Abstract: A copyright protection system includes a recording device and a reproduction device. The recording device writes encrypted content, an encrypted content key for decrypting the encrypted content, and license information on a recording medium on which a unique media number has been recorded in an unrewritable state. The license information is generated using both the media number and the encrypted content key, and therefore reflects both values. The reproduction device reads the media number, the encrypted content key, and the license information from the recording medium, and judges whether the license information reflects both the media number and the encrypted content key. The reproduction device decrypts the encrypted content key, and decrypts the encrypted content using the content key only if the license information reflects both values. Thus, the copyright protection system allows only original recording media to be reproduced, and prohibits reproduction of copy recording media.

Abstract: A block-level storage device is provided that implements a digital rights management (DRM) system. In response to receiving a public key from an associated host system, the storage device challenges the host system to prove it has the corresponding private key to establish trust. This trust is established by encrypting a secure session key using the public key. The host system uses its private key to recover the secure session key. The storage device may store content that has been encrypted according to a content key. In addition, the storage device may encrypt the content key using the secure session key.

Abstract: In a content management method, content data is encrypted by a first key, the first key is encrypted by plural types of second keys, the encrypted first key is multiply encrypted by a third key, and the third key is encrypted by a fourth key. These encrypted content data, a medium key which is the first key encrypted by the second key and a move key which is a first key multiply encoded by the second and third keys are recorded in a recording medium, the third key encrypted by the fourth key is recorded in a security region. This management method is managed by the move key and the medium key.

Abstract: A method and system for determining whether a client is attempting to copy an application or use the application without authorization. First, data for at least one prediction log file for the application is created. Then, based on the at least one prediction log file, prediction knowledge is determined for the application, where the prediction knowledge is stored in a prediction file. The prediction file is then forwarded to the client executing the application. It is then determined by using the predication file whether the client is attempting to copy the application or use the application without authorization. If the client is attempting to copy the application or use the application without authorization, then the client's access to the application is terminated. In an offline mode, usage information is bound to user saved data such that modification of usage information renders user saved data unusable. This prevents unauthorized access to an offline delivered application.

Abstract: A server transmits, to clients, display data for displaying a plurality of input areas for pieces of identification information which identify apparatuses in which software is to be installed. The server receives the plurality of pieces of identification information input to the input areas. The server then issues, to the clients, license information for permitting installation of the software to the apparatuses corresponding to the pieces of received identification information. This makes it possible to efficiently issue license information of software.

Abstract: A method and apparatus for enabling a licensed end user to record digital data as described is particularly useful to the music industry as it enables them to make audio data available over the internet but to retain control of the uses to which that audio data can be put. Thus, upon completing a financial transaction to pay for the required audio tracks, the end user is enabled to download and decrypt encrypted music tracks and to play them on the end user's personal computer. The end user can also be allowed to burn a CD including the downloaded music tracks. However, the end user is only enabled to decrypt and record the music tracks onto the CD if the music tracks are recorded together with copy protection.

Abstract: Documents can be created to include metadata associated with rights management information that applies to the entire document and/or to one or more applicable sub-portions of the document. When a user places such a document to be scanned on a multi-function device (MFD) in a rights management environment, the MFD recognizes metadata associated with user rights management regarding the document and/or applicable sub-portions. The MFD automatically commences a rights management scheme to authenticate the user to a rights management system, query such system for information and permissions related to the document and/or applicable sub-portions, including deciphering the metadata read from the document, and determine if the user-requested function, such as scanning or copying, is permitted to be undertaken on this document and/or applicable sub-portions by this user on this device at this time. The system automatically executes or aborts the user-requested function based on the imposed rights management scheme.

Abstract: A content information image and an information image utilizing system with an access right and an authentication function. In the information image utilizing system (100), copy information image data including identifying information (serial ID, master ID, provider ID, version information, and the like) and attribute information (ownership condition, time limit information, and the like) of the content information image is placed in an information image managing server (1002), enabling an information image providing unit to grasp and manage an owner of the information image. Use of the content information image is limited to a client (1005) satisfying the identifying information and the attribute information retained by the content information image.

