Abstract: A business model for facilitating the deployment of prescription validation systems into pharmacies is installed in pharmacies for little or no up-front cost to the pharmacy. Instead, the pharmacy is charged on a per use basis, that is, charged every time a prescription is validated in the system. In this way, the system vendor obtains payment on a subscription-like basis. Up-front costs at the pharmacy are avoided. Moreover, risks to a pharmacy concerning maintenance and slow productivity are avoided, or shifted onto the system owner, who is able to assess those risks.

Abstract: There are provided a method of transforming a non-transformed stored logical data object (LO) device into a transformed LO and system thereof.

Abstract: A method of generating an image comprises receiving a signal over a USB interface comprising encoded display data for one or more rectangular group of pixel tiles within an image and position data for the or each group of pixel tiles. The coefficients are obtained from the encoded display data, maybe by converting variable bit length fields into AC coefficients and an inverse Haar transform performed on them to generate pixel data for each rectangular group of pixel tiles. A frame buffer, which may be part of the display, is then updated with the generated pixel data ready for output to the display device. Copy protection may also be incorporated using AES negotiated over HDPC.

Abstract: Metering is enabled through an arrangement in which a metering certificate is communicated to a mobile device using an over-the-air protocol. A metering trigger provides the metering certificate that includes a location to which metering data is posted by the mobile device and a public key of a public-private key pair, or alternatively provides a link to such metering certificate. A metering helper passes the metering certificate to a DRM system on the mobile device which collects metering data associated with the metering ID and uses the public key to encrypt the metering data into a metering challenge. The metering helper posts the metering challenge to the location. The metering service extracts the metering data from the metering challenge using a private key and generates a metering response that is received by the metering helper which prompts the DRM system to reset at least a portion of a data store in which the metering data is stored.

Abstract: A method and a terminal device for making multi-system constraint of a specified permission in a digital rights. A rights object related to content object is obtained by an executing device. The specific permission descriptions of the rights object include system constraint descriptions of a plurality of systems of the same type. The executing device obtains a corresponding system information in the device according to the system constraint descriptions and compares the system information in the device with the system information in the system constraint descriptions, so as to judge whether there is any system permitted in system constraint descriptions. If yes, it determines to permit executing the specific permission for the content object; otherwise, it determines not to permit executing said specific permission for the content object.

Abstract: Methods, apparatus and systems for embedding auxiliary information in encrypted host signals are provided. The present invention enables secure application of digital watermarks at any point in the transmission and/or distribution of digital content by enabling the insertion of a plurality of digital watermarks, without the knowledge of the encryption/decryption keys, into a digital host content that has been encrypted with an encryption key. The embedded watermarks persist throughout the content subsequent to the decryption of the content. The disclosed techniques are applicable to content that has been encrypted using a variety of different encryption techniques and algorithms, including stream ciphers, block ciphers, symmetric and asymmetric encryption algorithms. These methods are further adapted to enable the insertion of watermarks into a content that is compressed prior to encryption.

Abstract: Methods and apparatus for providing media content offered by media content subscription service to portable media player devices associated with subscribers of the service are described herein. In various embodiments, particular fulfillment module, request module and media player are provided to fulfillment server(s) of the subscription service, request client devices, and portable media player devices, respectively.

Abstract: The invention relates to a value-added service applied to the broadcasting of video programs or content and more particularly to mobile television (Mobile TV). The invention promotes service continuity during the broadcasting of programs having an undefined duration and the broadcasting of which has been subject to a Pay-Per-View type purchase.

Abstract: The present invention relates to an information processing system, an information processing apparatus and method, and a program in which the purchase of content can be facilitated. When a device to which content data is downloaded and a device for giving an instruction to purchase the content data are different, a purchase form for purchasing the content data is sent to the device for giving an instruction to purchase the content data. The user ID and password are input into the purchase form, and the device to which the content data is downloaded is determined by the user ID. If the device to which the content data is downloaded cannot be specified because the user registers a plurality of devices, a destination determination form for specifying the device to which the content data is downloaded is sent. The content data is then distributed to the device indicated in the destination determination form. The present invention is applicable to a server for executing processing concerning content data.

