Abstract: The present disclosure includes apparatuses, methods, and systems for run-time code execution validation. An embodiment includes a memory, and circuitry configured to monitor run-time executable code stored in a secure array of the memory device and receive an indication that a portion of the run-time executable code executed, wherein the indication includes a received Message Authentication Code (MAC) and take an action in response to the indication that the portion of the run-time executable code failed to execute.

Abstract: A system, method, and computer program product are provided for managing a plurality of heterogeneous services and/or a plurality of heterogeneous devices linked to at least one customer. In operation, a system links a customer identifier associated with at least one customer with one or more of a plurality of heterogeneous services and/or a plurality of heterogeneous devices. Moreover, the system manages the plurality of heterogeneous services and/or the plurality of heterogeneous devices linked to the customer(s).

Abstract: A container corresponding to executable code may be received. In response to receiving the container, a container manager resident in a memory of a computation environment may be executed to verify the container. The container manager may be verified by a boot loader of the computation environment. Permissions of the container to access the resources of a computation environment may be determined after the verification of the container by the container manager. Access to one or more resources of the computation environment may be provided by transferring control to the one or more resources from the container manager to the container based on the permissions of the container for the resources of the computation environment.

Abstract: The invention relates to a computer-implemented system and method for automating the secure deployment of application identity manager (AIM) security agents to ensure integrity of identity assertion during the security sensitive agent installation process, while providing significant cost and time savings in the deployment process. The invention also relates to a command line interface (CLI) to representational state transfer (REST) web services proxy, which provides a standards-based REST web service that interfaces with a Microsoft .NET MVC framework to enable cross platform automation and integration with vault management functions. The invention also relates to a multi-vault management platform comprising a graphical user interface-based portal to manage vault functions across a number of vaults with advanced error handling and process integration.

Abstract: A computer system for providing software over a network includes: a computer system for providing software over a network is provided. The system includes: a control unit configured to reside at a site, the control unit including a control unit identification (ID) that uniquely identifies the control unit to the network; a copy of the software, the software including sets of features; a license generator configured to create a features activation file containing the control unit ID and identifying at least one set of features to be activated by the control unit; a computer configured to download the features activation file to the control unit; and, the control unit configured for activating one of the sets of features according to the features activation file. A method and a computer program product are disclosed.

Abstract: Technology is disclosed herein for license aggregation in a license data structure. In at least one implementation, program instructions stored on one or more computer readable storage media, when executed by a processing system, direct the processing system to at least, responsive to a launch of an application, create a license file request comprising a plurality of user identifications (IDs) and send the license file request to a licensing service. The processing system is further directed to obtain a single license file for the application from the licensing service, the license file comprising a user license defining features of the application to be enabled based on licenses pertaining to the plurality of user IDs. The processing system is further directed to enable the plurality of features of the application based on the user license, and initiate presentation of the application in accordance with the enabled plurality of features.

Abstract: A method of using a distributed ledger maintained solely in a computer network. Wage payment information is received from an employer regarding an employee. A copy of a digital public key uniquely associated with the employee is received. A transaction is issued to the distributed ledger at a time of wage issuance, along with identity data encrypted with the digital public key, the identity data uniquely associated with the employee, the identity data being multi-level identity data based on levels of data sensitivity, and the identity data including information controllable by the employee to designate which level of the multi-level identity data can be accessed using a data level code and a digital signing key belonging to the employee. A level of the multi-level identity data can be made available to a third party upon being identified with the data level code and upon being decrypted with the digital signing key.

