Abstract: A method and apparatus for license distribution are disclosed. An endpoint requests information from a server related to information required for the server to grant a license. The server provides the required information to the endpoint. The endpoint obtains the required information, and forwards the information to the server. The server, upon receiving the information, determines if a license may be granted to the endpoint, and transmits a license authorization to the endpoint, which includes the number of licenses which are granted.

Abstract: A data recording apparatus capable of preventing easily copying of information is disclosed with which, even if information is copied, the copied information cannot be reproduced, the data recording apparatus having a terminal to which encoder ID specific for the data recording apparatus is input, a recording unit for recording at least the encoder ID on an optical disk, and an encoding circuit for, in accordance with the encoder ID, encoding data supplied through a terminal and required to be recorded so that encoded data is, together with the encoder ID, recorded on the optical disk.

Abstract: Disclosed is an information providing apparatus comprising first reception control means for controlling the reception, from a first information processing apparatus, of user identification data for identifying a user of the first information processing apparatus and a request for purchasing a content, first transmission control means for controlling in response to the request for purchasing the content the transmission of the request for purchasing the content to a second information processing apparatus, second reception control means for controlling the reception of the content and usage conditions thereof supplied from the second information processing apparatus, storage control means for controlling the storing of the content and usage conditions thereof in correlation with the user identification data, third reception control means for controlling the reception of the user identification data and a request for sending the content supplied from the first information processing apparatus, and second trans

Abstract: Digital work adapted to be distributed within a system for controlling at least one of the distribution and use of digital works. The digital work includes: digital content representing a portion of a digital work suitable for being rendered by a rendering device and usage rights associated with the digital content. The usage rights specify a manner of use indicating one or more stated purposes for which the digital work can be at least one of used and distributed by an authorized party.

Abstract: Consumers may utilize computing devices to assist in the purchase and/or loyalty process, and in particular, the consumer may utilize a PDA to facilitate the purchase and/or loyalty process. During the purchase and/or loyalty process, the consumer may need to insure that any content downloaded or used in association with the PDA is secure in how it is collected, assembled, and delivered to the PDA device. This system and method secures the data from its source to when it is actually viewed or used by the authorized user. The PDA may have direct access to an Internet web site portal that offers secure personal content from a content provider, such as, for example, an on-line banking or financial institution. Using the web site portal, the content provider may offer personal or confidential data, such as financial information, to PDA users in a secure (e.g., encrypted) environment.

Abstract: A method and apparatus for facilitating transfer of usage rights for digital content. The system comprises digital content, a usage rights module containing usage rights information associated with the content for a user, a transfer permission module containing transfer permission information for the content, a current user identification module containing identity information indicating the identity of the user, and means for manipulating the current user identification module to change the identity information. The content can be transferred form one user to another and the current user identification module can be manipulated to reflect the current user and to permit the current user to have usage rights in the document.

Abstract: A system and method are provided that remotely grants limited access and permits use of resident software options in accordance with terms consistent with an access grant. The invention includes receiving an access request from a user to access a software option resident in memory of a device, determining whether to grant access in response to the request, and generating an electronic enabler in response to the access request that is transmitted from a centralized facility to a user of the remote device. The electronic enabler is configured to be input into the device whereupon activation of the option is achieved in accordance with terms of the access grant.

Abstract: A system and method for enforcing rights expressions specifying manners of use of an item, include specifying by a potential recipient of an item a first rights expression indicating a first manner of use of the item proposed by the recipient; specifying by a provider of the item a second rights expression indicating a second manner of use of the item proposed by the provider; determining if there is a correspondence between the first rights expression and the second rights expression; and applying a rule to a determined correspondence between the first rights expression and the second rights expression to determine if the recipient should be granted use of the item.

