Abstract: An equipment managing system includes an intermediating apparatus and an equipment managing apparatus. The intermediating apparatus is connected to a license management apparatus and a program management apparatus via a network. The equipment managing apparatus is connected to an electronic equipment via a network. The intermediating apparatus stores a program acquired from the program management apparatus and a license file acquired from the license management apparatus to an external storage medium. The equipment managing apparatus sends the program and the license file recorded in the external storage medium to the electronic equipment.

Abstract: A method, system, and computer usable program product for source identification for multipart content validation are provided in the illustrative embodiments. An identification information of a source server is obtained by parsing an update request, the update request being configured to request from the source server an update of a part of the multipart content. The identification information is recorded. A change in a part of the multipart content is observed. The change in the part results in an updated multipart content. A debugging directive is constructed, the debugging directive including the identification information of the source server. The debugging directive is inserted relative to the part that has changed thereby associating the source server with the part of the multipart content. The updated multipart content including the debugging directive is transmitted to a validation server executing in a second data processing system.

Abstract: A method of authorising use of a computer program only able to be used when an authorised message is received from an authorising system includes providing an authorisation system, making a request to use a computer program, signalling the request to the authorisation system, the authorisation system recording the use of the computer program and providing the authorisation message to the computer program upon receipt of the authorisation message the computer program may be used.

Abstract: A portable device may be roamed from one host to another. In one example, the portable device stores software that is to be executed by a host. The host may maintain a policy that governs which software may be executed on the host. When the portable device is connected to a host, the host checks the software version installed on the guest to determine whether that software version is compatible with the host's policy. If the guest's software does not comply with the host's policy, then the host installs a compatible version. If the guest's version complies with the policy and is newer than the host's version, then the host copies the guest's version to the host and propagates it to other guests. In this way, newer versions of software propagate between hosts and guests, while also respecting specific execution policies of the various hosts.

Abstract: A record carrier for storing at least one stream of linked content cells thereon, which linking is performed based on navigation data. The record carrier includes modified navigation data and/or a stream arrangement of at least one stream of linked content cells, so that an access of the at least one stream of linked content cells on the record carrier under consideration of the navigation data is not disturbed, whereas a generally linear access of the at least one stream of linked content cells on the record carrier is disturbed.

Abstract: When a function inactivation process is instructed on an MFP A, all the functions are inactivated and a function inactivation certification key is issued, and then resources related to the functions are transmitted to an MFP-B. When reception of the resources is completed on the MFP-B, a function duplication completion certification key is issued. When these keys are input to a licensing server, a database is updated, and a function activation key is issued. When the function activation key is input to the MFP B, the functions related to the transmitted resources are carried out.

Abstract: A method performed in a network element coupled between a subscriber end station and an AAA server for avoiding AAA processing by at least temporarily suppressing AAA access-request messages for a rejected subscriber end station. The network element receives subscriber session-request messages from the subscriber end station. Subscriber session-request messages include information for verifying an identity that the network element transmits to the AAA server as AAA access-request messages. The network element receives AAA access-response messages corresponding to the AAA access-request messages. Responsive to an AAA access-response message, the network element determines that additional AAA access-request messages should be, at least temporarily, suppressed with regards to the subscriber end station. Responsive to determining, the network element suppresses any additional AAA access-request messages from being transmitted to the AAA server.

Abstract: In accordance with one or more aspects of the separating keys and policy for consuming content, content has a corresponding leaf license, and the leaf license has one or more associated root policy addenda. Each root policy addenda includes policy identifying when it is permissible to decrypt and consume the content, but excludes a content key to decrypt the content. The content can be decrypted and consumed only if the policy identifies that it is permissible to decrypt and consume the content.

Abstract: A method and devices for a control of usage of content is disclosed. In one embodiment, a user device performs the steps of obtaining the content, defining usage rights, generating integrity protection information for defined usage rights, encrypting the content with a content encryption key, encrypting the content encryption key with a key encryption key associated with a recipient device and/or an operator of the recipient device, communicating the encrypted content, the defined usage rights, the encrypted content encryption key, and the integrity protection information to the recipient device.

Abstract: An electronic control device and method for operating an electric roller shutter include establishing a wireless connection between the electronic control device and an electronic device if a preset login password is input. The electronic control device provides an operation interface to the electronic device, and receives a function instruction from the electronic device if a function key on the operation interface is pressed. The electric roller shutter is operated by the electronic control device according to the received function instruction.