Abstract: An image forming system includes a terminal apparatus including a data transmitting unit that transmits data indicating an image formed by an image forming apparatus and necessity information indicating whether authentication information is required for forming the image, to a server apparatus, an identification information storage unit that stores identification information for identifying the data transmitted by the data transmitting unit in a storage unit, an authentication information storage unit that acquires authentication information from a user, with storage of the identification information as a trigger, and stores the acquired authentication information in association with the identification information in the storage unit, and an authentication information transmitting unit that acquires the authentication information from the storage unit and transmits the authentication information to the server apparatus; and the server apparatus including a data receiving unit that receives the data and the ne

Abstract: Computer software product management systems that operate in a networked computing environment and including a computer database, an intermediate publishing service and spoke computing systems. The database includes an entitlement-monetization data model that includes an entitlement definition and a monetization definition that are inextricably tied to each other in the entitlement-monetization data model. The entitlement-monetization data model is published to spoke computing systems for runtime processing of customer requests made through a customer facing application concerning a computer software product configured according to the entitlement-monetization data model.

Abstract: A method for securely executing an item of software. One or more security modules are executed by a computer and a computer executes the item of software. The execution of the item of software includes, at at least one point during execution of the item of software at which a predetermined function is to be performed, attempting to perform the predetermined function. The attempt to perform the predetermined function including sending, to an address system, a request for an address of instructions for carrying out the predetermined function, the request including an identifier of the predetermined function; receiving, from the address system in response to the request, an address generated by the address system based, at least in part, on (a) the identifier and (b) verification data provided to the address system from at least one of the one or more security modules; and continuing execution of the item of software at the address received from the address system.

Abstract: Systems and methods for protecting user data received by, stored on, and/or requested by third-party computing devices include a data entry computing system on a first network node. The data entry computing system includes a processing circuit configured to: identify user-entered data as sensitive user data, generate a content encryption key (CEK), generate encrypted user data by encrypting the sensitive user data with the CEK, and tag the encrypted user data and the CEK with a tag readable by a database server on a network node different than the data entry computing system. The tag includes information indicative of the user data. The processing circuit is configured to transmit the encrypted user data to the database server, wherein the database server excludes a private key of a key manager on a network node different than the data entry computing system.

Abstract: A client apparatus determines whether a license system of an application is a node-locked system or a floating system when the application is activated. The client apparatus further determines whether a node-locked license is acquired if it is determined that the license system of the application is the node-locked system. The client apparatus initializes a user interface to display a license-required function in an enabled state if the node-locked license of the node-locked system is acquired or the license system is the floating system. The client apparatus initializes a user interface to display the license-required function in a disabled state if the node-locked license of the node-locked system is not acquired.

Abstract: A system and method by which an application is capable of accessing its own DRM information stored in a content-agnostic DRM system. By being able to access its own DRM information, the application is able to improve the overall user experience by, among other things, making DRM-related information available to the user and providing potential options to the user which may not have been previously available.

Abstract: Techniques for secure sharing of data in computing systems are disclosed herein. In one embodiment, a method includes when exchanging data between the host operating system and the guest operating system, encrypting, at a trusted platform module (TPM) of the host, data to be exchanged with a first key to generate encrypted data. The method also includes transmitting the encrypted data from the host operating system to the guest operating system and decrypting, at the guest operating system, the transmitted encrypted data using a second key previously exchanged between the TPM of the host and a virtual TPM of the guest operating system.

Abstract: Centralized systems execute one or more applications for monitoring and operating a plurality of network enabled medical devices. An indication to start a selected application at the centralized system or at a network enabled medical device is received at the centralized system/network enabled medical device. The selected application may require a license to operate and, at the time the indication is received, may have a first license available. Instead of using the first license, the centralized system/network enabled medical device may determine to inherit at least a portion of a second license to operate the selected application. The centralized system/network enabled medical device may inherit at least the portion of the second license to form an inherited license, where the inherited license enables features of the selected application. Using the inherited license, the selected application is started with the enabled features. Related apparatus, systems, techniques and articles are also described.

Abstract: A wireless communication system enables one-sided authentication of a responder device (120) by an initiator device (110) and mutual authentication of both devices. Embodiments of the initiator may have a message unit (116) and a state machine (117). The initiator starts by acquiring a responder public key via an out-of-band action and sends an authentication request. The responder sends an authentication response comprising responder authentication data based on a responder private key and a mutual progress status indicative of the mutual authentication being in progress for enabling the responder device to acquire an initiator public key via a responder out-of-band action. The initiator state machine is arranged to provide a mutual authenticating state, engaged upon receiving the mutual progress status, for awaiting mutual authentication. Thereby long time-out periods during wireless communication are avoided, while also enabling the initiator to report communication errors to the user within a short time.

