Abstract: A key distribution system for controlling access to content by rendering devices, comprising an epoch module to provide epochs, each epoch including service key periods, a service key module to provide a batch of service keys, a group module to provide group keys for each epoch such that each rendering device is assigned a group key grouping together the devices having the same group key, thereby defining groups, in different epochs the devices are grouped differently, an encryption module to encrypt, for each epoch, each service key in the batch of service keys, individually with each group key yielding a plurality of group-key-encrypted service keys from each service key, and a delivery module to distribute to the devices, for each one of the epochs, the group-key-encrypted service keys for the batch of service keys and the group keys of the one epoch. Related apparatus and methods are also described.

Abstract: Various embodiments provide methods and systems that utilize a protocol which enables media content protection by establishing a secure communication channel and, in some embodiments, a secure data channel, between a device such as a computing device running a protected content playback application, and a downstream component such as an associated driver, such as a graphics driver, of an associated display device such as a monitor, flat panel LCD, television and the like.

Abstract: Segmented media content rights management is described. A media device can receive segments of protected media content from media content streams that each include a different version of the protected media content. A media content file can be generated to include the segments of the protected media content that are sequenced to render the protected media content for viewing. A file header object can be instantiated in a file header of the media content file, where the file header object includes DRM-associated features, such as one or more DRM licenses, properties, and/or attributes that correspond to the media content file to provision all of the segments of the protected media content together.

Abstract: An equipment managing system includes an intermediating apparatus and an equipment managing apparatus. The intermediating apparatus is connected to a license management apparatus and a program management apparatus via a network. The equipment managing apparatus is connected to an electronic equipment via a network. The intermediating apparatus stores a program acquired from the program management apparatus and a license file acquired from the license management apparatus to an external storage medium. The equipment managing apparatus sends the program and the license file recorded in the external storage medium to the electronic equipment.

Abstract: Systems, methods, and program products are provided for selectively restricting the transmission of copy protected digital media content from a computer system, over a network, and to a remote display. In one embodiment, a method includes the steps of capturing digital media content rendered on the local display by a media player application executed by the computer system; determining whether the media player application is accessing copy protected digital media content; and, if the media player application is not accessing copy protected digital media content, converting the captured digital media content to a media stream and transmitting the media stream over a network for presentation on a remote display.

Abstract: The invention relates to a decoding method for a probabilistic anti-collusion code aiming to identify at least one sequence of the code present in a multimedia content having served in the creation of an illegal copy of the multimedia content, this method comprising a step of selection of the collusion strategy used to constitute the illegal copy from among a set of collusion strategy models.

Abstract: A portable device may be roamed from one host to another. In one example, the portable device stores software that is to be executed by a host. The host may maintain a policy that governs which software may be executed on the host. When the portable device is connected to a host, the host checks the software version installed on the guest to determine whether that software version is compatible with the host's policy. If the guest's software does not comply with the host's policy, then the host installs a compatible version. If the guest's version complies with the policy and is newer than the host's version, then the host copies the guest's version to the host and propagates it to other guests. In this way, newer versions of software propagate between hosts and guests, while also respecting specific execution policies of the various hosts.

Abstract: A system and method is disclosed for detecting distribution of multimedia content. The volume level of data traffic is monitored for a plurality of users to select any users with high-bandwidth usage. The time of day and the day of the week may be considered when determining whether a user is a high-bandwidth user. Upon selecting a user as one with high-bandwidth usage, such user may be subject to packet inspections of data traffic streams. In some embodiments, content identification parameters or watermarks are added to one or more packets in a data traffic stream carrying multimedia content.

Abstract: An anti-debugger comprises spatially and temporally separate detection and response portions. In an example configuration, the anti-debugger is implemented into a game system for detecting and responding to a debugger attached to a game application. The detection portion is implemented on one thread of the system and the response portion is implemented on another thread of the system. When a debugger is detected, a message indicative of the detection is provided to a thread interface. The thread interface provides the message to the response portion. After a period of time has elapsed, the response portion disables the functionality of the game application, such as by halting the game execution and/or obfuscating game performance.

