Abstract: A digital media with encoded audio-visual content includes an encoded token. The token comprises visual data having defined characteristics, which are designed such that when the audio-visual content is output as analog output and then re-recorded as digital data, the resulting digital data includes an altered token. Digital data may be processed to detect altered tokens indicating that the data was recorded from an analog output. When an altered token is detected, the copy may be considered to be an unauthorized copy and handled accordingly.

Abstract: A method is disclosed for generating a read error during standard DVD disc manufacturing. The method generates a read error in an error correction code (ECC) block including a specific error generation data pattern, when main data of 2,048 bytes is generated using the specific error generation data pattern according to a DVD standard. The error-pattern original data is inserted into the main data that is scrambling based on a DVD standard. The scrambled data is recorded in data sectors. The scrambled data including an error pattern which causes a read error is consecutively recorded in the data sectors included in the ECC blocks, in a process in which the data sectors are grouped based on 16 units to form the ECC blocks.

Abstract: A software installation system comprises an interface component that receives a request to access data resident upon a flash memory card. An installation component compares a unique identifier associated with the data with a unique identifier embedded within the flash memory card, and the installation component determines whether to allow access to the data based at least in part upon the comparison. The installation component prohibits access to the data if the unique identifier associated with the data does not match the unique identifier embedded within the flash memory card.

Abstract: Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Abstract: The document identification method comprises: a step of marking the document with an anti-copy mark that is identical for a plurality of documents; a step of reading an anti-copy mark; a step of generating an identification mark that can vary from one document to another and according to the reading of the anti-copy mark and; a step of marking said document to form said identification mark on said document. In embodiments the method comprises, in addition, a step of printing a uniform area and the step of marking the document to form the identification mark comprises a step of emitting light with a laser in the uniform area. In embodiments the method comprises, in addition, a step of invisibly marking the identification mark on said document.

Abstract: In an information processing apparatus, a first display screen is displayed to allow for specifying whether to form a copy-forgery-inhibited unit pattern or an array of copy-forgery-inhibited unit patterns, and a second display screen is displayed to allow for specifying a position at which to form the copy-forgery-inhibited unit pattern by selecting the position from a plurality of candidates.

Abstract: Methods and systems for designating and handling confidential memory allocations of virtual memory are provided in which the operating system provides a memory allocation flag that applications may use to indicate any arbitrary area of physical memory marked with this flag may contain confidential data and should be handled accordingly. The operating system also ensures that memory allocated with this flag can be placed in physical memory. When freeing up memory, the operating system protects any data in the memory allocated with this flag. For example, the operating system may prevent the confidential memory from being swapped out to storage or from being accessible to other applications, such as a debuggers. Alternatively, the operating system may encrypt any data in the confidential memory before it is swapped out to storage.

Abstract: A method for selectively controlling access to electronic media disposed on a media storage device according to one embodiment is described. The method comprises creating a first list comprising a plurality of process identification values. Each of the plurality of process identification values of the first list is associated with a software application that is accessing the media disposed upon the media storage device. The method further includes creating a second list comprising a second plurality of process identification values. Each of the second plurality of process identification values is associated with a software application that is storing data. The method further includes determining that a particular software application is creating an unauthorized copy of the media disposed upon the media storage device. The method further includes preventing the particular software application from storing a usable copy of said electronic media.

Abstract: An electromechanical system consists of a memory storage unit in which the licensed video files are stored. The function of this device is to recognize the requested data and thereby allow the video file contents from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the video files in the device from non-duplication.

Abstract: A computing system selects a portion of data of an unknown work and detects each event in the portion of data of the unknown work. An event is a perceptual occurrence in a work successively positioned in time. The system determines an event metric between each successive event in the portion of data in the unknown work and generates a list of event metrics between the events for the unknown work. The system compares the list of event metrics for the unknown work to a list of event metrics for a known work and determines the unknown work is a copy of the known work responsive to a match between the list of event metrics of the unknown work and the list of event metrics for the known work.

Abstract: A system and method for controlling the reproduction of documents containing sensitive information includes an input for receiving a document; a device for storing a digitized document; a detector for identifying encoded sensitive information; a decoder operatively connected to the detector, which extracts digitally encoded information from the sensitive information; a processor operatively connected to the decoder, which receives digitally decoded sensitive information; a user interface module for receiving a user identity and an access mediator for receiving decoded sensitive information from the processor, comparing the user identity with a decoding scheme associated with the document and allowing or disallowing the decoded sensitive information to be reproduced.

