Abstract: A method for managing hardware resources includes obtaining, by a local virtual hardware license manager, a license request from an application instance, in response to the license request: sending a virtual hardware license request to a license management system, wherein the virtual hardware license request comprises a hardware resource list, making a first determination that a response to the virtual hardware license request validates the virtual hardware license request, and in response to the first determination: providing, based on the hardware resource list, a signed hardware resource document to a hardware resource manager managing a hardware resource, wherein the hardware resource list specifies the hardware resource, updating a hardware resource access repository to specify enabled access of the hardware resource by the application instance, and initiating access to the hardware resource by the application instance.

Abstract: Systems and methods for providing cryptographic services. A cryptography service obtains a request to provision a computing device to perform cryptographic operations. The cryptography service generates executable code for a protected execution environment. The computing device obtains and executes the executable code. The computing device fulfills requests for cryptographic operations in the protected execution environment.

Abstract: Optimizing generalized transfers between storage systems including identifying, by a first storage system, a request to transfer source data from the first storage system to a second storage system, wherein the first storage system implements a first storage architecture and the second storage system implements a second storage architecture; identifying difference information between the source data that is stored on the first storage system using the first storage architecture and existing data that is stored on the second storage system using the second storage architecture; and transferring, in dependence upon the difference information, a subset of the source data from the first storage system to the second storage system.

Abstract: Techniques for managing customer license agreements are described. In one embodiment, a user-specified resource metric of a license model and a user-specified limit of the user-specified resource metric are obtained. A request for permission to launch a new compute resource at a computing device of the provider network is obtained from a service within a provider network. The new compute resource having a property that is an amount of the user-specified metric. A determination is made that a launch of the new compute resource would cause the user-specified limit to be exceeded, and the request the request to launch the new compute resource is denied.

Abstract: Various embodiments herein described are directed to methods, apparatuses and computer program products configured for managing software product feature and version releases in complex and distributed network systems. Various embodiments are directed to systems and network frameworks that are configured to provide controlled release of software features/changes through admin user notification and control interfaces. In some embodiments, a sandbox system environment may be provided to admin users to test and configure upcoming software features/changes. Additional example embodiments provide a release track system that specifies and manages feature release schedules in a complex and multitenant cloud network environment.

Abstract: A non-transitory computer-readable medium stores a control program for a game device connectable to an operation device that is held by a player or attached to a certain position on the body of the player. The control program causes the game device to execute the following: causing a first image to be displayed on a display device in order to cause the player to perform a movement such that a posture of the operation device becomes a specified posture; retrieving posture information relating to the posture of the operation device at a certain timing; determining a degree of matching between the posture of the operation device and the specified posture based on the retrieved posture information; and causing a second image in accordance with the determination result to be displayed on the display device.

Abstract: A method for edge network authentication and access, implemented by an edge server, including receiving user equipment (UE) information from an application client executed on a UE to establish a connection between the edge server and the UE, verifying whether the UE has authorization to the local access point name (APN) based on the UE information, generating a session key when the UE has authorization to the local APN, sending the session key to the UE, receiving a request to access content of an application on a content server from the UE, decrypting the information to obtain a key, comparing the key with the application key to validate the UE, verifying identifiers of the UE when the UE is valid, identifying the application on the content server to obtain the content based on the request, encrypting and sending a session identifier to the UE based on a new application key.

Abstract: Embodiments include a computer-implemented technique for determining a license position of an enterprise computer system represented in a standardized graph-based framework. The technique includes obtaining information indicative of licensable products and enforceable licenses of an enterprise computer system, tabulating that information in a graph database, and construing an enterprise infrastructure graph and a target element relationship pattern graph of the enterprise computer system based on the tabulated information in accordance with the standardized graph-based framework. Querying the standardized graph-based framework can determine an effect of a target element on a license position of the enterprise computer system by matching the target element relationship pattern graph to any subgraphs of the enterprise infrastructure graph.

