Abstract: A system and method for processing a rights expression for association with an item for use in a system for controlling use of the item in accordance with the rights expression. A rights expression is specified in a conventional manner in an original format. An intermediate format of the rights expression is generated based on at least one of syntax information and semantics information associated with the original format. The rights expression specifies a manner of use of said item for enforcement on a device. The intermediate format can be converted to a device specific format or a simplified format for resource constrained devices to permit rights enforcement on various devices.

Abstract: A management device of a license management system acquires a usage request of a content from an SD card or a printer via a relay device, analyzes the acquired usage request, acquires usage environment information of the SD card or the printer from the relay device, analyzes the acquired usage environment information, generates license information including a usage rule corresponding to the analysis results of the usage request and the usage environment information, generates instruction information indicating how to handle the license information in the relay device based on the analysis result of the usage environment information, embeds the generated instruction information in the license information, and sends the license information to the relay device.

Abstract: A unique volume license key (VLK) is provided to a volume license holder. A signed file containing the VLK and the data derived from volume license holder's submitted computing environment information is provided to the volume license holder along with the licensed software. The license file is stored in a central location, such as on an installation server, or locally on client machines, in a rather large file of any type. Upon logon, the license file is read, the data authenticated and the system is activated. If license data cannot be authenticated, a connected system either fully functions in grace period or run in reduced functionality mode until authentication succeeds. If the system is disconnected, the system is functional only with disconnected features until it joins a network again. In a completely off-line installation, the license file is generated by the volume license holder using software vendor assigned specific VLK and software vendor provided security hardware device.

Abstract: Integrated computer services and software licensing processing methods and systems are provided. A license processing service (LPS) receives a services or software license request from a user via a client computer. The LPS communicates the request to a billing system for the services or software provider to obtain an expiration date for use of a desired service or software product. The LPS receives and forwards the expiration date from the billing system to a licensing clearinghouse operated by the provider of the desired service or software product. The clearinghouse, in turn, provides a use license for the desired service or software application to the client computer via the LPS.

Abstract: In order to limit use of content, when a source receives a request for transmitting content from a sink, the source performs an authentication process. When the authentication is successful, the source transmits to the sink key information necessary for decrypting the encryption applied to the content. The sink can receive the content by receiving the key information and by decrypting the encryption applied to the content by using the key information.

Abstract: In transmission of stream data protected for copyright on a bus, transcription of stream data once recorded on a recording apparatus to a medium of another recording apparatus is realized. Authentication is carried out between a stream recording and playback apparatus and another recording apparatus to interchange a key for data scramble. By using this key, data is added with copy control information used when the data is recorded initially and thereafter the data is transmitted. After the data has been recorded on the recording apparatus, the data is deleted from an original recording medium. During transmission of the data, authentication from a different apparatus is rejected to prevent a plurality of copies from being made.

Abstract: An apparatus, system, and method are disclosed for autonomically disposing a computer such as a workstation. The computer's local persistent storage medium is configured with pre-boot image which is configured with a set of functional modules that facilitate disposal or recycling of the computer to the next user. The disposal and recycle methods are automated, require minimal user intervention, and facilitate moving configuration options and data to a different computer. The entire process may execute from the pre-boot image on the computer's local persistent storage medium without ever booting the primary operating system.

Abstract: A system for preventing an unauthorized software copying prevention mechanism from being invalidated by a program falsification, includes an inherent key generator for generating an inherent key peculiar to a software user data processing device, a secret information encrypting unit for encrypting secret information indispensable for software to operate properly, which is stored by a secret information storage unit, with an inherent key, and a falsification detector for inspecting whether the system for preventing unauthorized copying of software, which is operating on the software user data processing device, has been falsified or not. If the system has not been falsified, then the inherent key generator generates the inherent key. If the system has been falsified, then a secret information destroyer destroys the encrypted secret information stored by an encrypted secret information storage unit by erasing the secret information or writing a pseudo-random number into the secret information.

