Abstract: A method, system, and apparatus are provided for securely accessing a digital work, such as digital movie, music file, photo, or other type of digital media. Provider contexts, requester contexts, and exporting contexts exchange logic statements as defined by a distributed logic-based programming language. Logic statements may define trust, delegation, and other security relationships. Decisions regarding access to a digital work are made by a provider context based upon locally stored logic statements and other logic statements imported from other contexts. If the logic statements satisfy a security policy, also defined in terms of logic statements, access is granted to the digital work. Otherwise, access to the digital work is denied.

Abstract: Redirecting function calls through a protected environment to effect secure linkage of program modules. In one embodiment, a program module, such as a player application for example, may make function calls to secure functions instead of to insecure operating system (OS) services, thereby deterring attacks on the player's calls to OS services. In one embodiment, the new secure functions provide similar functionality to the replaced OS services. Providing a securely loaded function for calling by a program module in place of calling an insecure OS function includes obtaining object code for the securely loaded function from a signed binary description file, performing signature and integrity verification of the program module using the signed binary description file, loading the object code for the securely loaded function into memory, and updating an address for calling the securely loaded function by the program module.

Abstract: A rights expression system and method for facilitating creation and/or modification of rights expressions in a rights expression language based on one or more schemas are provided. In one embodiment, the rights expression system comprises selectable layouts corresponding to a rights granting paradigm and comprises type selection components. Each type selection component is adapted to present REL terms and input components. The input components allow input of parameters required by the selected REL term. The rights expression system also includes a data engine that generates rights expressions in proper REL semantics defined by the one or more schemas based on the selected layout and parameter inputted. The type selection components and input components may be type selectors and input forms, respectively, that are implemented in a graphical user interface.

Abstract: An electronic book reader has a processor, a display surface, and access to a memory card upon which is stored a digitally-formatted creative work such as a book. In addition, the reader has access to a plurality of precompiled condensed content descriptions of respective books that are subject to copy restrictions. Before reading a given book, the reader creates a condensed content description of the book and compares it to the stored descriptions to determine whether the book is subject to copy restrictions. If it is, the reader checks for a valid license before allowing the user to read the book.

Abstract: Providing adaptive security for access to content on a system may be accomplished by determining if a user has rights to access the content according to a content license associated with the content, and when the user has rights to play the content, performing the following actions. The system reads a data structure in the content license defining at least one security factor ID and an associated factor value, sets a security factor value for a security factor, the security factor corresponding to the security factor ID, to the associated factor value from the data structure, allows access to the content, and performs security processing by the system at a level based at least in part on the security factor value. In one embodiment, the security factor IDs and associated factor values are set by a content owner or distributor at the time of manufacturing or distributing the content.

Abstract: Disclosed is a land website that provides a personalized database on which data can be stored, retrieved, customized and communicated (e.g., by e-mail) relating to a particular piece of property. The database can be accessible via a password and a security code over the Internet and may be encrypted for transmission. Land websites can be established that contain image data, map libraries, virtual tours, legal descriptions, title information, e-documents, actual pictures of property and various other information. Unique 3-D imaging of composite images can be provided on the land website as well as fly-around composite 3-D images. The land website provides a unique way of packaging information relating to a piece of land in a single, accessible location. A boundary applet tool is provided on the land website portal that allows a user to simply and easily draw boundaries around the property of interest and then submit an order for more detailed information about the property of interest.

Abstract: A license compliance verification system and method includes a license manager that internally monitors the use of licensed property and gathers data over specified time periods about the usage of the licensed property relative to a plurality of parameters including a parameter that defines the licensors of the licensed property. License compliance verification software interfaces with the license manager and extracts from its data logs licensor specific data that is subsequently forwarded to licensors. The collected data is authenticated to assure licensors that it has not been tampered with.

Abstract: A method and system for managing the state of a protected resource in a system for granting access to a protected resource in accordance with usage rights. The usage rights include at least one state variable indicating a status of an associated protected resource. A message related to the state variable is transmitted from a resource control device to an interface framework. The resource control device is coupled to the resource to control use of the resource by enforcing the usage right. A state controller operative to track the value of the state variable is loaded into the framework and instructed to manipulate the value of the state variable in accordance with said message. For example, the message can be a query of the current value of the state variable.