Abstract: The present disclosure relates generally to managing security artifacts for a software application executing on a software stack. Techniques are described for defining a security configuration such that each layer of the software stack may be associated with one or more datastores, each datastore including one or more security artifacts for a particular layer. The security configuration may specify, for example, an order in which the various datastores are to be accessed when a request is received for a security artifact that is available from multiple datastores. Using the security configuration, access to security artifacts can be handled in connection with requests generated through a particular layer in the stack. A system managing the security artifacts can provide a unified view of the datastores such that, from the end-user's perspective, there is only one logical datastore.

Abstract: An example operation may include one or more of receiving, by a broadcast server node, data from a plurality of data provider nodes; and executing, by the broadcast server node, a smart contract to: encrypt the data with encryption keys; generate a broadcast queue based on the encrypted data; and assign a subset of consumer nodes authorized to receive the encrypted data of the broadcast queue.

Abstract: A system activates an application on a computing device based on a prior activation of an isolated counterpart application on the computing device. An application that is restricted from sharing a license with a counterpart application locally on the computing device is enabled to instead communicate with an application license manager to manage license data corresponding to the counterpart application. For example, when a license is obtained at the computing device for a container application, the application license manager may update license data in association with a native application so that a counterpart license can be obtained automatically by the native application, and vice versa. Thus, once a user has responded to an activation prompt for either one of the container application or the native application, whichever application the user has not manually activated will be automatically activated at the computing device based on communications with the application license manager.

Abstract: A purchase type determining unit 244 determines whether content is rental content, which has a valid time limit for enjoying, from purchasing type information included in the license information. An icon image processing unit 352 disposes an icon image of the content in a menu screen. In case the content is determined to be rental content by the purchase type determining unit 244, a rental mark disposing unit 356 disposes a rental mark indicating that associated content is rental content near the icon image of the content or disposes the rental mark so as to overlap with the icon image of the content.

Abstract: A facility for reporting on a corpus of documents is described. The facility receives a user-specified search query. In response to the receiving, among documents in the corpus, the facility identifies a proper subset that have each (1) been modified in a manner relevant to the search query (2) at a recent time. For each of at least a portion of the identified documents, the facility causes to be presented information describing the document.

Abstract: A system and method includes receiving a first segment of a probe media item that is transmitted as a first live-stream of an event. The method includes determining, after a first delay period, whether the first segment of the probe media item is similar to a first segment of a first reference media item that is transmitted as a second live-stream of the event and received subsequent to the probe media item. The method includes determining, after the first delay period, whether a second segment of the probe media item is similar to a second segment of the first reference media item. The method also includes responsive to determining that the first segment and the second segment of the probe media item are respectively similar to the first segment and the second segment of the first reference media item, performing a remedial action in association with the probe media item.

Abstract: In one embodiment, a method includes receiving a text query from a client system of a user and parsing the text query to identify a primary entity referenced in the text query. The method also includes identifying one or more related entities for the primary entity based on one or more related-entity indexes associated with the primary entity and identifying one or more content objects matching the text query, each identified content object being associated with one or more of the related entities. The method also includes sending to the client system instructions for presenting one or more search results corresponding to one or more of the identified content objects, respectively, each search result including a reference to the associated related entity and a snippet for the related entity describing the relationship between the primary entity and the related entity.

Abstract: A method for allocation of application licenses includes establishing a computing environment comprising a licensed application or service accessed by at least two users, each user having an associated computer system; establishing an ordered list of users for a licensed application or service, in which users have a predefined priority based on a business value or function; establishing at least one user attribute comprising whether a user's virtual machine will be archived and saved for later resumption if the user's license is at least one of suspended, removed, or reallocated; and establishing at least one disqualification threshold for at least one user.

