Abstract: An embodiment of the present invention is directed to receiving a first independent log from a first trading partner wherein the first independent log comprises at least one request log entry associated with a transaction wherein the request log entry comprises at least a request identifier; receiving a second independent log from a second trading partner wherein the second independent log comprises at least one reply log entry associated with the transaction between the first trading partner and the second trading partner, wherein the reply log entry comprises at least a reply identifier; matching the at least one request log entry and the at least one reply log entry based on one or more of the request identifier and the reply identifier at a third party interface; identifying non-matching log entries at the third party interface; and forwarding the non-matching log entries.

Abstract: Systems and methods of synchronizing media are provided. A client device may be used to capture a sample of a media stream being rendered by a media rendering source. The client device sends the sample to a position identification module to determine a time offset indicating a position in the media stream corresponding to the sampling time of the sample, and optionally a timescale ratio indicating a speed at which the media stream is being rendered by the media rendering source based on a reference speed of the media stream. The client device calculates a real-time offset using a present time, a timestamp of the media sample, the time offset, and optionally the timescale ratio. The client device then renders a second media stream at a position corresponding to the real-time offset to be in synchrony to the media stream being rendered by the media rendering source.

Abstract: A display control system includes: a display information acquisition section that acquires display information by using given account information; and a corrected display information creation section that, based on first display information acquired by the display information acquisition section using first account information and second display information acquired by the display information acquisition section using second account information different from the first account information, determines whether the display contents shown by the first display information are included in display contents shown by the second display information or not, selects part or all of the display contents shown by the first display information in accordance with a result of the determination, and creates corrected display information which includes the selected part of the display contents shown by the first display information.

Abstract: The present invention is directed to systems and methods which restrict the use of Value Bearing Indicia (VBI) such that a general purpose interface application can be used to securely and/or precisely print VBI. A method and/or system of embodiments of the invention, includes a general purpose interface application being operated on a general purpose processor to request VBI, and in response to that request, receiving a content object comprising both the VBI and defined parameters which are controlled such that the general purpose interface application's use of the VBI is restricted.

Abstract: Methods and systems of conducting co-browsing sessions may involve joining a co-browsing session with another peer device, receiving a plurality of web requests in a particular sequence from a macro, and transmitting the plurality of web requests in the particular sequence to a server associated with the co-browsing session. In one example, the particular sequence defines a navigation path to a requested resource.

Abstract: An authentication includes a unit that issues right transfer information that is to be transmitted to a service providing device and a token that corresponds to the right transfer information and is to be transmitted to a service proxy access device on a basis of information about a user to whom a right is transferred and a condition under which the right is transferred, a unit that provides the token to the service proxy access device, and a unit that receives from the service providing device the token transferred from the service proxy access device and transmits to the service providing device the right transfer information that corresponds to the token and is kept by the authentication device.

Abstract: A system and method for lending digital content in which a user employs her contacts list to lend and borrow the digital content. The lender initiates the lending process using her local device by generating a lending offer. The lending offer contains an identification of the lender, an identification of the contact and an identification of the digital content to be lent. The lending offer is communicated from the lender's local device through a communication channel to a server which generates a lending offer email and/or a lending notification. The lending offer email and notification are sent to the potential lendee. The potential lendee can click on a URL contained in the email or respond to the lending offer notification to accept the loan. The server processes this acceptance by the lendee and transfers the loaned copy of the digital content to the lendee.

Abstract: A method for conducting PIN authorized EMV payments using an ordinary mobile phone. The credit card payment is conducted using a merchant's device comprising a card reader and a mobile phone a payment server and a buyer's mobile phone. A PIN entry request is sent from the merchant's device to the buyer's device via the payment server. A secure application in the buyer's device is executed and a PIN code may be entered securely. The entered PIN code is either verified, via the payment server, against the credit card in said merchant's device or against a bank server. Thus, secure credit card payments can be performed using an ordinary unsecure mobile device's.

