Abstract: A system for identifying a work represented by digital data. This system detects events in data of the content of an unknown work and measures a metric between the events. The system then compares the detected events and metrics from an unknown work with the events and metrics of a known work. If the events and metrics match, the unknown work is identified as a copy of the known work.

Abstract: A method to apply a protection mechanism to a binary object includes using operating system resources to load a binary object from a storage medium along with a manifest and a digital signature. Authentication of the binary object is performed using the digital signature and the manifest is read to determine a category of protection for the binary object. The operating system selects a protection mechanism corresponding to the protection category and injects protection mechanism code, along with the binary object into a binary image on computer RAM. When the binary image is accessed, the protection mechanism executes and either allows full access and functionality to the binary object or prevents proper access and operation of the binary object. The protection mechanisms may be updated independently from the information on the storage medium.

Abstract: A controlled content distribution system (CCDS) employs a peer-level application into which a content producer can import digital content (e.g., video, audio, graphic, image, text, code files, etc.) The content producer identifies distribution parameters including an initial distribution list and a level limit representing the maximum number of levels, or degrees of separation for allowed distribution in a FOAF social network. Distribution parameters also include an alteration definition for one or more allowable levels in the network. Alteration definitions may identify a file degradation characteristic, file augmentation, or deletion parameter for altering the digital content from its original form. Alteration definitions often vary at each level. A distribution package is created by the CCDS and includes the digital content, a configuration data file, a key ID and a license key seed. The distribution package is processed at a FOAF license server before being sent to additional content recipients.

Abstract: A digital rights management (DRM) method is negotiated prior to initiating delivery of a DRM encoded content item over a digital network between a client and a target server. The client identifies a link to the target server for accessing the DRM encoded content item. The client initiates a network session with the target server. The client sends an offer message to the target server containing a list of at least one supported DRM method. The target server sends an answer message to the client containing a corresponding list 1) indicating whether each DRM method listed in the to offer message is supported by the target server, and 2) providing a network address of a DRM license server for each supported DRM method. The client selects a supported DRM method. The client obtains a DRM license using the network address listed for the selected DRM method. The target server delivers the DRM encoded content item to the client using the selected DRM method.

Abstract: Systems and methods for displaying messages to a user, the messages having different levels of security, are provided herein. One method of displaying to a user messages having different levels of security includes receiving a message over a network includes examining an attribute of the message to determine a security-related level associated with the message. A visual indication for display to a device user is generated by the device. Such visual indication is indicative of the determined security-related level, and is configured to be visible during scrolling through a majority of the message text.

Abstract: A method of and an apparatus for copying and decrypting encrypted digital data. The method of copying encrypted digital data includes encrypting a first media key block to be used for decryption of the encrypted digital data using a predetermined key of a second information storage medium and storing the encrypted digital data and the encrypted first media key block in the second information storage medium. Security of data encryption is heightened by not discarding an encryption key used for an initial encryption, encrypting the encryption key used for initial encryption using another encryption key used for a second encryption, and storing the encrypted encryption key with the data. Also, since unnecessary decryption and encryption of data are not repeated, the time required for copying data is reduced, and since data is transferred between apparatuses in an encrypted state, a security level is higher.

Abstract: A method, apparatus and computer program product for providing protection for a document is presented. Document content of the document is obtained. An occurrence of a security code within the document content is detected, the security code associated with the document content. A security policy associated with the security code is identified. The identified security policy is then applied to the document content.

Abstract: An electronic signal transmission apparatus executes an authentication process with a transmitting electronic device over a transmission line and receives an encrypted signal and first and second key information therefrom. The encrypted signal is decrypted based on the first key information, displayed and/or recorded, and re-encrypted using the second key information. The encrypted signal is transmitted to another electronic transmission apparatus if that apparatus does not have a recording capability and determined to be authorized using a second authentication process. The re-encrypted signal is sent to the another electronic transmission apparatus if that device has a recording capability and is authorized.