Abstract: The disclosed embodiments illustrate a composite navigational method and system for the automatic configuration management of application software by a computing server. The method includes extracting a plurality of previous configuration values from a storage device. The method further includes generating a plurality of abstract syntax trees (ASTs) based on parsing of the plurality of previous configuration values. The method further includes performing one or more pre-specified operations on the generated plurality of ASTs. The method further includes determining a configuration value of a current configuration parameter based on a navigation pattern, such as hierarchical navigation or variable-based filtering navigation. Further, the navigation pattern is determined using the performed one or more pre-specified operations, based on at least user preferences and the extracted plurality of previous configuration values.

Abstract: The invention relates to an apparatus and method for recording transmitted data items, and particularly television and radio programs. The data items are received at one or more inputs along with ID data identifying the transmitted data items and the program series to which the data item belongs. An input interface receives input indicating whether one or more received transmitted data items have been viewed or recorded by a user and a processor generates values for ranking the series to which each of the received data items belong based upon the received input. Subsequently received transmitted data items are stored in a storage device based on the generated values, the stored data items belonging to a series for which a value has been generated.

Abstract: In an approach to multi-user authentication, one or more computer processors receive a first user login. The one or more computer processors determine whether at least one additional user login is received. The one or more computer processors receive an access request from the first user. The one or more computer processors receive an access request from the at least one additional user. In response to receiving the access request from the first user and the access request from the at least one additional user, the one or more computer processors determine whether the access request from the first user and the access request from the at least one additional user meet pre-defined criteria. In response to determining the access requests meet pre-defined criteria, the one or more computer processors authorize the access request of the first user and the access request of the at least one additional user.

Abstract: A method of operating a terminal using Mobile Device Management (MDM) solution includes: installing an application, requesting for registration by a license key received from an Enterprise License Management (ELM) server, receiving a Right Object (R/O) that corresponds to the license key and comprises a permission list, setting at least one permission based on the permission list comprised in the received R/O, and performing the set permission. A terminal using MDM comprises an MDM application configured to control an installed application to acquire a required permission, a ELM agent configured to request for registration by a license key from an ELM server, and receive a R/O that corresponds to the license key and comprises a permission list, and an ELM permission enforcer configured to set at least one permission based on the permission list comprised in the received R/O.

Abstract: A license management system including an information processing apparatus includes a detecting unit and a license update requesting unit. The detecting unit detects a status of an element involved in execution of software. The license update requesting unit requests an update of license information of the software if the status detected by the detecting unit is a status that does not satisfy a condition desired for executing the software. The license management system may be usable within an image forming apparatus and include a user interface having an IC card reader.

Abstract: Disclosed are a method and a system for monitoring one or more activities offered by a software application in a computer network. The method comprises monitoring a response time for one or more activities. The one or more activities are performed by a software application. The method further comprises comparing the response time of the one or more activities with a corresponding pre-defined threshold time. The method also comprises detecting a faulty activity of the one or more activities based on the comparison. The method further comprises highlighting a code snippet corresponding to the faulty activity in a source code of the software application.

Abstract: A vehicle may include battery cells and a controller configured to control the vehicle, based on a state observation of the battery cells, using model parameters computed according to controller-determined cell nominal parameters adjusted by remotely-determined cell delta parameters, the delta parameters received from an external computing device responsive to cell measurements relating to a cell battery model sent to the external computing device, the delta parameters indicating adjustments that improve accuracy of the nominal parameters.

Abstract: A system and method for managing customer address information in electronic commerce using the Internet are provided. Customers' detailed address information is received from customer terminals connected over the Internet, a unique address number corresponding to the detailed address information is produced, and the produced unique address number and the corresponding detailed address information are separately stored and managed in separate database (DBs), thereby effectively preventing leakage of the customers' detailed address information due to hacking or a malicious program.