Abstract: Various techniques for software license inventory and asset management are disclosed. A fingerprint may be generated and associated with various copies of software applications installed on a software licensee's computer systems. Upon generation, each fingerprint may be stored in a license information database system along with relevant license information for that copy of the software application. A software inventory tool may then be used to collect fingerprints on installed copies of software applications and provide these fingerprints to the license information database system to obtain the corresponding license information. The output of the software inventory tool may be used by a licensee to comply with software license agreements and/or efficiently allocate information technology resources. Methods and systems that provide and process secured, dynamic and persistent tagging of software deployments and usage are also disclosed.

Abstract: An image forming system comprising: a server device including user information, for performing a user authentication via a computer network and for receiving and adding up count data on a user basis; and an image forming apparatus including: a storage unit to which a data area for storing therein the count data including a count value of an occurrence of a predetermined event can be allocated; a login processing unit for determining whether or not to permit a user to log in; a count unit for updating, when the predetermined event occurs based on an operation performed by the user permitted to log in, the count data for the user; and a transmission unit for transmitting, when the user logs out, the count data for the user to the server device.

Abstract: Provided is a method for delivering all or part of a rights object (RO) of a user associated with the content to other users. The method includes creating a rights object to be transmitted to a second user within a limit of the rights object held by the first user, and forwarding the created rights object to the second user. The method allows each user to share its own RO with other users within the limit of the RO without server authentication.

Abstract: An external storage device connectable to an information processing apparatus is provided. The storage device includes: an input/output interface via which data is exchanged with an information processing apparatus; a first storage region where data associated with first and second validity periods is stored; and a second storage region where a control program is stored. While the first validity period is used when the external storage device is connected to one information processing apparatus, the second validity period is used when the external storage device is connected to another information processing apparatus. The control program causes a processor to execute the steps of: establishing connection of the external storage device to an information processing apparatus; identifying any one of the validity periods as a validity period to be used for the data; and executing predetermined security protection processing on the data in accordance with the identified validity period.

Abstract: Embodiments described herein are directed to syndicating an online service to at least one syndication partner of a syndicator. In one embodiment, a computer system determines that a syndication relationship has been established between a syndicator and a syndication partner, where the syndication relationship is established to provide syndicated services to syndication partners and clients. The computer system indicates which services provided by the syndicator are available for syndication to the syndication partner and which type of usage information the partner is to provide in order to use the syndicator's services. The computer system receives usage information from the syndication partner specifying which services are to be syndicated and specifying parameters for those services indicating operating parameters specific to the use of the syndicated services.

Abstract: Described herein are methods and devices of securing data. For example, a method of securing data comprises receiving, by a secure storage device, unsecure data from a source. The secure storage device is removably attached to the source. The method further comprises securing the unsecure data within the secure storage device by performing digital processing related to the unsecure data to create secure data. The secure storage device is responsive to the same protocol as an unsecure storage device and as a result the secure storage device is transparent to the source. The source responds to the secure storage device as if it were an unsecure storage device.

Abstract: A content presentation system and method allowing content providers to regulate the presentation of content on a per-user-view basis. Content is distributed an associated license option on the number of individual consumers or viewers allowed to consume the content. Consumers are presented with a content selection and a choice of licenses allowing consumption of the content. The users consuming the content on a display device are monitored so that if the number of user-views licensed is exceeded, remedial action may be taken.

Abstract: In a CP server, when a copyright determination unit determines that requested content is copyrighted content, a set up unit sets up a copyrighted content public URL comprising information that can specify a memory region where copyrighted content is stored, and corresponding to a content delivery request by a cellular phone, a transmission unit transmits the copyrighted content public URL together with the copyrighted content, to the cellular phone. Then, a cellular phone acquires the copyrighted content public URL together with the copyrighted content, and attaches the copyrighted content public URL to an electronic mail message which is transmitted to another cellular phone. The other cellular phone can use the received copyrighted content public URL to request the CP server to deliver the copyrighted content.