Abstract: A system and method for sharing electronic content. A sending user can specify one or more criteria that a recipient memory device must have to store the content. The sending user can also specify a digital rights management control that can be associated with the content. The content can be transferred to the recipient if the recipient memory device has the specified properties. Software at the recipient can ensure that the content is handled in accordance with the digital rights management controls specified by the sender.

Abstract: An information processing device that executes processing for outputting recording data to an information recording medium includes a storing unit that stores common data that includes encrypted content, key information applied to decoding of the encrypted content, and content management information and, data content of which is unchanged even if a medium as a data recording destination is changed, a media-specific-data generating unit that generates media specific data, data content of which is changed according to the medium as the data recording destination, an output-data generating unit that generates output data based on the common data and the media specific data, and a data outputting unit that outputs the data generated by the output-data generating unit.

Abstract: An arrangement for managing a media file having an associated DRM license is provided by enabling the copying of the media file stored on a source medium to a target medium only when both the source medium and the target medium are held in custody by a media server. The media server writes a copy of a media file and a copy of the associated DRM license from the source medium to the target medium. Upon confirmation that the copy of the DRM license was successfully written to the target medium, the DRM license and media file on the source medium are overwritten. The result is that the target medium contains both the media files and the DRM licenses which are locked to the target medium.

Abstract: A digital rights management system (1) includes a content server (30) that stores contents created by content creators, a mobile device (21, 22) that acquires and uses a desired content from the content server, and a data preservation server (40) that preserves the content used by the mobile device so as to enable the content to be uploaded and downloaded. The content server is configured to create rights information for the content, the rights information containing availability of backup saving of the content in the data preservation server, and to deliver the content and the rights information to the mobile device in response to a request from the mobile device. The mobile device is configured to create backup data when using the content based on the availability of backup saving and transmit the backup data to the data preservation server for preservation of the backup data.

Abstract: A system and method are provided for imaging job authorization. The method comprises: an authorization server receiving a request from a first node print subsystem to communicate an imaging job; in response to analyzing imaging job information, sending an access inquiry to a second node; the authorization server receiving an authorization, including a one-time use public encryption key, from the second node; sending a confirmation, including the public key, to the first node print subsystem; the first node encrypting the imaging job using the public key; sending the encrypted imaging job to the second node from the first node; and, the second node decrypting the imaging job using a private key corresponding to the public key. The analyzed imaging job information used for access control may include user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, or imaging job options.

Abstract: In one embodiment, the present invention includes a method for executing an application to perform voice over Internet protocol (VoIP) telephony, requesting a hardware key from a line interface device, comparing the hardware key to a software key associated with the application, and enabling the VoIP telephony if the keys match.

Abstract: A storage area network (SAN) license validator manages data collection policies (DCPs) in deployed SAN agents by identifying data collection policies corresponding to unlicensed features, and disabling the DCPs for the unlicensed features. Thus, the agents need not expend computational and memory resources to gather data for unlicensed features that will not be queried. Agents receive a set of data collection policies (DCPs) for licensed features for which the corresponding data will be gathered and reported to the MODB. DCPs for unlicensed features are disabled in the agents that would have executed them, either by removing or canceling from an active DCP list or by omitting the unlicensed DCPs from the startup sequence of the agent. In this manner, agents operate with only the DCPs for licensed products and corresponding features, and need not gather extraneous data.

Abstract: Systems, devices and methods for supporting live and time-shifted video streaming via distributed search methods for registering and locating cached portions of video streams shared in peer-to-peer systems.

Abstract: Methods and software products are disclosed for protecting against software piracy. When a customer purchases software, the seller performs an activation process by identifying a unique computer identifier (ID) for the computer system of the customer, and activating the software based on the computer ID, such as by encoding the computer ID on the media storing the software. When the customer attempts to install the software on a computer system, the computer system executes an installation process. The computer system identifies its own computer ID and the computer ID used to activate the software. The computer system determines if its computer ID corresponds with the computer ID used to activate the software. If the computer IDs correspond, then the computer system is allowed to install the software. If not, the computer system is prevented from installing the software.

