Abstract: The present invention relates to an information processing system, an information processing apparatus and method, and a program in which the purchase of content can be facilitated. When a device to which content data is downloaded and a device for giving an instruction to purchase the content data are different, a purchase form for purchasing the content data is sent to the device for giving an instruction to purchase the content data. The user ID and password are input into the purchase form, and the device to which the content data is downloaded is determined by the user ID. If the device to which the content data is downloaded cannot be specified because the user registers a plurality of devices, a destination determination form for specifying the device to which the content data is downloaded is sent. The content data is then distributed to the device indicated in the destination determination form. The present invention is applicable to a server for executing processing concerning content data.

Abstract: In an embodiment, an apparatus includes a control logic to selectively audit transactions between the apparatus and a separate entity based on a type for the transactions. The apparatus also includes an encryption logic to encrypt an audit log that includes at least one attribute of one of the selectively audited transactions.

Abstract: A personal video recorder (PVR) enables delivery of audio-visual content and associated metadata to storage devices. The PVR is configured to access a plurality of services using a plurality of storage modules. Each storage module is dedicated to a single designated content provider. One or more of the storage modules are removably coupled to the PVR. A disconnected storage module can be reconnected to another PVR different from the PVR from which the storage module was disconnected. Where authorization is required to access content stored on the storage module, authentication is performed each time the removable storage module is reconnected to a PVR.

Abstract: Executable applications on a gaming machine are verified before they can be executed, for security purposes and to comply with jurisdictional requirements. Unlike in prior systems for authenticating the executable applications, embodiments allow for new executable applications to be provided and verified over time with different private and public key pairs, even after the operating code of the gaming machine is certified by the jurisdiction and deployed in the field.

Abstract: Systems and methods for site-dependent embedded media playback manipulation whereby a media owner can enable limited embedding on non-owned or non-monetized websites to direct traffic to a more valuable location. The content owner can specify sets of internet locations with associated sets of rules governing content playback criteria as well as restrictions based upon user categorizations. A playback restriction system consists of a media delivery system and a playback rules system. The media delivery system controls the delivery of the media file with embedded restrictions. The playback rules system controls the nature of the restrictions and the rules of when they are applied. Users will be directed to the location of a more valuable website where the media can be viewed with a less restrictive set of rules.

Abstract: A method is provided for viewing a bookmarked video clip. The method includes establishing communication over a broadband network with a first network element on which at least one bookmark resides. The bookmark includes metadata identifying a bookmarked video clip of a video program and specifies a network address at which the bookmarked video clip is located. Upon user request, metadata associated with a specified bookmark is received. Communication is established with a second network element on which the specified bookmarked video clip is located using the network address of the specified bookmarked video clip provided in the metadata. The bookmarked video clip is received from the second network element. The bookmarked video clip is encrypted in accordance with a digital rights management scheme. The bookmarked video clip is decrypted and rendered.

Abstract: A microbrowser such as web-enabled wireless telephones and personal digital assistants allows a user to configure types of objects to be blocked from download including object memory consumption, display area, download time, and restrictions on animated images and executable scripts. Microbrowser state conditions such as battery level and network connection mode are considered when providing said limitations such that more restrictions may be placed during low battery periods to maximize battery life. For example, during low battery conditions or analog connection mode, a user may configure an enhanced microbrowser not to download advertisements, run scripts or animated objects in order to maximize remaining battery life. In another example, a user may configure an enhanced microbrowser to block the download of objects containing audio, or which will occupy more than a certain percentage of the available display area.

Abstract: Methods and systems for enabling content to be securely and conveniently distributed to authorized users are provided. More particularly, content is maintained in encrypted form on sending and receiving devices, and during transport. In addition, policies related to the use of, access to, and distribution of content can be enforced. Features are also provided for controlling the release of information related to users. The distribution and control of contents can be performed in association with a client application that presents content and that manages keys.