Abstract: An acquisition part acquires a blockchain in which a plurality of blocks are linked, the blocks store (i) creator information for identifying a creator of a work, (ii) rule information for establishing transaction rules of the work, (iii) information relating to a virtual currency used for a transaction of the work, and (iv) a transfer history of the work and information relating to an exploitation right which is a right established for the work and allows others to use the work. A license information specification part specifies a grantor and a license fee of the exploitation right. A received amount transfer part subtracts a creator's receiving amount from a balance of the virtual currency associated with the grantor, and adds the creator's receiving amount to a balance of the virtual currency associated with a person or management organization designated by the creator of the work.

Abstract: According to one embodiment, a computer program product for managing contention includes a computer readable storage medium that has program instructions embodied therewith, where the computer readable storage medium is not a transitory signal per se, and where the program instructions are executable by a processor to cause the processor to perform a method including incrementing, by the processor, a counter associated with an image in response to a creation of a container instance using the image, comparing, by the processor, the counter to a threshold value, and conditionally replicating the image by the processor, based on the comparing.

Abstract: A system in accordance with the present disclosure may include a plurality of electronic devices that do not have Internet connectivity. Each electronic device may include a barcode decoder and a license activation application. The system may also include a computing device that has an Internet connection. The computing device may include a master program that is executable to obtain a plurality of identifiers from the plurality of electronic devices. The master program may also be executable to send at least one license request to a license server via the Internet connection. The at least one license request may include the plurality of identifiers. The master program may also be executable to receive a plurality of licenses from the license server in response to the at least one license request. The master program may also be executable to provide the plurality of licenses to the plurality of electronic devices.

Abstract: Systems and methods for assessing the veracity of content are described. The method may include determining a truth rating for each of a plurality of factual claims in a document, generating a veracity score for the document based on the truth rating for each of the identified plurality of factual claims, generating a meta-data score for the document based on metadata of the document, and generating a content structure score for the document. The method may then include generating a reliability index for the document based on the veracity score and the meta-data score and presenting the scores and the overall reliability index to a user via a user application.

Abstract: The present application discloses a blockchain-based image transaction system, method, and apparatus. An exemplary method comprises: receiving a target image uploaded from a transaction node in a blockchain, wherein the target image is provided to the transaction node by a user; authenticating, based on image content of the target image, copyright of the target image; if the authentication is successful: generating a copyright certificate of the target image; sending the copyright certificate to the transaction node for the transaction node to display the copyright certificate and a preset prompt window to the user, wherein the preset prompt window inquires the user whether to make the target image as an image available for transaction; and if confirmation information is received, adding the target image into an image transaction pool, wherein the confirmation information indicates the user has determined the target image as an image available for transaction.

Abstract: A distributed ledger system includes a device registry and a software registry. The device registry includes a plurality of device identifiers. Each device identifier uniquely identifies a device that has been registered with the distributed ledger system. The software registry includes a plurality of software license identifiers. Each software license identifier uniquely identifies a software license that has been registered with the distributed ledger system. The distributed ledger system also includes transaction management components that are configured to record device transaction information associated with the plurality of devices and software transaction information associated with the plurality of software licenses. The distributed ledger system also includes access control components that are configured to enforce access control policies related to the plurality of devices and the plurality of software licenses.

Abstract: The invention relates to the fields of tokenisation, blockchain and smart contract technologies. It provides a technical arrangement which simplifies the automated management of contracts. The invention comprises a method and system which use a computer-based repository for storage of the contract. The contract is then represented by a transaction on the blockchain. Metadata within the transaction's script includes a hash of the contract and a means of identifying its location within the repository. The transaction also includes an unspent output (UTXO) which indicates its status as an open (ie not terminated) contract. The contract is terminated by spending the output at a later point in time, for example, using n Lock Time+Check Lock Time Verify (CLTV). By combining this concept with other techniques and computing components, the invention can provide a powerful mechanism for implementing various tasks such as renewing or rolling over the contract, or dividing it into sub-contracts or conditions.