Abstract: Methods and apparatus for creating a license defining permissions to use electronic content. The methods include selecting a plurality of habitat types, each an aspect of a user environment to which a license can be bound, the selection based on input from a retail customer; determining one or more habitat values and relations for each selected type; and creating a license to use the electronic content, the license including an and-or logic expression of habitat terms, each term containing one of the selected types and its set of corresponding values and relations. Each habitat term may include a key for decrypting or unlocking the electronic content.

Abstract: An inventory information collecting unit automatically collects inventory information including inventory information regarding software installed in each of a plurality of computers within an organization. A usage-state information collecting unit updates a software license usage number which represents the number of software licenses used in each section of the organization. When the sum of the software license usage numbers of the respective sections of the organization exceeds a software license holding number which represents the number of software licenses owned by the organization, a license purchasing unit generates a purchase transaction for purchasing software licenses, the number of which is equal to the difference between the sum and the software license holding number and transfers a purchase expense to relevant sections.

Abstract: In a cellular phone, a controller stores content data received from a distribution server into a memory. When the content data is to be transmitted to a memory card, a random number key generator generates a license key, and an encryption processing unit encrypts the content data using the license key. The controller transmits encrypted content data to a memory card via a memory card interface. Then, the controller deletes the content data stored in the memory. As a result, distribution of content data that must be deleted when transferring to another apparatus can be facilitated while protecting the copyright.

Abstract: An electronic program guide (EPG) hardware card is disclosed. The card is insertable into a television tuning device having EPG capability. A non-volatile memory, such as flash memory, is situated within a case of the hardware card, and has data stored thereon representing one or more loader programs for the device. Each program corresponds to an EPG provider, and gives the device the capability to receive EPG information from this provider. The case of the hardware card may have a form factor such as a Smart Card, a Compact Flash, a Smart Media, or another form factor. Alternatively, the data stored on the card represents non-executable information corresponding to an EPG provider. A business model and a server-based embodiment are also disclosed.

Abstract: The information reproduction device for reproducing contents information based on license information added to the contents information and required for reproducing the contents information, includes a determining section for determining whether encrypted contents information is the officially copied contents information or privately copied contents information based on the contents of the license information, and a reproduction section configured to reproduce the contents information determined as the privately copied contents information by the determining section under more severe restriction than the officially copied contents information. Thus, the contents copied by the proper route (officially copied contents) can be distributed in a more advantageous form than the contents copied without proper authorization.

Abstract: A data distribution system has a portable user terminal, which sends a portable terminal ID or memory card ID and electronic money are sent to a store-based terminal (10) and receives data content, a store-based terminal (11), which receives the portable terminal ID or memory card ID and electronic money from the portable user terminal (10), and which sends these to a billing center (12), along with a content ID and a store-based terminal ID, a billing center (12) that receives the content ID, the portable terminal ID or memory card ID, the store-based terminal ID, and the electronic money from the store-based terminal (11), and a content center (13), which receives the content ID, the portable terminal ID or memory card ID, and the store-based terminal ID, and which distributes data content, via the store-based terminal (11), to the portable terminal (10).

Abstract: A viewing device is provided for viewing at least one image transparency having an associated tracking memory. The viewing device comprises an illumination device having at least one viewing surface adapted to present at least one illumination pattern, at least one radio frequency read write device for obtaining electronic data stored in an associated tracking memory of an image transparency positioned proximate to the viewing surface and at least one display device for viewing at least one electronic image related to said at least one image transparency. A control processing unit is adapted to receive said obtained data from said associated tracking memory and to use the obtained data for forming the at least one electronic image.

Abstract: A method on an end user system for creating additional copies onto at least one computer readable medium such as CDs, DVDs, ZipDisks™, tape, Flash memory, and RAM. The method comprising the steps of: receiving encrypted content with associated usage conditions and a first hash value; receiving a selection from an end user to create at least one copy of the encrypted content onto at least one computer readable medium; sending a request to an online electronic store of the encrypted content selected to be copied; receiving from the electronic store a description of the content selected to be copied along with a second hash value; and determining if the first hash value received is identical to the second hash value and if the first hash and the second hash value is identical authorizing the creating additional copies onto at least one computer readable medium.