Abstract: A system for controlling the distribution and use of digital works using digital tickets. In the present invention, a “digital ticket” is used to entitle the ticket holder to exercise some usage right with respect to a digital work. Usage rights are used to define how a digital work may be used or distributed. Each usage right may specify a digital ticket which must be present before the right may be exercised. Digital works are stored in repositories which enforce a digital works usage rights. Each repository has a “generic ticket agent” which punches tickets. In some instances only the generic ticket agent is necessary. In other instances, punching by a “special ticket agent” residing on another repository may be needed.

Abstract: The present invention provides a net trade advice system in which not only data such as stock prices is presented, but also asset management advice can be obtained as if a user is served by a professional adviser at the window, and transactions can be made. The present invention provides an asset management advice system that comprises a database storing purchase and sale signals relating to assets to be traded, which signals are calculated based on data such as stock prices, foreign exchange market prices and commodities-futures prices, the amount of remains (such as the amount of issuance of securities and the amount of existence of commodities), and the volume of business (such as trading volume and purchase and sale prices) of assets to be traded.

Abstract: Devices, systems and methods for restricting use of digital content are provided. Among those embodiments which may be construed as providing a method for restricting use of digital data, a preferred method includes the steps of: enabling a user to receive digital data; and preventing the user from copying the digital data to a digital data recording medium if: (a) copy information corresponding to the digital data indicates that such copying is not to be permitted; or (b) the digital data recording medium is not an authorized digital data recording medium.

Abstract: A method, system, and apparatus are provided for securely accessing a digital work, such as digital movie, music file, photo, or other type of digital media. Provider contexts, requester contexts, and exporting contexts exchange logic statements as defined by a distributed logic-based programming language. Logic statements may define trust, delegation, and other security relationships. Decisions regarding access to a digital work are made by a provider context based upon locally stored logic statements and other logic statements imported from other contexts. If the logic statements satisfy a security policy, also defined in terms of logic statements, access is granted to the digital work. Otherwise, access to the digital work is denied.

Abstract: A rights expression system and method for facilitating creation and/or modification of rights expressions in a rights expression language based on one or more schemas are provided. In one embodiment, the rights expression system comprises selectable layouts corresponding to a rights granting paradigm and comprises type selection components. Each type selection component is adapted to present REL terms and input components. The input components allow input of parameters required by the selected REL term. The rights expression system also includes a data engine that generates rights expressions in proper REL semantics defined by the one or more schemas based on the selected layout and parameter inputted. The type selection components and input components may be type selectors and input forms, respectively, that are implemented in a graphical user interface.

Abstract: A system and method for receiving data packets at a computer system are presented. The method and system comprise receiving at a buffer, at least two data packets. Once received, an ending portion of the first data packet is stored in a buffer, wherein the ending portion comprises at least the last data bit in the first data packet. Next the method and system concatenates the ending portion of the first data packet with a beginning portion of the second data packet so a string search engine can determine if the concatenated data contains a known string of malicious data bits.

Abstract: Disclosed is a land website that provides a personalized database on which data can be stored, retrieved, customized and communicated (e.g., by e-mail) relating to a particular piece of property. The database can be accessible via a password and a security code over the Internet and may be encrypted for transmission. Land websites can be established that contain image data, map libraries, virtual tours, legal descriptions, title information, e-documents, actual pictures of property and various other information. Unique 3-D imaging of composite images can be provided on the land website as well as fly-around composite 3-D images. The land website provides a unique way of packaging information relating to a piece of land in a single, accessible location. A boundary applet tool is provided on the land website portal that allows a user to simply and easily draw boundaries around the property of interest and then submit an order for more detailed information about the property of interest.

Abstract: An electronic security device has a light-receiving interface that receives a modulated light signal emitted by the screen of a computer making use of the data medium, an output interface adapted to emit output information as a function of the received input information, and an electronic central unit connected to the receive and emit interfaces and adapted to determine the output information as a function of the input information and to cause said output information to be emitted.

