freely distributed. When consumers want to access the encrypted portion of the file, a decryption key is obtained from a remote server, but because the file includes an integral decryption engine, a decrypted copy of the file never appears on the client side. Thus, there is no unprotected copy that the consumer can illegally distribute. The disclosure also describes other advantageous techniques, such as bonding the decryption key to the consumer's computer, so it cannot be used by others.

Abstract: One or more embodiments of the invention provide a method, apparatus, and article of manufacture for limiting unauthorized access to digital services. A hidden non-modifiable identification number is embedded into a nonvolatile memory component. The nonvolatile memory component is used to contain state information to provide desired functionality and enforce one or more security policies for accessing the digital services. Also, the hidden number uniquely identifies a device containing the nonvolatile memory component and access to the digital services is based on access rights associated with the hidden number. Once embedded, access to the nonvolatile memory component is isolated such that access to the identification number is limited to a fixed state custom logic block, the nonvolatile memory component is protected from modification such that it is read only, and the nonvolatile memory component is not directly accessible via a system bus.

Abstract: A common interface controller and a method of descrambling channels of first and second transport streams using a conditional access module for descrambling channels of a transport stream as identified by respective PIDs wherein an intermediate data stream is provided by time multiplexing at least a part of the first transport stream with at least a part of the second transport stream, the part of the first transport stream including a first channel and the part of the second transport stream including a second channel, and wherein the original value of a PID identifying the second channel is changed to an intermediate value not used by any PID of any respective channel in said at least a part of the first transport stream such that the intermediate data stream forms an intermediate transport stream for processing by the conditional access module.

Abstract: An exchange system for intangible goods comprises a first user system, a second user system, a registry system, a clearinghouse system and a hash module coupled for communication with each other. The first and second user systems includes a content module for acting as a repository for intangible goods, a pricing module for setting the price of intangible goods, a transaction generator module for creating transactions between seller and buyer, and a transaction log module for recording any transaction in which the user system participates. These systems are used to consummate transactions with other users for exchanging intangible goods. As part of each transaction, the user and the transaction must be entered or registered in the registry system. The registry system comprises an account module and a transaction log module for maintaining the anonymity of the sellers and buyers.

Abstract: The present invention discloses a system and methods for biometric security using keystroke scan biometrics in a smartcard-reader system. The biometric security system also includes a keystroke scan sensor that detects biometric samples and a device for verifying biometric samples. In one embodiment, the biometric security system includes a smartcard configured with a keystroke scan sensor. In another embodiment, the system includes a reader configured with a keystroke scan sensor. In yet another embodiment, the present invention discloses methods for proffering and processing keystroke scan samples to facilitate authorization of transactions.

Abstract: A method for transferring at least one data record from an external data source into a processor unit, e.g., and a suitably designed processor unit are described. In such a method for transcribing at least one data record from the external data source to a processor unit, the at least one data record is transmitted from the external data source together with additional information to a buffer memory of the process unit. A check of the admissibility of using the at least one data record is performed on the basis of the additional information. A blocking signal is generated when the check reveals that use of the at least one data record is not allowed. The at least one data record is then deleted from the buffer memory. An enable signal is generated when the use of the at least one data record is allowed. The additional information includes an identifier assigned individually to the processor unit, with the validity check being performed in the processor unit.

Abstract: A wide-area emergency information management system includes a broadcasting entity (10) and delivers content to authorized receiver clients (20), such as PC's, laptops, wireless devices, etc. The specific content (26), which can include voice, text, video or any other information content related to a planned response to a given crisis or emergency such as enemy attack or natural disaster, is prepared in advance (28), tailored to the class of recipient receiver client and/or user (44), securely downloaded (32,36) and stored locally in a secure cache (21). In response to a small control file from a centralized emergency management authority, the receiver client system accesses the cache (21), decrypts the content (26), and delivers it to the end user.