Abstract: Consumers may utilize computing devices to assist in the purchase and/or loyalty process, and in particular, the consumer may utilize a PDA to facilitate the purchase and/or loyalty process. During the purchase and/or loyalty process, the consumer may need to insure that any content downloaded or used in association with the PDA is secure in how it is collected, assembled, and delivered to the PDA device. This system and method secures the data from its source to when it is actually viewed or used by the authorized user. The exemplary system and method may establish a PDA portal link to the web site for collecting specified information for a user and transmitting the information to the remote device. To receive the information, the PDA contacts the portal and establishes a connection, authenticates itself to the network and allows the user to complete secured transactions or transmissions over the network.

Abstract: Printing methods and systems that provide both a secure value label printing mode of operation and a non-secure mode of operation that allows generic printing of non-value items without compromising the security feature of the secure printing mode are described. If the printing system determines the image is a non-secure image such as an address label or other non-value graphic, the printing system utilizes the non-secure mode and disables the use certain printhead elements. In such a system, the enforced print disabled white bands are enforced in non-secure mode such as by actually disabling the print drive mechanism that allows a row to be printed or by populating certain regions of the print buffer with zero values.

Abstract: Transaction processing in an offline environment for a prepaid product comprising a portable consumer device includes responding to presentation of the prepaid product at a reader for offline processing by initiating operation of the prepaid product, receiving data from the prepaid product at the reader that indicates the prepaid product is associated with a prepaid account balance, determining that the prepaid product is in a negative balance condition, and taking preventive action in response to the negative balance condition such that future acceptance of the prepaid product at a reader is prevented.

Abstract: Virtual account based digital cash protocols employ two pairs of private and public keys. Each public key is certified separately and the protocols do not use any blind signature schemes. As a result, the virtual account based digital cash protocols provide strong protection of the user privacy by using two certified public keys instead of a blind signature. One pair of certified keys consists of one master user private key and one master user public key. A second pair of certified keys consists of one pseudonym user private key and one pseudonym user public key. The use of a master key pair and a pseudonym key pair circumvents the need for blind signatures. As a result, the proposed protocols do not require blind signatures and do not add additional overhead and security requirements necessitated by conventional blind signature schemes.

Abstract: A method for controlling access to protected objects in a distributed environment, including providing a user key KU corresponding to a public key KUP of a user; receiving a server key KS from a remote server; generating the combination key KC by decrypting a metadata field Datai using the key KU. The public key KUP is used to generate the metadata field Datai, and the metadata field Datai is stored as part of a protected object's metadata. The object key KOBJ is calculated from the combination key KC and the server key KS by either XORing the combination key KC and the server key KS, or by decrypting the combination key KC using the server key KS. The object key KOBJ is used to encrypt and decrypt the protected object. A user who has access to the protected object having structure has access to any unprotected file or unprotected structured objected inside the structured protected objected, but does not have access to any structured protected object without an additional key.

Abstract: A card holding device featuring a housing with a plurality of slots in the top panel that allow passage of credit cards. Card holding mechanisms are disposed in the housing, which engage the credit cards. The card holding mechanisms can store the cards or eject the cards when activated. The card holding mechanisms can be locked and unlocked via a biometric scanner. Disposed on the housing is a display adapted to display the names or icons of each credit card stored in the device. When a user presses the icon, the card holding mechanism is activated and ejects that specific credit card from the housing.

Abstract: A business object model, which reflects data that is used during a given business transaction, is utilized to generate interfaces. This business object model facilitates commercial transactions by providing consistent interfaces that are suitable for use across industries, across businesses, and across different departments within a business during a business transaction. In some operations, software creates, updates, or otherwise processes information related to a number range, a number range profile, a payment card payment authorization, and/or a product template template business object.

Abstract: A workflow order is created for the object. Public parameters are received from a key generation center at a computer associated with an object master. A public key is generated at the computer system based on a user identifier and the public parameters, wherein the user identifier is comprised of user related information. The object is encrypted using the public key such that the object cannot be opened without the a private key, wherein the object is a composite document comprising multiple elements of documents of different formats, and wherein the private key is generated in response to a request from an authenticated user using the user identifier at the key generation center. Access to the multiple elements of the object is controlled based on workflow order.