Abstract: A software installation system comprises an interface component that receives a request to access data resident upon a flash memory card. An installation component compares a unique identifier associated with the data with a unique identifier embedded within the flash memory card, and the installation component determines whether to allow access to the data based at least in part upon the comparison. The installation component prohibits access to the data if the unique identifier associated with the data does not match the unique identifier embedded within the flash memory card.

Abstract: A content management system constructed by a plurality of storage apparatuses that can communicate with one another. A 1st storage apparatus, which is one of the storage apparatuses, stores therein, in correspondence, a content and copy destination information and sends the content and the copy destination information therefrom to a 2nd storage apparatus, which is another one of the storage apparatuses. Yet another one of the storage apparatuses that is indicated by the copy destination information stores therein, in correspondence, the content and copy source information and, after the 1st storage apparatus has sent the content and the copy destination information to the 2nd storage apparatus, rewrite the copy source information such that the copy source information indicates the 2nd storage apparatus.

Abstract: A communication device sends content or content identification information to another communication device and receives content or content identification information from another communication device. The communication device includes an evaluation value calculation unit that calculates an evaluation value; an evaluation value data receiving unit that receives the evaluation value from each of other communication devices aside from the terminal itself; a ranking processing portion that ranks the evaluation values of the terminal itself and the other communication devices, and generates an evaluation value ranking; and a user input/output accepting portion that presents the evaluation value ranking to the user of the terminal itself.

Abstract: Systems and methods related to concealing mathematical and logical operations in software. Mathematical and logical operations are disguised by replacing them with logically equivalent expressions. Each equivalent expression has at least two expression constants whose values are based on scaling and bias constants assigned to variables in the original mathematical or logical operation. Each of the expression constants may also be based on additive or multiplicative inverses modulo n of the scaling and bias constants. By replacing the original operations with more complex but logically equivalent expressions containing variables that also involve more operations, the true nature of the original operations is disguised.

Abstract: An authentication system is disclosed. The authentication system includes a content provider configured to distribute encrypted content, wherein the encrypted content is generated using a content key, and a client having a symmetric key and configured to store the encrypted content received from the content provider and issue a request to the content provider, wherein the request includes a cryptographic function configured to have the symmetric key and the encrypted content as input, wherein the content provider is further configured to verify the client via the request to ensure that the client has received the encrypted content.

Abstract: A system and method to remotely enable software based options for a trial period in remote equipment is disclosed. The invention includes receiving and authenticating a user, and receiving an option-enabling request from the user specifying the particular option requested to be enabled in a particular piece of equipment at a remote location. A system I.D. is validated, and the system ensures that the option has not already been enabled at least once before, and if it has not, a software enabling key is generated and sent to activate the option in the remote equipment.

Abstract: A method to procure and audit digital rights management (DRM) event data by collecting a first set of event data in a first event data format, converting the first set of event data to one or more standardized event data formats, and communicating the first set of event data to an event data collection server for storage. The method may also include collecting a second set of event data in a second event data format, converting the second set of event data to one or more standardized event data formats, and communicating the second set of event data to the event data collection server for storage. The method may also include storing the first and second sets of event data in a centralized repository, authorizing access to the event data, and performing an event data audit corresponding to the event data.

Abstract: An information processing apparatus that generates private information used as one of an encryption key for encrypting data or a generation key for generating falsification detection information used in detecting falsification of data, comprises a storage unit adapted to prestore key information, an input unit adapted to input calculation target information, a calculating unit adapted to perform a calculation on targeted information based on the key information held in the storage unit, a detecting unit adapted to detect a predetermined event, and a control unit adapted, when triggered by detection of the event by the detecting unit, to perform controls to generate the private information by making the calculating unit perform the calculation with the input calculation target information as the targeted information, and to place the key information stored in the storage unit in an unusable state.