Abstract: Content revocation is achieved by disabling licenses issued to a computing device for the content. A content revocation is delivered within a license to the computing device. Upon license storage the content revocation is recognized, validated, and stored in a secure state store under the public key of the content server (PU-CS) that issued the content. Each license has a (PU-CS) therein, and each license evaluation considers each content revocation stored in the state store and having the same (PU-CS). The license is disabled or otherwise affected based on the considered content revocation. A content revocation is one form of a license modification that may be delivered within a license.

Abstract: A method for facilitating distribution of a digital work within a system having at least one repository configured to enforce use of said digital work in accordance with rights. The digital work has one or more rights associated therewith. A copy right or other right is associated with a digital work. The copy right specifies a fee to be paid as a condition for the repository permitting a specified use of the digital work to be made. The digital work can be provided to a distributor for distribution to at least one other party. The fee is reported as a transaction in response to a distribution of said digital work.

Abstract: A TV music broadcasting program is distributed from a distribution apparatus through a ground station and a satellite, and a musical-piece program is also distributed through a plurality of audio channels. A subscriber looks for the desired musical piece from a musical-piece list displayed on the screen of a TV receiver and downloads it into a storage device. A pay-per-view method is employed in which accounting is performed in units of musical pieces. At downloading, a purchase record is stored in an IC card placed in a receiving apparatus and it is periodically sent to a customer management center. The customer management center calculates the viewing fee and issues a bill to the subscriber. A copyright management apparatus in the distribution apparatus obtains the purchase record of a musical piece from the customer management center to calculate a copyright fee to be paid to the copyright holder.

Abstract: The invention provides techniques for issuing electronic seals of certification to online entities, such as online merchants, in a manner that prevents non-certified parties from easily stealing or otherwise misusing the seals. A central seal issuer verifies the credentials, policies or business practices of each merchant and issues a corresponding seal of certification. For each merchant, the seal issuer generates a unique media object representing an electronic seal. The media object includes an encrypted watermark containing an expiration date. The media objects are stored on a seal server such that the merchants can dynamically retrieve and display the electronic seals when accessed by a user. The seal issuer can easily revoke or update the centrally stored seals.

Abstract: A reproducing apparatus for reproducing data from a record medium having a program area and a management area, the program area being used for recording a plurality of files, the management area being used for managing forging prohibition information against a particular file recorded in the program area is disclosed, the apparatus comprising a calculating means for calculating the forging prohibition information managed in the management area of the record medium whenever a file recorded in the recorde medium is reproduced, a comparing means for comparing a value calculated by the calculating means corresponding to a former reproduction command with a value calculated by the calculating means corresponding to a current reproduction command, and a controlling means for permitting the file corresponding to the current reproduction command to be reproduced when the value calculated corresponding to the former reproduction command is the same as the value calculated corresponding to the current reproduction comm

Abstract: A semiconductor storage device includes a program ROM and a flash memory, and the program ROM includes a program data storing area and a dummy data storing area, and the flash memory includes a program data storing area and a dummy address storing area. An address comparison circuit compares an input address and a dummy address being stored in the dummy address storing area with each other. An output inhibiting circuit allows to read program data from the program ROM when the both addresses are not coincident with each other, and inhibits the program data from being read at a time of incoincidence. In a case of the incoincidence, an address conversion circuit produces a read address of the flash memory, whereby the program data is read from the flash memory.

Abstract: A method and an apparatus for specifying and editing rights associated with a content includes a general model that comprehends rights specification at different levels of the content life cycle. The rights specification includes content association, and the protection of the content is a byproduct of the content and rights association. The general model includes a rights component, a conditions component, a rights offer component, and a rights label component. The rights offers specify the relationship between rights and conditions. The rights labels are collections of the offers.

Abstract: A system and method for enabling authorized music from a CD or DVD to be compressed by a user for the user's own use, but to prevent the recompression of unauthorized music from, e.g., the Internet, includes hashing the music during recording with a cryptographic hash, and then signing the hash with a digital signature derived from the hash. Subsequent unauthorized compression and recompression will destroy the digital signature. Accordingly, music to be recorded is hashed to obtain a test digital signature and if, after hashing, the test digital signature matches the digital signature accompanying the music, compression and recording are allowed to proceed.