Abstract: Mechanisms are provided to prevent information leakage between components implemented on a programmable chip such as a Field Programmable Gate Array (FPGA). An automated routing algorithm is effective at enforcing security restrictions with minimal input form the user while providing efficient utilization of the device. Compatible sets of signals are identified and locked, and reservations of routing resources are generated. Remaining signals are rerouted until all signal constraints are met. Specified security constraints with one or more security levels and one or more secure regions may be applied through iterations of the automated routing mechanism.

Abstract: A record carrier for storing at least one stream of linked content cells thereon, which linking is performed based on navigation data. The record carrier includes modified navigation data and/or a stream arrangement of at least one stream of linked content cells, so that an access of the at least one stream of linked content cells on the record carrier under consideration of the navigation data is not disturbed, whereas a generally linear access of the at least one stream of linked content cells on the record carrier is disturbed.

Abstract: An information processing apparatus in which an application managed by a license based on license data operates. The information processing apparatus includes a recording unit to record transfer information indicating that the license data is transferred from the information processing apparatus to a second information processing apparatus, and a prohibition unit to prohibit use in the information processing apparatus of the license data corresponding to the transfer information when the transfer information indicates that the license data has been transferred from the information processing apparatus to the second information processing apparatus.

Abstract: In accordance with one or more aspects of the separating keys and policy for consuming content, content has a corresponding leaf license, and the leaf license has one or more associated root policy addenda. Each root policy addenda includes policy identifying when it is permissible to decrypt and consume the content, but excludes a content key to decrypt the content. The content can be decrypted and consumed only if the policy identifies that it is permissible to decrypt and consume the content.

Abstract: An apparatus and method for detecting program plagiarism through memory access log analysis is provided. A data extractor extracts an access log of an original program and an access log of a target program to be compared with the original program from a memory accessed by the programs. A common string detector enumerates values, which are obtained from the access logs extracted from the original program and the target program, into strings and detects a common string that commonly exists in the strings. A discontinuity calculator calculates a discontinuity value that indicates a distance between the strings by using an array of the detected common strings. A plagiarism determining unit determines that the target program is plagiarized if the calculated discontinuity value is less than a predetermined reference value.

Abstract: A system that stores plural reference measures, each reference measure corresponding to measured transitions of one or more video objects of plural successive pictures corresponding to a video scene, receives first and second measures of plural successive pictures corresponding to a first video scene received from a remote device, the first and second measures corresponding to measured transitions of a video object of the first video scene, compares the first and second measures with the stored plural reference measures, and indicates to the remote device whether a threshold percentage match exists between the first and second measures and one of the stored plural reference pictures.

Abstract: A method and devices for a control of usage of content is disclosed. In one embodiment, a user device performs the steps of obtaining the content, defining usage rights, generating integrity protection information for defined usage rights, encrypting the content with a content encryption key, encrypting the content encryption key with a key encryption key associated with a recipient device and/or an operator of the recipient device, communicating the encrypted content, the defined usage rights, the encrypted content encryption key, and the integrity protection information to the recipient device.

Abstract: A terminal device recording content onto a recording medium device, a permission to record the content onto the recording medium device being granted by a server device, the terminal device comprising: a generation unit generating a value calculated so as to represent subject content for which permission to record is requested; an information transmission unit requesting the permission from the server device by transmitting information indicating the value generated by the generation unit to the server device; a signature reception unit receiving subject content signature data from the server device, the subject content signature data being transmitted by the server device upon granting the permission; and a recording unit recording the subject content onto the recording medium device as one of plain-text data and encrypted data, as well as the subject content signature data received by the signature reception unit.