Abstract: An authority limit management method is proposed for a digital media storage. The digital media storage includes at least one micro processor and at least one memory unit and connected to an access device. A classification authorization code index (CAC index) and a plurality of classification operation commands (COC) is pre-stored in the digital media storage and an identification code is set for the access device. The classification operation commands is performed to calculate a classification authorization code when the digital media storage is connected to the access device for initial transmission protocol. The authority limit of the memory unit for the access device is granted to the access device according to the classification authorization code. Therefore, the data of the digital media storage can be prevented from illegal copy or hacker.

Abstract: Access to content may be administered by storing content, the content comprising one or more selections, accessing a passive optical out-of-band token associated with the content, determining an access right for the content based on the passive optical out-of-band token, and enabling access to the content in accordance with the access right.

Abstract: A computer authentication system is provided with a random number generator 5 for generating a random number on the basis of a noise signal generated by a noise generator and a code rewriter for creating a new encryption code on the basis of the random number generated by the random number generator 5 when the encryption code of a computer 1 corresponds to the encryption code of an authentication key 2, rewriting the encryption code recorded in a encryption recorder 19 of the computer 1 to the new encryption code and rewriting the encryption code recorded in an encryption recorder 10 of the authentication key 2 to the new encryption code.

Abstract: A recording and reproducing apparatus having a recording medium and cartridge memory inside a cartridge and making a copy of control information memorized in said cartridge memory recorded, in which control information memorized in the cartridge memory is compared with one recorded in the recording medium, thereby a recording or reproducing operation of the apparatus is selected based on the compared result. Moreover in the apparatus, a password is memorized in the cartridge memory in advance and an authentication is made with the password being input through an external input means, thereby its recording or reproducing operation is selected based on the authenticated result.

Abstract: A digital information recording apparatus includes multiple recording circuits for making multiple copies. The apparatus limits the number of copies, however, in accordance with copy information provided within the digital information itself. When the number of copies is reached, if additional copies are to be made, then the source copy is disabled when a new copy is made.

Abstract: The invention relates to a method of managing files. In this invention, a method of managing a file stored in an external memory device of a computer having an application that starts when it is read by the computer consists of a step of accepting an instruction for starting up the application, and a step of automatically deleting the application program from the external memory device when the started application terminates. This file managing method can automatically delete the application program from the external memory device when the started application terminates.

Abstract: A digital media recorder and a method of controlling such are provided. During attempts to copy media content, sub-sequences are extracted from an input media sequence. A digital fingerprint of the sub-sequence is calculated and compared with at least one first reference fingerprint from a database. The outcome of the comparison determines the action to take in the further processing. Recording of the input media sequence on a media carrier is either allowed or obstructed, e.g. disallowed. In the case recording of the sequence is allowed, the database is updated with information that the digital media sequence has been recorded.

Abstract: A system and method for sharing electronic content. A sending user can specify one or more criteria that a recipient memory device must have to store the content. The sending user can also specify a digital rights management control that can be associated with the content. The content can be transferred to the recipient if the recipient memory device has the specified properties. Software at the recipient can ensure that the content is handled in accordance with the digital rights management controls specified by the sender.

Abstract: A method and apparatus for enabling a licensed end user to record digital data as described is particularly useful to the music industry as it enables them to make audio data available over the internet but to retain control of the uses to which that audio data can be put. Thus, upon completing a financial transaction to pay for the required audio tracks, the end user is enabled to download and decrypt encrypted music tracks and to play them on the end user's personal computer. The end user can also be allowed to burn a CD including the downloaded music tracks. However, the end user is only enabled to decrypt and record the music tracks onto the CD if the music tracks are recorded together with copy protection.

Abstract: In one embodiment, a content license is created that defines parameters for accessing a piece of digital content. A first logical expression in the content license defines a plurality of playback devices that are authorized to access the piece of digital content. A second logical expression in the content license defines at least one time interval when the plurality of playback devices are authorized to access the piece of digital content. The content license is used to access the piece of digital content.

