Abstract: System and method for performing program-related operations over a network via a web browser. A network connection is established between a server computer and a client computer over a network. A universal resource identifier (URI) is sent from the client computer to the server computer over the network, where the URI indicates a program, e.g., a graphical program (GP), or at least a portion of a graphical program interactive development environment (GPIDE), e.g., a graphical program editor, an execution engine, a static or dynamic analyzer, and/or compiler. The at least a portion of the GPIDE is received from the server computer over the network in response to the URI, and executed in a web browser of the client computer to perform some specified functionality with respect to the GP.

Abstract: There is disclosed a website that allows patent licenses to be easily purchased. Through the website, customers can purchase paid-up, lump-sum licenses from the vendors. The website employs standard forms that avoid risks of litigation and the burdens of negotiation.

Abstract: A license management apparatus includes: a license information storage; a reproduced user information storage; an invalidation information storage; a compare unit; an update unit; and a setting unit.

Abstract: Systems and methods for managing digital rights settings are provided. In some aspects, the systems and methods described include receiving user input including an order for obtaining access rights to a media asset. Control circuitry determines whether the media asset is associated with a first package of media assets. The control circuitry cross-references a database of user order history to determine whether the user has obtained access rights for each media asset in the first package of media assets. If the user has obtained access rights for each media asset in the first package of media assets, the control circuitry generates digital rights settings for each media asset in the first package of media assets to enable the user to create a mashup. The mashup includes portions of at least one media asset in the first package. The control circuitry generates a display based on the digital rights settings.

Abstract: Systems and methods are described for applying digital rights management techniques to manage zones in electronic content. In one embodiment, zones are defined in a piece of electronic content, and a license is associated with the electronic content that indicates how the zones are to be accessed or otherwise used. A digital rights management engine governs access to or other use of the zoned content in accordance with the license.

Abstract: In an example embodiment, a digital content distributor may transmit an unsigned license associated with a protected digital object to a digital rights management provider. The digital rights management provider may digitally sign the license and may transmit the signed license to the digital content distributor.

Abstract: Methods, media, and systems for detecting attack are provided. In some embodiments, the methods include: comparing at least part of a document to a static detection model; determining whether attacking code is included in the document based on the comparison of the document to the static detection model; executing at least part of the document; determining whether attacking code is included in the document based on the execution of the at least part of the document; and if attacking code is determined to be included in the document based on at least one of the comparison of the document to the static detection model and the execution of the at least part of the document, reporting the presence of an attack.

Abstract: A first executable program on a computer system is enabled to exchange communications with a second executable program on the computer system by determining that the first executable program requests to exchange information with the second executable program, using the second executable program to challenge the first executable program for a digital certificate, and using the second executable program to exchange information with the first executable program when the digital certificate is verified.

Abstract: A method and system for accessing content on demand are described. In one embodiment, upon receiving a user request to access an instance of content (e.g., information that is independent of a particular physical medium), the identity of the user is authenticated. The request conveys a unique identifier of the instance of content and a key for activating the content corresponding thereto according to an instance of ownership stored therewith. The instance of ownership corresponding to the user in that instance of content is ascertained. Upon associating the instance of ownership corresponding to the user in the instance of content, the instance of content is activated to allow the user to access the instance of content according to the corresponding instance of ownership. Where access is demanded in excess of the instance of ownership, a transaction is initiated with which the instance of ownership can be upgraded.

Abstract: A method and apparatus for enforcing software licenses for resource libraries such as an application program interface (API), a toolkit, a framework, a runtime library, a dynamic link library (DLL), an applet (e.g., a Java or ActiveX applet), or any other reusable resource. The resource library can be used by authorized end user software programs. A “per-program” licensing scheme for a resource library can allow a resource library to be licensed only for use with particular software programs.

Abstract: The embodiments relate to a method for providing at least one REL (Rights Expression Language) token, the REL-token or tokens being provided in a message by a MIME (Multipurpose Internet Mail Extension) protocol.

Abstract: Computer system, computer implemented method and computer program product for determining a recommended course of action to resolve an unlicensed software installation of a type of software in a computer of a company. A determination is made as to an amount or level of use of the type of software by the company during a predetermined period of time. A determination is made if the type of software is currently installed on another computer of the company. A determination is made if the software of the unlicensed software installation can be relocated to the other computer of the company and encompassed under another existing license for the other computer.

