Abstract: Acquiring a license in a hub network, including: sending a license request from a client to a server through an intermediary device; sending a connection confirmation from the client to the server through the intermediary device; and receiving license data at the client from the server through the intermediary device in response to the license request, wherein the client and the server are not connected in a hub network, wherein the license request identifies a sub-copy version stored on the client, wherein the sub-copy version includes sub-copy locked content data, and wherein the license data is bound to the hub network.

Abstract: A key-sharing scheme is used to control distribution and use of video and audio content in personal digital assistants (PDAs) and other wireless devices. A private key is split into key-shares using a Blakley-Shamir key splitting technique and the key-shares are distributed to various network entities including a finance server and security server. Key-shares are also stored in a user's subscriber identity module (SIM) and a security processor of the PDA. The key-shares from the network entities are provided to the PDA after the user requests specific video or audio content and credit verification is performed. The PDA's security processor combines the key-shares to form the decryption key for use in playing the content by the PDA's communications processor. When a service limit is reached, the PDA's security processor purges the key-shares to prevent further use of the content.

Abstract: An electromechanical system consists of a memory storage unit in which the licensed video files are stored. The function of this device is to recognize the requested data and thereby allow the video file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the video files in the device from non-duplication.

Abstract: Information, such as audio visual information, is secured by self-decay of the information over time. For instance, a date stamp and decay rate embedded in an encrypted audio or visual digital media file can be applied to decrypt the file to a predetermined decayed state, such as a degraded playback quality. One or more keys can be included with the information to allow undecayed decryption but expire after use or a predetermined time period. In one embodiment, the decayed state can comprise gaps formed at intervals in the information, the gaps having increased length for decreased quality. In an alternative embodiment, the decayed state can be a reduced sample rate for a compressed digital media file.

Abstract: A method and computer-readable medium for deterring software piracy in a volume license environment. An activation bypass message is generated and sent. Information contained in the activation bypass message is compared to a list of machine identifiers. A binding service message contains a count of the machine identifiers in the list. Once the count reaches a predetermined threshold, software activation bypass may occur.

Abstract: A method for moving a rights object (RO) between devices, a method of using a content object based on the moving method, and devices using the methods are provided. The moving method includes performing authentication between two devices; securing a connection between the devices; and communicating the rights object between the two devices. The using method includes two devices communicating with each other, the first device having use permission of content objects and the second device including the content objects and corresponding rights objects; the first device searching for the content objects; and the first device using the content object that was found. The device includes an authentication module to authenticate another device; a security formation module to secure a connection for the other device; and a transceiving module which communicates a rights object for which the connection has been secured.

Abstract: A method of managing keys is provided. According to one exemplary method, digital content data encrypted with a first encrypting key is decrypted using a first decrypting key, and re-encrypted using a second encrypting key. A second decrypting key is encrypted using a third encrypting key to produce an encrypted second decrypting key. In some embodiments, an encrypted first decrypting key that was encrypted using a fourth encrypting key is received, and the encrypted first decrypting key is decrypted using a fourth decrypting key to reproduce the first decrypting key. An application for use on a computer system is also provided.

Abstract: A method and apparatus for copying or moving a rights object having right information regarding digital contents between a device and a portable storage device to copy or move the digital contents there between are provided. According to the method and apparatus, the digital works can be prevented from being recklessly and randomly copied and moved, and therefore, copyright can be protected. In addition, data loss or unauthorized access can be prevented.

Abstract: Disclosed is a domain DRM system, a license sharing method for the domain DRM system, and a license server. The domain DRM system includes at least one domain including at least one user module adapted for encryption or decryption using a provided encryption key and a domain manager adapted for decryption using a provided encryption key, and a license server for creating encryption keys corresponding to the domain manager and the one user module, respectively, and providing them with the created contents, respectively, so that, when at least one user module requests contents, a contents encryption key used to encrypt the contents is encrypted by using an encryption key of the user module and an encryption key of the domain manager according to a commutative encryption scheme, and one of the domain manager and the user module is provided with a shared license obtained as a result of encryption.

Abstract: A method and apparatus for enabling a licensed end user to record digital data as described is particularly useful to the music industry as it enables them to make audio data available over the internet but to retain control of the uses to which that audio data can be put. Thus, upon completing a financial transaction to pay for the required audio tracks, the end user is enabled to download and decrypt encrypted music tracks and to play them on the end user's personal computer. The end user can also be allowed to burn a CD including the downloaded music tracks. However, the end user is only enabled to decrypt and record the music tracks onto the CD if the music tracks are recorded together with copy protection.