Abstract: A digital data file encryption apparatus and method, where a digital data server identifies the user and supplies an encrypted digital data file to the user in accordance with the identified result. A personal computer decrypts the encrypted digital data file supplied from the digital data server and reproduces the decrypted digital data file or re-encrypts it using an encryption key. The encryption key is generated on the basis of an identification number of a data storage medium or digital data playing device. A digital data playing device stores the re-encrypted digital data file downloaded from the personal computer in the data storage medium and decrypts the stored digital data file using the encryption key to reproduce it. A first internal key is added to the identification number to convert the identification number into the encryption key, which is then encrypted according to an encryption algorithm based on a second internal key.

Abstract: The present invention provides a system and method of facilitating compliance to one or more information sharing regulations. The present invention provides a computer system equipped with a processing unit capable of receiving input information and extracting one or more data sharing guidelines. The present invention utilizes the relationship between the parties and the data at issue to construct a data sharing arrangement. Each data sharing arrangement may be cross-referenced to one or more data sharing guidelines designed to assist the user to determine what privacy regulations apply and how to comply with same.

Abstract: A contents database 114 memorizes the discriminating information for discriminating contents and the temporal information as to the time of content duplication associated with the discriminating information. A recording program 113 acquires the discriminating information of contents to be duplicated and duplicates the contents in association with the acquired discriminating information and with the temporal information memorized in the contents database 114. This substantially prohibits duplication in large quantities without significantly impairing the interests of a user.

Abstract: A decoder device has a control unit for decoding encoded TV programs. The decoder device has an input for entering an encoded TV program, a decryption device for decoding an encoded TV program into a format which can be played on a television set, an output which can be connected to the television set and is designed to enter the encoded TV program into the television set for play, an interface for an identification or key component, to be used for validation of the decoding device, as well as an interface for a control unit. The interface for the identification or key component is located in the control unit.

Abstract: End-to-end authentication capability based on public-key certificates is combined with the Session Initiation Protocol (SIP) to allow a SIP node that receives a SIP request message to authenticate the sender of request. The SIP request message is sent with a digital signature generated with a private key of the sender and may include a certificate of the sender. The SIP request message may also be encrypted with a public key of the recipient. After receiving the SIP request, the receiving SIP node obtains a certificate of the sender and authenticates the sender based on the digital signature. The digital signature may be included in an Authorization header of the SIP request, or in a multipart message body constructed according to the S/MIME standard.

Abstract: A high-speed dubbing unit 10 for dubbing digital data from an optical disk 15 to a hard disk 16 at a high speed is connected via a public telephone line to a payment imposing unit 20. A control unit 13 is provided for generating in its basic data generator 13B basic data for imposing the payment from at least data indicative of the user identification and data indicative of the speed for recording the data read out from the optical disk 15 into the hard disk 16 and transmitting the basic data to the payment imposing unit 20. The payment imposing unit 20 performs the imposing of the payment according to the basic data received from the control unit 13 and transmits data indicative of the completion of imposing the payment to the control unit 13. In response to the data indicative of the completion of the payment, the control unit 13 directs the high-speed dubbing unit 10 to start recording the data read out from the optical disk 15 into the hard disk 16.

Abstract: An electronic security device has a light-receiving interface that receives a modulated light signal emitted by the screen of a computer making use of the data medium, an output interface adapted to emit output information as a function of the received input information, and an electronic central unit connected to the receive and emit interfaces and adapted to determine the output information as a function of the input information and to cause said output information to be emitted.

Abstract: An image processing apparatus capable of preventing a copy protect function of a video or other contents signal from being disabled. An encoder encodes a contents signal from a DVD reproduction unit. A copy protect circuit performs copy protect processing on the encoded signal and outputs it. The copy protect circuit is controlled by control data input from CPU via an I2C_IF circuit. At this time, verification data from the CPU is stored in, and then read from registers in the I2C_IF circuit. Then, the CPU verifies the destination of transmission of the control data.