Abstract: The disclosure relates generally to methods and systems including, e.g.,: (1) steganographically embedding location information in image or audio content, where the location information is obtained from remote sources like a cell phone network or remote GPS receiver; (2) steganographically embedding participant IDs in content to ensure proper billing and royalty tracking; (3) providing fair-use content management based upon digital watermark-tracked usage; (4) providing micro-payments based upon watermarked objects for retailers; and/or (5) providing watermarked logon cards, such as watermarked hotel room keys, to better provide internet logon access control. Other systems and methods are provided as well.

Abstract: A product mark including a public key certificate issued with respect to an information-recording-medium manufacturing entity or information-recording-medium manufacturing equipment, and an encrypted volume ID calculated by computation based on a product-mark-associated value such as a hash value generated on the basis of the product mark, and a volume ID as an identifier set with respect to a given set of discs to be manufactured, are generated. The product mark and the encrypted volume ID are set as information for generating a key used for decryption of encrypted content, and recorded onto a disc by a reflective-film-removal recording method. Due to this configuration, the product mark and the encrypted volume ID as key generating information cannot be read from a pirated disc produced by physically copying a pit pattern on the basis of a legitimate commercial disc, thereby making it possible to prevent unauthorized reproduction or use of content.

Abstract: A method and system for identifying a work in a data transfer. In accordance with this invention, a data transfer is received. The media content of a work is then read from the data transfer. The media content is then used to generate a fingerprint of the work. The fingerprint is then used to identify the work. A report including the identity of the work is then generated.

Abstract: A method of securing transmission of streaming media by encrypting each packet in the stream with a packet key using a fast encryption algorithm. The packet key is a hash of the packet tag value and a closed key which is unique for each stream. The closed key is itself encrypted by the sender and passed to the recipient using a public key encryption system. The encrypted closed key (open key) may conveniently be inserted into the stream header. All of the packets in the stream are encrypted, but only the data pay load of each packet is encrypted. It is computationally infeasible, without knowing the recipient's private key to calculate the closed key based upon knowledge of publicly accessible information such as the recipient's public key, the open key, the encrypted stream data or the packet tag values.

Abstract: Embodiments include a method, a computing device, and a computer program product. An embodiment provides a method that includes receiving an instruction operable to create a visual presentation corresponding to a bitmap content. The method also includes determining if the instruction operable to create a visual presentation corresponding to a bitmap content includes an instruction operable to create a visual presentation corresponding to a bitmap content having an indicium of a digital watermark. The method further includes initiating an action with respect to the instruction operable to create a visual presentation corresponding to a bitmap content, the action being responsive to the determining.

Abstract: Computer readable media, apparatuses, and methods to control copying of AV data are provided. The data structure includes the AV data having a format according to a protocol for a digital channel between a transmission device and a reception device, and copy control information to control copying of the AV data. Accordingly, copy control can be performed for a digital signal received and decoded according to a DVI or HDMI protocol. In addition, when the digital signal is converted to an analog signal, a CGMS and Macrovision signal can be inserted into the analog signal.

Abstract: An electronic control device and method for operating an electric roller shutter include establishing a wireless connection between the electronic control device and an electronic device if a preset login password is input. The electronic control device provides an operation interface to the electronic device, and receives a function instruction from the electronic device if a function key on the operation interface is pressed. The electric roller shutter is operated by the electronic control device according to the received function instruction.

Abstract: A method of managing protected video content is presented that includes inspecting a packet stream received from a subscriber broadband interface, where the packet stream includes video content. The method also includes generating a signature based on the video content and comparing the generated signature with a stored signature corresponding to protected video content. In a particular embodiment, the method can include storing data indicating that the protected video content has been re-distributed from the subscriber broadband interface when the generated signature matches the stored signature.