Abstract: An information processing system including multiple apparatuses capable of executing one or more applications and an information processor connected to the apparatuses through a first network is disclosed. The information processing system includes a license status information obtaining part configured to obtain the license status information of the applications installed in each of the apparatuses from the corresponding apparatuses through the first network, a license data obtaining part configured to obtain license data authorizing usage of the applications from a computer connected through a second network based on the license status information, and a license data delivery part configured to deliver the license data to each of the apparatuses.

Abstract: A service management apparatus is provided that allows management of a shared license among devices, including a user storage unit storing a user and at least one associated terminal; a license information storage unit storing a license including a terminal to be permitted to use a predetermined service and license information for identifying a setting limitation; a setting request reception unit receiving a setting request for the license including information for identifying the terminal that has issued the setting request and the user; an associated terminal identification processing unit identifying the terminal that is associated with the user included in the request; a license identification processing unit identifying the license that each terminal to be identified is permitted to use and is settable to the terminal that has issued the request; and a license setting processing unit setting the identified license to the terminal that has issued the request.

Abstract: A method and system for enforcing compliance with a policy on a client computer in communication with a network is disclosed. The method involves receiving a data transmission from the client computer on the network. The data transmission includes status information associated with the client computer. The data transmission is permitted to continue when the status information meets a criterion.

Abstract: A method and apparatus for providing a temporary identity module to a device (1) in a communication network. An RO Server (2) receives a request for an identity module (51) from the device (1). It then obtains an identity module and generates an encryption key (S4, S5). The encryption key is partitioned into a plurality of slices such that no slice comprises the whole encryption key (S6). Each slice is sent (S8, S9) to respective further devices (10, 11) accessible by the server (2) such that no single further device (10, 11) receives sufficient slices to reconstruct the encryption key. A location key is generated (S10) that identifies each slice and the further device (10, 11) to which each slice has been sent. The identity module is encrypted using the encryption key (S11) and sent to the device (1) along with the location key (S12). The device (1) can subsequently use the location key to obtain the slices and reconstruct the encryption key.

Abstract: Methods, apparatus, and computer-accessible storage media for controlling export of snapshots to external networks in service provider environments. Methods are described that may be used to prevent customers of a service provider from downloading snapshots of volumes, such as boot images created by the service provider or provided by third parties, to which the customer does not have the appropriate rights. A request may be received from a user to access one or more snapshots, for example a request to export the snapshot or a request for a listing of snapshots. For each snapshot, the service provider may determine if the user has rights to the snapshot, for example by checking a manifest for the snapshot to see if entries in the snapshot manifest belong to an account other than the customer's. If the user has rights to the snapshot, the request is granted; otherwise, the request is not granted.

Abstract: Resolving a query received from a first node in a network includes accepting, by a second node in the network, ownership of the query from the first node, receiving, at the second node, an identification of a third node in the network, wherein the identification is received from a user of the second node and the user of the second node believes that a user of the third node has information necessary to resolve at least part of the query, and transferring, by the second node, ownership of the at least part of the query to the third node, wherein the accepting, the receiving, and the transferring dynamically generates a data structure that traces a propagation of the query, and the data structure is accessible to an origin of the query.

Abstract: A method for resolving a query received from a first node in a network includes accepting, by a second node in the network, ownership of the query from the first node, receiving, at the second node, an identification of a third node in the network, wherein the identification is received from a user of the second node and the user of the second node believes that a user of the third node has information necessary to resolve at least part of the query, and transferring, by the second node, ownership of the at least part of the query to the third node, wherein the accepting, the receiving, and the transferring dynamically generates a data structure that traces a propagation of the query, and the data structure is accessible to an origin of the query.

Abstract: A method, apparatus, computer program product and system are provided for managing crowd sourced content creation. In this regard, a method is provided that includes receiving information regarding at least one content recording device and information regarding a recording subject. The method further includes determining whether the at least one content recording device is eligible to receive at least one permission indicator, based at least in part on the information regarding the at least one content recording device and the information regarding the recording subject. The method also includes causing the at least one permission indicator to be provided to the at least one content recording device in an instance in which it is determined that the at least one content recording device is eligible to receive the at least one permission indicator.