Abstract: A memory element is provided in the recording medium that is readable but not writeable by external devices, and whose content changes each time select material is recorded onto the medium. The content of this memory element forms a unique encryption key for encrypting the content encryption key. This encrypted content encryption key is further encrypted using a public key that corresponds to a private key of the intended rendering device. Although the unique encryption key is determinable by reading and processing the content of the externally read-only memory element, the decryption of the content encryption key requires both the unique encryption key and the private key of the intended rendering device.

Abstract: A method and system for managing the state of a protected resource in a system for granting access to a protected resource in accordance with usage rights. The usage rights include at least one state variable indicating a status of an associated protected resource. A message related to the state variable is transmitted from a resource control device to an interface framework. The resource control device is coupled to the resource to control use of the resource by enforcing the usage right. A state controller operative to track the value of the state variable is loaded into the framework and instructed to manipulate the value of the state variable in accordance with said message. For example, the message can be a query of the current value of the state variable.

Abstract: Methods and apparatus for creating a license defining permissions to use electronic content. The methods include selecting a plurality of habitat types, each an aspect of a user environment to which a license can be bound, the selection based on input from a retail customer; determining one or more habitat values and relations for each selected type; and creating a license to use the electronic content, the license including an and-or logic expression of habitat terms, each term containing one of the selected types and its set of corresponding values and relations. Each habitat term may include a key for decrypting or unlocking the electronic content.

Abstract: An inventory information collecting unit automatically collects inventory information including inventory information regarding software installed in each of a plurality of computers within an organization. A usage-state information collecting unit updates a software license usage number which represents the number of software licenses used in each section of the organization. When the sum of the software license usage numbers of the respective sections of the organization exceeds a software license holding number which represents the number of software licenses owned by the organization, a license purchasing unit generates a purchase transaction for purchasing software licenses, the number of which is equal to the difference between the sum and the software license holding number and transfers a purchase expense to relevant sections.

Abstract: An electronic program guide (EPG) hardware card is disclosed. The card is insertable into a television tuning device having EPG capability. A non-volatile memory, such as flash memory, is situated within a case of the hardware card, and has data stored thereon representing one or more loader programs for the device. Each program corresponds to an EPG provider, and gives the device the capability to receive EPG information from this provider. The case of the hardware card may have a form factor such as a Smart Card, a Compact Flash, a Smart Media, or another form factor. Alternatively, the data stored on the card represents non-executable information corresponding to an EPG provider. A business model and a server-based embodiment are also disclosed.

Abstract: An e-mail firewall applies policies to e-mail messages transmitted between a first site and a plurality of second sites. The e-mail firewall includes a plurality of mail transfer relay modules for transferring e-mail messages between the first site and one of the second sites. Policy managers are used to enforce and administer selectable policies. The policies are used to determine security procedures for the transmission and reception of e-mail messages. The e-mail firewall employs signature verification processes to verify signatures in received encrypted e-mail messages. The e-mail firewall is further adapted to employ external servers for verifying signatures. External servers are also used to retrieve data that is employed to encrypt and decrypt e-mail messages received and transmitted by the e-mail firewall, respectively.

Abstract: A e-mail relay provides message filtering services to an e-mail network. The e-mail relay monitors incoming communication and intercepts e-mail messages. The e-mail relay compares attributes of the messages to data derived from SPAM messages, which is stored in a SPAM database. The e-mail relay restricts the delivery of message based on the comparison such as by restricting the delivery of messages having attributes close to those of SPAM messages from the SPAM database. The SPAM database is constructed by responding to user or administrator indications as to whether received messages are SPAM messages.

Abstract: A data distribution system has a portable user terminal, which sends a portable terminal ID or memory card ID and electronic money are sent to a store-based terminal (10) and receives data content, a store-based terminal (11), which receives the portable terminal ID or memory card ID and electronic money from the portable user terminal (10), and which sends these to a billing center (12), along with a content ID and a store-based terminal ID, a billing center (12) that receives the content ID, the portable terminal ID or memory card ID, the store-based terminal ID, and the electronic money from the store-based terminal (11), and a content center (13), which receives the content ID, the portable terminal ID or memory card ID, and the store-based terminal ID, and which distributes data content, via the store-based terminal (11), to the portable terminal (10).