Abstract: The present invention provides a system and method that enables users, such as institutional investors and financial institutions, to interactively engage in capital market transactions, including the trading of Over-the-Counter financial products, via the Internet (including the World Wide Web). The system includes a variety of servers, applications, and interfaces that enable users to interactively communicate and trade financial instruments among one another. Interactive communications supported by the system include: requesting price quotes, monitoring and reviewing quote requests, issuing price quotes, monitoring and reviewing price quotes, negotiation between users, acceptance of price quotes, reporting, portfolio management, analysis of financial information and market data, and communications among users via an automated processor.

Abstract: Apparatus, and associated method, provides for downloading an application with a selectable lifetime from an application database to a mobile terminal. The mobile terminal user's identification information and the selected lifetime for the application are stored in an application-license database. When the user seeks to download the same application on a subsequent occasion the user is able to download that application for a reduced fee if lifetime remains from when the application was first downloaded. In addition, the application may be configured to delete or uninstall itself from the mobile terminal when the selected lifetime for the application expires.

Abstract: A method and system are disclosed for preventing rendering of content at overlapping time periods on more rendering devices than permitted by a license associated with the content.

Abstract: System and method for providing a permanent data record for a creative work. In one embodiment, a process is provided to include receiving a request for a permanent data record to be issued for the creative work. The request can indicate a type of data record to be issued. Data corresponding to the creative work may also be received. The process can include generating the permanent data record using the received data, such that the received data is unalterable. Further, the permanent data record can be associated with the creative work.

Abstract: Embodiments of the present disclosure provide for upgrades and synchronization of applications installed on a device, such as a mobile device. In one embodiment, a device may include applications purchased and downloaded via a content management system. The device maintains a list or database of applications that are authorized for each device. This list is also replicated in a remote cache that is maintained by an archive host. The device may then synchronize and upgrade these applications across multiple platforms, such as one or more computers that can be coupled to the device or the archive host. The archive host allows for files of the application be provided back to the device. Upon installation, the device can then confirm the authorization and identity of the newly installed application.

Abstract: Systems and techniques for mediating user communications. A user persona manager maintains one or more user profiles and manages user interactions with other parties and with service providers based on user preferences associated with the user profile or profiles selected for a particular interaction. The persona manager receives a single set of user authentication information to establish the user identity, and provides previously stored information to other parties and service providers as appropriate, and otherwise conducts user interactions involving communications initiated by or on behalf of the user. The persona manager also examines interactions initiated by others, selects user profiles appropriate to the interactions, and routes and responds to the interactions based on information stored in the user profiles.

Abstract: This document describes tools capable of securely distributing entertainment content among and using distributed hardware. These tools may do so robustly by rebinding entertainment content between distributed hardware units. The tools, for example, may distribute content protection in hardware between a policy unit, a transcryption unit, a graphics processing unit, and a playback unit. By so doing the tools enable, among other things, users to select from many graphics cards rather than rely on the graphics capabilities of an integrated (e.g., SOC) hardware solution.

Abstract: An optimized server for streamed applications provides a streamed application server optimized to provide efficient delivery of streamed applications to client systems across a computer network such as the Internet. The server persistently stores streamed application program sets that contain streamed application file pages. Client systems request streamed application file pages from the server using a unique set of numbers common among all servers that store the particular streamed application file pages. A license server offloads the streamed application server by performing client access privilege validations. Commonly accessed streamed application file pages are stored in a cache on the streamed application server which attempts to retrieve requested streamed application file pages from the cache before retrieving them from persistent storage. Requested streamed application file pages are compressed before being sent to a client as well as those stored in the cache.

Abstract: The computer-implemented system to facilitate creation of educational information employs a networked computer system that stores at least one resource in association with a first electronic file, storing metadata information about usage of the resource. A resource assembly tool implemented by a computer is programmed to access the networked computer system to display information to an instructor about at least one resource, including the metadata information. This aids the instructor in selecting resources for inclusion in educational information being created. The resource assembly tool is configured to assemble the educational information to include resources selected for inclusion being created for dissemination to learners via said networked computer system. The networked computer system is further configured to capture information about usage of the resource and to update the stored metadata information to reflect said captured information.