Abstract: A system and method is provided for tracking royalty obligations of a user of intellectual property. The intellectual property can perform program code being sent to a user of a programmable device. The program code is used to configure the programmable device to the functionality of a design owned by an intellectual property vendor. The intellectual property vendor can send an identifier with the code and the programmable device manufacturer can send an embedded code with the shipped, programmable device. The user, when programming the device, will compare the identifier within the code to the embedded code and, if a match results, the user will know that the program contains valuable intellectual property. For each device being programmed with such intellectual property, a computation can occur and the number of thusly programmed devices can be maintained within a resulting royalty payment table.

Abstract: Oblivious checking of a digital good is performed by identifying a plurality of key instructions within a function of a digital good. Each key instruction is an instruction that possibly modifies a register or a flag. An extra instruction is then inserted into the function for each of the key instructions. The extra instructions each correspond to one of the key instructions and modify a register in a deterministic fashion based on the corresponding key instruction. A set of inputs to the function are then identified that result in different valid computation paths in the function being taken. A checksum for the function is then generated by using a mapping function which maps the contents of the register to the set of inputs.

Abstract: Content revocation is achieved by disabling licenses issued to a computing device for the content. A content revocation is delivered within a license to the computing device. Upon license storage the content revocation is recognized, validated, and stored in a secure state store under the public key of the content server (PU-CS) that issued the content. Each license has a (PU-CS) therein, and each license evaluation considers each content revocation stored in the state store and having the same (PU-CS). The license is disabled or otherwise affected based on the considered content revocation. A content revocation is one form of a license modification that may be delivered within a license.

Abstract: Data C generated by scrambling user-desired digital data P and a control word CWp corresponding to the number of reproductions p are recorded on recording media. When creating a master, a user has already been charged for the number of reproductions p. A decryption block decrypts the control word CWp, which is read from the recording media, to CW0. A de-scrambler uses the decryption control word CW0 to decrypt the digital data P for output to a reproduction unit. After confirming the end of reproduction, the decryption block writes a control word CW(p?1) back to the recording media. The recording media may be reproduced p times with no need for communication between a reproduction device and an accounting manager.

Abstract: A content provider 101 distributes a secure container 104 storing content data encrypted using content key data, content key data encrypted using distribution key data, and encrypted usage control policy data indicating the handling of the content data to a SAM 1051 of a user home network 103 etc. The SAM 1051 etc. decrypts the content data and usage control policy data stored in the secure container 104 and determines the purchase mode and usage mode and other handling of the content data based on said decrypted usage control policy data.

Abstract: Fee imposition system and method for application software, in which a software providing corporation can collect the fee without fail and charge a fair fee to a customer, and thereby the customer can use the application software with a paying method easy to estimate. The fee imposition system includes a server machine installed in a management center for managing the software, a client machine installed in a customer's office and connected with the server machine through a communication means, a ticket issue unit for issuing a ticket file on the basis of a predetermined fee schedule, and a data copy/writing unit for copying data corresponding to the information designated by the ticket file from a data source memory unit and recording the copied data on a data target memory unit.

Abstract: A technique to prevent illicit copying of a copy-protected CD-ROM into a computer-readable storage drive is presented. In accordance with the present invention, when an authentic copy-protected CD-ROM is inserted into a CD drive and the content of the copy-protected CD-ROM is installed onto a hard disk drive that is linked to the CD drive, the Central Processor Unit (CPU) executes the installer instructions residing in the CD-ROM to create a license file in the hard disk drive. For security reasons, the content of the CD-ROM (e.g., the executable file of the application) is encrypted. When the content of the CD-ROM is copied into the hard disk drive, it remains encrypted. The license file essentially acts as a timer to monitor a predetermined time interval that has been programmed into the license file.

Abstract: A copyright information management system supporting the management and protection of products comprised of digitalized multimedia content in a product distribution environment. The copyright information management system (10) provides a copyright information management center (11), provided in a product distribution environment (15) where products are distributed through communications lines (14) between a product provider (12) including at least one of a copyright owner and distributor and a product user (13) receiving the product, for exchanging information relating to the products through the communications lines (14). The copyright information management center (11) centrally manages all copyright information through the communications lines (14) by preregistering copyright information relating to the individual products in the center (11).

