Abstract: An embodiment of the present invention is directed to receiving a first independent log from a first trading partner wherein the first independent log comprises at least one request log entry associated with a transaction wherein the request log entry comprises at least a request identifier; receiving a second independent log from a second trading partner wherein the second independent log comprises at least one reply log entry associated with the transaction between the first trading partner and the second trading partner, wherein the reply log entry comprises at least a reply identifier; matching the at least one request log entry and the at least one reply log entry based on one or more of the request identifier and the reply identifier at a third party interface; identifying non-matching log entries at the third party interface; and forwarding the non-matching log entries for one or more of error processing and dispute resolution.

Abstract: Electronic documents corresponding to executed paper documents are certified. A certifying agent receives an electronic document and a corresponding paper document that had been executed pursuant to some transaction. The certifying agent compares the information contained in the paper to that in the electronic mortgage document. If the paper adequately corresponds to the electronic document and is otherwise sufficient, then the certifying agent certifies the electronic document so that other parties can reliably engage in transactions involving the electronic document without having to possess or otherwise inspect the executed paper document. Certification involves application of some form of indicia of certification to the electronic document, such as updating the value of a field corresponding to certification in the electronic document and/or applying a digital or electronic signature corresponding to the certifying agent to the electronic document.

Abstract: Systems and methods for the dynamic processing of royalties are disclosed. Sales records are processed on a transaction basis rather than in batch mode. This process also allows correction of information retroactively, rather than delaying the entire processing of the information. One embodiment includes a system comprising a message broker in communication with a plurality of clients and services, a state machine, a processor and a time manager. The message broker interacts with the processor to execute a common service based on events produced by the state machine. Another embodiment includes a method comprising providing a rate matrix, receiving a sales record from a database and calculating a royalty payment using the sales record and the rate matrix.

Abstract: A method comprising fingerprinting, by the at least one processor, a first copy of a database with a fingerprint. The fingerprint has at least one part in common with another fingerprint used in another copy of the database, and at least one part unique to the first copy of the database. The fingerprinting comprises swapping attributes between multiple records in the first copy of the database.

Abstract: A system and method are provided for synchronizing playback of media content on multiple playback devices utilizing Digital Rights Management (DRM) encoding. In general, multiple playback devices or users of those playback devices are associated to form a virtual group. A virtual group (VG) control function operates to synchronize advertisement (ad) slots within media content provided to the playback devices in the virtual group utilizing DRM encoding.

Abstract: A method of scanning data for viruses in a computer device, the device having a browser for rendering the data for use. The method comprises storing the data in a buffer memory accessible to said browser and creating an instance of a browser plugin, said plugin providing a virus scanning function or providing a route to a virus scanning function. The data is scanned for viruses using the instance of the plugin and, if no viruses are detected in the data, it is returned to the browser for rendering. If a virus is detected in the data, rendering of the data is inhibited.

Abstract: Methods and devices are provided for central management of licenses, particularly those relating to wagering games. A license proxy deployed in and/or dedicated to a gaming establishment may operate under the control of a central licensing manager controlled by another entity, e.g., by a game provider. The license proxy may receive requests to enable features of an electronic gaming machine of the gaming establishment (e.g., game themes, player tracking features and/or peripheral device features) and determine, based on information provided by the central licensing manager, whether to grant such requests. The license proxy may also process requests to enable features of other devices in a gaming establishment, such as server-based features.

Abstract: An image processing apparatus which is capable of easily determining, when a user causes the apparatus to scan a sheet original to carry out predetermined processing, whether or not the sheet original has been modified or edited from a document file as the source of the sheet original. A scanner section not only reads an original and generates original image data, but also recognizes information embedded in the original. Rights information concerning the original is acquired based on the information embedded in the original. A controller unit determines whether or not the original has been edited, and performs control based on contents of the rights information and a result of the determination, such that execution of processing, which is designated by a user, on the original image data is permitted or restricted.

Abstract: Methods and systems for identifying a source of an attack in a network include transmitting an address associated with the attack target to a number of network devices. Each network device may then determine whether a received packet is destined for the attack target and identify, for each packet destined for the attack target, an input interface upon which the packet arrived. Each network device may also count the amount of data destined for the attack target per input interface. A potential source of the attack may then be identified based on the amount of data destined for the attack target.