Abstract: A method is described for managing rights for digital music, including registering music players, from among a plurality of music players, with digital archives that store songs, from among a plurality of digital archives, wherein songs can be copied from digital archives to music players, and from music players to digital archives, permitting a music player to copy a song from a digital archive for which it is registered, permitting a digital archive to copy a song from a music player that is registered with the digital archive, restricting a music player from copying a song from a digital archive for which it is not registered, and restricting a digital archive from copying a song from a music player that is not registered with the digital archive. A system and a computer-readable storage medium are also described.

Abstract: A transaction handler receives, for forwarding to a sponsor account's issuer, a coupon authorization request message from a merchant's acquirer that identifies the sponsor account and a coupon for an item being purchased by a consumer in a transaction with the merchant. The issuer determines eligibility of the coupon for use by the consumer, and sends an authorization response message to the merchant via its acquirer and the transaction handler for the application of a corresponding discount for the item when the coupon is eligible. One or more coupon eligibilities for the purchase of the item by the consumer from the merchant can be derived from comparisons of the transaction to predetermined times, geographies, jurisdictions, sets of merchants, and/or the number of times that coupons have been used in other transactions. The transaction handler can further process the transaction for authorization the consumer's account to pay of the transaction.

Abstract: A non-invasive metering system enables on-demand, metered usage licensing of software applications. A packaging module generates a secure application package for an original, unmodified application authored by a software publisher. The software publisher need not directly modify the code of the original application. Rather, the packaging module includes, within the secure application package but separate from the code of the application itself, a shell application that controls runtime aspects of the application, such as metering of the application. The secure application package is made available to users wishing to use the application on a metered basis.

Abstract: A method and apparatus for detecting a Trojan horse in a suspicious version of a software application in the form of at least one electronic file. A computer device determines a source from which the suspicious version of the software application was obtained. A comparison is then made between the source from which the suspicious version of the software application was obtained and a source from which an original, clean version of the software application was obtained. If the sources differ, then it is determined that the suspicious version of the software application is more likely to contain a Trojan horse than if the sources were the same.

Abstract: A system and method for verifying a digital signature on a certificate, which may be used in the processing of encoded messages. In one embodiment, when a digital signature is successfully verified in a signature verification operation, the public key used to verify that digital signature is cached. When a subsequent attempt to verify the digital signature is made, the public key to be used to verify the digital signature is compared to the cached key. If the keys match, the digital signature can be successfully verified without requiring that a signature verification operation in which some data is decoded using the public key be performed.

Abstract: A technique for multiple application activation is disclosed. The technique includes a client device receiving from a server an indication of applications available to purchase and a user selecting at least two of the indicated applications to be purchased. Then at least one of the applications is automatically received on the networked computer in response to the applications being selected. A second of the applications is automatically received after the first application has been received. While the second application is being received, the first of the applications is automatically installed and activated.

Abstract: Methods and systems for licensing a document template are provided herein. The method includes obtaining, within a computing device, a license for a document template from a marketplace service. The method also includes downloading the document template to the computing device. The method includes providing a functional experience of a document derived from the document template to a licensed user. The method further includes sharing a license-restricted document with an unlicensed user in response to an input from the licensed user, wherein the license-restricted document provides a reduced-functionality experience of the document derived from the document template to the unlicensed user.

Abstract: A computerized vehicle control system and device for limiting the functionality of a mobile asset (e.g., vehicle) capable of performing a plurality of mobile asset functions. The device includes an asset monitor, a mobile wireless transceiver, and a mobile asset processor. The asset monitor is in communication with a first mobile asset for collecting monitored data associated with the first mobile asset. The mobile wireless transceiver is adapted to interface with a management computer. The mobile asset processor is adapted to receive the monitored data from the asset monitor; determine that a first mobile asset function of the plurality of mobile asset functions should be limited; and limit operation of the first mobile asset function. The mobile asset control device can be adapted to override the functionality of the mobile asset, based on the navigation, relative location of the mobile asset, or business rules.