Abstract: A computer implemented method and apparatus for managing digital video recorder storage for one or more users. Each user in the multi-user environment is assigned an amount of program storage in the digital video recorder. Responsive to receiving a request to record a new program from a user in the multi-user environment, an associated amount of program storage assigned to the use is determined. Responsive to a determination that addition of the new program will not exceed the associated amount of program storage assigned to the user, the new program is recorded to the program storage.

Abstract: A media content printing method that includes storing encrypted media content data representing media content in a computing device, generating a file of print commands that include the encrypted media content data non-encrypted commands for printing the media content based on the encrypted media content data, and sending the file of print commands to an intermediate device that stores a cryptographic key. The method further includes sending the non-encrypted commands to a printing device, determining if the media content is authorized to be printed, and decrypting the encrypted media content data in the intermediate electronic device that corresponds to the authorized media content to produce decrypted media content data. The decrypted media content data is sent to the printing device for printing the media content based on the non-encrypted commands and the decrypted media content.

Abstract: A security method and a security apparatus are disclosed which use a self-generated encryption key. The security method includes the steps of: generating an encryption key; decrypting pre-encrypted data using a pre-stored manufacturer key; and re-encrypting the decrypted data using the encryption key. The security method and apparatus minimize external leakage of data by self-generating the unique encryption key. Since the encryption keys are unique in each set, set binding is possible.

Abstract: Provided is a device that prevents unauthorized copying of a document to which copy inhibition information is added.

Abstract: A method for preventing unauthorized installation of application software is disclosed wherein application software is distributed with a user-readable permanent password, one or more user-readable one-time disposable password, and a hidden password (hidden from users but accessible by the setup program). When the setup program is run, the user must enter the permanent password and disposable password(s). The setup program sends these passwords and the target computer serial number to a remote server which verifies their validity, stores the serial number, and returns a complex password and a new disposable password from a remote passwords folder stored on the remote server. The setup program displays the new disposable password to the user who records it for use in future installations. The complex password is used to enable installation of the software, and it is deleted after installation is complete.

Abstract: An information processing apparatus, an information recording medium, an information processing method, and a computer program are provided. In an information recording medium storing many pieces of content, a configuration that allows use management on segmented content basis is provided. A plurality of content management units corresponding to title, index and other information are set by partitioning stored content in an information recording medium. Different unit keys that are encryption keys are allocated to different content management units. At least the content real data included in each content management unit is encrypted by use of the unit key and the encrypted data is stored. In content reproduction, units are identified and decryption is executed by use of a unit key corresponding to each unit for reproduction. In an information recording medium storing many pieces of content for example, each of segmented pieces of content may be managed.

Abstract: This invention relates to provide a communication network system, a gateway, and a data communication method, in which the gateway has an advanced functionality. A person who issues an access request can retrieve a desired access destination easily by the following configuration: functions of routing information providing and authentication processing are added to a gateway that performs protocol conversion between two different communication networks; when an access request is issued from a public communication network such as Internet to a terminal in a local (private) communication network connected to the gateway, a request terminal is authenticated to enable prevention of unauthorized data writing and reading; and an access request user who succeeded in the authentication is provided with an active terminal list comprising accessible terminal information, or with a user condition table.

Abstract: Peculiar identification information to identify a recording medium itself is recorded onto the recording medium on which contents information as a target of a reproduction deadline management is recorded. At least the identification information recorded on the recording medium as mentioned above is read by a terminal apparatus and transmitted to a server apparatus. In the server apparatus, a reproduction possible deadline of the contents information recorded on the recording medium is managed on the basis of reproduction possible deadline information indicative of the reproduction possible deadline regarding the contents information recorded on the recording medium on the basis of at least the identification information. Thus, when the reproduction deadline of the contents recorded on the recording medium is managed, the operation for allowing the server apparatus side to set registration information such as personal information or the like of the user as in the conventional system is unnecessary.

Abstract: A print management system for production of printed documents, said system comprising a policy editor component capable of receiving a document file, and applying a level of protection to said document file to produce a protected document file a policy enforcement component, operable for enforcing a document management policy for said protected document file; and at least one printer device, said printer device operable to receive said protected document file, refer to said policy enforcement component, and in response to an authorization signal received from said policy enforcement component, to print at least one printed document.