Abstract: A new system for information sharing is described which uses human judgement to accelerate the flow of information, while simultaneously applying brakes to restrict the velocity. This combination results in a system where information is shared judiciously while minimizing the likelihood of information leakage or information overload. A built in monitor allows for the detection over time of sharing characteristics. Information in this system is stored on a server, however, is optionally encrypted in a fashion that makes it impossible for the server to actually see the information. Further innovations are also described including the ability to overlay incentive mechanisms to facilitate appropriate information sharing, and the notion of introducing automated bots into the system to augment human filter based information sharing.

Abstract: Aspects of the present invention are directed to a method and system for distributing information from an information distributor in a banking environment. The method may include composing an electronic notification instrument by providing a notification component and providing a payload component, the payload component including a selectable link. The method may additionally include pushing the electronic notification instrument to an information client and allowing a pull from the information distributor through the electronic notification instrument such that the payload component including the selectable link is activated by an authorized information recipient, the authorized information recipient determined by the information client. The method may additionally include determining through a tracer whether the electronic notification instrument has an acceptable disposition and rendering the electronic notification instrument inaccessible if the disposition is not acceptable.

Abstract: Methods, apparatus and systems for embedding auxiliary information in encrypted host signals are provided. The present invention enables secure application of digital watermarks at any point in the transmission and/or distribution of digital content by enabling the insertion of a plurality of digital watermarks, without the knowledge of the encryption/decryption keys, into a digital host content that has been encrypted with an encryption key. The embedded watermarks persist throughout the content subsequent to the decryption of the content. The disclosed techniques are applicable to content that has been encrypted using a variety of different encryption techniques and algorithms, including stream ciphers, block ciphers, symmetric and asymmetric encryption algorithms. These methods are further adapted to enable the insertion of watermarks into a content that is compressed prior to encryption.

Abstract: Use of rights-managed content is enabled by a digital license that includes the identity of the licensee. The licensee redistributes the content by sending a package containing the content and the license to another party. That other party obtains a license to use the content by contacting a license server, and preferably pays a fee for this license. During the contact with the license server, the licensee's identifying information is uploaded to the license server, which allows the license server to determine who distributed the content to the other party. The license server can use this information to reward the original licensee for having redistributed the content.

Abstract: Methods and apparatus for providing media content offered by media content subscription service to portable media player devices associated with subscribers of the service are described herein. In various embodiments, particular fulfillment module, request module and media player are provided to fulfillment server(s) of the subscription service, request client devices, and portable media player devices, respectively.

Abstract: At or before time t2 when a kick-down switch was off, the higher speed a shift ratio selected by a driver is for, the smaller value a restriction rate K is set to. Consequently, driving force in a Mid-gear ratio is more restricted than driving force in a Lo-gear ratio. Further, driving force in a Hi-gear ratio is more restricted than driving force in the Mid-gear ratio. At time t2 when the kick-down switch changes from off to on, the restriction on driving force employing a restriction rate K is removed, whereupon an increment ? in driving force in the Hi-gear ratio is, as it had a greater restricted amount during KD OFF, greater than an increment ? in driving force in the Mid-gear ratio. A natural kick-down feeling responsive to the selected shift ratio is thus realized.

Abstract: The present invention relates to an information processing system, an information processing apparatus and method, and a program in which the purchase of content can be facilitated. When a device to which content data is downloaded and a device for giving an instruction to purchase the content data are different, a purchase form for purchasing the content data is sent to the device for giving an instruction to purchase the content data. The user ID and password are input into the purchase form, and the device to which the content data is downloaded is determined by the user ID. If the device to which the content data is downloaded cannot be specified because the user registers a plurality of devices, a destination determination form for specifying the device to which the content data is downloaded is sent. The content data is then distributed to the device indicated in the destination determination form. The present invention is applicable to a server for executing processing concerning content data.

Abstract: The invention provides various systems and methods for establishing an identity confidence scoring system. The method includes gathering identity information about the customers from physical locations and from remote locations. The method updates the identity profiles with the gathered identity information, and based on the gathered identity information, generates an identity confidence score associated with each identity profile.

