Abstract: Apparatus and methods for including a code having at least one code frequency component in an audio signal are provided. The abilities of various frequency components in the audio signal to mask the code frequency component to human hearing are evaluated and based on these evaluations an amplitude is assigned to the code frequency component. Methods and apparatus for detecting a code in an encoded audio signal are also provided. A code frequency component in the encoded audio signal is detected based on an expected code amplitude or on a noise amplitude within a range of audio frequencies including the frequency of the code component.

Abstract: A system and method for logon access management that includes capturing a logon id and associated user data, the logon id allowing access to at least one of an application or data outside of a entity, automatically searching for a match of at least a portion of the user data with id data inside the entity, and transforming the logon id into a network id when a match is found. The entity may be a company, business, organization, system, or network.

Abstract: A computer-based process for product selection optimization by displaying various security features available for a security document, for evaluating the impact that the selection of one security feature has upon the selection of other features, and for optimizing the selection of each security feature or a combination of features in meeting a protection goal for the security document.

Abstract: An electronic device comprising: a transport stream analyzer, the transport stream analyzer adapted to receive an encrypted MPEG transport stream and to output a program stream map stream, a conditional access table stream, a program stream directory stream, an encrypted video signal stream, one or more encrypted audio streams, an entitlement control message stream and an entitlement management message stream, all as MPEG packetized elementary stream data structures; and a packet multiplexer adapted to receive the output of the transport stream analyzer and to assemble the output of the transport stream analyzer into an encrypted MPEG compliant modified program stream comprised of packs of MPEG packetized elementary stream data structures and to output the encrypted MPEG compliant modified program stream.

Abstract: A content receiving apparatus, capable of resuming transmission of a content without assigning a new key even when transmission of the content is suspended, is provided. A content receiving apparatus is an apparatus which receives contents. The content receiving apparatus includes: a key exchange unit which exchanges, with a content transmitting apparatus for transmitting a content, a key which is to be used in encrypting a content and which is valid only for a prescribed period; a reception unit which receives the content encrypted by using the key; a detection unit which detects when a time during which the key is not used reaches a prescribed time; and a transmission unit which transmits, to the content transmitting apparatus, information for not making the key invalid, when it is detected that the time during which the key is not is used has reached the prescribed time.

Abstract: Aspects of the present invention may be found in one or more systems and/or methods to encapsulate or packetize non-MPEG and MPEG data. The encapsulation or packetization allows both the non-MPEG and MPEG data to be utilized by a set-top-box that conforms or complies with the OpenCable™ Advanced Multi-Stream POD Interface Specification and/or the OpenCable™ Multi-Stream CableCARD Interface Specification. In one embodiment, a method of processing video data, by a set-top-box that is communicatively coupled to a POD card, comprises receiving video data from a provider, first packetizing the video data using a first header to generate a first packet, wherein the first header comprises a first indicator. In one embodiment, a system for providing MPEG and non-MPEG video to a subscriber comprises a circuitry and a POD card capable of receiving, processing, and facilitating the display of non-MPEG and MPEG data.

Abstract: A method for transmission and storing of scrambled content in which the scrambled content is transmitted together with encrypted control words, the control words being used for descrambling the scrambled content, transmitting to a receiver/decoder the scrambled content and encrypted control words, said control words being encrypted by an exploitation key (KG), decrypting said encrypted control words in a removable security module with an exploitation key (KG), said removable security module being received by the receiver/decoder, characterised in that it further includes transmitting usage rules message (URM) to the receiver/decoder (2000), which usage rules (URM) impose usage constraints on the playback of the content stored on a mass storage device encrypting the decrypted encrypted control words and usage rules messages by a local key (KL) to produce encrypted control management messages (CMM) storing said scrambled content and encrypted control management message on the mass storage device of the receiver

Abstract: An apparatus and method for transmission security is presented. In one embodiment, the apparatus comprises a receiver communicatively coupleable to an identifiable replaceable conditional access module (CAM) identified by an identification to enable reception of the service, and an authenticator controlling the operability of the receiver according to a comparison between the identification and a list comprising an identification of a plurality of CAMs, wherein the authenticator renders the receiver inoperable according to the comparison.