Abstract: There is provided an information image utilizing system for setting in detail access rights with respect to performing communications and sending and receiving information through a user information image, which specifies a communication destination user or the like and performs communications and sending and receiving information, and performing authentication based on such access rights. A client (105) requests an information image managing server (102) to provide ownership information of a user information image of its own. The information image managing server (102) extracts user IDs of owners of the user information image and attribute information of copy information image data corresponding to those owners from an information image managing table. The server (102) sends the user IDs and the attribute information to the client (105).

Abstract: Property information of image data sets managed in an image data management apparatus can be dealt with according to a characteristic thereof, while efficiency of use can be improved. Image ID is issued for each of the image data sets uploaded by a user. Property information A and B is respectively obtained by analysis of the image data sets and by an input from the user. The user can set a security processing method and a storage method for each of items of the property information. The items of the property information whose storage method has been set to image data attachment are attached to the image data sets while the remaining items whose storage method has been set to database storage are separately stored together with the image ID, after the security processing according to the security processing method.

Abstract: A method, apparatus, and computer instructions for managing files in a data processing system. An attribute for a file is specified as having a special designation. The file with the attribute having the special designation is processed, by the operating system, in a different manner from other files when performing operations, such as, for example, copying the file to a removable media, printing the file, or sending the file over a network.

Abstract: Copy protection techniques that utilize a watermark and a permission key are disclosed. The copy protection techniques can provide single-copy copy protection in addition to different levels of copy protection. The permission key and the watermark can also permit the invention to yield variable levels of copy protection. In one embodiment, content including a watermark is transmitted to a recipient. The recipient is allowed to read the content but not record the content unless the recipient possesses a permission key.

Abstract: Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Abstract: A method and system for encouraging users of computer readable content to register. The method involves embedding in the computer readable content, instruction codes operable to direct a processor circuit to automatically establish a connection to a server, when the content is in use by the processor circuit, to transmit registration information to the server and operable to control further use of the content by the processor circuit in response to a key received from the server.

Abstract: The present invention relates to a software installation system and a method for copy protection. The software installation system includes a support server in which first installation data for installing software is stored; a recording medium in which an RFID tag storing URL information of the support server is installed and second installation data for installing the software is recorded; a computer having a computer interface unit and a data reading unit reading the second installation data recorded in the recording medium; an RFID reader for reading the RFID tag installed in the recording medium; a portable information processing terminal including a wireless communication unit accessing the support server through wireless Internet, a terminal interface unit connected to the computer interface unit of the computer, and a terminal controller downloading the first installation data and controlling the computer through the terminal interface unit and the computer interface unit.

Abstract: One embodiment of the invention relates to a management method for conditional access data processing by at least three decoders associated to a subscriber. These decoders include activation/deactivation means for conditional access data processing and local communication means structured to allow communication between the subscribers' decoders. This method comprises a reception step, a determination step, and a comparison step. In addition conditional access data processing by said first decoder (STB) is deactivated if the latter has not received messages from the required number of different decoders. Another embodiment of the invention relates to a decoder that allows the implementation of the method according to the invention and characterized in that it includes local communication means (10) structured to transmit messages to other decoders and to receive messages originating from said other decoders, and processing means for messages received by said local communication means (10).

Abstract: An object of the invention is to make it possible to move data that is coded and managed for copyright protection after evaluating an encryption key and permitting its movement based on a result of the evaluation, as well as to make it possible to copy data that is recorded in a server to a terminal apparatus and cause the terminal apparatus itself to reproduce the data and, where a terminal apparatus is connected to the server, render data on the server reproducible.

Abstract: A system in which content usage conditions can be upgraded without the need for a service provider to control content-usage rights of a user. In the system in which encrypted content is distributed and is allowed to be utilized only by authorized users, the service provider receives a content usage-right certificate from the user, and on the condition that it is determined that data is not tampered with by verifying a digital signature of an issuing entity of the content usage-right certificate, the service provider obtains user information and content purchase information of the user from the content usage-right certificate, and performs upgrade processing by, for example, changing the usage conditions. It is thus possible to change the content usage conditions without the need for the service provider to possess usage control data.