Abstract: A transmission/reception system includes a providing apparatus and a recording apparatus. The providing apparatus has a generating section which generates restrictive information for each piece of content to be broadcast, and a providing section which provides the restrictive information by broadcasting to the recording apparatus. The recording apparatus has a management section which manages the restrictive information, and a restriction section that adds a restriction to at least one of a next copying of the same content as copied last or each piece of the recorded content that provided a source of the copying.

Abstract: Embodiments of methods and systems for controlling access to information stored on memory or data storage devices are disclosed. In various embodiments, methods of retrieving information from a data storage device previously deactivated by modification or degradation of at least a portion of the data storage device are disclosed.

Abstract: The present invention relates to a software installation system and a method for copy protection. The software installation system includes a support server in which first installation data for installing software is stored; a recording medium in which an RFID tag storing URL information of the support server is installed and second installation data for installing the software is recorded; a computer having a computer interface unit and a data reading unit reading the second installation data recorded in the recording medium; an RFID reader for reading the RFID tag installed in the recording medium; a portable information processing terminal including a wireless communication unit accessing the support server through wireless Internet, a terminal interface unit connected to the computer interface unit of the computer, and a terminal controller downloading the first installation data and controlling the computer through the terminal interface unit and the computer interface unit.

Abstract: An optical recording medium is provided for distributing content through a portable medium which can be transported by hand from one media player to another media player. The optical recording medium includes a read-only zone and a writable area. Copy control information is stored in the read-only zone. The copy control information specifies (a) an authorized content source and (b) content which is authorized to be downloaded from the authorized content source and recorded in the writable area of the optical recording medium.

Abstract: Provided is a method of transmitting content processed according to first digital rights management (DRM) to a device that uses second DRM. The method includes generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the first DRM and the second license server issuing a second license for use in the second DRM; the second device obtaining a second content key required to process the content using the ticket and the second DRM; and the second device receiving the content from the first device and processing the content using the second content key and the second DRM. The ticket includes use control information that specifies a restriction of use of the content, and the second content key required to process the content using the second DRM.

Abstract: A method for securing personal computing devices from unauthorized data copying and removal includes detecting an attachment of a device to a client included within a computing network; determining whether the detected attached device is permitted to be attached to the client; prompting a user of the client to remove the attached device therefrom in the event the detected attached device is not permitted to be attached to the client; and loading a replacement device driver onto the client in the event the attached device has not been removed, wherein the replacement device driver prevents the client from copying data to the attached device.

Abstract: The invention relates to the authentication of users for a multi-function peripheral (MFP) device using handwritten signatures. Systems and methods are disclosed which relate to a MFP that conditions access to MFP operations based on an authenticating process that compares a prospective user's signature to previously saved signatures. The signatures are communicated to the MFP using the MFP's native scanning function.

Abstract: Embodiments of the invention generally provide a method and apparatus for enabling digital rights management in file transfers. One embodiment of a method for transferring digital content from a first user to a second user, includes transferring ownership of an instance of the digital content to the second user, where the instance of the digital content resides on a first device belonging to the first user. Copies of the digital content are then deleted from one or more additional devices belonging to the first user (including at least one offline device).

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked-out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: Methods, systems, and computer program products for identifying and enforcing software feature limits across different hardware platforms, software releases, and tiers are disclosed. According to one method, a feature limit data structure is stored on the hardware platform. Each entry in the feature limit data structure is indexed by at least a software program identifier, a software release level identifier, and a feature name. When software is initialized, its release level is determined. A feature limit manager separate from the software being initialized is invoked. At least the software program identifier, the release level, and the feature identifier are provided as input to the feature limit manager. The feature limit manager provides a feature limit value. The feature limit value is stored and the software uses the feature limit value to enforce the feature limit during execution.

Abstract: A client obtains license information. The client has a client module for using content under conditions defined in the license information. When the client module is updated and a new function is added, the client obtains updating license information including permission of the new function. The client is allowed to use the content under the conditions defined in the previous license information and the conditions defined in the updating license information without obtaining new rights information for the updated client module.

Abstract: A digital content vending machine, DCVM (10), in which a client (12) on a personal computer, PC (14), contains an infrastructure (16) and an inventory (18). The infrastructure (16) and inventory (18) may both be stored in a hard drive (20), or the inventory (18) may instead be stored on a removable media (24), such as a CD (16), DVD (28), or tape (30). The infrastructure (16) presents a graphical user interface on the client (12) which metaphorically resembles a village (46) containing a plurality of stores (44) operated by vendors (42). Customers (40) shop in the stores (44) by selecting assets (22), constituting the inventory (18), and sending money (52) and an identifier (54) to a clearing house (50) via a communications system such as telephone (118), private network (120), or the Internet (122). The clearing house (50) returns a key (58) used to at least partially remove a digital wrapper (60) protecting the asset (22) from unauthorized use.