Abstract: A data processing device of the invention has an ID creator unit (300) which adds ID information which is set by a CPU and the number of sectors, and outputs a result of the addition as ID information; a scramble SEED value table (103) which produces an initial scramble SEED value, by using the ID information which is outputted from the ID creator unit (300); a normal scramble filter (104) which produces a scramble SEED value (402) for data to be transferred; a frame jumping scramble filter (301) which holds a scramble SEED value of a jumping destination (401) in preparation for jumping; and a selector (105) which selects one of the scramble SEED value (401) and the scramble SEED value (402) and outputs the selected value to the normal scramble filter (104). Accordingly, the data processing device can perform a scrambling process and a de-scrambling process, without depending on the reliability of the data being transferred.

Abstract: A system and method for enabling broadcast programs to be copied once only by consumer recorders includes writing a unique media identification on each blank disk to which content is to copied in a read-only area of the disk before it is initially recorded. Also, a one-way key management media key block is written to the disk. A content key is derived by combining a media key, derived from the media key block, with the media identification. Additionally, to facilitate copying the content one time only, an exchange key is established between the recorder and a sender such as a satellite receiver or a disk player that is associated with the recorder, and the exchange key is modified with one or more special numbers representing control commands including copy once and copy no more. The modified exchange key is then encrypted using the content key to render an encrypted modified exchange key, and the encrypted modified exchange key is then hashed with a nonce to render a bus content key.

Abstract: An information processing apparatus deleting, from a second recording medium, a copy of electronic data once recorded in the second recording medium, an original of the electronic data being recorded in a first recording medium different from the second recording medium, includes: an electronic data deleting part deleting the copy of the electronic data from the second recording medium, which copy can be used when authentication is succeeded in based on medium identification information which is prepared for identifying the first recording medium; an electronic data validating part validating the electronic data once invalidated when the copy of the electronic data was created in the second recording medium; and a medium identification information deleting part deleting the medium identification information of the first recording medium which was recorded in a predetermined storage area when the copy was created in the second recording medium.

Abstract: An apparatus and associated methodology are provided for distributing individual keys for deciphering scrambled digital data transmitted by a broadcasting system to a plurality of terminals connected to a data exchange network. The broadcasting system includes at least one portal designed to provide the individual keys, at least one scrambling platform and at least one server designed to broadcast the scrambled data. The scrambling period of the data is divided and transmitted into a succession of encoding periods CPi, each defining a period of validity of an individual key Ki. A set of individual keys are supplied at each connection of a terminal to the portal. The set of individual keys includes at least one key corresponding to the encoding period CPi, and at least one key corresponding to the encoding period CPi+1.

Abstract: Systems and methods that may configure features or functions of a device, such as a set top box, for example, using a chip are provided. The chip may include a processor and a memory array. The memory array may include a non-volatile memory and may be in communications with the processor. The non-volatile memory may include a set of mode control bits, each mode control bit being one-time programmable. The device features may be securely programmed via the set of mode control bits of the non-volatile memory that may be programmed during a programming cycle and may not be modified further after the completion of the programming cycle.

Abstract: At the moment of the diffusion of Pay-TV with multi-channel signals, each channel is associated to authorization messages (ECM) which allow to decrypt this channel according to the rights of the subscriber. When changing channel, a very short time is accepted before one has determined these new rights in relation with the new channel. The heavy encrypting algorithms are thus excluded. To avoid this drawback, to decrypt a channel, a system is proposed using the combination of the authorization information for a channel (ECM), and thus encrypted by a fast algorithm, with authorization information (MECM) for a group of channels. These latter are encrypted by a high security algorithm and are thus slower to decrypt.

