Abstract: There is provided a system and method for quality assured media file storage. There is provided a method for use by a processor to verify quality of a new media file by transcoding a master media file into a first media file, determining a quality of the first media file, applying a first quality assurance scheme to the first media file for an assured quality, calculating a first hash value using a hash function for the first media file, storing the first hash value in a memory, transcoding the master media file into a new media file, calculating a test hash value using the hash function for the new media file, and searching the memory for the test hash value to decide whether the new media file has the assured quality, without having to apply the first quality assurance scheme again to the new media file.

Abstract: A method to distribute and monetize media content by associating media content with a cost stored in associated media information within a media package. The user can elect to pay all of the cost, a portion of the cost, or none of the cost. When the user does not pay all of the cost, informative messages paid for by sponsors can be presented as part of the presentation of media content.

Abstract: A system comprises a plurality of image forming apparatuses, wherein a first image forming apparatus includes: a correspondence determination unit that determines which function in the first image forming apparatus the service provider of the first image forming apparatus corresponds to; a provider determination unit that determines a second image forming apparatus in the plurality of image forming apparatuses that includes the same service provider as the service provider of the first image forming apparatus; a license verification unit that verifies whether license information is assigned to the service provider of the second image forming apparatus determined by the provider determination unit; and an assignment unit that assigns, to the second image forming apparatus to which the license information is not assigned, license information of the service provider from the first image forming apparatus to the second image forming apparatus and server relation information that is information for accessing a ser

Abstract: The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions. Distributed and other operating systems, environments and architectures, such as, for example, those using tamper-resistant hardware-based processors, may establish security at each node.

Abstract: The disclosure relates to accessing computer resources by sensing audio with a microphone. One claim recites a method comprising: obtaining data in a first user's cell phone, the data corresponding to microphone-captured audio; responsive to the data, the first user's cell phone receiving a service provided by a first party, the service comprising facilitating access to a computer resource over a network; in which the first user does not provide a fee to the first party for the service, as the first party bills a charge connected with the service to a sponsoring party. Of course, other claims and combinations are provided as well.

Abstract: A utility meter implementing the ANSI C12.19 standard is able to bypass security processing using Decade4 security tables for a single data access operation. The meter includes a procedure that is executed by a processor in the meter to process requests for security keys. Data internal to the meter is used to generate a security key. The security key is used by the requesting external device and the procedure to generate an access key. The external device sends its access key to the procedure so it may be compared to the internally generated access key. If both access keys are the same, a data access operation performed by the external device is allowed without reference to the Decade4 security tables. Once a timeout or data access operation is performed, subsequent data access operations are subject to processing in accordance with the Decade4 security tables unless another security key is requested for repetition of the process.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: The present invention provides systems and methods which afford a technical application for insuring, bonding, and underwriting a transmission of a data set, streaming data, and/or document over the Internet through TCP/IP and all other electronic media such as WAP, VOIP, fiber optic channels, microwave channels, and through standard electrical switches, electrical outlets and power lines. The present invention includes a computer-readable medium having computer-executable instructions to cause a system perform a method for insuring, bonding, and/or underwriting data transmission. The method includes enabling a first remote client coupled to a communications network to insure, bond, and/or underwrite a transmission of an electronic data set, streaming data, and/or document, with a selected coverage type for a selected coverage amount, from the first remote client to one or more second remote clients. The method includes charging a fee to an appropriate account for the selected coverage type and amount.

Abstract: Systems and methods are provided for transmitting data for secure storage. For each of two or more data sets, a plurality of shares are generated containing a distribution of data from an encrypted version of the data set. The shares are then stored in a shared memory device, wherein a data set may be reconstructed from a threshold number of the associated plurality of shares using an associated key. Also provided are systems and methods for providing access to secured data. A plurality of shares containing a distribution of data from an encrypted version of a data set are stored in a memory device. A client is provided with a virtual machine that indicates the plurality of shares, and the capability to reconstruct the data set from the plurality of shares using an associated key.