Abstract: A derivative work is encrypted using a cipher created from digital sources used to create the derivative work. A software application made available for download permits a mix artist to generate a derivative-encrypted work from a derivative work that the mix artist has created using one or more of the digital sources. The derivative-encrypted work is streamed to a worldwide web server, where it is made available for download by consumers for a fee. The software application is also available for download by the consumers and permits the consumers to purchase and download any available derivative-encrypted work. However, the derivative-encrypted works can only be decrypted if the consumer has possession of a digital source for each of the source art works associated with the digital sources used to create the derivative work.

Abstract: Techniques for distributed license management are provided. Three or more services or servers cooperate and negotiate with one another to establish primary, secondary, and tertiary licensing services. Initially, the primary is designated as a master licensing service and manages a license for a plurality of users over a network. If the primary fails to respond within a configurable period of time to both the secondary and tertiary licensing services, then the secondary dynamically assumes a master licensing service role for purposes of managing the license.

Abstract: Secure content transfer systems and methods to operate the same are disclosed. An example system includes a content server to encrypt content according to an encryption key, and to transfer the encrypted content, the encryption key and a license to a client that supports a digital rights management technology. The example system further includes a broadcast system headend to determine the encryption key, wherein the broadcast system headend is physically separate from the content server, and a digital rights management license server to provide the license.

Abstract: Use of rights-managed content is enabled by a digital license that includes the identity of the licensee. The licensee redistributes the content by sending a package containing the content and the license to another party. That other party obtains a license to use the content by contacting a license server, and preferably pays a fee for this license. During the contact with the license server, the licensee's identifying information is uploaded to the license server, which allows the license server to determine who distributed the content to the other party. The license server can use this information to reward the original licensee for having redistributed the content.

Abstract: Provided is digital rights management (DRM) provision technology, and more particularly, are an apparatus, system, and method which can easily provide content using one or more DRM systems. A DRM provision apparatus includes a content download unit which downloads encrypted real content and dummy content from a download server and which manages the downloaded real content and dummy content; a license management unit which manages a license issued by a license server; and a processing unit which manages the downloaded real content and dummy content and the issued license.

Abstract: The different advantageous embodiments provide a system for managing license usage comprising a license management interface and a number of storage devices. The license management interface is configured to control access to a number of applications. The number of applications is associated with a number of licenses. The number of storage devices has a number of files needed to run the number of applications. The number of storage devices is configured to be managed by the license management interface to distribute the number of files to a number of client systems approved to run the number of applications.

Abstract: Embodiments are described for providing access by application vendors to applications deployed in an enterprise network environment. A package access system defines a support user class in a user profile database for an application executed within organization resources maintained in a multi-tenant data store. The support user is granted read only privileges to metadata of the application. An organization administrator can grant the application vendor access to the application as a support user, allowing the vendor to view and analyze the metadata. The organization administrator can further grant access by a specific support representative to the application as a specific user within the organization user for a limited term. The support representative can then log into the organization and access and use the application in order to diagnose any post-installation usage problems with the application.

Abstract: A method, system, and device for license-centric content use or distribution, including a pre-existing digital rights management (DRM) system having a unique interface to a repository of data thereof to govern use of content; a shared license repository configured to access the data to govern the use of the content and to communicate with the unique interface of the pre-existing DRM system; and a user interface configured to interact with the pre-existing DRM system, and configured to allow the user to send a license associated with the content from the shared license repository to the pre-existing DRM system or to another shared license repository.

Abstract: Executable applications on a gaming machine are verified before they can be executed, for security purposes and to comply with jurisdictional requirements. Unlike in prior systems for authenticating the executable applications, embodiments allow for new executable applications to be provided and verified over time with different private and public key pairs, even after the operating code of the gaming machine is certified by the jurisdiction and deployed in the field.

Abstract: A system, method, and computer-readable medium are disclosed for separating the purchase of digital assets from their fulfillment and activation. Digital assets purchase information comprising digital assets identifier information and activation key data, and system identifier information comprising system identifier data, is received. The purchase information and the system identifier information are processed to generate digital assets activation request data, which is then processed by the provider of the digital assets to generate digital assets activation data. Associated digital assets data is provided with the digital assets activation data and then processed with the purchase transaction data to generate digital assets entitlement data.

Abstract: A system and method for verifying content on a network site is provided. A document such as a website is identified. The document is accessed over a network from a content provider system connected to the network to obtain information about the document. Through an automated process, using the information about the document to determine whether the document conforms to one or more predetermined rules associated with the content provider system governing the usage of content in the document.