Abstract: This invention relates to an information providing system which is designed to be able to realize secondary utilization of broadcasting contents, along with copyright of the broadcasting contents being protected. A broadcasting receiving and picture recording device 5-1 records broadcasting contents that a broadcasting device 4 broadcasted, and a terminal 6-1 edits the broadcasting contents which were recorded, and generates corresponding metadata. The metadata is transmitted from the terminal 6-1 to a metadata delivery server 2 through Internet 1, and registered. The metadata delivery server 2, on the basis of utilization availability information of broadcasting contents which is held in advance, in case that the broadcasting content that the metadata targets can be utilized, registers the metadata. The registered metadata is delivered through the Internet 1 on the basis of a request of a terminal 6-2. This invention is applied to an information providing system which delivers the metadata.

Abstract: A copy protection system and method for allowing copying or distribution of a copy protected signal is disclosed. One embodiment includes an apparatus and method for receiving a content signal via a WiFi communications channel, the content signal including a control signal; and using a modifying circuit coupled with the WiFi communications channel to generate an analog copy protection signal based on the control signal, the control signal causing the modifying circuit to add or delete the analog copy protection signal to or from the content signal.

Abstract: The original content and the converted content obtained by converting the original content are encrypted by the same content key. A license containing data of use conditions such as the content key and a use period is recorded in an area of a storage medium limited for access. When the converted content is used with an external storage medium, a copy of an original license is created, a use period of the copy is changed to a use period of the converted content designated by a user, and the license is output as a converted content license to the external storage device. The use period of the original content is rewritten to prevent its overlapping with a use period defined by the converted license.

Abstract: The disclosed embodiments are directed to a data management system, apparatus and process for uniquely identifying and protecting data. In preferred embodiments, the data management system comprises a data management server, a key generator, a source print generator and a source print detector. In some preferred embodiments, the data management system further comprises a data embedding system. Keys are created by the data management system for application to source files to create a fingerprint for the source file. The fingerprint is compared to unknown files to identify uses of the source file.

Abstract: Methods and apparatus for managing devices and content in a network environment. In one implementation, a method of acquiring a license in a hub network includes: sending a license request from a client to a server; sending a connection confirmation from said client to said server; and receiving license data at said client from said server; wherein said client and said server are connected in a hub network, said license request identifies a sub-copy version stored on said client, said sub-copy version includes sub-copy locked content data, and said license data is bound to said hub network.

Abstract: A method and mechanism controls consumption of media objects in a communication terminal, especially in a mobile terminal. A media object, such as a game, and an associated rights object are stored in a communication terminal. The rights object defines usage rules for the media object. Sales parameters are accepted from a user of the terminal. The sales parameters indicate that the user is willing to sell the rights of consumption of the media object to a certain extent. Upon receiving this indication, the media object is prevented from being consumed in the communication terminal more than what is defined by the usage rules and the certain extent. A sell offer may then be transferred to a trading entity.

Abstract: Apparatuses and methods may include creating at least one of a scramble key and a descramble key using a Copy Protection (CP) key that existed prior to a refresh period and using a value created at a time associated with the changing of a channel during the refresh period, and using the at least one of the scramble key and the descrambled key until the CP key is refreshed at an end of the refresh period.

Abstract: A recording medium, such as a high-density and/or read-only recording medium, such as BD-ROM, which includes copy protection indicating information, which can identify whether copy protection information is needed or not for the playback of contents stored on the recording medium, and to methods and apparatuses for forming, recording, and reproducing data on the recording medium.

Abstract: A system and method for sharing electronic content. A sending user can specify one or more criteria that a recipient memory device must have to store the content. The sending user can also specify a digital rights management control that can be associated with the content. The content can be transferred to the recipient if the recipient memory device has the specified properties. Software at the recipient can ensure that the content is handled in accordance with the digital rights management controls specified by the sender.