Abstract: Systems and methods for hiding details associated with orders in an electronic commerce system are disclosed. An order is submitted by a user associated with a user account, and the order is processed by the electronic commerce system. A security measure can be imposed on the order and/or products associated with the order. An additional authentication layer can be enforced with regard to the order and/or products associated with the order.

Abstract: An information processing apparatus includes an entrance and exit detection module, an organization information obtaining module, a user number calculation module, a seat determination module and a presentation module. The entrance and exit detection module detects a user's entrance and exit to and from a room. The organization information obtaining module obtains user information representative of a user belonging to an organization using the room by using organization user information storing organization information representative of the organization and the user information representative of the user belonging to the organization. The user number calculation module calculates the number of users of the organization using the room. The seat determination module associates with each other the organization information representative of the organization and seat information representative of seats in the room, and determines a seat for the user whose entrance is detected.

Abstract: Even if the process for permitting execution of software is enabled in accordance with first license information, upon transmitting an invalidation signal from the invalidation signal transmitter 116, the execution of the process for permitting execution of software is limited in accordance with second license information. Thus, the invalidation signal can limit the execution of the process for permitting execution of software in accordance with specific license information and the execution of the licensed software without fail.

Abstract: According to one embodiment, a storage stores secret data, first identification data, and a first random key. A generation module generates first authentication data from the secret data, first identification data, and second identification data of a removable medium. A first verification module determines whether the first authentication data and second authentication in the removable medium are identical. A second verification module determines whether the first random key and a second random key in the removable medium are identical, if the first and second authentication data are identical. An activation module activates the data processing apparatus if the first and second random keys are identical.

Abstract: Certain exemplary embodiments relate to techniques for determining the correct item serial number structure, even when information regarding the serial number data and/or structure is lacking. Such techniques advantageously promote data integrity by helping to ensure that the desired data is captured correctly, while also reducing (and sometimes even eliminating) the need to obtain detailed information regarding serial number structure and intelligence that sometimes is guarded by producers/manufacturers. Statistical sampling of collected unknown data formats may be used to help decipher product identification numbers (or other numbers) such as product serial numbers through a repetitive process of scanning a known constant such as the UPC number, followed by a variable number such as a products serial number. Certain exemplary embodiments check serial number against a database containing algorithms to determine if and which algorithm is used to create such serial numbers.

Abstract: Targeted products are offered over a communications network. Product data for a plurality of products from a plurality of distributors for the products is received. Customer data from a plurality of customers comprising personal information about customers is received. Using the data, at least one user-specific product offering from the plurality of products is generated. Automated messages comprising the at least one user-specific product offering to the one or more customers are then sent.

Abstract: A portable consumer device includes a base, and a computer readable medium on the base. The computer readable medium comprises code for an issuer verification value and a supplemental verification value. The issuer verification value is used by an issuer to verify that the portable consumer device is authentic in an on-line transaction and the supplemental verification value is used to verify that the portable consumer device is authentic in an off-line transaction.

Abstract: A video on demand system in the context of the Internet, for video rentals. A user accesses an on-line store to rent a video program or movie. The rental is for a limited time (such as 30 days) and within that thirty days, the video program or movie can only be viewed for a 24 hour time window. The time limits are enforced by the on-line store which maintains a database of each rental transaction and allows supply of the needed keys for decrypting the (encrypted) video or movie only if within the time limits.