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

Abstract: An automatic firmware update method for an embedded system includes establishing wireless communication between an application layer of the embedded system and a remote server, detecting a version of firmware stored in the remote server corresponding to the embedded system while the wireless communication is established, downloading the firmware in a new version and an update policy when the firmware in the new version is available, storing the downloaded firmware in the new version and the downloaded update policy in a storage unit, issuing an update notification according to an update object of the downloaded firmware in the new version, reading the update policy according to the update notification, and performing an update procedure for updating the firmware to the new version according to the read update policy.

Abstract: In one example, a device directory server may maintain a digital rights management list for a user device belonging to a device group associated with a user. The device directory server may maintain a primary digital rights management list associating a user device with a primary online account for a user having a content license for a digital content item. The device director server may receive a status update indicating the user device is still in use by the user if sent by the user device. The device directory server may determine whether a status update has been received from the user device. The device directory server may deactivate the user device on the primary digital rights management list when no status update has been received within a pruning period for the user device to be associated with the primary online account.

Abstract: An example embodiment may be performed by a software application executable on a computing device and may involve communicating with a server to access records of sessions between the server and computing devices of a managed network. The managed network may contain the server and a database associated with licensed software executable on the server. The database may store the records, and the records may include network addresses of the computing devices. The example embodiment may also involve: using a set of license misuse criteria to identify, within the records, (i) a set of the sessions that meets the set of criteria and (ii) a network address of a target device involved in the set of sessions; based on the network address of the target device, identifying the target device; and storing in memory an indication identifying the target device as a potential source of misuse of the licensed software.

Abstract: A mechanism is provided to identify wall-clock time reference dependency in one or more software components of a data analytics solution. The data analytics solution is decomposed into a set of software components. A first software component of the set of software components is deployed to a first computer server and the remaining software components are deployed to a second computer server. A system clock time on the first computer server is changed to differ from the system clock of the second computer server. Based on executing a test on the data analytics solution, a determination is made of whether the first software component, is wall-clock time independent. Responsive to the test of the of the software component failing indicating that the wall-clock time of the software component is dependent of the system clock time difference, the software component is recorded as wall-clock time dependent and an administrator is notified.

Abstract: A client computing device accesses license and authentication management services provided by a license and authentication management server, which communicates with an authentication server and an application server. The client computing device authenticates a user and validates a license for a client application (e.g., a signature application) executing on the client computing device. The license and authentication management server provides an authentication API configured to manage communications between the client application and an authentication server to authenticate a user of the client application. The license and authentication management server also provides a subscription API configured to manage communications between the client application and an application server to validate a license associated with the client application.

Abstract: An application on a mobile device may include a barcode decoder. The application may be configured to download a configuration file. The configuration file may include an enterprise identifier that is uniquely associated with an enterprise. The application may additionally be configured to obtain a license key for the barcode decoder. The license key may be based on the enterprise identifier. The application may additionally be configured to transition the barcode decoder from an inactive state to an active state conditional upon verifying that the license key is based on the enterprise identifier.

Abstract: A system and method for processing content access rights and/or entitlement rights are disclosed. A method, in one aspect, provides for receiving a selection of a content option, requesting access information associated with the selected content option, receiving access information comprising location information relating to a compatible format, requesting access rights from a first service associated with the location information, wherein the first service requests an access decision relating to the selected content option from a second service based upon the access rights, and receiving the access rights.

Abstract: A digital rights management system and a digital rights management method are provided. The digital rights management system includes an authority management module, a user confirmation module and an authority blockchain. The authority management module is configured for: receiving a user authority information corresponding to a user end from a service providing; sending user authority information to the user confirmation module; receiving an identification code corresponding to the user authority information from the user confirmation module; and sending and storing the user authority information and the identification code into the authority blockchain. Therefore, the authority management module, the user confirmation module and the authority blockchain manage and protect digital rights.