Abstract: A lightweight throttling mechanism allows for dynamic control of access to resources in a distributed environment. Each request received by a server of a server group is parsed to determine tokens in the request, which are compared with designated rules to determine whether to process or reject the request based on usage data associated with an aspect of the request, the token values, and the rule(s) specified for the request. The receiving of each request can be broadcast to throttling components for each server such that the global state of the system is known to each server. The system then can monitor usage and dynamically throttle requests based on real time data in a distributed environment.

Abstract: Parties involved in a transaction in an E-marketplace identify characteristics of a transaction that they are willing to accept and/or that they can provide. To do this, an attribute certificate is created for each party that contains the attributes of a buyer, seller, or third-party participant who will be transacting business in the particular E-marketplace. The attributes pertain to specifics of the transaction. The party submitting the attribute also identifies alternative conditions which, if they exist would be acceptable for conducting the transaction. Once these criteria, in the form of the attribute certificates, are received by the E-marketplace, the E-marketplace verifies the attributes. A server in the E-marketplace is configured to determine various combinations of participants that can match the deal criteria. In this manner, the E-marketplace “choreographs” the transaction to meet the needs of all.

Abstract: A system for securely distributing content is provided. A distribution system includes a content server that distributes content to content clients via a communications link or a tangible medium. The distribution system uses passwords to encrypt and decrypt content and to control access to sensitive information stored on the content clients. The distribution system initially receives various passwords from a user and encrypts each password. Some of the encrypted passwords are “identification passwords” and others are “encryption passwords.” The identification passwords are used to control access to sensitive information stored on the content clients, and the encryption passwords are used to encrypt and decrypt content that is distributed to the content clients. The distribution system configures each content client to contain the identification passwords and encryption passwords in a secure folder.

Abstract: A method and system for automatically identifying an existing workflow to manufacture a given product type. A workflow description of a workflow can be transformed into a product type description utilizing particular facts associated with the workflow. An inferred product type description can then be at least one product type among a group of product type descriptions representing known product types. A mapping can then be derived of the workflow with respect to product types, in response to comparing the inferred product type description to the product type description(s) among product type descriptions representing known product types. The workflow description can be converted into the product type description utilizing a rule-based expert system. The particular facts can be one or more of the following: processing steps, sequences of processing steps, types of operations to be performed, and outputs produced.

Abstract: Peculiar identification information to identify a recording medium itself is recorded onto the recording medium on which contents information as a target of a reproduction deadline management is recorded. At least the identification information recorded on the recording medium as mentioned above is read by a terminal apparatus and transmitted to a server apparatus. In the server apparatus, a reproduction possible deadline of the contents information recorded on the recording medium is managed on the basis of reproduction possible deadline information indicative of the reproduction possible deadline regarding the contents information recorded on the recording medium on the basis of at least the identification information. Thus, when the reproduction deadline of the contents recorded on the recording medium is managed, the operation for allowing the server apparatus side to set registration information such as personal information or the like of the user as in the conventional system is unnecessary.

Abstract: A reputation server is coupled to multiple clients via a network. Each client has a security module that detects malware at the client. The security module computes a hygiene score based on detected malware. The security module provides the hygiene score and an identifier of a visited web site to a reputation server. The security module also provides identifiers of files encountered at specified web sites to the reputation server. The reputation server computes secondary hygiene scores for web sites based on the hygiene scores of the clients that visit the web sites. The reputation server further computes reputation scores for files based on the secondary hygiene scores of sites that host the files. The reputation server provides the reputation scores to the clients. A reputation score represents an assessment of whether the associated file is malicious.

Abstract: A decentralized key management scheme that implements key management of a tree structure comprised of only group members without using a key management server is proposed, and communication method and system that can contribute to secure group communications is provided. Each member constituting a group updates tree structure data of the entire group when a new member joins, respectively 70, and selects a captain in each subtree 71. Rather than the key management server, the captain generates a new key and shares it with other captains or the joining member 72, and distributes the new key to the members of the subtree 73, thereby enabling all the group members to update to the new key. A captain is also selected when a member leaves, and sharing and distribution of a new key by the captain is performed.