Abstract: Even though data transmitted between a data processing apparatus and disc recording and/or reproducing apparatus is monitored, copying the data is effectively prevented and the data can be protected. A write ID generator 20 of a disc recording and/or reproducing apparatus 10 generates independent write ID for each recording of data, and transmits the write ID to an encryptor 102 of a data processing apparatus 100. The encryptor 102 encrypts contents ID to be used for key information for encrypted contents data and data control information to restrict or prohibit copy by the use of an encrypting key based on the write ID. The encrypted data are transmitted to an encryptor 24 of the disc recording and/or reproducing apparatus 10 via an I/F 101 and I/F 19, and encrypted along with the write ID by the use of an encrypting key based on disc ID, and recorded to a disc 30.

Abstract: A contents processing device permitting, when contents are to be stored in a recording medium, only a specified device to read out the stored contents is to be provided, and a contents processing device capable, where it is a mobile telephone, of flexibly adapting to a change of a unique telephone number or a type of the mobile telephone. For the purpose, the contents processing device for inputting and outputting contents to and from a recording medium is provided with contents storage means (RAM) for storing contents, an ID storage unit (ROM) for storing an ID capable of identifying the contents processing device, a recording medium input/output unit (memory card I/F) for inputting to and outputting from the recording medium, and a ciphering unit (ciphering program) for enciphering contents within the contents storage unit by use of a ciphering key generated from the ID within the ID storage unit and storing it from the recording medium input/output unit into the recording medium.

Abstract: The conventional method of limiting the number of receiving apparatus has a problem that if the limited number of appliances is reduced to limit distribution to unspecified appliances outside a home, distribution to appliances in the home is limited unnecessarily. If the limited number of appliances is increased, distribution to appliances outside the home cannot be sufficiently limited. The invention provides at least one receiving apparatus, (e.g., digital television sets and PCs,) connected to a network and capable of receiving and using predetermined data, and a transmitting apparatus, (e.g., an AV server) for transmitting the data to the receiving apparatus via the network. Use of the data on the network is managed based on the transmission time required for transmission of predetermined information between the transmitting apparatus and the receiving apparatus.

Abstract: A signal transmission method applicable to prevention of modification or alteration of the playback mode information, such as copying management information or charging information. The playback mode information form a terminal is data-converted for ciphering by a playback mode information appendage circuit in a header appendage circuit responsive to the key information from a terminal and the resulting information comprised of the data and the playback mode information is outputted. The reproducing side effects data conversion on the ciphered playback mode information for deciphering, by a playback mode information detection circuit in a header separation circuit, using the key information from a terminal, for taking out the original playback mode information at a terminal.

Abstract: Methods, systems, and products are disclosed for controlling with rights objects delivery of broadcast encryption content for a network cluster from a content server outside the cluster that include receiving in the content server from a network device a key management block for the cluster, a unique data token for the cluster, and an encrypted cluster id; calculating a binding key for the cluster in dependence upon the key management block for the cluster, the unique data token for the cluster, and the encrypted cluster id; inserting a title key into a rights object defining rights for the broadcast encryption content; and sending the rights object to the cluster. In typical embodiments, the rights for content include an authorization for a play period and an authorized number of copies of the broadcast encryption content to devices outside the cluster.

Abstract: A contents control method for controlling a process on the receiving side which is applied to contents transmitted from the transmitting side to the receiving side, includes a step of adding, when a predetermined block of the transmitted contents is an area where control information for controlling the process substance on the receiving side which is applied to the contents is added, the control information to the block. The method also includes a step of receiving a process designation concerning the transmitted contents, and a step of applying, when user information stored in a receiving side apparatus which receives the transmitted contents, or information concerning the receiving side apparatus satisfies conditions corresponding to the received process designation in the control information added to the block of the contents, a process corresponding to the process designation to the received block.

Abstract: A play list of audio recordings made in the past is searched for, and is displayed in the event that it exists. The contents that have already been recorded in the past are displayed with the word “recorded” affixed thereto in a manner corresponding with the track Nos. of the CD, and are further displayed with a number such as “2” affixed thereto in the event that the contents have been recorded twice in the past, for example. Further, in the event that play lists exist, a dialog box prompting selection of a play list is displayed, so the user can select between audio recording by adding the new contents to an already-existing play list or audio recording by creating a new play list. Thus, the contents recorded in the past are automatically searched, and the user is presented with a display thereof.