Abstract: Systems and methods for site-dependent embedded media playback manipulation whereby a media owner can enable limited embedding on non-owned or non-monetized websites to direct traffic to a more valuable location. The content owner can specify sets of internet locations with associated sets of rules governing content playback criteria as well as restrictions based upon user categorizations. A playback restriction system consists of a media delivery system and a playback rules system. The media delivery system controls the delivery of the media file with embedded restrictions. The playback rules system controls the nature of the restrictions and the rules of when they are applied. Users will be directed to the location of a more valuable website where the media can be viewed with a less restrictive set of rules.

Abstract: An apparatus and method for transferring encrypted useful data objects (NDO) to a first telecommunication terminal (TG1), wherein at least one encrypted useful data object is initially transferred from a switching component to the first telecommunication terminal. Time information (SABS) is transferred from the switching component to the first telecommunication terminal indicating up to which moment in time a rights object (RO) associated with the at least one encrypted useful data object will arrive. Once the rights object received by the first telecommunication terminal, the telecommunication terminal checks if the moment in time indicated in the time information has elapsed. If the moment has not elapsed, the first telecommunication terminal issues a signal relating to the receipt of a useful data object via a user interface.

Abstract: In some embodiments, an activation object used to activate a software product is stored in a directory service. The activation object may, for example, comprise a proof of purchase token and/or information about the directory service, and may be communicated from the directory service to a client computer after the directory service authenticates a request from a client computer for access to the activation object. In some embodiments, a directory service is interrogated for an activation object used to activate software on a client computer. A client computer may, for example, receive an activation object from the interrogated directory service, and use the received activation object to activate a software product on the client computer. In some embodiments, a non-transitory computer-readable medium has instructions stored thereon that, when executed by a computer, cause the computer to interrogate a directory service for an activation object used to activate software on the computer.

Abstract: A method and apparatus for securely and remotely enabling the playing of a media program encrypted by a content encryption key over the Internet is disclosed. A license encryption key and a content decryption key are separately and securely transmitted to the receiver. The license encryption key is stored in the CAM and later used to decrypt the content encryption key so that the media program may be recovered.

Abstract: According to an embodiment of the invention, products and processes are disclosed for receiving, via a point-of-sale terminal that is not a vending machine, an indication of a set of products which a customer desires to purchase. At least one product is offered to the customer via the point-of-sale terminal, and an acceptance of the offer is received. Thereafter a request to receive the product is received. A unit of the product is dispensed via the vending machine.

Abstract: Method and systems for facilitating digital commerce are provided. Systems include a client and server which are incorporated into an online purchasing system to perform the purchase and online delivery of electronic content. The client includes a secured copy of the merchandise and components used to license and purchase the merchandise and to unsecure and process the licensed merchandise. The client communicates with the server to download the components onto a customer's computer system and to license and purchase a requested item of merchandise. The server supplies merchandise-specific components and licenses the requested item of merchandise by generating an electronic certificate. The electronic certificate contains license parameters that are specific to the requested merchandise and an indicated purchasing option. Once an electronic license certificate is received, the merchandise is made available to the customer for use in accordance with the licensing parameters.

Abstract: Methods and systems for preventing reception of licensed protected content prior to reception of a license, in a content rendering device wherein, the license corresponds to the licensed protected content and to the content rendering device. The license may be stored on the content rendering device in a database that may be searchable by a key. The license and the key may be associated within a file comprising the licensed protected content. A proxy computer may handle operations for the content rendering device, a DRM license server and a content server. Media Transfer Protocol (MTP) features regarding GetDeviceInfo, SendObjectInfo and SendObjectPropList operations may be utilized to activate DRM license protection for receiving the license prior to the corresponding license protected content. The content rendering device may reject transmission of and reject rendering the corresponding license protected content if the license is not resident in its database.

Abstract: An enforceable property right and a system for controlling the manner of use of an item in accordance with usage rights. The enforceable property right includes an item ticket having a security mechanism incorporated therein and specifying an item for which the item ticket can be redeemed and a license associated with the item ticket. The license includes usage rights specifying a manner of use for redeeming the item ticket and a mechanism for unlocking said security mechanism.