Abstract: A print management system for production of printed documents, said system comprising a policy editor component capable of receiving a document file, and applying a level of protection to said document file to produce a protected document file a policy enforcement component, operable for enforcing a document management policy for said protected document file; and at least one printer device, said printer device operable to receive said protected document file, refer to said policy enforcement component, and in response to an authorization signal received from said policy enforcement component, to print at least one printed document.

Abstract: An intrusion detection system (IDS) comprises a network processor (NP) coupled to a memory unit for storing programs and data. The NP is also coupled to one or more parallel pattern detection engines (PPDE) which provide high speed parallel detection of patterns in an input data stream. Each PPDE comprises many processing units (PUs) each designed to store intrusion signatures as a sequence of data with selected operation codes. The PUs have configuration registers for selecting modes of pattern recognition. Each PU compares a byte at each clock cycle. If a sequence of bytes from the input pattern match a stored pattern, the identification of the PU detecting the pattern is outputted with any applicable comparison data. By storing intrusion signatures in many parallel PUs, the IDS can process network data at the NP processing speed. PUs may be cascaded to increase intrusion coverage or to detect long intrusion signatures.

Abstract: A method for preventing rendering of content at overlapping time periods on more rendering devices than permitted by a license associated with the content is disclosed.

Abstract: An information processing apparatus, which encrypts print data (PDL), receives a personal identification code (PIN) input by a user, generates a random number (rnd), encrypts the generated random number by using the personal identification code or an encryption key generated based on the personal identification code, converts the personal identification code by using a predetermined function, and encrypts print data by using the random number as an encryption key, thereby maintaining security in the printing.

Abstract: A method by which a User can associate selectable Markers, Data Packets and/or Objects with Content. The Content may generally be distributed electronically, and the Markers allow for insertion and/or overlay of Objects when the Content is selected for viewing by a Viewer. Objects and Data Packets are generally provided by a User, Promoter, Host, Service, or other entity to convey information to a Viewer. A Service provides tools and capabilities to both the User and the Promoter to facilitate their respective actions according to embodiments of the invention, including enabling the creation of live social networks (such as those linked to a specific Service provider, a specific User group, activities by a specific Promoter, and/or to specific Data Packets) and the creation of n-dimensional Virtual Environments.

Abstract: An advertising control method is described. The method includes receiving an advertisement identification message (AIM) (127) at a first mobile device (125), sending the AIM from the first mobile device to a content display unit (CDU) and storing the AIM in the CDU, selecting at least one content item from among a plurality of content items based, at least in part, on at least one stored AIM, the stored AIM being stored in the CDU, and displaying the selected content item on the CDU. Related apparatus and methods are also described.

Abstract: An advertising control method is described. The method includes receiving an advertisement identification message (AIM) at a first mobile device, sending the AIM from the first mobile device to a content display unit (CDU) and storing the AIM in the CDU, selecting at least one content item from among a plurality of content items based, at least in part, on at least one stored AIM, the stoned AIM being stored in the CDU, and displaying the selected content item on the CDU. Related apparatus and methods are also described.

Abstract: A system for resource sharing for document production. Available resources are determined for performing at least one document production task. The capacity of an available resource is determined. A task is selecting to send to the resource based at least partly on its availability. An identifier is associating with a set of task data, which can include document data and insertion data. The identifier can be used to track the progress and completion of the task. The task can be sent to the resource for processing. The completed task is received from the resource.

Abstract: Brokering use of media assets based on rights provided by rights holders and licensing terms requested by potential licensees. Rights include use attributes, geographic attributes, and time attributes. Use attributes include one or more parent categories of uses, such as print advertising, web promotion, etc. Each parent category includes one or more specific uses, such as magazine advertisement, newspaper advertisement, etc. Rights are obtained from rights holders and stored in a data structure that is searchable according to various rights attributes. A licensing request includes desired licensing terms, such as a specific use, time period, and geographic location. The licensing request may also reserve use for a later time and/or impose an embargo on use for a period after use. The data structure is searched for media assets whose rights encompass the desired licensing terms, such as media assets with a parent use that includes a desired specific use.

Abstract: An Internet system for disseminating information regarding works or authorship, including a server and a client device connected to the Internet and wherein when any one web page out of a set of web pages is displayed on the client device and when a work of authorship is displayed as part of the web page, an image is also displayed near the work of authorship, as part of the webpage and when a user clicks on the image, copyright information concerning the work of authorship is presented in a user-perceivable manner.