Abstract: A method for transcoding that includes (A) generating a decoded frame by decoding an MPEG-2 input video stream, the decoded frame including decoded macroblocks; (B) determining a search center for encoding a current macroblock corresponding to a pair of the decoded macroblocks on consecutive macroblock rows, when (i) the encoding uses a predictive field mode and (ii) a current field being encoded is a second field of a current frame that has a first field as a reference field, the search center is a temporally scaled version of a decoded motion vector from an upper or a lower macroblock in the pair; (C) generating a refined motion vector by searching in a temporal search direction about the search center; and (D) generating an H.264 output video stream by encoding the current macroblock based on the refined motion vector.

Abstract: When a control unit of a content receiver causes to write out content to an exchangeable medium, causes to also write out a viewing license of the content to the exchangeable medium, and further causes an invalidating/validating unit to invalidate a viewing license of related content belonging to a same predetermined content group as the content if a viewing time limit of the content is not determined. When a content reproducer reproduces the content recorded in the exchangeable medium, determines the viewing time limit of the content and records it to the exchangeable medium. When the exchangeable medium which is reproduced by the content reproducer is installed, the control unit causes to set a viewing time limit of the related content to the same time limit as the viewing time limit of the content on the exchangeable medium and causes to validate the viewing license of the related content.

Abstract: Various methods for securely processing an online transaction between a customer and a merchant are disclosed. In one method, an authentication credentials request that includes a transaction identifier is received from a merchant system. In response, an encryption key is transmitted to the merchant system. From a customer system, the personal account data associated with the customer is received, which is encrypted with the encryption key. A transaction processing request from the merchant system prompts the generating of a transaction processing response based upon its execution.

Abstract: A method, system, and computer usable program product for revising content translations using shared translation databases are provided in the illustrative embodiments. A translation of some content is presented to a user. A revision to a first portion of the translation is received from the user. A second portion of the translation is identified using the shared translation database, the second portion being a candidate for revising using the revision. The second portion is suggested for revision. The second portion may be identified without user interaction. The revision may be submitted for review along with user-selected portions, and an approval may be received. The user's access to the shared translation database may be controlled such that the user is able to interact with the shared translation database to identify the second portion but the user may be unable to modify the shared translation database.

Abstract: An image forming apparatus transmits to an authorization apparatus, in executing a job, condition information related to a process to be performed to a 1st page of the job, to obtain a processable number of sheets. When the condition information changes while the job is being executed, the image forming apparatus transmits to the authorization apparatus (i) the changed condition information and (ii) information of the number of sheets being processed based on a current condition information prior to the change in condition information, to inquire and obtain a processable number of sheets based on the changed condition information. Furthermore, while the job is executed, if the processed number of sheets meet the processable number of sheets obtained from the authorization apparatus, the image forming apparatus forbids the process to be performed to a new recording sheet and stops the job.

Abstract: Embodiments of the present invention provide identity management security domains that may be used in an enterprise security system. A security domain provides a centralized registry of services provided by the enterprise security system. For example, certificate authorities and other services, such as key archives, and the like, in the enterprise security system may register information about themselves in the security domain. Authorized users can then discover the location of these services. In some embodiments, the security domain may provide an interface that indicates a topology between services of the enterprise security system. The security domain may also serve as a distribution point for security policies. A security policy may comprise information that indicates, for example, a set of trusted certificate authorities, certificate templates, certificate revocation lists, and the locations of the services in the enterprise security system.

Abstract: Digital content rendering services provided over the Internet are disclosed. The service enables multiple concurrent users to log on and access server and applications in separate and protected sessions. The server may receive content objects and instructions for manipulating the content with an information apparatus operated by a user. The server may further receive job objects including at least one of authentication, payment, and subscription information. The server may generate output data related to the rendering job and the content, and send the output data to an output controller or media box, internally included or externally connected, to an output device for rendering, the output device may be a television, a display device, a sound device, or a printer. The service may send service confirmation to the information apparatus. The service may also store user's digital content at a node over the Internet for later access by the user.

Abstract: The disclosed technology can mitigate the risk of infringing a content owner's rights in legally-protectable content by operating as a trusted, third-party license authority between content owners and content users to ensure that a license governing at least some aspects of the protectable content is authentic and thus validly represents the restrictions imposed by content owners pertaining to the use, distribution, modification, combination, interaction, and/or other manipulation of such content. An identifier representative of the protectable content together with a profile of the license (which may include attributes that specify particular restrictions, uses, and interactions pertaining to the protectable content) can serve as a basis for determining the authenticity of the license associated with the protectable content.