Abstract: A method and system of binding content at first access is disclosed. A non-volatile storage device may provide a content access script and a content binding script in order to access protected content. An accessing application may attempt to access the protected content by executing a content access script. The accessing application must have permission to access and execute the content access script. If the accessing application cannot access or execute the content access script, the accessing application may access and execute the content binding script. The content binding script contains instructions that enable the accessing application to successfully execute the content access script. The content binding script, when executed, may disable itself from being executed again by moving critical information associated with the access to protected data. Thus, the content binding script may be executed once to enable an accessing application to successfully execute the content access script.

Abstract: A content server enables one user to purchase licensed content for another user and, in response to the purchase, automatically delivers the content to the other user's device. The content server further configures the other user's device to receive and utilize the licensed content, thus enabling the other user to consume the content.

Abstract: Various methods and systems include exemplary implementations for a security-activated operational component. Possible embodiments include but are not limited to obtaining access to an object data file configured to implement various functional operation regarding one or more objects; verifying validity of an authorization code associated with the object data file; and controlling operation of the operational component to enable or prevent its activation pursuant to the authorization code in accordance with one or more predetermined conditions.

Abstract: A method of checking whether a content aggregator's content matches a content owner's content involves generating a fingerprint of the content and looking for a matching fingerprint from the content owner through a service provided by the content owner. In one aspect, the fingerprints are generated from an intermediate digest of the content instead of the original form.

Abstract: Methods and systems for enabling content to be securely and conveniently distributed to authorized users are provided. More particularly, content is maintained in encrypted form on sending and receiving devices, and during transport. In addition, policies related to the use of, access to, and distribution of content can be enforced. Features are also provided for controlling the release of information related to users. The distribution and control of contents can be performed in association with a client application that presents content and that manages keys.

Abstract: Digital content is released to a rendering application for forwarding by such rendering application to an ultimate destination by way of a path therebetween. The path is defined by at least one module, and the digital content is initially in an encrypted form. An authentication of at least a portion of the path is performed to determine whether each defining module thereof is to be trusted to appropriately handle the digital content passing therethrough. The encrypted digital content is decrypted if in fact each such defining module is to be trusted, and the decrypted digital content is forwarded to the rendering application for further forwarding to the ultimate destination by way of the authenticated path.

Abstract: A distributed license management system and method for managing software licenses are provided. The disturbed license management system comprises a repository for storing workstation information, a message interceptor for intercepting a message call coming from a workstation to a server, a workstation identification module for determining if a workstation identifier associated with the message call is defined in the repository, and a device verification module for allowing access to the server if a device identifier of a workstation is associated with the workstation identifier. The method comprises the steps of storing workstation information, intercepting a message call coming from a workstation to a server, determining if a workstation identifier associated with the message call is defined in stored workstation information, and allowing access to the server if a device identifier of the workstation is associated with the workstation identifier.

Abstract: A method, system, and medium are provided for processing multiple items for retail sale via a single retailer action. Upon scanning a machine-readable marking that is associated with multiple items provided by various vendors, a marking identifier associated with the machine-readable marking is recognized. The marking identifier corresponds with each price of the multiple items. Each price of the multiple items is presented to a consumer for payment that can be disbursed to the appropriate vendors.

Abstract: A method of relicensing digital encrypted radio media content transmitted via a network and received by a user electronic device includes receiving a request to relicense an encrypted digital media data file included within digital encrypted radio media content. The encrypted digital media data file is retrieved from the digital encrypted radio media content stored in a memory of the user electronic device. The encrypted digital media data file is decrypted using a radio encryption key to generate an unbound digital media data file. The unbound digital media data file is bound with the user electronic device to generate a bound encrypted digital media data file. The bound encrypted digital media data file is stored in the memory of the user electronic device.

Abstract: The disclosure is directed toward a secure method and system for creating a library on a server computer, and releasing such information to authorized requesters. Several types of information are stored for release to different entities with appropriate authorization. Any modifications or updates are automatically notified to any authorized requesters. The requester optionally provides information about to whom and where to notify changes or updates. Sending a message to an electronic mail box may accomplish such change or update notification. A frequent unauthorized requester of information is tagged as “junk” requester, to whom no further information will be released. Items that are restricted as to their use can be shared by users via a license-pooling method disclosed herein.

Abstract: Selling intangible property rights may include receiving content from a seller and determining one or more potential purchasers for the content's intangible property rights. The potential purchasers may be determined according to the subject of the content, the audience for the content, and the intangible property rights being sold. An offer to sell the intangible property rights may then be transmitted to one or more potential purchasers, along with a portion of the content. Upon receiving the one or more purchaser's acceptance of the offer, a complete copy of the content may be transmitted to the purchaser.