Abstract: A method and system for capacity licensing are disclosed. According to one embodiment, a computer implemented method comprises receiving a capability request from a device, sending a capability response to the device, the capability response comprising a serving of license rights. A deduction record is stored, the deduction record deducting a license from a license pool. An information request is received from the device, and an information response is sent.

Abstract: Systems and methods are provided for auditing and selectively restricting software usage based on, for example, software copy counts or execution counts. In one embodiment, the method comprises verifying whether the serial number for a software installed on a computing device corresponds to one of recognized serial numbers, and calculating a copy count (or software execution count) for the serial number. In response to the copy count exceeding a defined upper limit, a limited unlock key may be sent to the device. The limited unlock key may allow the software to be executed on the device for a defined time period, a defined number of executions, and/or with at least one feature of the software disabled.

Abstract: A device includes a memory for storing digital media, a transfer module, and a processor. The media includes first data that associates the media with the device, second data authorizing the device to play back the media, and third data authorizing the device to transfer a copy of the media. A transfer includes transfer data identifying the copy uniquely relative to the device. The processor implements instructions to receive a request to transfer a copy of the media to a peer device, create a copy of the media that includes the first data and the transfer data, and direct the transfer module to transfer the copy to the peer device and send a transaction record including the first data and the transfer data to a server.

Abstract: A multimedia client/server system includes a multimedia server module that is coupleable to a plurality of multimedia sources that produce at least one multimedia signal. The multimedia server module includes an encoder module that asserts a protection present signal when the at least one multimedia signal includes a copy protection signal, that generates an output signal with the copy protection signal removed when the protection present signal is asserted, and that encodes the output signal to produce an encoded signal. A server transceiver module produces a radio frequency (RF) signal that includes the encoded signal and the protection present signal, and that wirelessly transmits the RF signal.

Abstract: A method of recognizing an audio and/or visual format in a digital transmission network such as the Internet wherein formats include a quasi-continuous or divided in packets sequence of data, at least part of the sequence of data is analyzed for the presence of one or more bit patterns, and a notice is given in response to recognition of a predetermined format in an analyzed bit pattern.

Abstract: A method and system for network-based distribution of content are disclosed. The distribution of content is not only secure but also controlled. The security restricts access to content within media files during downloads as well as while stored at a server or client. In one embodiment, each media file is encrypted with a different, randomly generated key. The control over the distribution of the media file can serve to limit the subsequent distribution of media files from clients to other clients. In another embodiment, the control can permit media files to be shared on a limited number of different clients affiliated with the same user. The clients can vary with application but generally are computing devices that have memory storage. Often, the clients are personal computers or other computing devices that are capable of storing and presenting content to their users.

Abstract: A method of managing content, the method being performed by a device including an analyzing unit and a control unit. The method includes judging, via the analyzing unit, whether the content can be moved to an external entity based on moving control information, the moving control information being different from copy control information indicating whether the copy of the content is permitted, determining whether an authentication with the external entity is needed in order to move the content to the external entity, if the judging step judges that the content can be moved, and controlling, via the control unit, a moving operation of the content to the external entity such that the content can be moved to the external entity without the authentication if the determining step determines the authentication is not needed.

Abstract: In a content-log analyzing system, content includes additional information indicating, according to a property of the content, whether or not to record communication of the content in a content-log. When transmitting content to a TV or a PC, a data-communication controlling device judges whether or not to record the communication in a content-log based upon additional information of the content, and when judging affirmatively, generates and stores content-log information. A content-log analyzing server obtains the content-log stored in the data-communication controlling device, and analyzes the obtained content-log.