Abstract: A system that incorporates the subject disclosure may perform, for example, receive secret information and non-secret information from a secure download application function, provide a request for a first verification to a secure element where the first verification is associated with access to content and/or an application that is accessible via the secure download application function, receive the first verification which is generated by the secure element based on the secret information without providing the secret information to the secure device processor, receive the non-secret information from the secure element, and generate a second verification for the access based on the non-secret information, where the content and/or application is accessible from the secure download application function responsive to the first and second verifications. Other embodiments are disclosed.

Abstract: The present invention relates to a network device and method available for use in non-secure use mode. A network device according to the present invention includes an ownership establishment determination unit for determining whether ownership has been established in the network device and establishing either a secure or non-secure use mode, upon reception of a use request message from a user through a control unit; and a non-secure use range search unit for searching for a non-secure use range available in non-secure use mode, if the ownership establishment determination unit determines the establishment of the non-secure use mode, and granting the user a license for the searched non-secure range. According to the present invention, there is an advantage in that a license for an appropriate range of content of a secure network device can be granted to a user even during the initial construction stage of a home network.

Abstract: An information processing apparatus performs installation when a number of the extension applications that are installed to extend the host application is less than or equal to a maximum number of the extension applications that can be held by the host application as described in a manifest of the host application, during installation of an extension application that extends a host application.

Abstract: A method for planning assignment of floating licenses of software products is proposed. Floating licenses can be requested to a runtime server by multiple workstations (to which they are assigned until a maximum number of instances of the product are running concurrently). In the solution of the invention, a user of every workstation needing to run the product in a future timeframe submits a corresponding reservation request to the runtime server. If at least one license is available for the selected timeframe, the runtime server reserves the license to the workstation (so as to prevent assigning it to other workstations for the same period); at the same time, a corresponding temporary permission is stored on the workstation. In this way, the product can be used during the selected timeframe on the workstation only; this is possible without any risk even if the workstation is disconnected from the runtime server.

Abstract: Techniques are described herein that are capable of enforcing conditions of use associated with disparate data sets. For example, content may be published. Conditions of use that are associated with the published content may be specified. The published content may include disparate data sets. Each data set may be associated with its own condition(s) of use. The condition(s) of use associated with each data set may be enforced.

Abstract: A system and method for preventing piracy of a given software application limits the number of times that such software application is activated. A given software application must be activated in order to become fully functional. The user must provide a unique software identification code, relating to the specific software which the user is attempting to activate, to a remote provider. The remote provider determines the number of times that such specific software has already been activated, and provides an activation code to the user unless the number of activations exceeds a predetermined threshold. Once activated, the software becomes fully operational, and the user is allowed complete access to its functions.

Abstract: A method (300) for planning assignment of floating licenses of software products is proposed. Floating licenses can be requested to a runtime server by multiple workstations (to which they are assigned until a maximum number of instances of the product are running concurrently). In the solution of the invention, a user of every workstation needing to run the product in a future timeframe submits (306) a corresponding reservation request to the runtime server. If at least one license is available for the selected timeframe, the runtime server reserves (357) the license to the workstation (so as to prevent assigning it to other workstations for the same period); at the same time, a corresponding temporary permission is stored (360) on the workstation. In this way, the product can be used (363-387) during the selected timeframe on the workstation only; this is possible without any risk even if the workstation is disconnected from the runtime server.

Abstract: Aspects include a mechanism of entitling users to transacted-for digital content access, indicating download authorization with discrete authentication URLs, and validating download attempts using each such URL. The authentication mechanism comprises producing an encrypted string included in a URL provided to a user. The encrypted string comprises transaction identifier information, and information about the transacted-for entitlement. When a user wishes to exercise the transacted-for entitlement, the user activates the URL, which is resolved to a location that has/can obtain access to the key(s) used in producing the encrypted string, decrypt the string, and use the information in it to validate the URL and the entitlement. The validation can use data retrieved from a database, using the transaction identifier as a key. The entitlement information included in the now-decrypted string can be compared with the prior download information.