Abstract: The software site licensing system includes a client site having a target unit and a license sales site for generating a corresponding site license. The sales site receives an order for a target unit from the client and sends the physical order to a warehouse for shipping. The sales site determines the intangible portion of the order and establishes a virtual warehouse for the client to inventory the intangibles (license components). The warehouse notifies the sales site of the unique identifiers on the target prior to shipping so the sales site can link the en-route target with the client. The client accesses its personal virtual warehouse and selects the license components desired for the site license. The system assembles the site license and upon request, transmits the site license from the virtual warehouse to the target unit for installation.

Abstract: A computing device has encrypted content and a corresponding license having a decryption key for decrypting the content. The license allows the computing device to render the content thereon. The computing device may issue a sub-license based on the license to a portable device. The sub-license allows the portable device to render the content thereon and has the decryption key. The portable device has a digital device certificate including information thereon. The computing device receives from the portable device the device certificate thereof, and determines based on rules in the license and the information on the portable device in the device certificate whether the computing device can issue the sub-license to the portable device. If so, the computing device constructs such sub-license to include the decryption key (KD) and transmits the constructed sub-license to the portable device.

Abstract: A system and method for protecting content is described, the system and method comprising a content item which has been segmented into at least two portions, each portion being encrypted according to a different encryption key, a single content rights license associated with the content item, the license including at least two encrypted decryption keys operative to decrypt at least one of the at least two portions, such that any two encrypted decryption keys of the at least two encrypted decryption keys includes a first key which is less securely encrypted than the second key, a plurality of decryption keys, each one of the decryption keys being able to decrypt at least one of the at least two encrypted decryption keys, a decryptor for decrypting the at least one of the at least two encrypted decryption keys, and a second decryptor for decrypting, with the at least one of the at least two encrypted decryption keys, at least one portion of the at least two portions of the content item.

Abstract: A content server device includes a request section for requesting a key server to transmit key data for decrypting encrypted content data to a client side in response to the content distribution request from the client side and a control unit which prohibits the transmission of the encrypted content data in response to the content distribution request when the reception number of notification received from the client side and indicating the reception of the key data from the key server is not less than the transmission number of key data to the client side by the key server and which transmits the encrypted content data in response to the content distribution request when the number of reception is not more than the number of transmission.

Abstract: A CDN service provider shares its CDN infrastructure with a network to enable a network service provider (NSP) to offer a private-labeled network content delivery network (NCDN or “private CDN”) to participating content providers. The CDNSP preferably provides the hardware, software and services required to build, deploy, operate and manage the CDN for the NCDN customer. Thus, the NCDN customer has access to and can make available to participating content providers one or more of the content delivery services (e.g., HTTP delivery, streaming media delivery, application delivery, and the like) available from the global CDN without having to provide the large capital investment, R&D expense and labor necessary to successfully deploy and operate the network itself. Rather, the global CDN service provider simply operates the private CDN for the network as a managed service.

Abstract: An electronic service provides a sample of a media item to a user, along with a prompt. The prompt gives the user the opportunity to receive an additional part of the item substantially without further interaction with the user. The streamlined acquisition of the additional part of the media item is enabled by the user's establishment, in advance, of user identification information, payment information, and so on.

Abstract: A system for managing license files comprises a memory operable to store a socket module. The system further comprises a processor communicatively coupled to the memory and operable to receive a command to open a license file, wherein the command is associated with a first user identifier. The license file is stored in a first remote node and is associated with a second user identifier. If the second user identifier matches the first user identifier, the processor is further operable to use the socket module to establish a socket connection with the first remote node. The processor is further operable to, using the socket connection, retrieve from the first remote node a file descriptor associated with the license file. The processor is further operable to apply an update to the license file, wherein the update is addressed according to the file descriptor. If the second user identifier does not match the first user identifier, the processor is further operable to prevent the updating of the license file.

Abstract: A method that includes receiving a first request for video content from a user of a user device; retrieving an identifier for the user device using an application programming interface; sending a second request to receive the video content that includes the identifier; receiving an instruction to provide payment to rent or purchase the video content; sending the payment in response to the instruction; receiving the video content and a token, where the video content is encrypted based on a key and where the token indicates that the payment was processed; sending a third request to obtain a license associated with the video content that includes the token and the identifier; receiving the license, which includes the key and terms under which the video content is to be processed; decrypting the video content, using the key, when the decrypting is performed in a manner permitted by the terms; and playing the decrypted video content.