Abstract: A personal video recorder (PVR) enables delivery of audio-visual content and associated metadata to storage devices. The PVR is configured to access a plurality of services using a plurality of storage modules. Each storage module is dedicated to a single designated content provider. One or more of the storage modules are removably coupled to the PVR. A disconnected storage module can be reconnected to another PVR different from the PVR from which the storage module was disconnected. Where authorization is required to access content stored on the storage module, authentication is performed each time the removable storage module is reconnected to a PVR.

Abstract: A method of storing content, in accordance with one embodiment of the present invention, includes receiving an item of content in a protected format and a key corresponding to the item of content. The item of content in its protected format may be stored on a mass storage device. The key may also be stored in a safeguarded format on the mass storage device.

Abstract: A data generating is device capable of preventing unauthorized extraction of plaintext content between decryption processing and digital watermark embedment processing. A content reproducing device obtains restoration information and, in accordance with the restoration information, selectively performs predetermined restoration processing and processing of embedding device unique information, on content data at a position shown by the restoration information.

Abstract: A flexible product distribution and payment system for computer network based electronic commerce is disclosed. Primary content data is made available to customers through a detachable local storage medium, such as a DVD or CD-ROM disc, or over a network connection. The primary content is capable of being accessed and played back through a computer or game console at the customer site. The primary content distribution may comprise a superset of content that is intended to be used by the customer. The customer is allowed to view and access the encoded primary content, and is charged only for the primary content that is used. Content that is encoded on the medium but that is not used by the customer remains on the medium but is not charged. A content database and customer database maintained at the primary customer site maintain records of products ordered and used by the customer, as well as identification and use patterns associated with the user.

Abstract: A system, method, and computer program product for managing limited-use software on a host computer having an operating system is disclosed. A software application can be installed in the operating system as a virtualized application using light weight virtualization technology. Rights usage information for the software application is received, the rights usage information comprising a rule describing permitted use of the software application on the host computer. A determination is made whether to enable the virtualized application based at least in part on the rights usage information. Responsive to the determination, the virtualized application is enabled to be executed on the host computer.

Abstract: Usage rights for a digital work are established prior to creation of the corresponding content. The rights can be associated with the content after the content is created. A content creation, such as a video recorder or a still camera, device can store labels of the rights and can associate usage rights with content in real time as the content is created.

Abstract: A method for pairing a first element and a second element, wherein the first element and the second element form a first decoding system among a plurality of receiving decoding systems in a broadcasting network. Each receiving decoding system is adapted to descramble scrambled audiovisual information received over the broadcasting network. A first key unique in the broadcasting network is selected. A second key is determined according to the first key, such that a combination of the first key and the second key enables to decrypt broadcasted encrypted control data that is received to be decrypted by each receiving decoding system, the encrypted control data being identical for each receiving decoding system. The first key and the second key are assigned respectively to the first element and the second element.

Abstract: Techniques are disclosed for sharing information in a wide variety of contexts. An information sharing system is described that allows both an explicit capture process and an implicit capture process to add information items to a staging area. Further, the information sharing system supports both implicit and explicit consumption of information items that are stored in said staging area. A rules engine is provided to allow users to create and register rules that customize the behavior of the capture processes, the consuming processes, and propagation processes that propagate information from the staging areas to designated destinations. Techniques are also described for achieving exactly-once handling of sequence of items, where the items are maintained in volatile memory. Techniques are also provided for recording DDL operations, and for asynchronously performing operations based on the previously-performed DDL operations.

Abstract: A self-service terminal comprises: a plurality of session initiation devices, each associated with an initiation token, so that a customer can initiate a transaction using one of a plurality of different initiation tokens. The terminal further comprises a plurality of session suppliers, each session supplier being associated with one of the session initiation devices, and each session supplier being operable: (i) to receive from its associated session initiation device, information from an initiation token provided by a customer, and (ii) to create an electronic access token based on the received information. The terminal also comprises a session supplier aggregate operable to receive an electronic access token from one of the session suppliers for each session to be created; and a session component operable (i) to receive the electronic access token from the session supplier aggregate and (ii) to create a session based on the received electronic access token.