Abstract: Rights management information is used at least in part in a matching, narrowcasting, classifying and/or selecting process. A matching and classification utility system comprising a kind of Commerce Utility System is used to perform the matching, narrowcasting, classifying and/or selecting. The matching and classification utility system may match, narrowcast, classify and/or select people and/or things, non-limiting examples of which include software objects. The Matching and Classification Utility system may use any pre-existing classification schemes, including at least some rights management information and/or other qualitative and/or parameter data indicating and/or defining classes, classification systems, class hierarchies, category schemes, class assignments, category assignments, and/or class membership.

Abstract: A computer system including a processor, an access token communicator capable of being coupled to the processor and adapted to read an access token, an input device coupled to the processor that is able to receive verification data that confirms authorized access of the access token, and software executable on the processor that includes instructions to control access to the processor and including code to access the access token and the verification data, code to verify the validity of the access token using the verification data, code to set security policies in the processor, and code to control access to resources in the processor based on the security policies. In addition, a method for reading an access token, verifying the validity of the access token, setting security policies in a computer system, and unlocking a computer system and a nonvolatile storage device attached to the computer system.

Abstract: An enforcement architecture and method for implementing digital rights management are disclosed. Digital content is distributed from a content server to a computing device of a user and received, and an attempt is made to render the digital content by way of a rendering application. The rendering application invokes a Digital Rights Management (DRM) system, and such DRM system determines whether a right to render the digital content in the manner sought exists based on any digital license stored in the computing device and corresponding to the digital content. If the right does not exist, a digital license that provides such right and that corresponds to the digital content is requested from a license server, and the license server issues the digital license to the DRM system. The computing device receives the issued digital license and stores the received digital license thereon.

Abstract: A method for facilitating distribution of a digital work within a system having at least one repository configured to enforce use of said digital work in accordance with rights. The digital work has one or more rights associated therewith. A copy right or other right is associated with a digital work. The copy right specifies a fee to be paid as a condition for the repository permitting a specified use of the digital work to be made. The digital work can be provided to a distributor for distribution to at least one other party. The fee is reported as a transaction in response to a distribution of said digital work.

Abstract: A system and method are provided for selecting, from among a plurality of attachment schemes, an attachment scheme which is appropriate for embedding information in digital data, attaching information representing the selected attachment scheme to the digital data using a predetermined attachment scheme, and attaching arbitrary information such as copyright information or user information to the digital data using the selected attachment scheme.

Abstract: An approach for establishing secure communication among multiple multicast groups using a multi-master directory is disclosed. The multi-master directory is on a per object and per attribute access controls basis. The event service nodes, which can implemented as event servers, are distributed throughout an enterprise domain. The attributes of the event service nodes include the group session key and the private keys of the event service nodes. A standardized authentication service is used to register publishers and subscribers. These publishers and subscribers can individually belong to multiple multicast groups under a readily scalable, secure network architecture.

Abstract: A method and an apparatus for specifying and editing rights associated with a content includes a general model that comprehends rights specification at different levels of the content life cycle. The rights specification includes content association, and the protection of the content is a byproduct of the content and rights association. The general model includes a rights component, a conditions component, a rights offer component, and a rights label component. The rights offers specify the relationship between rights and conditions. The rights labels are collections of the offers.

Abstract: A broadcast receiving method comprises storing first control information in a storage device, the first control information containing information unique to a receiver and required for the receiver to select broadcasted and encrypted contents information, and receiving second control information with a receiver via a bi-directional communications channel, the second control information being for updating at least some contents of the first control information, updating the first control information in the storage device on the basis of the second control information, receiving broadcasted key information independent from the receiver and required to decrypt the contents information, and selecting and decrypting the encrypted contents information based on the key information and updated first control information.