Abstract: A data player for reading contents encrypted by a decoding key from a digital medium, and playing the encrypted contents by using the decoding key which is stored in a key storage unit, comprises: a key obtaining unit for performing mutual authentication with the key storage unit to obtain the decoding key stored in the key storage unit; a key holding unit for holding the decoding key; a playback state obtaining unit for monitoring the playback state of the digital medium; and a contents decoding unit for decoding the encrypted contents by using the decoding key. The decoding key is obtained by the key obtaining unit and stored in the key holding unit, and the encrypted contents read from the digital medium is decoded with the decoding key by the contents decoding unit to play the contents. The decoding key stored in the key holding unit is discarded according to the playback state of the digital medium which is obtained by the playback state obtaining unit.

Abstract: An object of the invention is to provide a transmitting system of which data is difficult to be tapped and which is suitable for flexibly determining a watching and listening fee. In order to achieve the object, there is provided a combination of a transmitting method comprising steps of, transmitting encoded data which has been encoded, to a receiving side, changing the encoding in a predetermined unit, and performing recording according to requirement, from the receiving side of information concerning decoding of the encoded data, and a receiving method comprising steps of, receiving the encoded data which has been encoded, from a transmitting side, requiring the information concerning the decoding of the encoded data, to the transmitting side, and decoding the encoded data by using the obtained information concerning the decoding.

Abstract: A secure electronic content system and method is provided. The system includes a controller including an interface component, a host system coupled to the controller, the host system configured to present content under predetermined conditions, the host system operable with a navigation protocol, the host system further including a system manager operable with an associations component configured to be at least partially run by the host system, a translator configured to provide meanings and generate commands within the host system at least a first digital rights management (DRM) component configured to provide encoding and access rules for the content; and a file system component including a file system application programming interface (API) configured to provide a logical interface between a plurality of components.

Abstract: A flexible product distribution and payment system for computer network based electronic commerce is disclosed. Primary content data is made available to customers through a detachable local storage medium, such as a DVD or CD-ROM disc, or over a network connection. The primary content is capable of being accessed and played back through a computer or game console at the customer site. The primary content distribution may comprise a superset of content that is intended to be used by the customer. The customer is allowed to view and access the encoded primary content, and is charged only for the primary content that is used. Content that is encoded on the medium but that is not used by the customer remains on the medium but is not charged. A content database and customer database maintained at the primary customer site maintain records of products ordered and used by the customer, as well as identification and use patterns associated with the user.

Abstract: Fee imposition system and method for application software, in which a software providing corporation can collect the fee without fail and charge a fair fee to a customer, and thereby the customer can use the application software with a paying method easy to estimate. The fee imposition system includes a server machine installed in a management center for managing the software, a client machine installed in a customer's office and connected with the server machine through a communication means, a ticket issue unit for issuing a ticket file on the basis of a predetermined fee schedule, and a data copy/writing unit for copying data corresponding to the information designated by the ticket file from a data source memory unit and recording the copied data on a data target memory unit.

Abstract: A smartcard for use with a receiver of encrypted broadcast signals comprises a microprocessor for enabling or controlling decryption of said signals. A memory is coupled to the microprocessor. The microprocessor is adapted to enable or control the individual decryption of a plurality of such signals from respective broadcast suppliers of such signals by means of respective dynamically created zones in the memory, the dynamically created zones each being arranged to store decryption data associated with a respective one of said broadcast suppliers.

Abstract: An apparatus and method for transmission security is presented. A receiver communicatively coupleable to an identifiable conditional access module (CAM) to enable reception of the service uses an authenticator to control the operability of the receiver according to a comparison between the identified conditional access module and a list of conditional access modules.

Abstract: A conditional access system and method are disclosed allowing the use of a standard smart card. A computing resource configured to run the conditional access protocol has a smart card interface and a software wrapper configured to run on the computing resource coupling the smart card interface to the conditional access protocol.

Abstract: A method of downloading data to a receiver/decoder comprises the steps, at the receiver/decoder, of: receiving a bitstream including the data; downloading a loader for loading the data from the bitstream into the receiver/decoder, and downloading said data from the bitstream using said loader.