Abstract: A method and apparatus which can reduce the communication time that occurs due to transmission of an encrypted content, when a Digital Rights Management (DRM) agent and a rendering application are implemented in different devices respectively, is provided. A method of obtaining content information in an environment where a DRM agent and a rendering application are separated from each other, includes transmitting, by a consumer electronics (CE) device comprising the rendering application, first N bytes of the content to a portable Digital Rights Management (PDRM) device comprising the DRM agent, and obtaining, by the PDRM device, information about the content by using a cryptographic hash with respect to the first N bytes, and transmitting the obtained information to the CE device.

Abstract: In a CP server, when a copyright determination unit determines that requested content is copyrighted content, a set up unit sets up a copyrighted content public URL comprising information that can specify a memory region where copyrighted content is stored, and corresponding to a content delivery request by a cellular phone, a transmission unit transmits the copyrighted content public URL together with the copyrighted content, to the cellular phone. Then, a cellular phone acquires the copyrighted content public URL together with the copyrighted content, and attaches the copyrighted content public URL to an electronic mail message which is transmitted to another cellular phone. The other cellular phone can use the received copyrighted content public URL to request the CP server to deliver the copyrighted content.

Abstract: An apparatus and method configured to identify the type of a content to be copied and perform a copying process in a sequence according to the result of identification is provided. In an information processing apparatus configured to perform the copying process for copying recorded data in an information recording medium to other media or the like, the type of the data recorded in the recording medium of a copy source is identified.

Abstract: A media content printing method that includes storing encrypted media content data representing media content in a computing device, generating a file of print commands that include the encrypted media content data non-encrypted commands for printing the media content based on the encrypted media content data, and sending the file of print commands to an intermediate device that stores a cryptographic key. The method further includes sending the non-encrypted commands to a printing device, determining if the media content is authorized to be printed, and decrypting the encrypted media content data in the intermediate electronic device that corresponds to the authorized media content to produce decrypted media content data. The decrypted media content data is sent to the printing device for printing the media content based on the non-encrypted commands and the decrypted media content.

Abstract: A security memory device includes a memory cell array that stores a plurality of contents, including a mine, which is stored as a portion of the plurality of contents. The mine is triggered when it is accessed, typically such that the mine erases the memory contents. Also, control logic is included that controls access to the plurality of contents. In one aspect, the memory cell array can include a protected-cell zone and a free-cell zone. In this aspect, the security memory device can further include a lock that provides protection for contents stored in the protected-cell zone from access and a key that is capable of unlocking the lock.

Abstract: A license server (400) controls each user terminal (100) on the basis of a license permitting a user terminal (100) to reproduce any content and permitting another user terminal (100) to reproduce a content identical to a content that is being reproduced by the above user terminal (100). A service use status change detecting section (411) detects that the user terminal (100) that is permitted to reproduce any content has switched its reproducing content. A license authorization control section (412), in the case where such a switch has been detected, switches a content, which the other user terminal (100) is permitted to reproduce, to a content being reproduced by the user terminal (100) that is permitted to reproduce any content.

Abstract: In one embodiment, a method comprises identifying an identifiable video object from a video picture of a digital video having video content and commercial content, the video picture contained within the video content; encoding the identifiable video object as a video overlay object; encoding the commercial content based on generating a first key frame, and storing the video overlay object within the first key frame as an object that is not displayed as part of the commercial content; and encoding the video picture based on generating a second key frame that includes a default video object in place of the identifiable video object, the default video object including an overlay reference to the video overlay object within the first key frame, wherein unavailability of the video overlay object during rendering of the second key frame causes display of the default video object to visually corrupt the video picture.

Abstract: A method for preventing unauthorized installation of application software is disclosed wherein application software is distributed with a user-readable permanent password, one or more user-readable one-time disposable password, and a hidden password (hidden from users but accessible by the setup program). When the setup program is run, the user must enter the permanent password and disposable password(s). The setup program sends these passwords and the target computer serial number to a remote server which verifies their validity, stores the serial number, and returns a complex password and a new disposable password from a remote passwords folder stored on the remote server. The setup program displays the new disposable password to the user who records it for use in future installations. The complex password is used to enable installation of the software, and it is deleted after installation is complete.