Abstract: A system to change security levels is used to change the level of security used in a secured processing system. The system uses a status indicator to designate the security level being implemented. The security level can be upgraded to allow a higher level of security to be implemented with relative ease. However, in order to change from a higher level of security to a lower level of security, an authorization code is utilized to confirm that the change in security is authorized.

Abstract: A communication device (and its related method of operation), when accessing password protected voicemail services, may invoke an enhanced security feature which effectively masks at least the password digit values from being discernible by feedback to the user. This is especially important where portable wireless communication devices may have pre-stored password data for use with automated voicemail access—even in a “locked” mode. Unauthorized possessors of such a device might utilize conventional audible feedback during password transmission to decipher the password value. However, such lack of security is avoided by masking the password data values from the audible and/or visual user feedback, if any.

Abstract: A server apparatus includes a CPU, a RAM, a cipher processing unit for carrying out encryption and decryption, a communication processing unit for carrying out communication with an information processing terminal, and a data storage unit for storing information that does not require confidentiality. The server apparatus also includes a distribution information storage unit for storing information such as a program to be distributed, and a specific information distribution history holding unit for holding a specific information distribution history for managing a record of a program specific information of a program previously distributed to the information processing terminal.

Abstract: Subject matter includes methods of using conventional set-top boxes that receive streaming video modulated on coaxial cable rather than over an IP-based LAN as nodes in a media network. In one implementation, an exemplary adapter is used to integrate a conventional set-top box into a media network. In one implementation, an exemplary filter is used to reserve frequencies for communications between a conventional set-top box and a hub and to prevent communications from leaving a media network. In one implementation, an exemplary content protection method provides a way of encrypting program content on the media network in a manner that a conventional set-top box can decode.

Abstract: Data items are selected for inclusion in a data set so as to discourage a transmission of the entire set. Each data item includes section(s) which constitute(s) the complete data set. Each section contains a watermark that includes an identifier of the section, and an identifier of the data set. The identifier of the section may be the address of the section, and the identifier of the data set may be the serial number and an indicator of the total size of the data set. The presence of the data set is confirmed by checking the watermarks of randomly selected sections to verify that the original section that formed the data set is present. If a section is discovered to be missing or altered, subsequent processing of data items of the data set is prevented. The identifiers may be stored as a combination of robust and fragile watermarks.

Abstract: System for controlling the transmission of information between a receiver and a security module, especially for a pay television system, in which the transmitted information is encrypted and decrypted by means of a unique encryption key stored, on the one hand, in the receiver and, on the other hand, in the security module.

Abstract: Processing an MPEG elementary stream contained in multiple PID streams in a conditional access overlay environment. A multi-program transport stream contains numerous video and audio elementary streams. Critical packets in the elementary streams are encrypted with two different encryption schemes creating a stream having multiple PID values. The streams are then sent from the headend to individual set-top boxes. One encryption scheme can be decoded by the incumbent set-top box and the second encryption scheme can be decoded by the overlay set-top box. The overlay set-top box uses a dual filter system to filter and decode the PIDs for each video and audio stream of the desired program.

Abstract: A method and system for authenticated access to multicast traffic receives a request for a user to join a multicast channel. Access privileges of the user to the multicast channel are authenticated. The request is disallowed in response to at least an unsuccessful authentication.

Abstract: A method and apparatus for remote control and/or monitoring of a multimedia system includes processing that begins when a hand held device transmits a remote control/monitoring request to a server. The processing continues once a communication path is established between the hand held device and the server by having the server determine remote control and monitoring privileges of the hand held device. If the hand held device has at least a minimum level of remote control and monitoring privileges, the processing continues as the server processes the remote control/monitoring request with respect to at least one client to produce operational monitoring data. The processing continues as the server provides the operational monitoring data to the hand held device via the communication path.