Abstract: Brokering use of media assets based on rights provided by rights holders and licensing terms requested by potential licensees. Rights include use attributes, geographic attributes, and time attributes. Use attributes include one or more parent categories of uses, such as print advertising, web promotion, etc. Each parent category includes one or more specific uses, such as magazine advertisement, newspaper advertisement, etc. Rights are obtained from rights holders and stored in a data structure that is searchable according to various rights attributes. A licensing request includes desired licensing terms, such as a specific use, time period, and geographic location. The licensing request may also reserve use for a later time and/or impose an embargo on use for a period after use. The data structure is searched for media assets whose rights encompass the desired licensing terms, such as media assets with a parent use that includes a desired specific use.

Abstract: Methods that facilitate automatic selection of service bearers in a mobile based on user-initiated policies and service-provider-initiated policies set forth in a policy document are described herein. The mobile device initially receives a policy document from either the mobile device manufacturer or the service provider before the mobile device is provisioned on a communications network. The mobile device user and the service provider may make subsequent changes to the policy document. When a user-initiated policy change conflicts with a service-provider-initiated policy, the user-initiated policy change is disregarded in favor of the service-provider-initiated policy. The mobile device automatically selects an appropriate bearer based at least on the availability of service bearers in the current environment and the policies set forth in the policy document.

Abstract: Apparatus, system, and media for utilizing content. An exemplary system comprises a first computing device and a second computing device, wherein the first computing device transmits a request for access to content to the second computing device, receives the content from the second computing device, and grants at least one permitted utilization of the content, and wherein the second computing device receives the request for access to content from the first computing device, determines whether the first second computing device is permitted to receive the content, grants access to the content based at least in part on the first computing device being permitted to receive the content, and transmits the content to the first computing device based at least in part on the first computing device being permitted to receive the content.

Abstract: When a viewer views content, it is reproduced by a reproduction procedure depending on a dynamic condition set in the content. Here, a content object data input unit obtains an externally-input content object. The content object is stored in a content object data retention unit, if necessary. The content object includes a reproduction rule and a content data. A reproduction rule evaluation and execution unit obtains the reproduction rule in the content object and performs processing in accordance with the reproduction rule. The reproduction unit reproduces a reproducible data specified by the reproduction rule evaluation and execution unit. An identifier management unit retains an identifier of a content object reproduction device and provides the identifier upon request. It is thus possible to reproduce in accordance with the reproduction rule set in the content object data and to control the reproduction procedure depending on the dynamic condition.

Abstract: Methods and apparatus, including computer program products, implementing and using techniques for digital rights management. A set of content items is defined in an electronic document based on a set of rules. The rules in the set of rules are associated with one or more operations that can be performed on content items in the electronic document. The set of content items include only content items that are invariant to the operations associated with the rules in the set of rules. A representation of the content items in the set of content items is generated. An electronic document is also described.

Abstract: A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity's electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity's electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Abstract: The subject disclosure relates to pre-installed software and services, such as online services, and markets for pre-installed software and online services. In one aspect, the disclosed subject matter facilitates contracting between software vendors and device manufacturers or redistributors for placement and/or conversion of software applications or services in devices. As further advantages, embodiments of the disclosed subject matter can provide transparency into markets for device placement and can facilitate detailed contract performance tracking. Further non-limiting embodiments are provided that illustrate the advantages and flexibility of the disclosed subject matter.

Abstract: A method for provisioning content to users, including for each of a plurality of items of media content, maintaining information about one or more owners of the item of media content, and maintaining information about one or more providers of the item of media content, for each of a plurality of users, maintaining information about items of media content acquired by the user and about player devices owned by the user, for each of a plurality of time periods, maintaining a history log of items of media content played by one or more of the plurality of users during the time period, receiving a request from a user to play a designated item of media content on a designated player device, during a current time period, identifying an appropriate provider of the designated item of media content, according to a location of the user and according to the designated player device, causing the identified provider of the designated item of media content to transmit the designated item of media content to the user's design

Abstract: A database encryption system and method, the Structure Preserving Database Encryption (SPDE), is presented. In the SPDE method, each database cell is encrypted with its unique position. The SPDE method permits to convert a conventional database index into a secure one, so that the time complexity of all queries is maintained. No one with access to the encrypted database can learn anything about its content without the encryption key. Also a secure index for an encrypted database is provided. Furthermore, secure database indexing system and method are described, providing protection against information leakage and unauthorized modifications by using encryption, dummy values and pooling, and supporting discretionary access control in a multi-user environment.