Abstract: An information recording/playback device stores beforehand, on a recording medium, secret information in which a writing/reading method thereof cannot be analyzed and which can be read only by a special reading method. The secret information is applied to a key for content encryption or decryption when performing recording or playback of contents on the recording medium, such as music data and image data. The secret information is, for example, a stamper ID. By using the stamper ID as secret information, and a master key and a media key which are distributed in a tree-structure key-distribution system, a content-cryptosystem key is generated. Accordingly, each content is allowed to be used in only an appropriate device in which the special reading method for the secret information can be executed and to which the key is distributed by the tree-structure key-distribution system.

Abstract: A method and system for installing software and hardware licenses on electronic devices supporting licensable features. Specifically, a method is disclosed for installing licenses in a node based licensing scheme. The electronic device defining the node receives an input containing an authorization key. The authorization comprises a license for a service feature, a node identifier, a software version, and a sequence number. Information in the authorization key is used to install the license on the electronic device. The node identifier is compared to an official node identifier stored at the electronic device. The sequence number is compared to an official sequence number stored at the electronic device. The license is installed into a pool of licenses available to the electronic device when the node identifier matches the official node identifier and the sequence number matches the official sequence number. The sequence number ensures that the authorization key at most can only be used once.

Abstract: An information processing apparatus includes a communication unit that transmits and receives information to and from an IC chip of a recording medium, an authentication processing unit that executes mutual authentication processing with the IC chip, a list-display-screen outputting unit that reads identification information and usage control information and causes a display to display a list display screen, a selection input unit that receives a selection input from a user, a software reading unit that reads data of software selected according to selection input from the data area, an installation processing unit that causes the authentication processing unit to execute the authentication processing, reads key information necessary for installing the software, and executes installation processing for the software, and a usage-control-information updating unit that accesses the IC chip and updates the usage control information corresponding to the software.

Abstract: A secure LSI device 1 includes an encryption section 2 for encrypting a program, and an external I/F 50 for inputting/outputting a program or data from/to an external memory 100. In the encryption section 2, the operation of a private key arithmetic processing section 20 is prohibited with respect to a sequence whose execution is determined by a key-generation/update sequencer 30 to be impermissible. In the external I/F 50, a program processing section 51 and a data processing section 55 are structured independently from each other.

Abstract: Improved techniques that enable users to download digital media assets are disclosed. According to one aspect, digital media assets that a user has acquired from a remote media repository can be authorized for download multiple times. This, for example, allows a user to subsequently re-downloaded digital media assets that the user previously acquired. In one embodiment, digital media assets that a user previously downloaded to a user client device from a remote media repository can be made available to the user for subsequent re-download. Advantageously, a remote media repository can, in effect, provide users with a remote backup for previously acquired digital media assets.

Abstract: A system for identifying a work represented by digital data. This system detects events in data of the content of an unknown work and measures a metric between the events. The system then compares the detected events and metrics from an unknown work with the events and metrics of a known work. If the events and metrics match, the unknown work is identified as a copy of the known work.

Abstract: Playlists having media items from more than one source are described. Media items in a first library are mapped to media items from an online media item store. Media items within the playlist that can be found in the first library will be played from the first library, while media items not within the first library will be played from the online media store. By identifying media items present in both libraries and playing them only from the first library, the described method can reduce the royalties needing to be paid by the online media store. Further methods are disclosed for setting limits on the number of media items that can be shared by a second library.

Abstract: A method and system for embedded regenerative licensing are disclosed. According to one embodiment, a computer-implemented method, comprises transmitting a first capability request for a first hardware device to a hardware adapter. A second capability request for a second hardware device is transmitted to the hardware adapter. A first device capability response for the first hardware device is received from the hardware adapter. The first device capability response comprises a first timestamp, a first unique identifier for the first hardware device, and a first functions list to disable on the first hardware device. A second device capability response for the second hardware device is received from the hardware adapter. The second device capability response comprises a second timestamp, a second unique identifier for the second hardware device, and a second functions list including one or more functions from the first hardware device to enable on the second hardware device.

Abstract: The present invention relates generally to processing audio or video content. One claim recites an apparatus comprising: electronic memory, and an electronic logic processor. The electronic memory is for storing data representing audio or video content, in which the data includes a protect watermark embedded therein, the protect watermark providing an indication that the data is protected, and in which the data further includes a rights watermark embedded in the data, the right watermark providing an indication of user rights associated with rendering the audio or video content, the protect watermark being more difficult to remove from the data relative to the rights watermark. The electronic logic processor is programmed for analyzing the data to retrieve the protect watermark only when the rights watermark does not exist in the data. Other claims are described and provided as well.