Abstract: A system, method, and computer program product to find coalitions of receivers who collude to produce pirated protected content, then evaluates the confidence that particular members of each identified coalition are traitors versus innocent receivers incriminated by chance. Typically, each file in a group of original files is modified to include variations of critical file segments. The group of files is then broadcast with individualized codes that enable particular authorized receivers to properly process the modified files. The modifications in a pirated version of a file can identify which traitorous receivers contributed to its piracy. Candidate coalitions of differing size are first evaluated to determine if they cover observed file variations with greater than a predetermined likelihood that an innocent coalition is falsely incriminated by chance. Individual members of satisfactory coalitions are then evaluated. Traitors may be cryptographically revoked.

Abstract: The present invention provides a method and apparatus for the production and labeling of objects in a manner suitable for the prevention and detection of counterfeiting. Thus, the system incorporates a variety of features that make unauthorized reproduction difficult. In addition, the present invention provides a system and method for providing a dynamically reconfigurable watermark, and the use of the watermark to encode a stochastically variable property of the carrier medium for self-authentication purposes.

Abstract: If playback devices are prohibited from playing back contents recorded in R media, there occurs a problem that it takes more time to manufacture commercial ROM media. Conversely, if playback devices are permitted to play back contents recorded in R media, there occurs a problem that copyrights might be infringed. In view of these, the aim of the present invention is to provide a content protection data processing system and a playback device capable of determine whether to permit playback of a content recorded in a recording medium, based on a medium type of the recording medium and a signature type of a signature attached to a program. This enables both the protection of the copyright of the content and the efficient manufacturing of commercial ROM media.

Abstract: A method and apparatus for enabling a licensed end user to record digital data as described is particularly useful to the music industry as it enables them to make audio data available over the internet but to retain control of the uses to which that audio data can be put. Thus, upon completing a financial transaction to pay for the required audio tracks, the end user is enabled to download and decrypt encrypted music tracks and to play them on the end user's personal computer. The end user can also be allowed to burn a CD including the downloaded music tracks. However, the end user is only enabled to decrypt and record the music tracks onto the CD if the music tracks are recorded together with copy protection.

Abstract: Disclosed is a domain DRM system, a license sharing method for the domain DRM system, and a license server. The domain DRM system includes at least one domain including at least one user module adapted for encryption or decryption using a provided encryption key and a domain manager adapted for decryption using a provided encryption key, and a license server for creating encryption keys corresponding to the domain manager and the one user module, respectively, and providing them with the created contents, respectively, so that, when at least one user module requests contents, a contents encryption key used to encrypt the contents is encrypted by using an encryption key of the user module and an encryption key of the domain manager according to a commutative encryption scheme, and one of the domain manager and the user module is provided with a shared license obtained as a result of encryption.

Abstract: Systems and methods for providing enhanced navigation of stored digital video content based upon an event index. Includes generation and storage of an event index, as well as navigation based on events in the event index. An example system is embodied in a digital video recorder that detects and stores black field and silent frame events for use in locating commercial groups. The commercial groups may be skipped or otherwise navigated based upon data pointers linking the stored events to corresponding locations in the video data file.

Abstract: An information recording medium manufacturing method includes the steps of: determining an encryption mode of each sector, which serves as an encrypt processing unit; generating encrypted data having different variations by using a plurality of cryptographic keys for a segment portion; generating encrypted data by using a single cryptographic key for a non-segment portion; and recording the encrypted data. In determining the encryption mode, a cryptographic key for each sector is specified on the basis of an auxiliary file including determination information indicating whether each sector is data of a segment portion or data of a non-segment portion and identification information for identifying a segment and a variation associated with the sector if the sector is found to be the data of a segment portion. In generating the encrypted data for the segment portion or for the non-segment portion, the encrypted data is generated by using the specified cryptographic key.

Abstract: Embodiments of the invention generally provide a method and apparatus for enabling digital rights management in file transfers. One embodiment of a method for transferring digital content from a first user to a second user, includes transferring ownership of an instance of the digital content to the second user, where the instance of the digital content resides on a first device belonging to the first user. Copies of the digital content are then deleted from one or more additional devices belonging to the first user (including at least one offline device).

Abstract: The present disclosure relates generally to digital watermarking and steganography. One claim recites a method including: receiving digital data representing media including at least video and audio; digital watermarking at least some portions of the digital data, the digital watermarking introducing changes to at least some portions of the digital data to hide information in at least some portions of the digital data representing audio and in at least some portions of the digital data representing video, the information comprises at least geo-location data and time data, and the geo-location data is redundantly hidden in digital data over time; and optically projecting the media on a surface for viewing. Projected media includes the information digital watermarked therein. Of course, other claims and combinations are provided as well.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked-out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: A method for automatically executing an operation after a media event. The present method receives a media change notification (MCN) from a non-defeatable autorun. Next, a file corresponding to a media event responsible for the MCN is accessed. The file corresponding to the media event is then authenticated and an instruction contained on the file is executed. Additionally, the accessing, authenticating, and executing of the content contained in the file cannot be defeated by a user.