Abstract: An apparatus connected to a license management apparatus, storing license status data with license identifiers, via a network, and includes a part for receiving a request to acquire a license corresponding to a license identifier, a part for receiving designation of at least one electronic device for acquiring the license, a part for obtaining a license file corresponding to the license identifier from the license management apparatus, updating the license status data corresponding to the license identifier, and recording the license file to a storage part with the electronic device, a part for executing acquirement, and a part for executing re-execution in a case where the acquiring of the license by the electronic device is determined as a failure according to the result. The re-execution includes displaying the failure of the acquirement on a screen and re-executing the acquirement with the license file based on data input to the screen.

Abstract: Transaction processing involves receiving data from an access transaction application of a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value wherein, with the exception of the transit verification value, the access transaction data string is substantially similar to a retail data string comprising retail data, wherein the access application data string is adapted for use with an access transaction processing system and the retail data string is adapted for use with a retail processing system. The transaction processing involves processing access transaction application data for selective authorization of the transaction.

Abstract: Systems and methods that can facilitate the utilization of a memory as a slave to a host are presented. The host and memory can provide authentication information to each other and respective rights can be granted based in part on the respective authentication information. The host can determine the available functionality of the memory. The host can activate the desired functionality in the memory and can request memory to perform the desired function(s) with regard to data stored in the memory. An optimized controller component in the memory can facilitate performing the desired function(s) associated with the data to generate a result. The result can be provided to the host, while the data and associated information utilized to generate the result can remain in the memory and are cannot be accessed by the host.

Abstract: The present invention introduces methods and apparatus of encrypting/decrypting three-dimensional (3D) video content. The inventive methods and apparatus can achieve a flexible payment/authorization mechanism for the 3D video content. A user can choose to view only 2D images corresponding to the video content, or pay an authorization fee that allows the user to view the entire 3D video content.

Abstract: A method, system and computer program product is described for providing meals to consumers in a school district. The method includes utilizing a computer processor to obtain meal offering submissions from food service suppliers, determining whether the meal offering comply with predefined guidelines and displaying the meal offerings that meet the guidelines on a client for selection by a user, and obtaining via user input, orders for the meal offerings.

Abstract: A microbrowser such as web-enabled wireless telephones and personal digital assistants allows a user to configure types of objects to be blocked from download including object memory consumption, display area, download time, and restrictions on animated images and executable scripts. Microbrowser state conditions such as battery level and network connection mode are considered when providing said limitations such that more restrictions may be placed during low battery periods to maximize battery life. For example, during low battery conditions or analog connection mode, a user may configure an enhanced microbrowser not to download advertisements, run scripts or animated objects in order to maximize remaining battery life. In another example, a user may configure an enhanced microbrowser to block the download of objects containing audio, or which will occupy more than a certain percentage of the available display area.

Abstract: Data security devices are provided which store user data and interact with terminal devices to provide information about the stored user data. Security device has memory for storing user data, an interface for transmission of data communications connectable to a data communications network, and a controller. The controller processes a request from the terminal device for information about said user data by first generating a message. The message is generated to permit verification, using secret data, that the message was generated by the controller. The controller sends the message to the terminal device for communication to a publication entity for publication of the message. The controller then receives from the terminal device a cryptographic construction. The controller checks validity of the cryptographic construction for said message, and subsequent supply of the information requested about the user data to the terminal device is then dependent on said cryptographic construction.

Abstract: Methods, systems, and articles of manufacture consistent with the present invention provide an electronic marketplace that matches units of content from secondary content providers with suitable vacancies from primary content providers. Vacancies may constitute, or be included in, any digital transmission containers, such as a television or radio programming, web pages, and the like. Specifically, the electronic marketplace automatically matches content offered by secondary content providers with vacancies offered by primary content providers thus filling the vacancies in these containers through a real-time content trading, placement, and distribution system. To do so, attributes associated with the vacancies and with units of secondary content are used to trade and match suitable vacancies with suitable content. This invention enables both secondary content owners and vacancy owners (primary content providers) to obtain the full commercial benefit of their secondary content and containers.