Abstract: A system consisting of a memory storage unit in which the licensed audio files are stored. The function of this device is to recognize the requested data and thereby allow the audio file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the audio files in the device from duplication.

Abstract: At a seller, an encryption device encrypts content data stored in a content server using an encryption key generated by an encryption key generation device, and records the encrypted content data and a communication program on a recording medium. A paper indicating an identification code unique to each recording medium is attached to the recording medium. A decryption key corresponding to the encryption key and the identification code are registered in a managing database. A user terminal sends the identification code to a decryption key managing server apparatus via Internet in accordance with the communication program, in a case where the user terminal is to copy or install or reproduce the content data stored on the recording medium. The decryption key managing server apparatus sends a decryption key corresponding to this identification code to the user terminal. The user terminal decrypts the content data using the decryption key sent thereto.

Abstract: A method for selectively controlling access to electronic media disposed on a media storage device according to one embodiment is described. The method comprises creating a first list comprising a plurality of process identification values. Each of the plurality of process identification values of the first list is associated with a software application that is accessing the media disposed upon the media storage device. The method further includes creating a second list comprising a second plurality of process identification values. Each of the second plurality of process identification values is associated with a software application that is storing data. The method further includes determining that a particular software application is creating an unauthorized copy of the media disposed upon the media storage device. The method further includes preventing the particular software application from storing a usable copy of said electronic media.

Abstract: A mechanism is provided for identifying a snooping device in a network environment. A snoop echo response extractor generates an echo request packet with a bogus MAC address that will only be received by a snooping device. The snoop echo response extractor also uses an IP address that will cause the snooping device to respond to the echo request. Non-snooping devices discard the echo request packet. Upon receiving the response packet, the snooping device is identified.

Abstract: A method, an apparatus and/or a system of source attribution of embedded content is disclosed. A source attribution system includes a tracking module configured to generate an identification meta-data to be associated with an original content of a first publisher that originates in a third-party source server of a public wide area network such that the original content is attributable to the first publisher through the identification meta-data associated thereto with the original content when the original content having the associated identification meta-data is republished. The system further includes a processor including a memory which is configured to determine that a subsequent publishing of the original content is an embedded portion of another work of authorship. The system also includes a notification module that notifies the first publisher upon subsequent publication of the original content by a subsequent publisher.

Abstract: A content transfer system for transferring content between a source device transmitting the content and a sink device receiving the content, includes a content specifying unit for specifying the content to be transferred between the source device and the sink device, an authentication unit for performing an authentication exchange key process between the source device and the sink device, a content transfer unit for performing a content transfer process by encrypting and transferring the content specified by the content specifying unit from the source device to the sink device using the key exchanged by the authentication unit, and a content transfer finalizing unit for performing a content transfer finalizing process by validating the content at the sink device and invalidating the original content at the source device in response to the end of the content transfer process performed by the content transfer unit, the content thus being moved from the source device to the sink device.

Abstract: A configuration is provided which enables usage management and secure data management of data newly generated or obtained that is different from data already stored in an information recording medium. New data such as information which the user has newly generated or downloaded related to content information increments of content management information stored in an information recording medium is recorded as configuration data of the content management unit, in the form of encrypted data to which a unit key corresponding to the content management unit, or a unit key corresponding to a new content management unit, has been applied. According to this configuration, secure data management and usage management is realized for new data the same as with data corresponding to original units.

Abstract: Techniques for implementing software licensing in a massive parallel processing environment on the basis of the actual use of licensed software instances are disclosed. In one embodiment, rather than using a license server or a node-locked license strategy, each use of a licensed software instance is monitored and correlated with a token. A store of tokens is maintained within the licensing system and a token is consumed after each instance successfully executes. Further, a disclosed embodiment also allows jobs that execute multiple software instances to complete execution, even if an adequate number of tokens does not exist for each remaining software instance. Once the license tokens are repurchased and replenished, any overage consumed from previous job executions may be reconciled. In this way, token-based licensing can be adapted to large scale computing environments that execute jobs of large and unpredictable sizes, while the cancellation of executing jobs may be avoided.

Abstract: A storage section stores a data belonging to a first group and data belonging to a second group, the first and second groups being distinguishable from each other. A communication section communicates with another game apparatus. A transmission control section transmits at least one piece of data of the data stored in the storage section to another game apparatus using the communication section. A reception control section receives the data transmitted from another game apparatus using the communication section. In this configuration, a game apparatus stores the data received using the reception control section, as data belonging to the second group, into the storage section.