Abstract: A content provider 101 distributes a secure container 104 storing content data encrypted using content key data, content key data encrypted using distribution key data, and encrypted usage control policy data indicating the handling of the content data to a SAM 1051 of a user home network 103 etc. The SAM 1051 etc. decrypts the content data and usage control policy data stored in the secure container 104 and determines the purchase mode and usage mode and other handling of the content data based on said decrypted usage control policy data.

Abstract: A method and apparatus of encouraging distribution, registration, and purchase of free copyable software and other digital information which is accessed on a User's System via a Programmer's Program. Software tools which can be incorporated into a Programmer's Program allow the User to access Advanced Features of the Programmer's Program only in the presence of a valid Password which is unique to a particular Target ID generated on an ID-Target such as the User's System. Advanced features will thus re-lock if the Password is copied to another ID-target. If a valid Password is not present, the User is invited to obtain one, and provided with the means of doing so, and of installing that Password in a place accessible to the User's System on subsequent occasions. The present invention also provides Programmers with means to invoke business operations as well as computational operations with their programs, and thus to automatically obtain payment from Users who elect to obtain passwords.

Abstract: A technique to prevent illicit copying of a copy-protected CD-ROM into a computer-readable storage drive is presented. In accordance with the present invention, when an authentic copy-protected CD-ROM is inserted into a CD drive and the content of the copy-protected CD-ROM is installed onto a hard disk drive that is linked to the CD drive, the Central Processor Unit (CPU) executes the installer instructions residing in the CD-ROM to create a license file in the hard disk drive. For security reasons, the content of the CD-ROM (e.g., the executable file of the application) is encrypted. When the content of the CD-ROM is copied into the hard disk drive, it remains encrypted. The license file essentially acts as a timer to monitor a predetermined time interval that has been programmed into the license file.

Abstract: The inventive data processing apparatus initially generates verifying values for verifying integrity of contents data stored in a memory device, then stores the verifying values in correspondence with contents data, and then, using the verifying values, the data processing apparatus proves the act of tampering with the relevant contents data, where the verifying values are generated and stored in a memory device per category of contents data. Each of the categories is preset based on a controlling entity of enabling key blocks (EKB) which encipher and provide a contents key (Kcon) provided as a key for enciphering the kinds of categories or contents data. Because of this arrangement, it is possible to effectively and independently executes the process for probing the act of tampering with contents data per controlling entity of the enabling key blocks (EKB) for example.

Abstract: A document transfer system enabling a consumer to obtain a document from an owner upon payment uses a cryptographic protocol involving the consumer, the owner, a document source, such as a printer, and a mediator.

Abstract: A method and apparatus for securing hypertext transfer protocol sessions authenticates a user's credentials before creating a session. The present invention then associates the session with the credentials. Subsequent requests are submitted with the session ID and the user credentials to be associated with the session. Therefore, an unauthorized user that has obtained a session ID cannot gain access to sensitive content associated with the session without possessing the valid credentials.

Abstract: A hybrid optical recording disc having copy protection for use in a computer, including a read-only area having preformed information including at least one program and disc identifier data; a recordable area; and the disc identifier data being adapted to authenticate a transferred program in the computer to permit the program to be operated by the computer.

Abstract: A system and method for using an e-commerce system to provide a user with the ability to order customized identification documents over the Internet is provided. The user can customize the layout of the identification document, including the use of company logos and trademarks. The user provides the demographic data and corresponding graphical representations, and is given the opportunity to approve a digital facsimile of the identification document that will be produced by the service bureau prior to the production of the identification documents. In addition, enhanced security is provided by verifying that the user is part of a legitimate organization and is authorized to use the identification documents being ordered.

Abstract: An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Abstract: A method and apparatus for protecting computer software from unauthorized execution or duplication using a hardware key is disclosed. The apparatus comprises a means for communicating with the computer to receive command messages from the computer in the hardware key and to provide response messages to the computer, a memory for storing data for translating command messages into response messages enabling software execution, and a processor coupled to the communicating means for translating command messages into response messages using the data stored in the memory. The processor further comprises a memory manager, including means for logically segmenting the memory storing the data into at least one protected segment, and a means for controlling access to the protected segment.