Abstract: With content management apparatus 110 serving as a copy origin and storage medium 120 as a copy target, the copy origin retains allowed copy count control information on content, and when the content is copied from the copy origin to the copy target, the allowed copy count control information retained at the copy origin before copy processing is updated in accordance with a predetermined rule to generate allowed copy count control information to be retained at the copy origin and allowed copy count control information to be retained at the copy target, and subsequent copy processing at the copy origin is done based on the allowed copy count control information retained at the copy origin, whereas subsequent copy processing on the content stored in storage medium 120 is done based on the allowed copy count control information stored in storage medium 120. In this way, it is possible to achieve content management which is easily understandable for users.

Abstract: A data transfer system transfers original data from a first data storage device to a second data storage device. The transfer system includes a compressor, an encryptor, and a controller. The compressor receives the original data from the first data storage device, generates compressed data of a smaller size, and passes the compressed data to the second data storage device. The encryptor makes a predetermined cryptographic key and passes the key to the second data storage device. The encryptor also receives the original data from the first data storage device, encrypts the original data with the cryptographic key and then sends the encrypted data back to the first data storage device. The controller controls the compressor and the encryptor and gives the first data storage device a first erase instruction, telling the first data storage device to erase the original data, in accordance with a first transfer command.

Abstract: A recording system for applying access control processing to input data content and for recording access-controlled data content on a computer readable storage medium. The recording system includes an encryption apparatus for encrypting portions of the input data content and an access control memory device which securely stores information from which a private key of a public key/private key pair associated with a data content recording user or user group is derivable. The encryption apparatus and the access control memory device co-operate to provide access control data including content recorder access control data and default access control data. The default content access control data provides the same level of access to the input data content as the level of access available to the data content recording user/user group. A recorder is provided for recording the encrypted input data content and the content access control data on the computer readable storage medium.

Abstract: A playback device for playing a video content selected from a plurality of video contents includes a first creating unit that creates a thumbnail for each video content without a copy restriction by reducing a frame image constituting the video content, a second creating unit that creates an index for each video content with a copy restriction by using one of a character string and a figure relating to the video content, and an output unit that outputs a thumbnail screen obtained by arranging thumbnails created by the first creating unit and indexes created by the second creating unit to another device.

Abstract: A system and method for preventing piracy of a given software application limits the number of times that such software application is activated. A given software application must be activated in order to become fully functional. The user must provide a unique software identification code, relating to the specific software which the user is attempting to activate, to a remote provider. The remote provider determines the number of times that such specific software has already been activated, and provides an activation code to the user unless the number of activations exceeds a predetermined threshold. Once activated, the software becomes fully operational, and the user is allowed complete access to its functions.

Abstract: A system and method for distributing title data, such as songs, videos or computer games. The title data is provided from a central location to a customer who may purchase or rent a copy of the title data. The title data is made available on a computer readable media, which may be physical media, such as a CD or DVD, or virtual media, such as a computer network. Before distribution, the title data is watermarked with information to identify the customer to whom the title data was distributed. The watermark may be created using identifying information to modulate the title data using a randomly selected modulation scheme at multiple randomly selected locations. The system stores an indication of the locations and frequency modulation scheme, allowing the identifying information to be recovered from the watermarked copy of the title data.

Abstract: A multiplexed secure counter is provided, in which a multiplicity of child secure counters are secured by a parent secure counter. Child counters are stored with a parent secure counter value and a signature. Before a child counter is read, the signature is verified and value stored is checked against the current value of the parent secure value. If the verifications are successful, the child secure counter can be used. To increment a child counter, the signature is verified and the value stored checked against the current value of the parent secure value. If the verifications are successful, the parent counter and the child counter are incremented, and the data is signed again.