Abstract: A method and system for encouraging users of computer readable content to register. The method involves embedding in the computer readable content, instruction codes operable to direct a processor circuit to automatically establish a connection to a server, when the content is in use by the processor circuit, to transmit registration information to the server and operable to control further use of the content by the processor circuit in response to a key received from the server.

Abstract: Access to a storage device, such as a disk, is controlled by performing a disk operation using a single cryptographic engine. Keys associated with each layer of a layered structure associated with controlling access to the storage device are combined. The resultant of this combination is used as the key to the cryptographic engine. Data to be retrieved from and written to the storage device are operated on by the cryptographic engine utilizing the combined key. Keys are combined by combining functions associated with layers of the layered structure. A combining function can include an exclusive or function, a cryptographic hash function, or a combination thereof.

Abstract: In a content transmitting method in a content transmitting apparatus, wherein the content transmitting apparatus adds copy control information for indicating to execute a recoding control with either one of “copy can be made only one (1) generation” or “number of times of copying is limited”, on number-limited copy target content, when distributing the number-limited copy target content, which can be copied within a region of limited number of pieces.

Abstract: A digital work (102) and copyright management information (103) for the digital work are recorded on an information recording medium (101) by altering a shape, a position or a pattern (104, 105) of recording mark edges of the digital work. Alternatively, a decryption key for the right management information is recorded on an information recording medium on which the copyright management information has been recorded encrypted, by altering the recording mark edges of the copyright management information. Alternatively, a check code for the copyright management information is recorded on the information recording medium by altering the recording mark edges. The check code is checked when the copyright management information is read, thus detecting illegal use of the copyright management information.

Abstract: According to one embodiment, a transmitter is configured to transmit content to a receiver. Available dubbing count is set in advance for the content such that the content can be dubbed a plurality of times. The transmitter includes a key exchanger, an encryption processor, and a dubbing management module. The key exchanger performs key exchange to share a common key with the receiver. The encryption processor encrypts, in response to a content request received from the receiver, the content with the common key to transmit the content to the receiver. The dubbing management module reduces, upon receipt of a right transfer request related to the use of the content from the receiver, the available dubbing count by dubbing count indicating the number of times of dubbing of the content. The dubbing count is contained in the right transfer request.

Abstract: A block-level storage device is provided that implements a digital rights management (DRM) system. In response to receiving a public key from an associated host system, the storage device challenges the host system to prove it has the corresponding private key to establish trust. This trust is established by encrypting a secure session key using the public key. The host system uses its private key to recover the secure session key. The storage device may store content that has been encrypted according to a content key. In addition, the storage device may encrypt the content key using the secure session key.

Abstract: A content distribution system distributes a content key and content use conditions for controlling a content use in a client apparatus to the client apparatus, via a communication channel, from either a multicast distribution server or a unicast distribution server. A content distribution management server determines by which distribution method to send the content key and content use conditions of each content according to an attribute of the content (a compression format, a compression ratio, a content holder, and the like). An encrypted content distribution server distributes only encrypted content whose content key and content use conditions are to be distributed by the unicast, and the multicast distribution server distributes encrypted content whose content key and content use conditions are superimposed by the multicast.

Abstract: Methods and apparatus for managing devices and content in a network environment. In one implementation, a method of presenting content data includes: receiving at a client in a hub network a present request indicating locked content data; checking a license corresponding to said locked content data to determine if said license permits said client to present said locked content data; and presenting said locked content data through a presentation component connected to said client; wherein said license of said locked content data is bound to said hub network.

Abstract: A system for identifying a work represented by digital data. This system detects events in data of the content of an unknown work and measures a metric between the events. The system then compares the detected events and metrics from an unknown work with the events and metrics of a known work. If the events and metrics match, the unknown work is identified as a copy of the known work.

Abstract: A method of converting audio data encrypted for anti-piracy and copyright protection to a suitable format so that the data can be played in a portable device. A computer first decrypts the encrypted audio data and inserts information for setting equalizer, then encrypts the audio data lightly with the information for setting equalizer and transmits the data to a portable device. The portable device sets equalizer suitable to the lightly-encrypted audio data using the information for setting equalizer inserted by the computer, then decrypts the lightly-encrypted audio data, and outputs the decrypted audio data while amplifying or attenuating audio data for each band according to the set equalizer. Therefore, heavily encrypted audio data can be playable in a portable device with relatively low computing power and, by setting equalizer mode suitable to a music genre, the audio data can be conveyed to a listener authentically.