Abstract: An access management system for managing network access of an end-user to one or more online content sources of a number of content providers. The system comprises a content proxy unit that stores the concealed addresses of the content sources. The content proxy unit is designed to receive a request for accessing one or more content sources from the end-user. The system further comprises an access management unit that stores an access rights record of the end-user. The access management unit is designed to authorize the request according to the access rights record of the end user. If the request is authorized, the content proxy unit facilitates the accessing using the concealed addresses of the requested content sources.

Abstract: A data generating device is capable of preventing unauthorized extraction of plaintext content between decryption processing and digital watermark embedment processing. A content reproducing device obtains restoration information and, in accordance with the restoration information, selectively performs predetermined restoration processing and processing of embedding device unique information, on content data at a position shown by the restoration information.

Abstract: The present embodiments provide methods, apparatuses, and systems to distribute content over a network. Some embodiments provide methods to distribute content within a local media network. These methods receive a request for a first content to be transferred to a sink device, request from the source an access criteria for a first content that is protected according to a first digital rights management (DRM), forward the access criteria to the sink device, receive an evaluation of the access criteria from the sink device regarding at least whether the sink device can interpret the first DRM, determine according to the evaluation received from the sink device whether the sink device can utilize the first content that is protected according to the first DRM, and initiate a transfer of the first content from the source device to the sink device when the sink device can utilize the first content.

Abstract: Provided is a method for delivering all or part of a rights object (RO) of a user associated with the content to other users. The method includes creating a rights object to be transmitted to a second user within a limit of the rights object held by the first user, and forwarding the created rights object to the second user. The method allows each user to share its own RO with other users within the limit of the RO without server authentication.

Abstract: A method and a terminal device for making multi-system constraint of a specified permission in a digital rights. A rights object related to content object is obtained by an executing device. The specific permission descriptions of the rights object include system constraint descriptions of a plurality of systems of the same type. The executing device obtains a corresponding system information in the device according to the system constraint descriptions and compares the system information in the device with the system information in the system constraint descriptions, so as to judge whether there is any system permitted in system constraint descriptions. If yes, it determines to permit executing the specific permission for the content object; otherwise, it determines not to permit executing said specific permission for the content object.

Abstract: An AV data transmission apparatus includes an encryption unit which encrypts AV data, an AV data transmission unit which transmits the encrypted AV data, a cipher-type-information switching unit which switches cipher type information indicating a cipher scheme used for the AV data, to other cipher type information, and a cipher-type-information transmission unit which transmits cipher type information. When transmitting AV data which is prohibited from being used in a reception apparatus that does not support new usage control information, the AV data transmission apparatus assigns different cipher type information, which is used to notify the reception apparatus, so that even the reception apparatus which cannot recognize the new usage control information can recognize its inability to perform decryption is due to new encryption performed by the AV data transmission apparatus.

Abstract: The invention concerns a method for transmitting a flow of digital data and of controlled messages associated with said flow addressed to mobile terminals. The flow comprises successive bursts of data of encrypted contents with control words included in the control messages transmitted in parallel with said flow. The method is characterized in that it consists in inserting a control message in each transmitted burst of contents, said message containing at least one control word designed to decrypt the contents of said burst.

Abstract: A method and apparatus allows owners of electronic signs, such as retailers, real estate owners, other space owners, and content providers, such as advertisers, entertainment producers, event promoters, visual artists, and the general community to participate in an open content network, in which electronic signs are universally uniquely identified and then added to a network in a distributed fashion, after which content is selectively downloaded to the electronic signs. The times at which the content is presented are determined collaboratively by the owners of the electronic signs and the content providers. A mechanism that verifies whether the content is actually presented on the electronic signs is also disclosed.

Abstract: The invention provides a business platform, a business entity management system, and a software module that can be used in conjunction with the software service framework. The invention mimics actual business relationships between business entities, and uses a software service module to configure the business entities into a network that comprises at least three generations of business entities, wherein role dependent associations mimicking real life business relationships are established between the business entities. In addition, information as defined by business objects are configured to permit or deny access and manipulation based on user roles. Accordingly, the invention permits a user role in one business entity to potentially access information of a plurality of other associated business entities through a common business platform, based on the role of the user and the configuration of the business objects.