Abstract: The present invention provides a method and an apparatus that, when a copying is limited as “Copy One Generation”, prevent the copying from being made into infinite number of storage media without limitation, and thereby protect the profit of a copyright holder concerned. In the present invention, when outputting digital information whose copying is limited to external appliances connected to plural outputting circuits (315A, 315B, or 72A to 72D), the total number of external appliances to which the digital information is to be outputted is limited within a predetermined constant. In particular, a control circuit (311, or 73) limits the number in which to perform authentications of the external appliances connected to the plural outputting circuits. This makes it possible to limit, within the predetermined constant, the total number of the external appliances to which the digital information is to be outputted.

Abstract: When a digital copier is used, for monochrome images, image data is stored into a storage in association with user ID codes at a 5% possibility while for color images, image data is stored in association with user ID codes at possibilities ranging from 0 to 50% depending upon the users. For storing image data the data is reduced then the reduced data is stored. This makes it possible to reduce the amount of data to be stored and hence enables use of a reduced capacity of storage, which makes easier the management for reading the content in the storage and discerning unfair usage of the digital copier.

Abstract: A key-sharing scheme is used to control distribution and use of video and audio content in personal digital assistants (PDAs) and other wireless devices. A private key is split into key-shares using a Blakley-Shamir key splitting technique and the key-shares are distributed to various network entities including a finance server and security server. Key-shares are also stored in a user's subscriber identity module (SIM) and a security processor of the PDA. The key-shares from the network entities are provided to the PDA after the user requests specific video or audio content and a credit verification is performed. The PDA's security processor combines the key-shares to form the decryption key for use in playing the content by the PDA's communications processor. When a service limit is reached, the PDA's security processor purges the key-shares to prevent further use of the content.

Abstract: A contents database 114 memorizes the discriminating information for discriminating contents and the temporal information as to the time of content duplication associated with the discriminating information. A recording program 113 acquires the discriminating information of contents to be duplicated and duplicates the contents in association with the acquired discriminating information and with the temporal information memorized in the contents database 114. This substantially prohibits duplication in large quantities without significantly impairing the interests of a user.

Abstract: A copy-resistant read-only digital optical disc having encrypted digital data. The copy-resistant read-only digital optical disc includes a digital work, a variable user data format encoding said digital work after encryption with a variable software algorithm, an implementation of said variable software algorithm, and an implementation of said variable user data format encoded in a default format. The encrypted digital data is read on an adaptable digital optical disc player, which is adaptable to a user data format described on said copy-resistant read-only digital optical disc made in accordance with this invention. A copy-resistant read-only digital optical disc made in accordance with this invention will provide necessary user data format information on the disc in a default format, which is always accessible by an adaptable player.

Abstract: A method for controlling and tracking access to disseminated information involves encrypting data using a key that is maintained in a key repository. A user requests a message ID and key from the key repository. The key repository issues a message ID and key to the user. The user generates an encrypted message using the key. The encrypted message is then distributed with the message ID to one or more recipients. To read the encrypted message, a particular recipient obtains the key for the message from the key repository by providing the message ID to the key repository. The particular recipient then decrypts the message using the key provided by the key repository. Messages are deleted, in the sense of becoming unusable, by deleting the corresponding key from the key repository. A log is provided to track key repository activity including the issuance of keys and key requests from message recipients.

Abstract: The invention provides a recording media player and a recording media recorder provided with a high-security copy protection system of less complexity. A recording media player and/or recorder provided with a copy protection system stubborn to attacks and highly flexible in dealing with recording media of various copy conditions. For this purpose, various distributed copyright protection information (DCPI) values are used. The DCPI values include water marks in case of an MPEG stream, Copy Generation Management System (CGMS) codes, EMI (encryption mode indicator) in case of an IEEE1394-1995 interface, and user defined DCPI values. The recording is achieved such that DCPI values are recorded in user-unrewritable (or user-inaccessible) areas of the recording medium as long as possible.

Abstract: Copyright of contents to be transmitted may be protected for an analog signal produced by converting a digital signal representative of the contents. A signal transmission apparatus determines whether the contents are protected by copyright by detecting copyright protection information of a digital image signal of the contents at a protection information detecting unit, and scrambles an analog image signal converted from the digital image signal to output when the copyright is protected, or prohibits outputting of the analog image signal. When a receiving apparatus receives a transmitted signal, the apparatus generates a digital image signal and the analog image signal based on the transmitted signal.