Abstract: Provided is a picture decoding method in which a less degraded decoded picture can be reconstructed even if an error has occurred. A picture decoding method for decoding coded data on a block-by-block basis and smoothing, using a deblocking filter, blocking distortion which occurs in a boundary between decoded blocks. In this method, a variable length decoding unit VLD detects whether or not each block in the coded data contains an error; and a deblocking filter DBF determines, based on the result of the detection, (i) whether or not filtering should be performed on a boundary between two adjacent blocks, and (ii) which one of deblocking filters with different smoothing levels should be used for filtering of the boundary.

Abstract: A method and apparatus are provided for combating malicious code. In one embodiment, a method for combating malicious code in a network includes implementing a resource-limiting technique to slow a propagation of the malicious code and implementing a leap-ahead technique in parallel with the resource-limiting technique to defend against the malicious code reaching a full saturation potential in the network.

Abstract: An apparatus and method capable of purchasing external charged content in a UPnP network are provided. A media server (MS) provides a media renderer (MR) with a URL that executes a CGI that that performs purchasing of a charged content included in an external server, and, if the MR requests the reproduction of content corresponding to the URL, the MS executes a CGI of the URL, purchases charged content corresponding to the URL, and downloads the charged content, thereby browsing a list of contents provided by an external contents purchase site through a consumer electronic device such as a digital television, in which a UPnP audio/visual control point is mounted without a separate interface, purchasing desired content, and reproducing the purchased content.

Abstract: The invention provides a business platform, a business entity management system, and a software module that can be used in conjunction with the software service framework. The invention mimics actual business relationships between business entities, and uses a software service module to configure the business entities into a network that comprises at least three generations of business entities, wherein role dependent associations mimicking real life business relationships are established between the business entities. In addition, information as defined by business objects are configured to permit or deny access and manipulation based on user roles. Accordingly, the invention permits a user role in one business entity to potentially access information of a plurality of other associated business entities through a common business platform, based on the role of the user and the configuration of the business objects.

Abstract: Various embodiments of a system and method for providing protection against malicious software programs are disclosed. The system and method may be operable to detect that a first window of a legitimate software program has been replaced by a second window of a malicious software program, e.g., where the second window includes features to mimic the first window in an effort to fool the user into inputting sensitive information into the second window. The method may operate to alert the user when the window replacement is detected.

Abstract: The present invention provides systems and methods for providing distributed, adaptive IP filtering techniques used in detecting and blocking IP packets involved in DDOS attacks through the use of Bloom Filters and leaky-bucket concepts to identify “attack” flows. In an exemplary embodiment of the present invention, a device tracks certain criteria of all IP packets traveling from IP sources outside a security perimeter to network devices within the security perimeter. The present invention examines the criteria and places them in different classifications in a uniformly random manner, estimates the amount of criteria normally received and then determines when a group of stored classifications is too excessive to be considered normal for a given period of time. After the device determines the criteria that excessive IP packets have in common, the device then determines rules to identify the packets that meet such criteria and filters or blocks so identified packets.

Abstract: A system may include an enterprise content settlement server including an extract, transfer and load process configured to receive a first set of usage data and a second set of usage data. The system may further include an enterprise content settlement engine configured to settle the first set of usage data and the second set of usage data according to a contract including at least one settlement rule.

Abstract: An information processing system, information communication terminal and method, information processing apparatus and method, recording medium, and program capable of enabling safer electronic commercial transactions. A point-of-purchase server generates purchasing information using a card Identification number allotted to a non-contact IC-card of a mobile telephone. A point-of-receipt server acquires this purchasing information and confirms the card identification number allotted to the non-contact IC card of the mobile telephone and a purchasing card identification number. The authentication server calculates user trustworthiness and store trustworthiness based on temporary commercial transaction information stored in the non-contact IC card of the mobile telephone. The calculated user trustworthiness and store trustworthiness is then reference by the mobile telephone and point-of-purchase server in the next commercial transaction.