Abstract: A computerized intellectual property trading exchange is disclosed for facilitating the trading of license contracts relating to intellectual property rights or pools of intellectual property rights. The exchange includes at least one intellectual property license contract relating to intellectual property rights or pools of intellectual property rights and a computer-accessible forum configured to allow a plurality of participants to trade the license contract. The plurality of participants includes at least one seller, which may be the owner, having the license contract and desiring to trade the license contract. The plurality of participants also includes at least one buyer desiring to obtain the license contract. The buyer may be an investor, speculator, market maker, or arbitrageur, who purchases the license contract to achieve appreciation. The buyer also may be a licensee, who purchases the license contract to practice the intellectual property rights.

Abstract: In a data providing server 1101, whether or not specified compressed content data D51 generated by means of a specified compression coding method corresponding to terminal identification information has been stored in a content database 1113 is detected, according to content specifying data D53 transmitted from a portable dedicated terminal 1104. If the specified compressed content data D51 has been stored, the data providing server 1101 reads and transmits this to the portable dedicated terminal 1104. And if the specified compressed content data D51 has not been stored, the data providing server 1101 generates the specified compressed content data D51 by means of the specified compression coding method, and transmits this to the portable dedicated terminal 1104. Thereby, the specified compressed content data D51 generated by means of a specified decoding method can be properly provided to the portable dedicated terminal 1104, and the user can easily view a content based on the content data.

Abstract: A content transmission apparatus is disclosed which promotes distribution of contents over a network and thereby affords better convenience to those who wish to sell and buy the contents. The apparatus is implemented typically as a video camera provided beforehand with an access account from a server apparatus. The content transmission apparatus is equipped with abilities to encode contents in a streaming format for upload and to connect communicably with the server receiving what is uploaded. These features allow the user of the content transmission apparatus easily to upload the content generated thereby to the server without going through complicated steps to sign up with an ISP; to prepare a personal computer, a modem and other hardware; or to make elaborate settings and establish connection with the server. Therefore, uploading of contents is promoted. The server apparatus presents uploaded contents illustratively at its website to solicit potential buyers extensively for the presented contents.

Abstract: The subject matter relates to software application collaboration and, more particularly, collaboration between software applications via formular updates. Some such embodiments include systems, methods, and software to receive a definition of a content item from a first party, wherein the content item is operable within an application of a second party to cause data to be exported by the second party's application in a manner that can be imported to an application of the first party. Some such embodiments further include sending the content item to the second party.

Abstract: Various techniques are provided for the gifting between multiple electronic devices of media content provided by an online digital media provider. An offer and acceptance of a selected gift file is accomplished between a gifter device and a receiving giftee device using a near-field communication (NFC) connection. If a connection to the online provider is available, the gifter device may transmit a gift request by which the gifter's account is charged for the gift file. Thereafter, a gift file created using DRM keys associated with the giftee's account may be downloaded to the giftee device. If a network connection is unavailable, the giftee device may transfer a locked gift file and a corresponding gift license to the giftee device using a peer-to-peer connection. The giftee device may authenticate the license and unlock the gift file once a connection to the online provider is available.

Abstract: An information processor is capable of restricting the available application program interface for each application program. The information processor capable of executing a predetermined application program includes at least one application program interface for providing predetermined control function for the application program, a determining unit for determining an available application program interface for the application program based on license information of the application program, and an operation controlling means for controlling the operation of the application program interfaces in accordance with the results determined by the determining unit.

Abstract: Certain embodiments of the present invention provide systems and methods for managing medical information. Certain embodiments provide a local electronic medical record system including a local personal health record (PHR) client, the PHR client downloading encrypted patient documents from a remote PHR server and parsing the downloaded encrypted patient documents to form a local PHR database. The example system also includes an interface receiving user input including an encryption key to decrypt the downloaded encrypted patient documents and displaying patient medical information to the user based on the downloaded decrypted patient documents.

Abstract: A licensing system is provided for transferring license information for at least one license-requiring software component of software-controlled devices. The licensing system comprises a first, portable license data storage medium (3), which is provided with a processor unit (8) and on which at least one license information for the at least one license-requiring software component is stored in a memory unit (9). A second, exchangeable license data storage medium (4; 4.1, 4.2) is provided with a processor unit (10; 10.1, 10.2). A data transfer channel (5) is provided for transferring data between the first license data storage medium (3) and the second license data storage medium (4; 4.1, 4.2). A license detection device (6) is provided which can poll the at least one license information of the first license data storage medium (3) and transfer same to the second license data storage medium (4; 4.1, 4.2) via the data transfer channel (5).