Abstract: Processes and techniques for tailoring operations management in a system are described. The processes and techniques allow a user to customize operations management based on the user's function within a system and the particular tasks that the user wishes to accomplish. Simplified user interfaces can be created by scoping the interfaces based on user profiles, preferences and system components.

Abstract: Electronic documents corresponding to executed paper documents are certified. A certifying agent receives an electronic document and a corresponding paper document that had been executed pursuant to some transaction. The certifying agent compares the information contained in the paper to that in the electronic mortgage document. If the paper adequately corresponds to the electronic document and is otherwise sufficient, then the certifying agent certifies the electronic document so that other parties can reliably engage in transactions involving the electronic document without having to possess or otherwise inspect the executed paper document. Certification involves application of some form of indicia of certification to the electronic document, such as updating the value of a field corresponding to certification in the electronic document and/or applying a digital or electronic signature corresponding to the certifying agent to the electronic document.

Abstract: A security and protection device (1) for protection of the data and executable codes of any fixed or portable computer system and that has a memory medium to be protected. The security and protection device (1) is located physically between the computer system (2) and the memory medium (MP) to be protected, in order to allow the computer system (2) access to the data and codes to be protected after execution of the protection functions independently of the machine code executed by the computer system (2) and requires no interaction with the processor of the system for the execution of these functions.

Abstract: Particular embodiments provide a method for orchestrating an order fulfillment business process that includes a sub-process. In one embodiment, abstraction of business processes from an underlying information technology (IT) infrastructure is provided. An orchestration process can be designed using sub-processes such that the sub-process is assembled at run-time into an executable process. The sub-process may be defined in an interface as a single step. A plurality of services as then assembled as steps in the executable process at run-time.

Abstract: Systems and methods for individualized distribution of digital content to purchasers via portable kiosks are described. The systems contain a storage device for storing the digital content and distribution devices for distributing the digital content to a user. The distribution devices can be configured to be portable so that users who are not mobile can access the distribution device. As well, the users can use a receiving device containing unique identification data to receive and access the digital content. Such a system is extremely useful for users who are not mobile and whose use of the distribution devices needs to be controlled, such as detainees in a corrections facility. Other embodiments are described.

Abstract: In order to facilitate access to encrypted broadcast or multicast data an encrypted service key is sent from an access server of the communication network to the user terminal, passing the encrypted service key to a secure module of the user terminal. The secure module has access to a decryption key for decrypting the encrypted service key but this decryption key is inaccessible to other functions of the user terminal. Acknowledgement of receipt of the service key at said secure module, and sending the acknowledgement from the user equipment to the access server; authenticating the receipt at the access server and sending a return acknowledgement from the access server to the user terminal, and passing the return acknowledgement to the secure module; and authenticating the return acknowledgement at the secure module, and subsequently making the decrypted service key available to the user terminal, the service key making possible directly or indirectly the decryption of broadcast and/or multicast data.

Abstract: A gatekeeper device delegates an ability to access a resource to an access device by transmitting metadata, which includes access information for accessing the resource. The access device uses the metadata to retrieve the associated resource from a resource server. By transmitting the metadata in lieu of the resource, flexible use of the resources is implemented while enabling compliance with various restriction schemes. The system may condition the delegation or transfer of resource access on one or more factors, such as proximity between the gatekeeper device and the access devices. Using information about an access device, the resource server may optimize the resources for the receiving access device.

Abstract: The present invention provides a digitally originated check (DOC) through an electronic payment system (EPS) which captures payor metadata instructions regarding the intended payment to a payee. The metadata is stored in a database or the like for further processing instead of printing a paper check. The EPS is operable to clear the DOC through either paper or electronic Check 21 mechanisms.