Abstract: Aspects of the present disclosure relate to detecting and protecting a class of data in an API call including determining a plurality of field names and identifying a field name to search for in the data. The technique further includes generating, in response to the identifying the field name, an encryption key and an expiration, wherein the encryption key is configured to encrypt the data. The technique also comprises encrypting the data, sending the API call to an application server, wherein the application server is configured to process the API call. The technique also includes receiving, from the application server, a request for the encryption key and validating that the encryption key has not expired. The technique also includes, sending, in response to being valid, the encryption key to the application server, and storing, in a database, a set of usage data associated with the encryption key.

Abstract: In general, the techniques are described for locally and adaptively managing license token requests for a licensed capacity feature without an explicit grant of license tokens from a centralized license server. For example, a network device for a licensed customer may locally manage a license token request for a capacity feature operating in network license mode and thus shared/contended for among multicast network devices associated with the customer. The network device may locally determine a number of locally-available tokens for the licensed capacity feature, based at least in some examples, on a number of available network-wide tokens as indicated by the license server, the number of network devices contending for the tokens, and a number of tokens already requested by the network device.

Abstract: Aspects of the present disclosure relate to detecting and protecting a class of data in an API call including determining a plurality of field names and identifying a field name to search for in the data. The technique further includes generating, in response to the identifying the field name, an encryption key and an expiration, wherein the encryption key is configured to encrypt the data. The technique also comprises encrypting the data, sending the API call to an application server, wherein the application server is configured to process the API call. The technique also includes receiving, from the application server, a request for the encryption key and validating that the encryption key has not expired. The technique also includes, sending, in response to being valid, the encryption key to the application server, and storing, in a database, a set of usage data associated with the encryption key.

Abstract: A service provider system may include an application fulfillment platform that delivers desktop applications from a variety of sources to desktops on physical computing devices or to virtual desktop instances. An entitlement service of the platform may create and store entitlement records indicating which desktop applications each end user is entitled to and may manage the allocation of license activation slots for the desktop applications that are fulfilled through the platform. Licenses may be fixed for an end user or for a device, or may be floating licenses in a pool of licenses. An administrator in a service provider customer organization may specify the entitlements for its end users and may specify constraints on the allocation of licenses. Required applications may be pushed to end user devices. An end user's desktop applications, entitlements, and/or license activations may be retained or restored following the rebuilding of their computing resource instance.

Abstract: Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device. The method comprises receiving, by a mobile payment application on a secure memory of the mobile device, transaction data from a transaction processor application on the mobile device. The method further comprises validating that the transaction processor application is authentic and in response to validating the transaction processor application, providing encrypted payment credentials to the transaction processor application. The transaction processor application further initiates a payment transaction with a transaction processor server computer using the encrypted payment credentials.

Abstract: It is an object to provide a computer system, a license management method, and a program capable of effectively using owned licenses and improving the convenience. A computer system that manages licenses of an application acquires a number of owned licenses, calculates a number of unused licenses which are not currently used, determines a number of rentable licenses from the calculated number of unused licenses, and provides the determined rentable licenses. Further, the computer system stores the number of rentable licenses and a rental period of the rentable licenses in association with each other, and provides the rentable licenses during the rental period. Furthermore, the computer system provides a minimum number of licenses among numbers of rentable licenses in the rental period.

Abstract: Systems, devices, and techniques that can provide access control and/or identification of user devices.

Abstract: An objective is to provide a system for providing wine to a customer. This system is equipped with a wine storage facility for storing wine, wherein wine is deposited in the wine storage facility, and a means for issuing a bill for the wine when wine in the wine storage facility is provided to a customer. This system may also be equipped with a management means for managing wine selection in the wine storage facility.