Abstract: A document monitor device, which includes: a confidential information storage section that stores confidentiality level information of documents managed in a document management device associated with identification information of each of the documents; a feature storage section that stores features of the documents associated with the identification information; a selection section that selects a target document from the managed documents based on the confidentiality level information; an acquisition section that acquires a target image to be processed by an image processing device; an extraction section that extracts features of the target image; a similarity level calculation section that calculates a similarity level between the features stored in association with the identification information of the selected target document and the extracted features; and a detection information output section that, when the similarity level is a prescribed value or over, outputs information indicating that a similar im

Abstract: Provided is a method of preventing digital content from being used despite the presence of copy control information. In the method, a security apparatus capable of restricting use of contents generates a nonce with respect to a storage device and stores the nonce in the storage device and a memory separated from the storage device when content is stored in the storage device; updates the nonces stored in the memory and storage device when movement of the content occurs; and permits use of the content only when the nonce of the storage device, which is stored in the memory, is equal to the nonce stored in the storage device if the content is requested for use, thereby preventing a disk cloning attack.

Abstract: A method may include receiving, at a service server, a request for services from a requesting device. The service server may identify one or more service options responsive to the request and send a list of the identified service options to the requesting device. The service server may receive a selected service option from the requesting device. The service server may collect payment information for the selected service option from the requesting device and providing accounting information to a service provider of the selected service option based on the payment information.

Abstract: Provided is a content management device, which is connected with a plurality of terminal devices for performing a content moving operation while considering the conveniences of the users of the individual terminal devices. The content management device comprises a content storage unit stored with one or more contents, a move information management unit stored with first range information indicating the partial or entire range of the content to be moved, a range information receiving unit for accepting second range information indicating the range requiring the move, from one terminal device, a judgement unit for deciding whether or not the range indicated by the first range information and the range indicated by the second range information overlap at least partially, and a control unit for permitting the required range to be moved to the terminal device, in case the decision by the judgement unit is NO.

Abstract: Some embodiments provide an account-based DRM system for distributing content. The system includes several devices that are associated with one particular account. The system also includes a set of DRM computers that receives a request to access a particular piece of content on the devices associated with the particular account. The DRM computer set then generates a several keys for the devices, where each particular key of each particular device allows the particular device to access the particular piece of content on the particular device. Through a network, the DRM computer set of some embodiments sends the particular piece of content and the generated keys to the devices associated with the particular account. The network is a local area network, a wide area network, or a network of networks, such as the Internet. In some of these embodiments, the DRM computer set sends the content and keys to one device (e.g.

Abstract: If the signatures of all documents in a binder document are verified when the binder document is verified, some types of documents stored in the binder document may affect the result of the verification of the binder document. When verification of a binder is performed, it is determined, for each document in the binder document, whether the document is a verification target document or not. On the basis of the result of verification of a document determined as a verification target, the result of verification of the binder document is outputted.

Abstract: An information processor according to the present invention is designed to operate in accordance with a right to use a content that is stored on a first storage medium. The first storage medium has a write-once area on which right-to-use information is writable a limited number of times, and a data area on which data of the content is stored. The information processor includes: a second storage medium; a right-to-use information generating section, which generates right-to-use information indicating whether the first storage medium or the second storage medium holds the right to use the content; and a drive device that writes the right-to-use information on the write-once area.

Abstract: A content management system which can prevent a content from being copied exceeding the limited number of copies for the content. The content management system includes a first content management device and a second content management device. The first content management device stores period information that indicates an available period during which a first external device is permitted to use a copied content which has been copied from the content, and outputs the period information to the second content management device when the content is moved. Upon receiving the period information from the first content management device, the second content management device judges whether the available period of the copied content has expired, using the received period information, and if it is judges that the available period has not expired, it inhibits the content from being copied to the second external device.

Abstract: In a content data reproducing apparatus having a temporary memory for stream reproduction, a content data acquisition section acquires content data from an external content provision server. A storage control section temporarily stores the content data acquired by the content data acquisition section in the temporary memory such that the stored content data should be erased from the temporary memory when a power supply is turned off. A reproduction condition acquisition section acquires reproduction condition data which defines a reproduction condition for reproducing the content data. A reproduction section reproduces the content data read from the temporary memory.