Abstract: A multi-merchant purchasing system is configured to identify downloadable products selected by a user for purchase. The identified downloadable products are offered by multiple merchants. The multi-merchant purchasing system enables the user to purchase all of the downloadable products in a single transaction. Specifically, the multi-merchant purchasing system determines payment information associated with the user and, with minimum user-interaction, sends the payment information to applications associated with the merchants for processing. The multi-merchant purchasing system may also be configured to receive purchase information from the merchant applications and maintains the purchase information for the user in a locker. The multi-merchant purchasing system may further be configured to automatically download and install the purchased product onto the user's computing device through a software assistant.

Abstract: A system effecting a data reproducing method for a plurality of devices, for sending and receiving data by authenticating the plurality of devices with each other, said data reproducing method including: selecting, from a plurality of descrambling methods, a descrambling method corresponding to a type of said data, executing authentication by an authenticating method corresponding to the selected descrambling method, where the authenticating method is selected from a plurality of authenticating methods, and reproducing said data.

Abstract: An apparatus for generating copyright information for a secondarily processed content obtained by performing secondary processing on an original content, includes a secondary processed substance acquiring unit, a default license information generating unit, and a license information editing unit. The secondary processed substance acquiring unit acquires operation substances of the secondary processing performed on the original content. The default license information generating unit obtains rights expressions for the operation substances acquired by the secondary processed substance acquiring unit to generate default license information including the rights expressions as an initial value. The license information editing unit accepts selection of a desired rights expression by a user from the rights expressions of the default license information generated by the default license information generating unit to generate license information of the secondary processed content from the selected rights expression.

Abstract: When captured content is detected, the captured content is analyzed to determine whether any portion of the content is subject to digital rights management protection specified for content captured. Responsive to determining that the captured content is subject to a first digital rights management protection, a database is queried to select at least one digital rights management rule associated with a first restricted element specifying at least one first criteria for combining the first restricted element with at least one other element. A determination is made whether the first restricted element is combined with the at least one other element in the captured content. Responsive to detecting the first restricted element is combined with the at least one other element, the captured content rights controller determines a combined digital rights management protection rule reconciling the at least one first criteria for combining the first restricted element with the presence of the at least one other element.

Abstract: An improved interactive network system is provided that allows the Network Operator to control the transfer of information to and from the network end users, the system preferably using triggers or markers embedded within the programming broadcast to users via the network. As a consequence of this system, the Network Operator is able to efficiently garner revenues from third parties transacting business over the network and to control the look and feel of programming offered to network users. Additionally the system can be used as a means of limiting network access, filtering programming, providing on-screen graphics or audible signals for particular programming types or providers, bookmarking programming, profiling network users, targeting advertising, and simplifying network transactions.

Abstract: Techniques are described for facilitating interactions between computing systems, such as by performing transactions between parties that are automatically authorized via a third-party transaction authorization system. In some situations, the transactions are programmatic transactions involving the use of fee-based Web services by executing application programs, with the transaction authorization system authorizing and/or providing payments in accordance with private authorization instructions previously specified by the parties. The authorization instructions may include predefined instruction rule sets that regulate conditions under which a potential transaction can be authorized, with the instruction rule sets each referenced by an associated reference token.

Abstract: In response to receiving an order (e.g., including payment for one or more software licenses), a license distribution manager allocates a specified number of software licenses for distribution to a corresponding customer's clients that utilize the licenses to operate software associated with a corresponding vendor software application. The license distribution manager can allocate one or more overdraft licenses for distribution to the customer in addition to the specified number of software licenses associated with the order. Accordingly, the license distribution manager can allocate extra software licenses (e.g., the overdraft licenses) and distribute more software licenses than are actually purchased by a respective customer. This enables the customer to use one or more provisional licenses (e.g., overdraft licenses) that support restricted use of the vendor's software application such as until the customer can replace the provisional licenses with corresponding purchased licenses.