Abstract: A method of performing digital asset management of content is provided. The content is identified with an identifier. The identifier can be identified with a digital watermark, header file, or both. The identifier is linked to usage rules to regulate usage and protect the content. The usage rules can be maintained on a remote or local database or server. Once extracted, an identifier is used to index the database to locate a corresponding usage rule, and can be used to override copy control information with proper purchase and subsequent protection. Content can be managed from such. In another embodiment, an identifier is used to track usage, such as amount of content viewed, time played, and copies made. In yet another embodiment, a content identifier is used to regulate content throughout a distribution chain, and a distributed set of databases with information relevant only to the owner of the database act as one database due to a central router.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: An approach is provided for remotely participating over a wireless network in an event. Certification information corresponding to a ticket purchased for an event is received at a proxy server. The ticket permits control, via a mobile device over a wireless network, of a remote camera to view an event from a plurality of viewing perspectives. The proxy server maintains a plurality of communication sessions with the mobile devices over the wireless network, wherein the communication sessions correspond to the event and provide participation in a virtual community to experience the event.

Abstract: Online sale of software product use licenses through a data network by offering software products (SOFT) through vendor sites, purchasing a license on-line on one of said vendor sites, and activating said license on-line by a different licensing site. A specific component (COMP) is provided with the software product (SOFT) and identifying data (IDV) of the vendor site are transmitted during the download of the software product (SOFT). When the component (COMP) is executed in an equipment, the component (COMP) locally accesses said data (IDV) and identifying data (IDL) of the licensing site and activates the license by setting up an on-line communication with the licensing site.

Abstract: Online sale of software product use licenses through a data network by offering software products (SOFT) through vendor sites, purchasing a license on-line on one of said vendor sites, and activating said license on-line by a different licensing site. A specific component (COMP) is provided with the software product (SOFT) and identifying data (IDV) of the vendor site are transmitted during the download of the software product (SOFT). When the component (COMP) is executed in an equipment, the component (COMP) locally accesses said data (IDV) and identifying data (IDL) of the licensing site and activates the license by setting up an on-line communication with the licensing site.

Abstract: Portable digital rights for multiple devices is described. In an embodiment, a digital rights management (DRM) system includes a first device with a removable component configured as a token that is associated with a DRM license. The first device also includes a removable memory card that stores protected media content on which the first device can perform actions as permitted by the DRM license. The DRM system also includes a second device that can have the removable component and the removable memory card when removed from the first device and installed in the second device such that the second device can perform the actions on the protected media content as permitted by the DRM license.

Abstract: A financial transaction processing system in a legacy financial transaction network for wireless mobile handset devices having an internal SIM or USIM under control of a service provider in a wireless communication network connected to an open world communication network in which the SIM or USIM has a secure part of an account management application that manages a financial account in the handset and adjusts the financial account when the user of the handset communicates a number related to the mobile number of the handset to a legacy remote card terminal which routes the number and transaction data to the secure link server of the service provider.

Abstract: A non-transitory machine-readable storage medium storing program code for causing a processor to establish a plurality of links to a plurality of devices communicatively coupled to the processor, a particular link of the plurality of links supporting control-plane communications between the processor and a particular device of the plurality of devices over a wireless access network; receive a server message from a particular server of a plurality of servers communicatively coupled to the processor, the server message comprising message payload for delivery to the particular device; generate an encrypted message comprising the message payload and an identifier identifying a particular agent of a plurality of agents on the particular device; and send the encrypted message to the particular device over the particular link, wherein establishing the plurality of links comprises executing a link initialization sequence associating the particular link with a credential associated with the particular device.

Abstract: A database encryption system and method, the Structure Preserving Database Encryption (SPDE), is presented. In the SPDE method, each database cell is encrypted with its unique position. The SPDE method permits to convert a conventional database index into a secure one, so that the time complexity of all queries is maintained. No one with access to the encrypted database can learn anything about its content without the encryption key. Also a secure index for an encrypted database is provided. Furthermore, secure database indexing system and method are described, providing protection against information leakage and unauthorized modifications by using encryption, dummy values and pooling, and supporting discretionary access control in a multi-user environment.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: A method is disclosed for assigning a domain to a user to enable direct domain to domain content transfers between users. Steps include registering and assigning user identifications to a first user and a second user; assigning a first domain to the first user and a second domain to the second user; managing the assigned first domain by assigning a first content provided by the first user to the first domain; managing the assigned second domain by assigning a second user provide second content to the second domain; receiving a request from a client for the first content at the first domain; and fetching and returning the first content from the first domain and the second content from the second domain to the client, wherein fetching and returning is performed by the server computer without using web-based linking.