Abstract: A method and apparatus for temporarily using Digital Rights Management (DRM) contents is provided. The method includes receiving a rights object having information required for using the contents, converting the rights object into a first temporary rights object and a second temporary rights object for a temporary use of the contents, and transmitting the first temporary rights object and the second temporary rights object to an unauthorized device. The first temporary rights object and the second temporary rights object are the rights objects that allow using the contents for a predetermined time.

Abstract: An approach is provided for printing locked print data using user and print data authentication. The approach is applicable to a wide variety of contexts and implementations and includes the use of bi-directional security measures to ensure a secure transmission of a document to a printer and secure retrieval of the document from the printer by one or more intended recipients. In particular, the bi-directional security measures ensure that: 1) the document is received only by the intended recipient designated by the creator, 2) both the document's creator and the intended recipient are successfully authenticated, 3) the document received by the intended recipient is the document that was created by the creator, and 4) the document received by the intended recipient is identical to the document created by the creator.

Abstract: A software installation system comprises an interface component that receives a request to access data resident upon a flash memory card. An installation component compares a unique identifier associated with the data with a unique identifier embedded within the flash memory card, and the installation component determines whether to allow access to the data based at least in part upon the comparison. The installation component prohibits access to the data if the unique identifier associated with the data does not match the unique identifier embedded within the flash memory card.

Abstract: Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Abstract: A method for controlling access to content by an Acquisition Point to Presentation Points in clusters in a domain. The AP receives from a PP an access content request comprising the PPs cluster identity and the PP's priority. The AP verifies if access is granted to a PP in the cluster and, if so, grants access to the requesting PP. If not, the AP verifies if access is granted to PPs in a maximum number of clusters. If not, the AP grants access. If the maximum is reached, the AP verifies if the requesting PP's priority is higher than the priority of every PP in another cluster. If not, access is denied; if so, the AP grants access to the requesting PP and denies access to the PPs in the cluster with the lowest priority values. An Acquisition Point is also claimed.

Abstract: Systems and methods that securely handle control information are provided. In one example, a system may include an application specific integrated circuit (ASIC). The ASIC may include, for example, a content processing block and a control processing block. The content processing block may be coupled to the control processing block. The content received by the ASIC may be associated with the control information received by the ASIC. The control processing block may be adapted to validate the control information received by the ASIC. The content processing block may be adapted to process the content received by the ASIC in accordance with the validated control information.

Abstract: Acquiring a license in a hub network, including: sending a license request from a client to a server through an intermediary device; sending a connection confirmation from the client to the server through the intermediary device; and receiving license data at the client from the server through the intermediary device in response to the license request, wherein the client and the server are not connected in a hub network, wherein the license request identifies a sub-copy version stored on the client, wherein the sub-copy version includes sub-copy locked content data, and wherein the license data is bound to the hub network.

Abstract: A key-sharing scheme is used to control distribution and use of video and audio content in personal digital assistants (PDAs) and other wireless devices. A private key is split into key-shares using a Blakley-Shamir key splitting technique and the key-shares are distributed to various network entities including a finance server and security server. Key-shares are also stored in a user's subscriber identity module (SIM) and a security processor of the PDA. The key-shares from the network entities are provided to the PDA after the user requests specific video or audio content and credit verification is performed. The PDA's security processor combines the key-shares to form the decryption key for use in playing the content by the PDA's communications processor. When a service limit is reached, the PDA's security processor purges the key-shares to prevent further use of the content.

Abstract: An electromechanical system consists of a memory storage unit in which the licensed video files are stored. The function of this device is to recognize the requested data and thereby allow the video file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the video files in the device from non-duplication.

Abstract: Information, such as audio visual information, is secured by self-decay of the information over time. For instance, a date stamp and decay rate embedded in an encrypted audio or visual digital media file can be applied to decrypt the file to a predetermined decayed state, such as a degraded playback quality. One or more keys can be included with the information to allow undecayed decryption but expire after use or a predetermined time period. In one embodiment, the decayed state can comprise gaps formed at intervals in the information, the gaps having increased length for decreased quality. In an alternative embodiment, the decayed state can be a reduced sample rate for a compressed digital media file.

Abstract: A method and computer-readable medium for deterring software piracy in a volume license environment. An activation bypass message is generated and sent. Information contained in the activation bypass message is compared to a list of machine identifiers. A binding service message contains a count of the machine identifiers in the list. Once the count reaches a predetermined threshold, software activation bypass may occur.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.