Abstract: The invention provides techniques for issuing electronic seals of certification to online entities, such as online merchants, in a manner that prevents non-certified parties from easily stealing or otherwise misusing the seals. A central seal issuer verifies the credentials, policies or business practices of each merchant and issues a corresponding seal of certification. For each merchant, the seal issuer generates a unique media object representing an electronic seal. The media object includes an encrypted watermark containing an expiration date. The media objects are stored on a seal server such that the merchants can dynamically retrieve and display the electronic seals when accessed by a user. The seal issuer can easily revoke or update the centrally stored seals.

Abstract: An apparatus for restricting a copy of digital information is provided with a detecting device for detecting a first watermark, which is buried in the digital information and comprises a first signal generated on the basis of a first rule. A burying device buries a second watermark, which comprises a second signal generated on the basis of a second rule and having a structure different from that of the first signal, into the digital information if the first watermark is detected by the detecting device. A recording apparatus is provided with: an inputting device for inputting the digital information; the above mentioned copy restricting apparatus; and a recording device for recording the digital information in which the second watermark is buried by the burying device.

Abstract: The present invention relates to a digital contents selling system for selling digital contents. Identification information of digital contents selected by a customer is received. Personal digital contents are generated by setting identification information for identifying the customer in the selected digital contents as status information for permitting the customer to replay the selected digital contents. The generated digital contents are sold. Thereby, a technique is provided for preventing the illegal use of the sold digital contents.

Abstract: In a method and apparatus for protecting a device against operation with unallowed consumables whose authenticity is checked in a remote data center, at least one code word is generated, an allocation to a specific consumable is stored in the form of a dataset with a reference code word, the consumable is aggregated with the generated code word, which has a predetermined relationship to the reference code word or to a group of reference code words that are stored in the data center. An operation for the replacement of a consumable in a device remote from the data center is detected and a communication connection is set up between the device and the remote data center and the code word aggregated with the consumable is communicated to the data center. The communicated code word is received in the data center and the authenticity of the consumable on the basis of a stored reference code word is checked at the data center, which transmits a message to the device after checking the code.

Abstract: A rendering system adapted for use in a system for managing use of content and operative to rendering content in accordance with usage rights associated with the content. The system includes a rendering device configured to render the content and a repository coupled to the rendering device and operative to enforce usage rights associated with the content and permit the rendering device to render the content in accordance with a manner of use specified by the usage rights.

Abstract: A method and system for managing agricultural product information, and for facilitating the controlled sale, distribution, and use of agricultural products provides a single data entry process for submitting agricultural product registration applications and renewals for a plurality of jurisdictions (states). A single username and password can be used to access a plurality of state databases. State data can be easily cross-referenced and indexed against federal product registration data. Also provided is a system and process of field inspection and enforcement of registration requirements for agricultural products, wherein universal product codes (UPCs) may be scanned into a portable data terminal and be used to check the approval status of a product found in a retailer's store.

Abstract: A method for providing limited printing of a digital work having one or more rights associated therewith within a system having at least one repository configured to enforce use of the digital work in accordance with the rights. A limited printing right, or other rights, can be associated with a digital work. The limited printing right specifies a type of printer and type of ticket required for exercising the limited printing right of the digital work for a limited printing fee. A copy of the digital work is distributed along with the ticket to a consumer. The limited printing fee is reported as a transaction in response to the consumer exercising the limited printing right.

Abstract: A digital work for use within a rights management system for controlling use of the digital work in accordance with usage rights. The work is organized into an acyclic structure and includes a contents file including information related to content that can be interpreted by an interpreter, and a description tree file including descriptor blocks organized in a hierarchical manner. At least some of the descriptor blocks contain usage rights associated with the content. The usage rights specify a manner of use for the content.