Abstract: Some embodiments provide multi-tenant billing systems and methods whereby data network usage fees that are associated with delivering select content of different content providers over a data network are passed to the content provider that originates or is the source for that select content instead of the end users that request and receive the select content. A deep packet inspection server or a billing server may be configured with a list of identifiers to distinguish between the network usage that is related to the delivery of the designated free content from the network usage that is not related to the delivery of the designated free content. The network usage can be distinguished by filtering or processing usage logs that track the network usage using the configured list of identifiers. Such filtering or processing can be done in real-time or in a delayed manner in a standalone or integrated system.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.

Abstract: In accordance with a broad aspect, a method is provided to securely configure a computing device. A configuration indication is received into the computing device, including receiving a digital signature generated based on the configuration indication. Generation of the digital signature accounts for a unique identifier nominally associated with the computing device. The received configuration indication may be verified to be authentic including processing the unique identifier, the received configuration indication and the received digital signature. The computing device may be operated or interoperated with in accordance with the received configuration indication. In one example, a service interoperates with the computing device. For example, the computing device may be a portable media player, and the service may provide media to the computing device based on a capacity indication of the configuration indication.

Abstract: An intelligent enterprise architecture (LEA) for an enterprise is defined. One or more IEA entry points are selected. IEA entry points represent a starting point for defining the IEA, which is an architectural development process for defining an enterprise computing architecture within a smart computing system. One or more business drivers for pain points in the enterprise are associated with a selected IEA entry point. A business value model is generated and utilized to focus a scope of the business drivers for the selected IEA entry point. An optimal IEA that satisfies the business drivers to ameliorate the pain points in the enterprise is then defined.

Abstract: A method, performed by a video provisioning system, may include receiving a request for a first digital rights management (DRM) token, associated with a video asset purchased via the video provisioning system, from a browser application associated with a user device and providing the first DRM token to the browser application. The method may further include receiving a license authorization request to issue a DRM license for the video asset, where the license authorization request is received from a license server, where the DRM license is to be used by the user device to decrypt the video asset, and where the license authorization request includes a second DRM token; determining whether the second DRM token matches the first DRM token; and authorizing the license server to issue the DRM license for the video asset, when the second DRM token matches the first DRM token.

Abstract: Particular embodiments provide a method for orchestrating an order fulfillment business process that includes a sub-process. In one embodiment, abstraction of business processes from an underlying information technology (IT) infrastructure is provided. An orchestration process can be designed using sub-processes such that the sub-process is assembled at run-time into an executable process. The sub-process may be defined in an interface as a single step. A plurality of services as then assembled as steps in the executable process at run-time.

Abstract: Methods, systems, and computer program products for storing usual order preferences associated with a point of sale transaction involving an identification article. In one embodiment, the method includes receiving an initial order involving the use of an identification article for purchasing at least one good or service. As part of receiving the initial order, a query asking if the initial order is to be designated as a usual order is issued. The method also includes registering the initial order as the usual order if a received response to the query indicates a usual order designation and storing an indication of the usual order in a storage medium.

Abstract: A system and method for providing a secured information vault so that individual owners of personal data may control and manage the access and dissemination of the personal data and provides for the owner of the personal data to receive compensation for the use of the personal data, thus, in effect, the personal data becomes a valuable commodity analogous to money. Centralized protected storage of personal data is provided, which minimizes the number of copies that may be in existence. The personal data may be converted from one format to another by subscribing to format conversion services provide by the vault. The vault regularly updates stored personal data per the subscribed services so that the personal data is available in the latest data formats used by various industries. A fee may be charged for format conversions.

Abstract: A system and method for providing a message on the graphic display of a wireless device while the wireless device is connecting to an application download server across a wireless network. When the wireless device attempts to communicate with an application download server or changes files while navigating an application download server, a message is transmitted across the wireless network to the computer platform of the wireless device and displayed to the user of the wireless device. The message can be transmitted to the wireless device from the same application download server that the wireless device is attempting to connect to or navigate, or alternately, the message can be transmitted from another server on the wireless network.

Abstract: The invention relates to a method for controlling digital rights of the “Play N times” type for a digital audio and/or video content, referred to as controlled content, the controlled content being consumed by a consumer on a consuming device or on another device delegating the controlling of these rights to the consuming device. According to this method, charging of one additional usage is inhibited in at least one of the following cases where: the consumer momentarily consumes another content, on the same device where the controlled content is consumed, and then returns to the controlled content; the consumer effects a pause in the usage of the controlled content; the consumer performs a fast-forward of the controlled content; or the consumer performs a rewind of the controlled content.