Abstract: A system is described for allowing “pay by time” purchasing of digital video programming. The system provides for a variable or metered approach. A user can purchase a fraction of a program for a price different from that required for purchasing the entire program. Records of the user's viewing can be created to record, e.g., when a user started receiving a program, how long the user received a program, and when the user stopped receiving a program.

Abstract: A method for loaning a digital work having one or more rights associated therewith within a system having repositories configured to enforce use of the digital work in accordance with the rights. A loan right is associated with a digital work and specifies how the digital work can be loaned. If a request for the digital work is valid, use of the digital work is transferred during a loan period from a repository to the requester in accordance with the loan. Loan right data for the digital work is then updated and use of the digital work by the requestor is deactivated upon exhaustion of the loan period.

Abstract: This invention relates to a transmission apparatus for transmitting digital content data via a communication medium, comprising attachment means for attaching cost information per unit data volume to the digital content data; and transmission means for transmitting the digital content data attached with the cost information after converting a data format of the digital content data attached with the cost information into a data format suitable to the communication medium.

Abstract: A “virtual bookshelf” for users of a digital rights management system. The invention lists the purchased material and/or material that the consumer has a right to use. The invention automatically backs up the consumer's material when it is downloaded; provides for the retrieval and/or synchronization of the material on a computer or other device; provides for the rights-based sharing of the material; and the ability to recommend or transfer the material to a third party with or without financial consideration.

Abstract: A retailer facilitates issuance of a digital license from a licensor to a customer for a corresponding piece of digital content. The retailer receives payment for the license from the customer, where the payment is to be shared with the licensor in a pre-determined manner. The retailer also receives customer-based information from the customer. The retailer then composes an actual license request including the obtained customer-based information, and including retailer-based information identifying the retailer to the licensor and acknowledging to the licensor that the retailer owes a portion of the received payment to the licensor. Thereafter, the retailer forwards the actual license request to the licensor. The licensor notes based on the retailer-based information in the actual license request that the retailer identified thereby owes the licensor at least a portion of the forwarded payment.

Abstract: A system and method for confirming transactions is provided. A central processor receives a request to process a current transaction coupled with prior transaction information corresponding to a prior transaction. In response to receiving a prior transaction identifier, the central processor determines whether the prior transaction and the first transaction are identical based on the prior transaction information. If the prior transaction is determined to be different from the first transaction, the central processor amends a first transaction record to indicate that the first transaction is a questionable transaction.

Abstract: A system and method for using an e-commerce system to provide a user with the ability to order customized identification documents over the Internet is provided. The user can customize the layout of the identification document, including the use of company logos and trademarks. The user provides the demographic data and corresponding graphical representations, and is given the opportunity to approve a digital facsimile of the identification document that will be produced by the service bureau prior to the production of the identification documents. In addition, enhanced security is provided by verifying that the user is part of a legitimate organization and is authorized to use the identification documents being ordered.

Abstract: An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Abstract: A hybrid optical recording disc having copy protection for use in a computer, including a read-only area having preformed information including at least one program and disc identifier data; a recordable area; and the disc identifier data being adapted to authenticate a transferred program in the computer to permit the program to be operated by the computer.

Abstract: The invention provides techniques for issuing electronic seals of certification to online entities, such as online merchants, in a manner that prevents non-certified parties from easily stealing or otherwise misusing the seals. A central seal issuer verifies the credentials, policies or business practices of each merchant and issues a corresponding seal of certification. For each merchant, the seal issuer generates a unique media object representing an electronic seal. The media object includes an encrypted watermark containing an expiration date. The media objects are stored on a seal server such that the merchants can dynamically retrieve and display the electronic seals when accessed by a user. The seal issuer can easily revoke or update the centrally stored seals.

Abstract: A memory card 110 extracts a session key Ks from the data applied onto a data bus BS3 by carrying out a decryption process. An encryption processing unit 1406 encrypts a public encryption key KPcard(1) of memory card 110 based on session key Ks, and applies the encrypted key to a server via data bus BS3. A memory 1412 receives from a server data such as license key Kc, license ID data License-ID and user ID data User-ID encrypted with a public encryption key KPcard(1) differing for each memory card for storage, and receives encrypted content data [Dc]Kc encrypted with license key Kc from data bus BS3 for storage.