Abstract: In order to enable a still image to be checked while preventing leakage of confidential information contained in the still image, an MFP includes: an image acquiring portion to acquire a still image; an encoding portion to generate encoded data by encoding the acquired still image using an encoding key stored in advance; a decoding portion to decode the encoded data using the encoding key or a decoding key corresponding to the encoding key; and a transmitting portion to externally output the decoded still image in an electronically non-recordable form.

Abstract: A computerized intellectual property trading exchange is disclosed for facilitating the trading of license contracts relating to intellectual property rights or pools of intellectual property rights. The exchange includes at least one intellectual property license contract relating to intellectual property rights or pools of intellectual property rights and a computer-accessible forum configured to allow a plurality of participants to trade the license contract. The plurality of participants includes at least one seller, which may be the owner, having the license contract and desiring to trade the license contract. The plurality of participants also includes at least one buyer desiring to obtain the license contract. The buyer may be an investor, speculator, market maker, or arbitrageur, who purchases the license contract to achieve appreciation. The buyer also may be a licensee, who purchases the license contract to practice the intellectual property rights.

Abstract: In a data providing server 1101, whether or not specified compressed content data D51 generated by means of a specified compression coding method corresponding to terminal identification information has been stored in a content database 1113 is detected, according to content specifying data D53 transmitted from a portable dedicated terminal 1104. If the specified compressed content data D51 has been stored, the data providing server 1101 reads and transmits this to the portable dedicated terminal 1104. And if the specified compressed content data D51 has not been stored, the data providing server 1101 generates the specified compressed content data D51 by means of the specified compression coding method, and transmits this to the portable dedicated terminal 1104. Thereby, the specified compressed content data D51 generated by means of a specified decoding method can be properly provided to the portable dedicated terminal 1104, and the user can easily view a content based on the content data.

Abstract: A method and apparatus for digital content license management is disclosed that provides one or more license management devices that manage licenses for playback of digital content. The license management devices create licenses having an associated cardinality that determines the number of playback devices that can be authorized by the license. The license is stored in a set of playback devices, where the number of playback devices in the set corresponds to the cardinality of the license. The license is also included in digital content that the license authorizes for playback. Playback devices that have a license that matches a license included in the digital content are authorized to play the digital content. A single license can be used to provide authorization to play digital content from multiple sources and/or multiple types of content.

Abstract: A prescribed virtual person was created for allowing a real person (user) in the actual world to pretend to be the virtual person (virtual person) and act as the virtual person when acting on a network and registered in a database 12a of a financial institution 7 for enabling the user to make shopping or the like as the virtual person with an electronic certificate issued by the financial institution 7 for the virtual person when pretending to be the virtual person and acting on the network, and the address of the virtual person necessary as the destination of a purchased article was set to a nearby convenience store. When acting on the network as the virtual person, cookies are rendered easily acceptable as compared with the case of the real person.

Abstract: An intrusion detection system for a computer network includes a knowledge database that contains a baseline of normal host behavior, and a correlation engine that monitors network activity with reference to the knowledge database. The correlation engine accumulating information about anomalous events occurring on the network and then periodically correlating the anomalous events. The correlation engine generates a worm outbreak alarm when a certain number of hosts exhibit a role-reversal behavior. It is emphasized that this abstract is provided to comply with the rules requiring an abstract that will allow a searcher or other reader to quickly ascertain the subject matter of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. 37 CFR 1.72(b).

Abstract: This present invention describes an innovative solution in the area of indexing and searching binary files including various binary files such as multimedia files, including image files, mp3 files and other audio/video files from the public Internet. The invention introduces a way to index binary files such as multimedia files according to their content signatures, which uniquely identify themselves, and search for related files by walking through a graph database constructed during the index phase. The present invention can be used in a search engine and a download engine, as well as with text based index and search technologies. As a result, such extended usage will broaden a multimedia file's context and increase relevant accuracy of the keywords describing the context.

Abstract: A provider of content may provide access to portions of content from a source, but not the source content in its entirety. In some embodiments, one or more access rules or criteria may be implemented that enable users to access portions of the source content up to an allowed limit or threshold (e.g., number or percentage of pages), after which access is prevented to the remaining content that has not previously been accessed. In other embodiments, one or more access rules or criteria may be implemented that enable users to access portions of content of only a certain type (e.g., index, bibliography, introduction, certain chapters, etc.). Unauthorized portions are suppressed or access to them is denied. The content source may be a textual work, an audio work, or a video work of any form. For example, the content may be in electronic form, such as images of pages of content.