Abstract: Systems and methods are described that provide a phantom mobile telephone number that is assigned by the mobile telephone service provider, for business customers and/or customers subscribing to the service. Upon receipt of the phantom mobile telephone number at the mobile service provider's internal call routing system, the call is associated with a preexisting landline number assigned to a business. The mobile telephone call is forwarded to the preexisting landline telephone number and is not charged airtime minutes.

Abstract: A system and method thereof, comprising means for: communicating through at least one computer network interface with each of (i) a plurality of providers of accountable resources, and (ii) a plurality of registrars which register clients, each client having access to accountable resources of providers, and maintain client-associated accounts therewith; generating a token verifying that a client is authenticated by a registrar; logging accountable transactions identifying a client-associated account and a transaction valuation, maintained by the registrar; and periodically accounting for the logged accountable transactions between respective registrars and respective providers; wherein a valuation of the accountable transaction is dependent at least on information conveyed in the token.

Abstract: A flexible product distribution and payment system for computer network based electronic commerce is disclosed. Primary content data is made available to customers through a detachable local storage medium, such as a DVD or CD-ROM disc, or over a network connection. The primary content is capable of being accessed and played back through a computer or game console at the customer site. The primary content distribution may comprise a superset of content that is intended to be used by the customer. The customer is allowed to view and access the encoded primary content, and is charged only for the primary content that is used. Content that is encoded on the medium but that is not used by the customer remains on the medium but is not charged. A content database and customer database maintained at the primary customer site maintain records of products ordered and used by the customer, as well as identification and use patterns associated with the user.

Abstract: An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives.

Abstract: A system and method are provided for synchronizing playback of media content on multiple playback devices utilizing Digital Rights Management (DRM) encoding. In general, multiple playback devices or users of those playback devices are associated to form a virtual group. A virtual group (VG) control function operates to synchronize advertisement (ad) slots within media content provided to the playback devices in the virtual group utilizing DRM encoding.

Abstract: Systems and methods are provided to facilitate transactions via mobile communications. In one aspect, a system includes a data storage facility and an interchange coupled with the data storage facility that stores data associating a phone number of a user and an account identifier of the user. The interchange includes a common format processor and a plurality of converters to interface with a plurality of different controllers of mobile communications. The converters are configured to communicate with the controllers in different formats and with the common format processor in a common format. The common format processor uses one of the converters to transmit premium messages to the phone number to collect funds via a telecommunication carrier, receives a payment request having the account identifier, identifies the phone number based on the account identifier, and makes a payment on behalf of the user using the collected funds.

Abstract: Methods, systems, and storage mediums for providing multi-media content storage and management services are provided. A method includes, from a single user interface: creating a library of content items, creating at least one other content item that includes an electronic greeting, and associating at least one component of the library with the electronic greeting to form an arrangement. The electronic greeting includes an electronic greeting card and a personalized message. The electronic greeting also includes a gift associated with a unique code. The gift includes one or more of a: music selection, movie, computer game, and video game. The gift is retrievable via electronic download upon entry of the unique code.

Abstract: A system for preventing unauthorized use of digital content that can prevent unauthorized use of digital content and can reliably collect a charge for secondary use is provided. The system for preventing unauthorized use may include: a distributing recording medium ? on which a content file having header information “A” and a data body “B” is recorded in a state of lacking play information “A1” indispensable for playing the data body “B” included in the header information a; a management center managing use of the content file on the distributing recording medium ? and which can deliver the prepared play information “A1” of the header information “A” as piece data via a communication line ?; and a digital content playing device which is a device used for playing the content file on the distributing recording medium ? and has a function of communicating via the communication line ? with the management center.

Abstract: A method of completing a financial transaction after a point-of-sale terminal initiates a payment request and sends financial transaction information includes receiving financial transaction information from a point-of-sale terminal, the financial transaction information being associated with a transaction and identifying an individual that initiated the transaction. The method further includes accessing a database to determine a rule set associated with the individual, applying the rule set to the financial transaction information, and selecting a financial issuer based on the applied rule set.