Abstract: A signal processing system includes a reproducing apparatus for reading information from a recording medium having unique information and an information processing apparatus for mutually authenticating and connecting the reproducing apparatus. The reproducing apparatus includes a final encryption key generating portion that generates a content information encryption key in accordance with intermediate key information. A first transmitting portion transmits the intermediate key information to the information processing apparatus. A second transmitting portion transmits the content information encryption key to the information processing apparatus. The information processing apparatus includes a content information encrypting portion that encrypts content information using the content information encryption key, and an intermediate key information encrypting portion that encrypts the intermediate key information using key information unique to the recording medium.

Abstract: An electromechanical system consists of a memory storage unit in which the licensed operating system is stored. The function of this device is to recognize the requested data and thereby allow the operating system from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the operating system in the device from non-duplication. The operating system present in the memory storage unit is constructed as license specific.

Abstract: A mechanism for encrypting confidential information, uses a transmission package than can be attached to an electronic message. The transmission package is an executable application and controls the decryption, using a separately stored key, and rendering of the contents. On termination of the rendering of the information the transmission package triggers deletion of the encrypted file, the transmission package, and the separately stored key.

Abstract: A secure document printing system is provided. A policy server is used to define access rules for a document, and select individual users and/or groups that will have access to the document. The policy server stores the access rules along with a document decryption key. The policy server's name and address are packed in the document, and then encrypted and sent to a print server which stores it for later access. A recipient is notified that the document resides on a particular print server. The print server retrieves the specified document, contacts the policy server named in the document, and requests the document decryption key and access rules for the user, print server, and document from the policy server which replies with the related decryption key and access rules. The print server decrypts the document and prints the document based on the access rules.

Abstract: Based on the detailed reproduction control information defining the reproduction control state of data to be transmitted, the CPU 12 of the data transmission apparatus creates a simplified reproduction control information roughly defining the reproduction control state of the data, stores the simplified reproduction control information of the data in the packet header of a data packet carrying the data, stores the detailed reproduction control information in the data, and transmits the simplified reproduction control information and the detailed reproduction control information as well as the data to the data receiving apparatus 20 through the transmission channel 30 from the input-output interface 16.

Abstract: A system for protecting software against piracy while protecting a user's privacy enables enhancements to the protection software in a user device and extended protections against piracy. The protection system allows the user device to postpone validation of purchased tags stored in a tag table for installed software and to re-establish ownership of a tag table to recover from invalidation of a tag table identifier value resulting from revelation of a tag table identifier value. Continued use of the tag table is provided by the use of credits associated with a tag table. A protection center is protected against denial of service attacks by making calls to the protection center cost time or money to the attackers.

Abstract: A method for preventing denial of service attacks against Hypertext Transfer Protocol (HTTP) servers includes receiving a HTTP request from a subscriber using a first communication network coupled to at least one other communication network, receiving a profile for the subscriber, filtering the request to determine whether the subscriber is authorized to make the request based upon the profile and forwarding the request to the other communication network when the subscriber is authorized to make the request. An apparatus capable of preventing denial of service attacks against HTTP servers includes a profile request generator capable of generating a profile request based upon a HTTP request received from a subscriber using a first communication network, a filter capable of determining whether the request is authorized based upon the requested profile and an authorizer capable of allowing the request to be forwarded on at least one other communication network coupled to the first communication network.

Abstract: A method controls the access times of an optical disc end discs of the same. The method includes the following steps. First, an optical disc drive obtains the addresses of a life flag and a medium key block (MKB) by reading a private flag of an optical disc. The life flag and the MKB are used to control the access times of the optical disc. After confirming the addresses of the life flag and the MKB, the optical disc drive obtains an optical power signal to determine the power that should be used to read the MKB. When the optical disc drive uses the appropriate reading power to access the MKB, the recognizable number of access times in the 4KB data is reduced, and the medium key signal is extracted to be confirmed if it is recognizable to restate the main data.

Abstract: A digital rights management (DRM) method is negotiated prior to initiating delivery of a DRM encoded content item over a digital network between a client and a target server. The client identifies a link to the target server for accessing the DRM encoded content item. The client initiates a network session with the target server. The client sends an offer message to the target server containing a list of at least one supported DRM method. The target server sends an answer message to the client containing a corresponding list 1) indicating whether each DRM method listed in the offer message is supported by the target server, and 2) providing a network address of a DRM license server for each supported DRM method. The client selects a supported DRM method. The client obtains a DRM license using the network address listed for the selected DRM method. The target server delivers the DRM encoded content item to the client using the selected DRM method.