Abstract: A system and method comprising a computer useable medium having computer readable program code means embodied therein for authenticating and encrypting and decrypting information transferred over a public network between a client application program running in a client computer and a server application program running in a server computer and a directory service application program running in a server computer. A method for obtaining a session master key by an application from a server includes sending an open request to the server for the session master key and receiving a first reply by the application from the server with a first portion of the session master key. The first reply identifies a directory server from which a second portion of the session master key may be obtained. The application sends an open request to the directory server specified by the server in the first reply for the second portion of the session master key and receives it from the directory server.

Abstract: A system and method comprising a computer useable medium having computer readable program code embodied therein for authenticating and encrypting and decrypting information transferred over a public network between a client application program running in a client computer and a server application program running in a server computer and a directory service application program running in a server computer. A method for secure communication by a processor with a server includes generating a message to the server by employing a one pass key generation probabilistic authentication process using a predetermined session master key and sending the message to the server. A method for secure communication between an application executable on a computer and a web server coupled to the computer includes participating by the application in an initial authentication process with the server and wrapping every GET and POST request message to the server in an SSLX-EA exchange after the initial authentication process.

Abstract: A technique for determining a match between a character string including an evaluation and product information stored in a storage device and including a feature description of a product. The character string includes a name of an evaluation object to be evaluated and an evaluation expression representing the evaluation of the evaluation object. The matching method includes a first determining step of determining from the evaluation object and the evaluation expression whether the evaluation expression represents a positive evaluation of the evaluation object or a negative evaluation of the evaluation object; and a second determining step of determining, when the evaluation expression represents a positive evaluation of the evaluation object, if the evaluation expression is included in a feature description of a product, the product to be a matched product, and if the evaluation expression is not included in a feature description of a product, the product to be a mismatched product.

Abstract: The subject matter relates to software application collaboration and, more particularly, collaboration between software applications via formular updates. Some such embodiments include systems, methods, and software to receive a definition of a content item from a first party, wherein the content item is operable within an application of a second party to cause data to be exported by the second party's application in a manner that can be imported to an application of the first party. Some such embodiments further include sending the content item to the second party.

Abstract: Various techniques are provided for the gifting between multiple electronic devices of media content provided by an online digital media provider. An offer and acceptance of a selected gift file is accomplished between a gifter device and a receiving giftee device using a near-field communication (NFC) connection. If a connection to the online provider is available, the gifter device may transmit a gift request by which the gifter's account is charged for the gift file. Thereafter, a gift file created using DRM keys associated with the giftee's account may be downloaded to the giftee device. If a network connection is unavailable, the giftee device may transfer a locked gift file and a corresponding gift license to the giftee device using a peer-to-peer connection. The giftee device may authenticate the license and unlock the gift file once a connection to the online provider is available.

Abstract: A method includes storing, at a storage location of a system, a first security value and utilizing, at the system, a first security certificate compatible with the first security value and incompatible with at least a second security value, wherein the first security certificate enables one or more processing features of the system in conjunction with the first security value. The method also includes receiving a certificate revocation stimulus and modifying a value at a first bit position of the storage location so as to convert the first security value stored at the storage location to the second security value. Another method includes receiving multimedia data at a system, wherein the multimedia data is representative of multimedia content including a digital watermark representing one or more system identifiers, and disabling at least one processing feature if the system identifiers includes a unique identifier associated with the system.

Abstract: Technologies are disclosed to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disc carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations, access secure nonvolatile storage, submit data to CODECs for output, and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: A system for dealing in an original data content and an edited data content. A data content is handled as an object, and the data content is edited by editing a data content, functioning as an object, in accordance with an edit program. The edited data content is expressed by the original data content and the editing scenario which describes editing detail by the edit program. Only the encrypted editing scenario is dealt in. Upon receipt of the encrypted editing scenario, a user decrypts the encrypted editing scenario using a crypt key obtained from a key management center, and obtains the original data content from the database in accordance with the editing scenario and re-constitutes the edited data content. In case there is the one who wishes sale of the editing scenario, its utilization right is sold by auction.