Abstract: An information processing apparatus, an information recording medium, an information processing method, and a computer program are provided. In an information recording medium storing many pieces of content, a configuration that allows use management on segmented content basis is provided. A plurality of content management units corresponding to title, index and other information are set by partitioning stored content in an information recording medium. Different unit keys that are encryption keys are allocated to different content management units. At least the content real data included in each content management unit is encrypted by use of the unit key and the encrypted data is stored. In content reproduction, units are identified and decryption is executed by use of a unit key corresponding to each unit for reproduction. In an information recording medium storing many pieces of content for example, each of segmented pieces of content may be managed.

Abstract: A method for managing rights associated with data is described. A request to access encrypted data is intercepted. Credentials associated with the request are verified. The data is decrypted if the credentials are verified. The decrypted data is marked with an identifier. Predetermined operations directed to the decrypted data are monitored.

Abstract: The present invention discloses methods for document-to-template matching for data-leak prevention (DLP), the methods including the steps of: providing a document as a stream of characters; splitting the stream into a plurality of serialized data lines; calculating a hash value for each serialized data line; checking for each hash value in a hash map of a template set; determining a similarity match to a particular template based on a predefined threshold of template hash values, of the template set, being found in the stream; and based on the similarity match, executing a DLP security policy for the document. Preferably, the template set is extracted from documents manually prepared by a security administrator. Preferably, each template in the template set is deduced automatically from a plurality of documents.

Abstract: A method for providing curriculum enhancement using a computer-based media access system according to one embodiment is described. The method comprises accessing a playlist assembly component and creating a playlist indicating at least one instance of media. The playlist is then accessed and the instance of media is selected. A usage compliance mechanism then accesses the instance of media in accordance with a usage restriction.

Abstract: A plurality of the light emitting device array units are arranged along a main scan direction in a staggered manner. In a density transformation mode, a transformation pattern is used to transform image data for each matrix of n by n pixels. A rate of writing an image in a sub-scan direction is multiplied by m, and a pixel density of image data written on a photosensitive body is multiplied by (2B+1)/2 in the main scan direction, and multiplied by m(2B+1)/2 in the sub-scan direction. A transformation pattern which is selected according to a position along the main scan direction at which an image is written with respect to a position of each of the plurality of light emitting device array units is used to transform image data.

Abstract: There is provided a system or the like capable of managing a document not printed on a paper medium so that an administrator of the document may be identified. According to the document management system of the present invention, a first processing unit 110 recognizes an identifier to identify a user or a department to which the user belongs. Moreover, a second processing unit 120 recognizes a document specified by the user. Then, an image processing unit 130 prepares an image including the specified document recognized by the first processing unit 110 and the identifier recognized by the second processing unit 120 while adjusting the arrangement of the identifier and the specified document, and causes an information processing terminal 200 to display the image.

Abstract: A system and method for the prevention of malicious file copying detects a file copy operation indicative of copying a file to an electronic clipboard. If the file copy operation is detected, the computer reads file contents of the copied file, and scrambles the file contents. If a file paste operation indicative of the copied file being pasted to a designated file system path, the computer pastes the scrambled file to the designated file system path. File attributes of the scrambled file are the same as file attributes of the copied file.

Abstract: A document monitor device, which includes: a confidential information storage section that stores confidentiality level information of documents managed in a document management device associated with identification information of each of the documents; a feature storage section that stores features of the documents associated with the identification information; a selection section that selects a target document from the managed documents based on the confidentiality level information; an acquisition section that acquires a target image to be processed by an image processing device; an extraction section that extracts features of the target image; a similarity level calculation section that calculates a similarity level between the features stored in association with the identification information of the selected target document and the extracted features; and a detection information output section that, when the similarity level is a prescribed value or over, outputs information indicating that a similar im

Abstract: An apparatus and method for encoding and decoding additional information into a stream of digitized samples in an integral manner. The information is encoded using special keys. The information is contained in the samples, not prepended or appended to the sample stream. The method makes it extremely difficult to find the information in the samples if the proper keys are not possessed by the decoder. The method does not cause a significant degradation to the sample stream. The method is used to establish ownership of copyrighted digital multimedia content and provide a disincentive to piracy of such material.