Abstract: A workflow server can receive requests, each for a business process workflow conforming to a business process model. Each business process workflow can include a set of interdependent tasks. The workflow server can satisfy received requests by assigning tasks to different service providers that provide software services. Each of the tasks can be assigned to corresponding ones of the software services. For each task, the workflow server can also defines an allocated cost per software service, and a time allocation per software service for completing the corresponding one of the tasks. Different service providers, including those assigned to tasks, can receive information for ones of the tasks not directly assigned to them by the workflow server. The different service providers can then bid on these tasks. Wherein when bids are won, tasks for a business process flow can be reassigned based on winning bids.

Abstract: A communication apparatus includes a user signal transmission unit that transmits a user signal required for an end user to perform communication; a manager function implementing unit that implements a function provided to a manager of the present apparatus; a license monitoring unit that monitors a license of the present apparatus, and outputs a function limitation signal when the license has expired; and a function limitation unit that limits the function implemented by the manager function implementing unit when receiving the function limitation signal. In a communication apparatus that transmits a user signal required for an end user to perform communication, a function of the apparatus is limited when a relevant license has expired, while preventing an influence of the limitation upon the end user.

Abstract: In some embodiments, a method for controlling access to media is provided, the method comprising: receiving an encrypted media content stream from a media content source that includes first media content corresponding to at least a portion of a media content item; requesting a second media content stream that includes second media content having a playback position adjacent to the first media content, wherein the second media content stream includes key information for decrypting the encrypted media content stream; decrypting the encrypted media content stream using the key information included in the second media content stream; and causing the decrypted media content stream to be presented.

Abstract: A method for operating multiple client printing systems is described. The method includes creating an administration account. The method also includes instantiating a printing manager instance for each of the multiple client printing systems. The multiple client printing systems are associated with the administration account. The method further includes presenting a data structure comprising an object associated with each of the multiple client printing systems. The method additionally includes determining license usage data for the multiple client printing systems based on the printing manager instances. The method also includes presenting the license usage data.

Abstract: When a license management server according to the present exemplary embodiment receives a request for changing a license of a first version to a license of a second version from a license operation server that leases a license to a client, the license management server changes an expiration date of the license of the first version to a predetermined period of time later, and issues the license of the second version. Then, the license of the first version of which expiration date has been changed to the predetermined period of time later and the issued license of the second version are transmitted to the license operation server.

Abstract: Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives a query identifying a set of data to be processed and a manner of processing the set of data. The data intake and query system uses a search node catalog to identify search nodes that are available to execute the query and uses a bucket catalog to identify buckets to be searched. The data intake and query system executes the query using the identified bucket and search nodes.

Abstract: Embodiments disclosed herein provide systems and methods for a crowd-funding server for users to pledge to purchase tickets to an event based on a number of users that have pledged to purchase tickets for an event and the gender ratio of the users that have pledged to purchase the tickets for the event.

Abstract: Embodiments of the present invention provide systems, methods, and computer storage media directed to providing unified digital rights management (DRM) across heterogeneous computing platforms. In embodiments, a unified DRM engine executed on a computing platform validates one or more constraints defined by a first content license associated with consumption of encrypted content. In response to successful validation, the unified DRM engine, in some embodiments, utilizes a second content license that is associated with the computing platform to enable a native DRM engine of the computing platform to decrypt the encrypted content. Other embodiments may be described and/or claimed.

Abstract: A system may include a license publishing server and a plurality of licensing servers arranged in a cluster and configured to communicate with the license publishing server to obtain a given number of authorized licenses for virtual computing sessions associated with the cluster. The system may also include a plurality of virtualization servers configured to obtain authorized licenses from the plurality of licensing servers and run virtual computing sessions for client computing devices based upon the authorized licenses. The licensing servers may cooperate with one another to distribute licenses to the virtualization servers based upon a consensus protocol and the given number of authorized licenses associated with the cluster.

Abstract: A license managing method including an execution device that executes software and a software storage device coupled to the execution device further includes a license storage device that stores license information indicating the number of licenses for permitting a license of the software, and the license managing method includes the step of license-managing of controlling storage of the software to be downloaded into the software storage device or execution of the software by the execution device based on the license information stored in the license storage device when the software whose license permission is required is downloaded.