Abstract: A method for managing access to scrambled broadcast or transmitted events received from a variety of service providers (including broadcast television networks, cable television networks, digital satellite systems). Each service provider employs the same public key for descrambling the access information message thereby permitting a user to access events from various service providers without changing the smart card. The method may also be expanded to manage access to a scrambled package of broadcast events.

Abstract: Methods, systems, and products are disclosed for specifying a signature for an encrypted packet stream. One method receives the encrypted stream of packets, and encryption obscures the contents of a packet. A signature for insertion into the stream of packets is specified, and the signature identifies a type of data encrypted within the stream of packets. The signature identifies the contents of the packet despite the encryption obscuring the contents.

Abstract: A system for authorizing the mass distribution of a digital message includes a CPU configured to prepare in digital form a message from an initiator, and to distribute the message to a plurality of recipients and/or recipient contact devices. The CPU is further configured to associate with the message data sets selected by the initiator, and: To compare the data sets with a set of authorization criteria, whereby the CPU determines if an authorization threshold has been crossed. To distribute the message if no authorization threshold has been crossed. To wait for authorization if any authorization threshold has been crossed, and, thereafter: to distribute the message if authorization is provided; or to not distribute the message if authorization is not provided.

Abstract: A method and structure for authentication in a system having devices capable of communicating via multiple signal paths. Authentication is carried out between first and second devices. A first device communicates with a second device over a first data signaling path of an interface between the first and second devices in a first portion of an authentication process. A second device communicates with the first device over a second data signaling path of the interface between the first and second devices in a second portion of the authentication process.

Abstract: A symmetric key management process in a communication network comprising a source device furnished with a source of data to be broadcast over the network and at least one receiver device intended to receive the broadcast data. The process comprises: determining and securely transmitting a first symmetric key to a receiver device; the receiver device encrypting the first symmetric key using a second symmetric key and transmitting it to the source device; and the source device recovering and storing it. Before transmitting the data to at least one reception device, the source device encrypts these data with the aid of the first symmetric key, then it transmits these encrypted data, accompanied by the first encrypted symmetric key, to at least one receiver device. The receiver device decrypts the first symmetric key with the aid of the second key which it possesses, then it decrypts the encrypted data with the aid of the first symmetric key thus recovered.

Abstract: A transmitter provides receivers conditional access to data transmitted via a network. A content encryptor is used to encrypt the data under control of a same authorization key before it is transmitted to all receivers. The transmitter has a storage with a plurality of device keys. A further encryptor is used for producing a key block with a plurality of entries, where each entry is associated with a respective one of the device keys. At least some of the entries contain a representation of the authorization key encrypted with the associated device key. The transmitter transmits the same key block to all receivers. The receiver has a subset of the device keys. A first decryptor is used to retrieve the authorization key by decrypting at least one entry of the key block that is associated with one of the device keys of the receiver. A second decryptor is used for decrypting the data under control of the authorization key.

Abstract: An information recording medium, such as an optical disk or the like, is provided for recording at least copyrighted content information and cipher key information. A part of the content information is scrambled and recorded in the information recording medium, and the scrambled and recorded part of the content information is obtained through scrambling using scramble key information, which is obtained by converting the cipher key information by the use of a non-scrambled part of the content information. The information recording medium has a recording area divided into a plurality of sectors. A plurality of data which the content information is divided into is recorded in the sectors. The non-scrambled part of the content information includes copy control information and a part of the content information that changes sector by sector.

Abstract: A transmission apparatus updates the encryption method in the event the encryption method is broken. The tool ID of a decryption tool for encrypted data is acquired, the presence of the tool is confirmed and the tool is then acquired and updated, and encrypted data is processed and transmitted based on rights information associated with the encrypted data.