Abstract: An information recording medium 1 is provided with: a user data recording part 3 which records user data; a random-patter-information recording part 4 which records random pattern information from a random physical phenomenon; and an authentication data recording part 5 which records, as authentication data, medium identification information created on the basis of the random pattern information detected from the random-pattern-information recording part 4 and a digital signature for each manufacturer with respect to the medium identification information.

Abstract: A method and system for distributing digital information is disclosed. Preferably, a user acquires a tangible object which contain a code authorizing access to the digital information. The user reads the tangible object through a reader, which sends the code to a server on which the digital information is stored. The server then authorizes access to the digital information to one or more access devices listed in registries belonging to the user. The user may use the digital information on the terms he agrees to, and, while in use by the user, access to the digital information to other users or other playback devices is disabled. Once the user no longer is using the digital information, the access device erases the digital information, and signals the server that the digital information is no longer in use, thereby re-enabling access to the digital information by the other playback devices listed in the registry.

Abstract: A method and system for reducing unauthorized software use include generating a key based on computer-specific information of a computer on which the software is installed and using the key to encrypt an authorization code which enables use of the software on the computer. A representative maintains contact with the software user as a new authorization code from the representative is required after some period of use of the software. The representative encrypts the new password using the key and transfers the encrypted key to authorize use of the software for a next period of use. The encrypted password is a form of digital signature or certificate which is unique to a particular computer and limits use of the software to the particular computer. The key may be generated using various computer-specific information such as the motherboard/processor identification, the number of bad sectors or hard disk identification, and/or the amount of installed memory.

Abstract: The present invention is directed to a system and method for providing complete electronic commerce (“E-Commerce”) transactions and solutions for a marketing company's products via the World Wide Web, including facilities for signing up new customers and recruiting, training and supporting new Independent Business Owners through an interactive online process. In another aspect, the present invention relates to the combination of a marketing business with a membership buying opportunity using both electronic commerce and face-to-face transactions. The present invention is also directed to a system and method for combining a marketing business with a membership buying opportunity, so that Independent Business Owners participating in the marketing plan can introduce customers to a membership buying opportunity and earn bonuses or commissions based on the purchases by those members, while Members in the buying opportunity can consume products or, at their option, qualify to become Independent Business Owners.

Abstract: An improved interactive network system is provided that allows the Network Operator to control the transfer of information to and from the network end users, the system preferably using triggers or markers embedded within the programming broadcast to users via the network. As a consequence of this system, the Network Operator is able to efficiently garner revenues from third parties transacting business over the network and to control the look and feel of programming offered to network users. Additionally the system can be used as a means of limiting network access, filtering programming, providing on-screen graphics or audible signals for particular programming types or providers, bookmarking programming, profiling network users, targeting advertising, and simplifying network transactions.

Abstract: A TV music broadcasting program is distributed from a distribution apparatus through a ground station and a satellite, and a musical-piece program is also distributed through a plurality of audio channels. A subscriber looks for the desired musical piece from a musical-piece list displayed on the screen of a TV receiver and downloads it into a storage device. A pay-per-view method is employed in which accounting is performed in units of musical pieces. At downloading, a purchase record is stored in an IC card placed in a receiving apparatus and it is periodically sent to a customer management center. The customer management center calculates the viewing fee and issues a bill to the subscriber. A copyright management apparatus in the distribution apparatus obtains the purchase record of a musical piece from the customer management center to calculate a copyright fee to be paid to the copyright holder.

Abstract: A secure data processing system having a plurality of resources accessible over a network arrangement such as the Internet and including a server, maintains lists of three categories of access authorization information. A resource list contains path or location information such as a universal resource locator (URL). A profile list maintains a plurality of profile data specifying individual resources or combinations of resources. A user list contains a userID or other data by which a user may be authenticated to the server and one or more profiles freely assignable to respective users. An access control program allows administrator supervision of editing of the lists of user access authorization information. An authorization program performs authorizations to resources for all users based on the profile information of respective users upon completion of editing.