Abstract: A data storage medium includes a first storage unit and a second storage unit. The first storage unit is used to store a target electronic device ID, the second storage unit stores software installation data. The software installation data includes a copyright protection module, a software installation program, and a software data. When the software installation data is invoked to install the software data, the copyright protection module is invoked and automatically runs. The copyright protection module accesses the first storage unit and reads the target electronic device ID. The software data can be installed in the target electronic device only if the first storage unit contained the target electronic device ID or the first storage unit is writable and the target electronic device ID is stored in the first storage unit successfully.

Abstract: Provided is a method of preventing digital content from being used despite the presence of copy control information. In the method, a security apparatus capable of restricting use of contents generates a nonce with respect to a storage device and stores the nonce in the storage device and a memory separated from the storage device when content is stored in the storage device; updates the nonces stored in the memory and storage device when movement of the content occurs; and permits use of the content only when the nonce of the storage device, which is stored in the memory, is equal to the nonce stored in the storage device if the content is requested for use, thereby preventing a disk cloning attack.

Abstract: Embodiments of the present invention provide methods and systems for designating and handling confidential memory allocations of virtual memory. In particular, the operating system provides a memory allocation flag that applications may use to indicate any arbitrary area of physical memory marked with this flag may contain confidential data and should be handled accordingly. The operating system also ensures that memory allocated with this flag can be placed in physical memory. When freeing up memory, the operating system protects any data in the memory allocated with this flag. For example, the operating system may prevent the confidential memory from being swapped out to storage or from being accessible to other applications, such as debuggers. Alternatively, the operating system may encrypt any data in the confidential memory before it is swapped out to storage.

Abstract: An image data verification system for verifying image data using a computer and method are provided. The method includes registering image data of an original and extracting information regarding a part of information forming the original image data. The method also includes generating a feature value of the partial information and generating signature information.

Abstract: If the signatures of all documents in a binder document are verified when the binder document is verified, some types of documents stored in the binder document may affect the result of the verification of the binder document. When verification of a binder is performed, it is determined, for each document in the binder document, whether the document is a verification target document or not. On the basis of the result of verification of a document determined as a verification target, the result of verification of the binder document is outputted.

Abstract: An image output system includes a computer and a complex machine connected to the computer. A password generating section of the complex machine, in a case where a user ID transmitted from a transmitting section of the computer is stored in a HDD, generates a password which is different from the user ID, and the transmitting section transmits the password generated by the password generating section. A controller, in a case where the password received by a password receiving section and the password transmitted from the password transmitting section to the computer, controls an image forming section to output image data which is not combined with electronic watermark information by an electronic watermark information combining section.

Abstract: In a content data reproducing apparatus having a temporary memory for stream reproduction, a content data acquisition section acquires content data from an external content provision server. A storage control section temporarily stores the content data acquired by the content data acquisition section in the temporary memory such that the stored content data should be erased from the temporary memory when a power supply is turned off. A reproduction condition acquisition section acquires reproduction condition data which defines a reproduction condition for reproducing the content data. A reproduction section reproduces the content data read from the temporary memory.

Abstract: A system for generating and printing travel documents for a customer associated with a journey having one or more parts, the system comprising: a travel documentation distribution module capable of generating travel documentation for the customer and capable of passing the documents for storage on a customer device at the request of the customer; and a printer located in the vicinity of a starting point of one of the parts of the journey which is capable of responding to a short range communication from the customer device to print the travel documents for said part of the journey for the customer.