Abstract: The present invention is intended to significantly reduce the content data processing and transfer times by skipping root key checking processing, when transmitting a plurality of pieces of encrypted content data stored in a primary recording medium to a secondary recording medium along with key information of these plural pieces of content data, if the key information for a piece of content data to be transmitted from the primary recording medium is the same as the key information for an already transmitted piece of content data.

Abstract: A copy-protected-state indicating MPEG-TS data output unit (3) holds a bit stream obtained by previously compressing and encoding image and/or audio data representing that recording desired by the user has ended in failure because the contents is copy-protected. When copy control information (V2) outputted from an IEEE 1394 interface (1) indicates a copy-protected state, a selecting unit (20) selects copy-protected-state indicating MPEG-TS data (V3) outputted from the copy-protected-state indicating MPEG-TS data output unit (3) and outputs it as to-be-recorded MPEG-TS data (V4). Thereby, the data (V3) is recorded.

Abstract: A trusted system having at least one repository for controlling use of digital works in accordance with usage rights associated with the digital works. The system comprises means for receiving a request to access a digital work in accordance with usage rights associated with the digital work, the usage rights specifying a manner of access and indicating a security class, means for determining a security level of a repository controlling the requested access, and means for granting the request and permitting exercise of the manner of access specified in the usage rights associated with the digital work in accordance with the usage rights if the security level of the repository corresponds to the security class specified in the usage rights associated with the digital work. The security class indicates a security level of a repository that can access the digital work, and the usage rights are expressed with a grammar.

Abstract: A transmitting section divides a content recorded in a recording medium into data of a predetermined size, reproduces the data, and transmits the data to a receiving device. An erasing section erases the outputted data recorded in the recording medium, when the data of the predetermined size is transmitted to the receiving device. An EOB adding section adds an EOB, which shows an end of transmission, to the data transmitted from the transmitting section, when a power off signal is inputted during transmission of data by the transmitting section. An EOB-added data position storing section stores a recording position, on the recording medium, of the data to which the EOB is added. Then, a power off control section turns off a power of the device.

Abstract: An enforcement architecture and method for implementing roaming digital rights management are disclosed. A license distributed from a license server to a computing device of a user may be uploaded to a license synchronization server, and rebound to other devices registered with the service, thereby enabling access to the licensed content from other computing devices. A second digital license of a second computing device is set to expire prior to a first digital license of a first computing device. Reactivating a decayed first digital license, that is deactivated during transmission of the second digital license, to the second device to access content of the first computing device.

Abstract: A private home entertainment system including plural playback devices can receive discrete content that can be played by any appropriate publicly available devices. The home system can convert the discrete content to content that is bound to the private network using, e.g., cryptographic keys. The bound content can be freely copied and played among the devices in the private network but cannot be played outside the private network. Should the user elect to convert bound content back to discrete content to permit playing the content outside the network, all bound copies in the network are destroyed or otherwise rendered unusable.

Abstract: When the recording mode of an information recording/playback device is a cognizant mode which analyzes embedded copy control information, the information recording/playback device performs content encryption using a content-encryption key generated by using a cognizant key as a content-encryption-key generating key in the cognizant mode. When the recording mode of the information recording/playback device is a non-cognizant mode which does not analyze the embedded copy control information, the information recording/playback device performs content encryption using a content-encryption key generated by using a cognizant key as a content-encryption-key generating key in the non-cognizant mode. By using these techniques, the above two recording modes are clearly distinguished and separately executed. This prevents an encryption mode indicator as copy control information and embedded copy control information from being mismatched.

Abstract: The invention provides a method of recovering from de-synchronization attacks includes registering original and altered digital content using nonlinear transformations to iteratively attempt to provide better-approximated registration. Approximation occurs at more than one level of granularity, by selecting among a greater number of possible transformation functions at each step. Transformations and comparisons might be conducted directly on pixel values, on coefficients for a set of basis wavelets, or on some transformation of the original and altered digital content. A human operator might assist this process, such as by suggesting transformations or providing evaluation of the degree of registration. Upon resynchronization, embedded identifying information in the original digital content is recovered.