Abstract: A method for storing and securely managing important information for a user in a database includes storing synchronizing information, which changes when a portion of the important information is updated, in the database together with the important information, and encrypting the synchronizing information; distributively storing the encrypted synchronizing information in a plurality of predetermined places; and combining and decrypting the synchronizing information stored in the predetermined places and determining whether the combined synchronizing information is identical to the synchronizing information stored in the database. A content file may include a header portion, including key-data for synchronizing information and synchronizing information distributively stored in a plurality of predetermined places of a hard disc, and a data portion.

Abstract: Disclosed is a total system for preventing an online and off-line leakage of information, which includes a security maintenance client having a program storing a file in a storing device and a file security control part which encodes the file content to be stored in the storing device and stores a log information, and security maintenance server which receives the log information and a decoding key and decodes the encoded file. The security maintenance client further includes a communication security control part which has a communication program transmitting a file and encodes the file content to be transmitted to a transmission destination of a network and stores a log information. The security maintenance server further includes an automatic key transmission part which receives a decoding key to be transmitted to the transmission destination according to a file transmission security policy after receiving the log information and the transmission destination.

Abstract: The various embodiments disclosed are generally directed towards systems and methods for managing and displaying content rich data, such as multimedia, residing on a removable memory apparatus inserted into a handheld device. In one aspect of the invention, a method comprises launching and displaying the content rich data soon after the device is inserted into a handheld device and monitoring the number of times the content rich data was launched and displayed. If the content rich data was launched a specific number of times, then the content rich data is deleted from the handheld device.

Abstract: An image processing apparatus, comprising: a document reader that reads images of a document; a printer that prints on a sheet, image data read out from the document by said document reader; a mode setter that enables the N in 1 mode to print images of N pages of document on one sheet; and a security code giver that gives a security code to each print area on said sheet, in which the image data read out from the document is to be printed, if the N in 1 mode is enabled by said mode setter.

Abstract: A secure document printing system is provided. A policy server is used to define access rules for a document, and select individual users and/or groups that will have access to the document. The policy server stores the access rules along with a document decryption key. The policy server's name and address are packed in the document, and then encrypted and sent to a print server which stores it for later access. A recipient is notified that the document resides on a particular print server. The print server retrieves the specified document, contacts the policy server named in the document, and requests the document decryption key and access rules for the user, print server, and document from the policy server which replies with the related decryption key and access rules. The print server decrypts the document and prints the document based on the access rules.

Abstract: A device and a method of preventing pirated copies of computer programs. The device has input and output devices for bidirectional data exchange with an electronic computer and a first memory element containing a data file that can be transferred to the electronic computer over the output device. In addition, a second memory element into which data can be written via the input device is also provided. The method includes the following steps. First, this device is connected to an electronic computer for bidirectional data exchange. Then a first data file containing an electronic key is transferred from the device to the electronic computer. Subsequently a second data file containing an identifier of the electronic computer is copied from the electronic computer to the device.

Abstract: Software is securely distributed with limited usage rights. The software may be an executable program and/or one or more data files such as image or multimedia data files. The software includes an access control object which prevents at least some usage of the software without the use of a first access control code. The first access control code is produced based on selected information characteristic of the user's computer system. The access control code is produced in a server computer to which the user directs a request for the access control code. The user makes a payment to receive the access control code, which is then downloaded to the user's computer system.

Abstract: A management device of a license management system acquires a usage request of a content from an SD card or a printer via a relay device, analyzes the acquired usage request, acquires usage environment information of the SD card or the printer from the relay device, analyzes the acquired usage environment information, generates license information including a usage rule corresponding to the analysis results of the usage request and the usage environment information, generates instruction information indicating how to handle the license information in the relay device based on the analysis result of the usage environment information, embeds the generated instruction information in the license information, and sends the license information to the relay device.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.