Abstract: A method, apparatus, and computer-readable storage medium for providing information to a user is provided. The method includes providing, on an output device, program content, generating, by a processor, descriptive data including identification information corresponding to the program content, and providing a notification to a user based on the descriptive data, the notification corresponding to the program content.

Abstract: A method of rights management in a first device connected to digital data content, said first device comprising a right for accessing said digital data content and available state information for reflecting the state of use of said digital data content, said method comprising the steps of: —receiving by said first device a request for a state information from a second device; —comparing the content of said request with said available state information; —selecting said requested state information in said available state information according to the result of said comparing step; —transferring said requested state information to said second device via a communication channel; and—duplicating said fight to said second device.

Abstract: A communication management system includes: a normal signature list which stores a list of signatures of normal communication; a search circuit which acquires communication data and searches the normal signature list to check if the signature of the communication data appears in the list; and a warning unit which issues a warning when communication data does not match any signature in the normal signature list. An operator terminal includes: a determination result acquisition unit which indicates whether or not communication data against which a warning has been issued is normal; and a normal signature list update unit which, when communication data against which a warning has been issued is found to be normal, adds the signature of the communication data to the normal signature list.

Abstract: A method and apparatus for providing a system monitoring service to customers. The method may include identifying a new customer based on data received from a reseller, storing data pertaining to this customer in a database, and registering the customer with a system monitoring service. The method may further include tracking the usage of the system monitoring service by the customer, calculating a fee for the usage of the system monitoring service by the customer over a predefined time interval, and then generating a bill for the calculated fee that covers the predefined time interval, where interactions between the customer and the reseller terminate once the customer is registered with the system monitoring service.

Abstract: An embodiment defines access control allowing the expression of access control rules using ontology based semantics and references an ontology subset using XPath as the ontological expression. The access control rules or access criteria are defined by an access control statement and may be expressed using classification criteria and ontology classes. The access control statement comprises a structural description that is used to define an asset and a logical expression that may be used to express the classification criteria. The access control statement defines access policy for various assets.

Abstract: A client computing system inserts selected advertising into digital content. Ads may be inserted into content based on a dynamic advertising matching process that is securely implemented within a hardware-based root of trust. User profiles used in ad matching may be privacy protected and maintained with confidentiality protection in the client computing system and/or a service provider server, respectively. When a client computing system makes a request to the service provider server for content with specified ad slots, the request may be made with the client's EPID signature, which is inherently privacy protected. The hardware-based root of trust protects insertion of selected ads into the linear rendering flow of the content.

Abstract: A method of providing a service to a customer comprises receiving a request by a customer for an item of content, providing to the customer an option to subscribe to a service for a limited time, if the customer opts to subscribe, then providing the service for the limited time, and if the customer does not opt to subscribe, then not providing the service for the limited time.

Abstract: A universal ID and biometrics systems and methods are disclosed. A method includes receiving an authentication request message originating from a user. The authentication request message includes a first identifier and a second identifier, where the second identifier includes biometric data. The method further includes determining a third identifier based on the first identifier and sending the second and third identifiers to a first server computer to determine if the second and third identifiers have a predetermined correlation. The method further includes receiving confirmation of user authentication if the identification system determines that the second and third identifiers have the predetermined correlation.

Abstract: A method and apparatus for attesting the configuration of a computing platform to a verifier. A signature key (SK) is bound to the platform and bound to a defined configuration of the platform. A credential (C(SK), CDAA(SK)) for the signature key (SK) is obtained from an evaluator. This credential (C(SK), CDAA(SK)) certifies that the signature key (SK) is bound to an unspecified trusted platform configuration. The platform can then demonstrate to the verifier the ability to sign a challenge from the verifier using the signature key (SK), and demonstrate possession of the credential (C(SK), CDAA(SK)) to the verifier, thereby attesting that the platform has a trusted configuration without disclosing the platform configuration to the verifier.

Abstract: A system and method for distribution of content items, such as video or other files, can provide for adjustable pricing for access to a content item based on the popularity of the content item. The price for access can be calculated by adjusting a base access price that is determined based on how many times the content item has been accessed. The adjustment can utilize rating and review data received from users who have previously accessed the content item. In some embodiments, rating and review data is withheld from disclosure during a hold-back period whereby the quality of a user's rating can be evaluated by comparing it to other ratings received during the hold-back period. Other incentives can be provided to drive viewing and reviewing content items by providing discounts for users that provide positively-rated reviews.