Abstract: A storage apparatus is capable of using a storage medium having at least a first region for storing therein data and a second region for storing therein both use permission discrimination information indicative of permission of a predetermined access operation and use limit information with respect to the storage medium.

Abstract: A method and system for creating a new digital work from one or more existing digital works having parts. A first part of a digital work has first usage rights associated therewith, the first usage rights specifying a particular manner of use for the first part. A second part of a digital work has second usage rights associated therewith, the second usage rights specifying a particular manner of use for the second part. A new digital work is created by combining the first part and the second part as new content and associating new usage rights with the new content. The new usage rights specify a particular manner of use for the new digital work.

Abstract: A system for associating usage rights with digital content. Usage rights are created from a grammar. The usage rights specify a manner of use indicating one or more stated purposes for which the digital content can be at least one of used and distributed by an authorized party. The usage rights are associated with the digital content. Information is exchanged with a first repository for storing the digital content and the associated usage rights and for processing a usage transaction specifying the usage rights to determine if access to the digital content can be granted. Information is exchanged with a second repository for generating the usage transaction specifying the usage rights for requesting access to the digital content.

Abstract: A switching portion of an IRD supplies a non-descrambled TS (transport stream) received from a front end portion or a descrambled TS received from a descrambler to a DVCR connected to an IEEE 1394 interface. In addition, data received from the DVCR is supplied to the descrambler.

Abstract: Methods and systems protect digital content such as premium content like movies, programs, and other types of digital audio/visual content. In some embodiments, an architecture and related methods protect content by maintaining the content in encrypted form, whether the content resides in video card memory (referred to herein as “VRAM”), or some other local or remote memory subsystem. The methods and systems enable video card co-processors, such as the graphics processing unit (GPU) to manipulate the encrypted content or data. In various embodiments, the content is maintained in an encrypted format and is unencrypted only when the GPU operates upon the data. After the GPU operates upon the data, the resultant data is re-encrypted and written to memory.

Abstract: A system for controlling the distribution and use of digital works using digital tickets. In the present invention, a “digital ticket” is used to entitle the ticket holder to exercise some usage right with respect to a digital work. Usage rights are used to define how a digital work may be used or distributed. Each usage right may specify a digital ticket which must be present before the right may be exercised. Digital works are stored in repositories which enforce a digital works usage rights. Each repository has a “generic ticket agent” which punches tickets. In some instances only the generic ticket agent is necessary. In other instances, punching by a “special ticket agent” residing on another repository may be needed.

Abstract: Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Abstract: A smart card, in particular for pay-TV applications, has a microcontroller and a programmable-function hardware component that, together with the microcontroller, forms a unit. The function programming capability allows the crypto algorithm to be changed continuously, thus making it considerably more difficult, or impossible, to simulate the smart card. In one method, the smart card is used with a decoder for pay-TV transmitters. In this method, a control command is transmitted in the television signal and results in the reprogramming of the programmable-function hardware component.

Abstract: A digital media distribution system includes a distribution center and an utilization device that communicates with, and receives digital media from, the distribution center. Restrictions are transferred with the digital media that limit the use of the digital media on the utilization device independently of the distribution center.

Abstract: Prior to a login session, a server computer stores a password verification value v for each of a plurality of authorized users. Each user generates a password verification value v from a secret value x that corresponds to the user's password. When a client computer attempts to establish a login session between the server computer and client computer, the following steps are performed. The server computer receives a user identifier and retrieves the password verification value for the user. The client computer generates a first public value wp by applying the one-way function to a first secret value ws, and sends wp to the server computer. The server computer generates a second public value yp by applying the one-way function to a second secret value ys, and sends yp to the client computer. The server computer also generates a server session key K1 by applying a first predefined session key generation function to wp, v and ys.