Abstract: An image processing apparatus includes: an extractor to extract colors used in input data; a converter to convert signals of the extracted colors into intermediate color signals each including three color signal components including brightness; an evaluator to evaluate recognizabilities of the colors based on the intermediate color signals; a generator to generate additional image data to be added to data for ordinary image formation based on a result of the evaluation and the input data; and a color convertor to convert the input data into the data for ordinary image formation.

Abstract: A first storage unit is bound to a second storage unit based on a binding type associated with content on the first storage unit, the first storage unit being operated through a first host device, and the second storage unit being operated through a second host device. When content on the first storage unit is requested in the first host device, the first host device will calculate an account identifier based on the binding type associated with the requested content and send the account identifier to a server. The server will send the account identifier to the second host device, and the second storage unit will use the account identifier to calculate a credential. The credential will be sent to the first host device through the server. The credential can be used to access the requested content if the credential is valid.

Abstract: A system and method for sharing electronic content. A sending user can specify one or more criteria that a recipient memory device must have to store the content. The sending user can also specify a digital rights management control that can be associated with the content. The content can be transferred to the recipient if the recipient memory device has the specified properties. Software at the recipient can ensure that the content is handled in accordance with the digital rights management controls specified by the sender.

Abstract: A third party is configured to establish a virtual secure channel between a source SSD and a destination SSD via which the third party reads protected digital data from the source SSD and writes the protected digital data into the destination SSD after determining that each party satisfies eligibility prerequisites. An SSD is configured to operate as a source SSD, from which protected data can be copied to a destination SSD, and also as a destination SSD, to which protected data of a source SSD can be copied.

Abstract: In one example embodiment, a server includes a receiver configured to receive, from a first device having rights to use or play first media content, characteristics of the first device or a user of the first device; a group manager configured to add the first device into a content sharing group having a second device, based on the characteristics of the first device or the user of the first device; a content list manager configured to transmit, to the first device, a group content list that includes second media content that the second device has rights to play; and a streaming transmitter configured to stream the second media content to the first device.

Abstract: Providing authorized copies of encrypted media content including: receiving application for authentication to make copies of the media content; providing forensic decryption tools to process the media content; transmitting a permission to make copies of the media content using the forensic decryption tools; performing authorized decryption of the media content; and making and forensically marking copies of the decrypted media content.

Abstract: An information processing apparatus including: a data processing unit which performs copy processing for recording recorded data of a first medium in a second medium, wherein the data processing unit performs processing for referencing copy restriction information received from a management server, comparing the copy restriction information with apparatus setting information set in a memory of the information processing apparatus, determining whether or not the copy processing is permitted in accordance with the comparison result, and copying recorded data of the first medium to the second medium under the condition it is determined that the copy processing is permitted.

Abstract: A method and system for providing information management of data from hosted services receives information management policies for a hosted account of a hosted service, requests data associated with the hosted account from the hosted service, receives data associated with the hosted account from the hosted service, and provides a preview version of the received data to a computing device. In some examples, the system indexes the received data to associate the received data with a user of an information management system, and/or provides index information related to the received data to the computing device.

Abstract: A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control database to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets.

Abstract: Based on the detailed reproduction control information defining the reproduction control state of data to be transmitted, the CPU 12 of the data transmission apparatus creates a simplified reproduction control information roughly defining the reproduction control state of the data, stores the simplified reproduction control information of the data in the packet header of a data packet carrying the data, stores the detailed reproduction control information in the data, and transmits the simplified reproduction control information and the detailed reproduction control information as well as the data to the data receiving apparatus 20 through the transmission channel 30 from the input-output interface 16.