Abstract: A system is disclosed including a docking mechanism and mobile device having a resident client application are used to establish a network connection between the mobile device and a local area network such as an enterprise Private Branch Exchange (PBX). Once docked, the client application, a mobile unified communication integrated dialer (MUCID), is able to be used to select between carrying a communications call over a land line (through the PBX system) or a mobile telephone line (through a cellular communication network). User mobility is provided by allowing a docked mobile device to be undocked after transfer of an active call being carried over the PBX onto the mobile device. Communications protocols are provided between the MUCID and the docking station.

Abstract: Systems and methods are described for performing digital rights management. In one embodiment, a digital rights management engine is provided that evaluates license associated with protected content to determine if a requested access or other use of the content is authorized. In some embodiments, the licenses contain control programs that are executable by the digital rights management engine.

Abstract: A plurality of institutions (such as financial institutions) contribute data to a data analysis and linking system. The system analyzes the data to create data nodes (records) associated with an entity, where the entity may be, for example, a person/individual, business, organization, account, address, telephone number, etc. After data is linked, and in order to retrieve linked data, a requester may provide to the system an identifier associated with an entity. The linked data provided by the system in response to the identifier may be in the form of a network of data nodes associated with the entity and for use in assessing risk, such as risk associated with a transaction being conducted by a person. The linked data may also be analyzed at the system to score risk associated with the entity, and the risk score provided in conjunction with or in lieu of the network of data nodes.

Abstract: An authentication method in a system having a display and a storage device is provided. The authentication method includes the steps of registering an object selected for each user from among a plurality of visually distinguishable objects prepared in advance as a key object in the storage device; and presenting the plurality of objects to the display, accepting selection of an object by a user to be authenticated, and performing authentication based on matching/mismatching of the selected object with the key object registered in association with the user. The step of registering includes a step of determining a degree of freedom of selection of the object at the time of registration of the key object according to a degree of overlapping of the key object already registered in the storage device.

Abstract: Various embodiments of the present invention are directed to methods and systems for distributing digitally encoded information. In one embodiment of the present invention, a licensee desiring to purchase digitally encoded information from a copyright owner posts collateral with a third party entity. The third party entity then provides authentication information to the licensee. The licensee transmits proof of knowledge of authentication information to the copyright owner. The copyright owner sends proof of the licensee's knowledge of authentication information and digital media to the third-party entity. The third-party entity embeds the authentication information in the digitally encoded information, and delivers the digitally encoded information with embedded authentication information to the licensee.

Abstract: A method and system for providing geographic location notifications of payment transactions is disclosed. One embodiment of the invention is directed to a method including receiving an authorization request message associated with a transaction, the transaction associated with a portable consumer device and an access device at a merchant. A geographic location of the transaction is determined. It is determined whether a notification message indicating that the transaction is occurring is required. Upon determining that the notification message is required, the notification message is sent to a notification device operated by a consumer and the notification device receives the notification message substantially simultaneously with the merchant's receipt of an authorization response message. A graphical depiction of the notification message is displayed on a map on the notification device.

Abstract: Methods, systems, and articles of manufacture consistent with the present invention provide an electronic marketplace that matches units of content from secondary content providers with suitable vacancies from primary content providers. Vacancies may constitute, or be included in, any digital transmission containers, such as a television or radio programming, web pages, and the like. Specifically, the electronic marketplace automatically matches content offered by secondary content providers with vacancies offered by primary content providers thus filling the vacancies in these containers through a real-time content trading, placement, and distribution system. To do so, attributes associated with the vacancies and with units of secondary content are used to trade and match suitable vacancies with suitable content. This invention enables both secondary content owners and vacancy owners (primary content providers) to obtain the full commercial benefit of their secondary content and containers.

Abstract: Server-side validation of hardware specific software product licenses is described herein.

Abstract: A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company's data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

Abstract: A method to distribute and monetize media content by associating media content with a cost stored in associated media information within a media package. The user can elect to pay all of the cost, a portion of the cost, or none of the cost. When the user does not pay all of the cost, informative messages paid for by sponsors can be presented as part of the presentation of media content.