Abstract: Techniques are described for facilitating interactions between computing systems, such as by performing transactions between parties that are automatically authorized via a third-party transaction authorization system. In some situations, the transactions are programmatic transactions involving the use of fee-based Web services by executing application programs, with the transaction authorization system authorizing and/or providing payments in accordance with private authorization instructions previously specified by the parties. The authorization instructions may include predefined instruction rule sets that regulate conditions under which a potential transaction can be authorized, with the instruction rule sets each referenced by an associated reference token.

Abstract: Metering is enabled through an arrangement in which a metering certificate is communicated to a mobile device using an over-the-air protocol. A metering trigger provides the metering certificate that includes a location to which metering data is posted by the mobile device and a public key of a public-private key pair, or alternatively provides a link to such metering certificate. A metering helper passes the metering certificate to a DRM system on the mobile device which collects metering data associated with the metering ID and uses the public key to encrypt the metering data into a metering challenge. The metering helper posts the metering challenge to the location. The metering service extracts the metering data from the metering challenge using a private key and generates a metering response that is received by the metering helper which prompts the DRM system to reset at least a portion of a data store in which the metering data is stored.

Abstract: The invention proposes to divide a content to be transmitted via a network into a set of slices and to generate a set of files from this set of slices. The slices (or the files) are encrypted before downloading in such a way that the client cannot use the slice (or the file) before having acquired the associated decryption key. The invention thereby allows protecting a downloaded content on a slice-by-slice basis (or on a file-by-file basis) rather than protecting a downloaded content as a whole. The transmission (in download mode) between the server and the client is ruled by the HTTP protocol that is accepted by all firewalls and NAT. Consequently, the transmitted content is accessible for any client device that has access to the Web without restriction. Advantageously, the slices can be decoded independently of each other.

Abstract: An on-line service manages downloads of purchased digital content. Information regarding the digital content items that are purchased by each user and the terms of use of those purchased items is maintained. Information regarding the formats of digital content items that each device is adapted to receive is maintained. Upon determining that a user wishes to download a digital content item, the requested digital content is downloaded in an appropriate format for a particular digital device provided the recorded information indicates the content item has been purchased by the user and the download is within the quantity of downloads authorized by the terms of the purchase.

Abstract: A portable media player receives encrypted audio files and an encrypted content key from a central license server on the Internet. The media player supports digital rights management (DRM) by storing the encrypted audio file in its flash memory and disabling copying or playing of the audio file after a copy limit has been reached. The copy limit is a rule that is combined with the content key in a transfer key that can be encrypted together by the license server. The license server can detect cloning of the media player by reading a unique player ID from the player and detecting when too many accounts use the same unique player ID. The content key can be generated from polar coordinates of the unique player ID, player manufacturer, and song genre. A fingerprint sensor on the player can scan and compare the user's fingerprints to further detect cloning.

Abstract: Disclosure of information is controlled selectively depending on users such that a plurality of users having different roles bearing no inclusive relation with one another can access the same area. Content is divided into a plurality of areas. For each of the areas obtained by division, secret keys (encryption/decryption keys in symmetric-key cryptography) are generated. The generated keys are encrypted using public keys in public-key cryptography, which are set in advance for the users depending on their respective roles. In the case where the content is to be disclosed to a plurality of users having different roles, the encryption of secret keys is performed separately for each user. These encrypted contents and encrypted secret keys are used to generate encrypted text.

Abstract: This invention relates to a digital combined apparatus including an operation panel, a reader/writer which writes/reads data on/from a recording medium, and a controller which controls the operations of the operation panel and reader/writer. When the reader/writer reads out ID information of the user from the recording medium on which at least the ID information is recorded, the operation panel displays a user authentication window which prompts the user to input a password for identifying himself or herself.

Abstract: A system for transmitting and recording digital data is included. Further, a system for transmitting transmit scrambled audio data that is to be recorded on a mini disc reader is included. A system for transmission and recording of digital data includes transmission means adapted to prepare and transmit scrambled digital data together with at least one encrypted control word and a digital recording device adapted to receive and record the scrambled digital data and encrypted control word on a digital support. The digital recording device further includes an access control means adapted to decrypt the control word and thereafter descramble the digital data during playback.