Abstract: A method and apparatus for securely accessing digital content is provided. The method of providing secure access to content comprises determining an identification (ID) from a secure medium including content. The method further comprises sending a session key and the ID to a server. Furthermore, the method includes requesting user authentication and if the user is successfully authenticated, receiving the session key from the server to enable reading of the content on the secure medium.

Abstract: An ID (MID) is attached to each individual optical disk, and content is encrypted with a Content-Key and registered. In addition, a system server device maintains a Client ID of a client terminal device, HDD-ID of a hard disk drive (HDD), and MC-ID of a memory card respectively held as user entry information. When the user wants to copy the content, together with the optical disk MID, the MC-ID is sent to the system server side. The system server device identifies the user by referencing the MC-ID in the user entry information, and returns a Content-Key, which is used when encoding content. On the user side, content stored in the optical disk is decrypted using the returned Content-Key and copied to the HDD. Accordingly, copying of content is allowed only for an authorized user who is the lawful owner of the storage media.

Abstract: A security service for an electronic marketplace that permits members of the marketplace to use any signing service to attach electronic signatures to documents resident on the marketplace regardless of format differences between the member's internal computer system and the electronic marketplace.

Abstract: When a content is moved from a flash memory into a content database, a usage rule management program updates a variable seq-1, stored in a 0th defective block of a media defect list stored in the flash memory, to a new value seq-2. The usage rule management program calculates an MAC value (hash value) on the basis of the content stored in the data portion of the flash memory, an encrypted encryption key, and important information including the variable seq#. The usage rule management program then compares the calculated value with an MAC value stored in the header portion of the flash memory. If these two values are not equal, the usage rule management program disables reproduction of the content thereby preventing the content from being copied in an unauthorized manner.

Abstract: A rendering method, system and software for use in a distributed system for managing use and rendering of content in accordance with usage rights associated therewith, and including a rendering device that renders the content; and a distributed repository coupled to the rendering device and including a first mode of operation and a second mode of operation. The first mode of operation receives content from another distributed repository and enforces usage rights associated with the content and permits the rendering device to render the content in accordance with a manner of use specified by the usage rights. The second mode of operation requests the rendering of content received from another distributed repository. The distributed repository permits the content to be rendered only if a manner of use specified in the request corresponds to a manner of use specified in the usage rights.

Abstract: The invention is directed to a method and apparatus for preventing software piracy. A license enforcement server may be integrated with an operating system running on a network-critical machine. As such, other computational devices connected to the network may obtain permission to perform licensed activities. These computational devices may have an instruction set for communicating with the license enforcement server. Further, the license enforcement server may communicate with a licensing organization. The license enforcement server may utilize a namespace tree to organize licenses and uniquely identify licensed activities. In this manner, a universal license enforcement system may be achieved in which disabling of the license enforcement mechanisms would adversely effect a network.

Abstract: System, methods and apparatus are applicable to enable owners and vendors of software to protect their intellectual property and other rights in that software. The system also enables vendors or distributors of software to charge per-use for an instance of software. The system produces a unique, unforgeable, tag for every vendor supplied instance (copy) of specific software. Each user device is equipped with a supervising program that ensures, by use of the tag and other information, that no software instance will be used on the device in a manner infringing on the vendor, distributor, or software owner's rights. When installing or using a vendor-supplied software instance, the supervising program verifies the associated tag and stores the tag. When installing or using untagged software, the supervising program fingerprints selected portions of the software and stores the fingerprints. Software is used on a user's device through the supervising program which ensures proper use of the software.

Abstract: The present invention provides methods, systems and apparatus to manage processing of video content. In one implementation, a method of managing processing of video content is provided. The video content includes picture data representing picture elements to be rendered for display to a user. The embedded data is conveyed along with the video content. The method includes: (a) examining the embedded data for rights data, wherein the rights data is carried by a header; (b) only if the rights data is missing, examining the embedding data for protect data that is contained within the picture data; and (c) if the rights data is missing and the protect data is present, then limiting processing of the video content. Other implementations are provided as well.