Abstract: A system and method are provided wherein digital data representing content and associated license rights may copied to a storage medium, such as a removable storage medium, whereby the serial number of the copied-to storage medium is integrated into the licensing scheme utilized to secure the digital content. As a result, the digital content is pre-authenticated and bound to the copied-to storage medium, obviating the need to access a network or other location for access to the protected content.

Abstract: The present invention is intended to significantly reduce the content data processing and transfer times by skipping root key checking processing, when transmitting a plurality of pieces of encrypted content data stored in a primary recording medium to a secondary recording medium along with key information of these plural pieces of content data, if the key information for a piece of content data to be transmitted from the primary recording medium is the same as the key information for an already transmitted piece of content data.

Abstract: A smartcard for use with a receiver of encrypted broadcast signals comprises a microprocessor for enabling or controlling decryption of said signals. A memory is coupled to the microprocessor. The microprocessor is adapted to enable or control the individual decryption of a plurality of such signals from respective broadcast suppliers of such signals by means of respective dynamically created zones in the memory, the dynamically created zones each being arranged to store decryption data associated with a respective one of said broadcast suppliers.

Abstract: Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Abstract: In a device for descrambling scrambled digital data, the digital data are grouped into parallel combinations of bits before being descrambled. The combinations of bits are descrambled and then split back into a serial stream of bits.

Abstract: Method and system for issuing and using anonymous and pseudonymous prepaid payment cards through the existing credit card and debit card infrastructure.

Abstract: A data receiving-processing apparatus including a receiver for receiving an extended function program or data transmitted thereto, a processor for processing the received data, a first storage such as a read-only memory for storing a basic program used to execute the data processing and an ID code to identify the apparatus and having a branch for the extended function program, a second storage such as a nonvolatile memory for storing the extended function program in a compressed state, a third storage such as a volatile memory for storing the extended function program in an decompressed state, and a decision maker for making a decision as to whether the ID code has predetermined content. The received data is processed in accordance with the basic program stored in the first storage and, after the extended function program stored in the second storage is read out at the branch in the basic program, the data is processed in accordance with the extended function program.

Abstract: The invention relates to a process of restriction the access of a terminal to a telecommunication network. The invention includes using the current user authentication procedure usually implemented in telecommunications systems for authenicating users, so as to verify the users's rights of access in relation to certain criterions, such as, the destination of the call, its time, and its duration.

Abstract: Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Abstract: A system and method for loading a scene graph in a plurality of loads, associates one or more undesignated nodes of a scene graph with an appropriate one of a plurality of loads. The technique is accomplished by traversing the scene graph to detect an undesignated node. Then, it is determined whether the detected node has one or more parent nodes. If so, the one or more parent nodes are examined to determine a load associated with said one or more parent nodes. Where at least one of the parent nodes is associated with the first load, the undesignated node is designated as associated with the first load. If all parent nodes are associated with the same node, the unlabeled node is designated as associated with the parents' load. Where an ambiguity arises, any of several techniques can be utilized to resolve the ambiguity.

Abstract: Electronic steganographic techniques can be used to encode a rights management control signal onto an information signal carried over an insecure communications channel. Steganographic techniques ensure that the digital control information is substantially invisibly and substantially indelibly carried by the information signal. These techniques can provide end-to-end rights management protection of an information signal irrespective of transformations between analog and digital. An electronic appliance can recover the control information and use it for electronic rights management to provide compatibility with a Virtual Distribution Environment. In one example, the system encodes low data rate pointers within high bandwidth time periods of the content signal to improve overall control information read/seek times.

Abstract: Anonymous use of and payment for, as well as collection of statistics, fee-based services, in particular Near-VOD services, employing a single chip card that can be used for all service providers. The chip card is used for paying for fee-based services of different service providers. Storage of usage-related data for collection of statistics and for payment for fee-based services as well as an authorization check is provided on the chip card. When an amount of money is loaded onto the chip card, these data are read and transmitted to a central office for the purpose of collecting statistics relating to the usage of individual services and crediting the individual service providers while, at the same time, guaranteeing anonymity of the individual customer-specific data.