Abstract: A system and method for enabling broadcast programs to be copied once only by consumer recorders includes writing a unique media identification on each blank disk to which content is to copied in a read-only area of the disk before it is initially recorded. Also, a one-way key management media key block is written to the disk. A content key is derived by combining a media key, derived from the media key block, with the media identification. Additionally, to facilitate copying the content one time only, an exchange key is established between the recorder and a sender such as a satellite receiver or a disk player that is associated with the recorder, and the exchange key is modified with one or more special numbers representing control commands including copy once and copy no more. The modified exchange key is then encrypted using the content key to render an encrypted modified exchange key, and the encrypted modified exchange key is then hashed with a nonce to render a bus content key.

Abstract: Claim processing system providing an interface to permit pharmacy and medical management systems to use the Internet to transmit third-party insurance claims on a claim-by-claim basis in real-time or near-real-time to one or more claim servers that receive insurance claim requests over the Internet in an encrypted form. The one or more claim servers decrypt the claim requests and forward them to a health network application which facilitates the submission of the claims to insurance payers and the response of the insurance payers to the requests. Payer responses are received by the claim servers, encrypted and forwarded to the pharmacy and medical management systems in real-time or near real-time.

Abstract: The invention, an electronic book selection and delivery system, is a new way to distribute books and other textual information to bookstores, libraries and consumers. The primary components of the system are a subsystem for placing text in a video signal format and a subsystem for receiving and selecting text that is placed in the video signal format. The system configuration for consumer use contains additional components and optional features that enhance the system, namely: (1) an operation center, (2) a video distribution system, (3) a home subsystem, including reception, selection, viewing, transacting and transmission capabilities, and (4) a billing and collection system. The operation center and/or video distribution points perform the functions of manipulation of text data, security and coding of text, cataloging of books, messaging center, and uplink functions.

Abstract: A single decryption engine is used for decrypting a plurality of encrypted transport streams. Packets in each of the plurality of encrypted transport streams are tagged with a tag value to indicate their origin stream. The tagged packets from the plurality of encrypted transport streams are merged into a merged transport stream. The packets in the merged transport stream are decrypted with the decryption engine to produce a decrypted merged transport stream. The decrypted merged transport stream is split into a plurality of decrypted transport streams, equal in number to the plurality of encrypted transport streams, by routing packets in the decrypted merged transport stream to specific decrypted transport streams according to their tag value. A null-packet padding technique, a gapped-clock technique and a multi-port static RAM controller technique are disclosed.

Abstract: Detection of watermarks in digital content by a system having a recording device and a playback device may be accomplished in such as a way as to improve the interoperability of the recording and playback devices. In one embodiment, a recording device having a first watermark detection component of a first sensitivity for detecting the watermark in digital content, interoperates with a playback device having a second watermark detection component of a second sensitivity for detecting the watermark in a digital content recording made by the recording device; such that the first sensitivity is more sensitive than the second sensitivity.

Abstract: A method of authorising conditional access to an encrypted digital data product, includes storing at least one set of entitlements in a secure device, each entitlement including a product identifier and expiry information, receiving entitlement control messages from a decoder system including a device for decrypting encrypted digital data products using control words, each entitlement control message including a product identifier, and in a first mode, returning at least one control word in response to an entitlement control message including a product identifier if the product identifier corresponds to a product identifier in a stored entitlement including expiry information indicating the entitlement to be valid, and, in a second mode, progressively adjusting a counter to a pre-determined value and returning at least one control word in response also to entitlement control messages including a product identifier if the product identifier corresponds to a product identifier in a stored entitlement including

Abstract: Delivery of audiovisual data may be accomplished using a satellite system. The user may have a set-top box connected to a satellite dish and a network connection. An operator server may receive a request for a title from the user via the network connection. The operator server may then determine if the title is in a transmission schedule and add it to the schedule if it is not. The data corresponding to the request may be encrypted using an encryption algorithm, and a corresponding decryption key may be generated. The key may then be forwarded to the user via the network connection. Then, according to the transmission schedule, the database containing the data will forward the data to a transmitter where it is communicated to a satellite in orbit, which then communicates the data to the satellite dish. The data may be stored in the set-top box for later playback.