Abstract: A CD-ROM has an obscurable section wherein exists a photosensitive mask material layer or constituent operative to alter the optical properties of areas subjected to prolonged exposure to the CD-ROM read laser radiation. Digital information stored on a CD-ROM is made accessible by use of a password, which is generated from user machine unique information, and which is written on the CD-ROM via selective exposure of the CD-ROM to the radiation used to read the CD-ROM.

Abstract: Disclosed is an optical disk barcode forming method wherein, as information to be barcoded, position information for piracy prevention, which is a form of ID, is coded as a barcode and is recorded by laser trimming on a reflective film in a PCA area of an optical disk. When playing back the thus manufactured optical disk on a reproduction apparatus, the barcode data can be played back using the same optical pickup.

Abstract: A method for controlling access to digital information is performed based on a plurality of decryption keys sent by the information provider. A first type of decryption key instructs a user's host system to reproduce the digital information in accordance with a first level of reproduction quality degradation. Additional keys may specify other degradation levels. The quality of the digital information may be degraded based on a time condition or a use condition. Alternatively, only a portion of the information may be made viewable by a user. In order to obtain full and unrestricted access, the user must obtain a type of decryption key from the provider which removes all previous limitations on reproduction quality degradation.

Abstract: The present invention provides a technique for implementing digital rights management for digital content that can be used on Java enabled mobile devices. It enables the controlled usage of the digital content on the mobile device after it is downloaded from a content provider. This is achieved by a mobile service provider that generates a license based on a rights workflow and applies charging policies to prevent the downloaded digital content from being forwarded to other users. The digital content cannot be used without the license. The digital content can be delivered to the user either through combined or separate delivery, depending on whether the license is sent along with the digital content or not. On expiry of the license, the user is prompted for updating the license. The user can then use the digital content once the license is updated.

Abstract: Data C generated by scrambling user-desired digital data P and a control word CWp corresponding to the number of reproductions p are recorded on recording media. When creating a master, a user has already been charged for the number of reproductions p. A decryption block decrypts the control word CWp, which is read from the recording media, to CW0. A de-scrambler uses the decryption control word CW0 to decrypt the digital data P for output to a reproduction unit. After confirming the end of reproduction, the decryption block writes a control word CW(p?1) back to the recording media. The recording media may be reproduced p times with no need for communication between a reproduction device and an accounting manager.

Abstract: A digital data system comprising a server and a client capable of communication with one another over a network. The server includes an item store holding a plurality of data items, each data item comprising a pointer to a source data entity accessible from the network, and a component for serving copies of data items to the client. The client includes an item store for holding a copy of one or more of the data items held by the server item store and a component for requesting a copy of a data item from the server and placing it in the client item store. The client additionally includes a component for validating copies of data items held by the client item store and initiating a request for an updated copy of a data item from the server if the copy held by the item store is out of date and a user interface for enabling a user to interact with the data items to access the associated source data entities.

Abstract: A signal transmission method applicable to prevention of modification or alteration of the playback mode information, such as copying management information or charging information. The playback mode information form a terminal 15P is data-converted for ciphering by a playback mode information appendage circuit 14 in a header appendage circuit 13 responsive to the key information from a terminal 15K and the resulting information comprised of the data and the playback mode information is outputted. The reproducing side effects data conversion on the ciphered playback mode information for deciphering, by a playback mode information detection circuit 26 in a header separation circuit 25, using the key information from a terminal 27K, for taking out the original playback mode information at a terminal 27P.

Abstract: An object of the present invention is to provide a marking forming apparatus, a method of forming a laser marking on an optical disk, a reproduction apparatus, an optical disk, and a method of manufacturing an optical disk, capable of providing a greatly improved copy prevention capability as compared to prior known construction. To achieve this object, in the optical disk of the invention, for example, a marking is formed by a laser on a reflective film of a disk holding data written thereon and at least position information of the marking or information concerning the position information is written on the disk in an encrypted form or with a digital signature appended thereto.