Abstract: In a data management apparatus (1) including a recording device (12) for recording contents data and a data processing section for processing the contents data, first management data for managing the contents data according to a first reference is recorded in the recording device (12), and the data processing section reproduces the contents data based on the first management data, and transfers the contents data to an external device (2) based on second management data which is used for management of the contents data by the external device according to a second reference different from the first reference. As a result, the protection of the contents data can be made while complying with related laws, and the contents data with optional functions added thereto can be backed up.

Abstract: One embodiment of the present invention provides a system that manages secret keys for messages. During operation, the system receives a desired expiration time T from an encrypter, and possibly a nonce N, at a server that manages keys. If N is not sent by the encrypter, it is generated by a key managing server. Next, the system chooses a secret ST, with an expiration time close to T, and an identifier IDS from a database for which secret ST can be retrieved using the identifier IDS. If such an ST is not already in the database, the server generates a new ST and IDS. The system then calculates a hash H=h(N,ST), and sends H and IDS from the server to the encrypter. The encrypter then encrypts M with H to form {M}H, and communicates ({M}H, N, IDS) to a message reader. The message reader then sends N and IDS to the server. The server then uses IDS to lookup ST, recalculates H=h(N,ST), and sends H to the message reader, thereby enabling the message reader to decrypt {M}H to obtain M.

Abstract: A portable media player receives encrypted audio files and an encrypted content key from a central license server on the Internet. The media player supports digital rights management (DRM) by storing the encrypted audio file in its flash memory and disabling copying or playing of the audio file after a copy limit has been reached. The copy limit is a rule that is combined with the content key in a transfer key that can be encrypted together by the license server. The license server can detect cloning of the media player by reading a unique player ID from the player and detecting when too many accounts use the same unique player ID. The content key can be generated from polar coordinates of the unique player ID, player manufacturer, and song genre. A fingerprint sensor on the player can scan and compare the user's fingerprints to further detect cloning.

Abstract: A method for enforcing a distribution policy associated with an electronic document comprising the steps of: sending the document to an output device; determining said distribution policy associated with said document; instructing a marking module to embed a marking indicating at least the existence of said distribution policy on an output form of said electronic document produced by said output device, said marking being readable to enforce said associated marking policy.

Abstract: Server-side validation of hardware specific software product licenses is described herein.

Abstract: A system and a booth for producing a media clip, providing one or more users with a recording studio experience including a computer configured to provide the users with interactive guidance through test producing and recording the media clip, the guidance being providing by user interaction with an animated facsimile of a recording director displayed on the display. A method for producing a media clip, providing one or more users with a recording studio experience, including providing the users with interactive guidance through test producing and/or recording a media clip, the guidance being providing by interaction with a display of an animated facsimile of a recording director, recording a media clip of the users' choice, providing the recording to the users. Related apparatus and methods are also described.

Abstract: Disclosed is a content distributing system comprising recording and reproducing apparatuses to record and reproduce content, the apparatuses connected to one another through a network to be able to mutually transmit and receive the content, wherein a distribution destination recording and reproducing apparatus includes a request section to request distribution of content from a distribution source recording and reproducing apparatus; the distribution source recording and reproducing apparatus includes: a producing section to produce use restricting information including reproduction information and/or transfer information when distribution of the content is requested by the request section, and a transmission section to transmit the content requested to be distributed together with the use restricting information; and the distribution destination recording and reproducing apparatus further includes a content using section to use the content based on the use restricting information transmitted from the distrib

Abstract: An image forming apparatus includes an image reading section for reading an image of a book, to which an information tag is added, so as to acquire image data. Based on information stored in the information tag, the image forming apparatus controls an image forming section. The image forming apparatus further includes a tag addition determining section, an added information determining section, and a control section. The tag addition determining section determines whether or not the information tag is added to the book, and the added information determining section determines whether or not the image data contains added information indicating that the information tag is added to the book. Further, the control section controls the image forming section not to carry out image forming, both when the added information determining section determines that the added information is contained and the tag addition determining section determines that the information tag is not added to the book.