Abstract: A personalized smart card stores therein public and private cryptography keys stored which are used to securely request and receive subscriber content data from a service provider, utilizing a remote control device.

Abstract: A system an method for distribution of electronic data over a network infrastructure that includes a client device for operation by a user desiring to receive the electronic data and server that contains the electronic data and offering the electronic data for downloading to the client device via the network infrastructure. The client device communicates a compound data key that includes a unique serial number associated with a particular piece of media to which the electronic data is to be stored to the server, vendor information and user information. The server encrypts the electronic data using the compound key, and downloads the encrypted electronic data to the client computer, where the client computer writes the encrypted electronic data to the particular piece of media such that the encrypted electronic data may only be accessed from the particular piece of media.

Abstract: A reprogrammable subscriber terminal of a subscription television service which can have the control program code of its control processor modified by downloading new program code from the headend. The control processor stores a boot program in an internal read only memory. Upon start up and resets, the boot program determines whether the control program should be changed from a command sent from the headend. The command, termed a parameters transactions, includes the number of expected download program code transactions required to complete the control code modification, the memory space areas where the code is to be loaded, and the channel over which the download program code transactions are to be transmitted. The channel is tuned and when the boot program receives all the download program code transactions accurately and stores them, the boot program will cause the control program to be restarted at a selected address of the new or modified control program code which has been downloaded.

Abstract: A system and a method are for determining the origin of a signal received by a pay television subscriber in a given region. A system includes an encryption device located at a main operator, a transmission device adapted to transmit an encrypted video signal towards at least one local operator, and a decryption device at the local operator. The decryption device includes an identification device for replacing all or part of the decrypted video signal with an identification signal characterising the decryption device.

Abstract: A data transmitting/receiving method for charging the reception of pay data in units of a reception or in units of a group to which receivers belong with a high degree of freedom and its receiver. The transmission side allocates the same group identification number (IRD_Gr_ID) to receivers which receive data from the transmission side under a reception contract, have different individual identification numbers (IRD_ID), and belong to the same group, and manages the reception contract by means of the individual identification number (IRD_ID) and the group identification number (IRD_Gr_ID).

Abstract: When inserting several types of digital watermark information into the digital information, the visual time stamp detection circuit extracts the time stamps corresponding to the visual data in the visual data stream and the digital watermark insertion circuit specifies the types of the digital watermark information to be inserted corresponding to the extracted time stamps and inserts the digital watermark information of the applicable types into the visual data so that such information is synthesized with the audio data by the mixer circuit.

Abstract: A method for addressing terminals for receiving television programs subject to charge includes dividing the terminals into respective groups, each group having a respective group address. A respective identifier is assigned to each of the terminals of a group, each identifier being a respective binary vector. A data word and the respective group address of a first group is sent so as to address predetermined terminals of the first group. The data word is generated by logically combining the respective binary vectors of the terminals of the first group with a further binary vector, the further binary vector indicating the predetermined terminals.

Abstract: A method for securely encoding and transmitting a message by an originating device to one of a plurality of recipient devices, said message being associated with a particular one of a plurality of application running on the originating device.

Abstract: A method and apparatus for controlling integrated receiver operation in a communications terminal includes using an electronic device having a broadcast receiving module and a two-way communications module. The device may use the configuration of the receiving module to form a message to be sent to a peer device. The electronic device can use an incoming message to change a configuration of the receiving module. The incoming message may be sent from a notification node that is remotely configurable by a user. The receiving module can be controlled from an application program on the electronic device. In one aspect, the receiving module can be controlled from a Java™2 Micro Edition MIDlet.

Abstract: A data receiving method and unit extracts required data from among received digital signal data, and uses a predetermined decoding key to decode the extracted data. In the method and unit, it is determined whether the decoded data is normal. If it is determined that decoding has not been normally performed, corresponding data is deleted.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.