Abstract: A system for identifying a work represented by digital data. This system detects events in data of the content of an unknown work and measures a metric between the events. The system then compares the detected events and metrics from an unknown work with the events and metrics of a known work. If the events and metrics match, the unknown work is identified as a copy of the known work.

Abstract: A basic input output system (BIOS) (32) prevents writing of data to a universal serial bus (USB) storage device (40).

Abstract: A replay device includes a flash memory, a setting means, and a test result output unit. A device key for copyright protection is recorded in the flash memory. When a predetermined actuation input is received, the setting means sets the device to a test mode in which it is tested whether or not the device key is recorded. And, when the test mode is set, the test result output means tests whether or not the device key is recorded in the flash memory, and outputs a screen with the result of the test. Moreover, the test result output means displays the test result by changing a background color of the test result screen, according to the presence or absence of the device key.

Abstract: A method for detecting an attempted attack on a security system. In one preferred embodiment of the present invention, the method includes the step of retrieving a parameter from a hardware system, wherein the parameter changes during an operation of the hardware system. Then, comparing the retrieved parameter with a previously stored parameter; and, detecting a lack of change between the retrieved parameter and the previously stored parameter. An apparatus and an article of manufacture for detecting an attempted attack on a security system is also disclosed.

Abstract: A system for analyzing similarities between a first and second corpus or between a set of concepts and a corpus uses natural language processing and machine intelligence methods to replace terms or phrases in the corpus with concepts, determine the frequency of each concept in the corpus, and convert the corpus into a concept frequency file to enable easy comparison of the two corpuses or easy retrieval of items from the corpus that contain concept. Difference analysis and a combination of content and spectral analysis may be employed.

Abstract: A mechanism is provided for identifying a snooping device in a network environment. A snoop echo response extractor generates an echo request packet with a bogus MAC address that will only be received by a snooping device. The snoop echo response extractor also uses an IP address that will cause the snooping device to respond to the echo request. Non-snooping devices discard the echo request packet. Upon receiving the response packet, the snooping device is identified.

Abstract: A system consisting of a memory storage unit in which the licensed softwares are stored. The function of this device is to recognize the requested data and thereby allow the software from the memory storage unit according to the instructions set to this device. It is an effective means for protecting the software in the device from duplication.

Abstract: Disclosed herein is an information processing apparatus including: a unit information acquisition section; an identification information acquisition section; a secondary version information acquisition section; a comparison section; and an operation control section.

Abstract: A content transfer system for transferring content between a source device transmitting the content and a sink device receiving the content, includes a content specifying unit for specifying the content to be transferred between the source device and the sink device, an authentication unit for performing an authentication exchange key process between the source device and the sink device, a content transfer unit for performing a content transfer process by encrypting and transferring the content specified by the content specifying unit from the source device to the sink device using the key exchanged by the authentication unit, and a content transfer finalizing unit for performing a content transfer finalizing process by validating the content at the sink device and invalidating the original content at the source device in response to the end of the content transfer process performed by the content transfer unit, the content thus being moved from the source device to the sink device.

Abstract: A configuration is provided which enables usage management and secure data management of data newly generated or obtained that is different from data already stored in an information recording medium. New data such as information which the user has newly generated or downloaded related to content information increments of content management information stored in an information recording medium is recorded as configuration data of the content management unit, in the form of encrypted data to which a unit key corresponding to the content management unit, or a unit key corresponding to a new content management unit, has been applied. According to this configuration, secure data management and usage management is realized for new data the same as with data corresponding to original units.

Abstract: Technologies to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations that implement the title's security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies.

Abstract: A system and method is provided for identifying the source of an unauthorized copy of content. The method includes embedding a unique user fingerprint code to into each of a plurality of authorized copies of content and identifying an unknown fingerprint code in an unauthorized copy of the content. Each member of the unknown fingerprint code is compared to each corresponding member in each of the user fingerprint codes. A score is assigned to each of the user fingerprint codes based on the comparison and users associated with scores exceeding a threshold are identified as a source of the unauthorized copy.

Abstract: The presently claimed invention relates generally to encoding and decoding audio signals to include auxiliary information. One example encoding technique includes steganography.

Abstract: An apparatus and method for encoding and decoding additional information into a stream of digitized samples in an integral manner. The information is encoded using special keys. The information is contained in the samples, not prepended or appended to the sample stream. The method makes it extremely difficult to find the information in the samples if the proper keys are not possessed by the decoder. The method does not cause a significant degradation to the sample stream. The method is used to establish ownership of copyrighted digital multimedia content and provide a disincentive to piracy of such material.

Abstract: In a printer 1 which is an information processing apparatus of the present invention, after a password is accepted from a PC 2 together with image data and job information, the image data is encrypted and stored in a storage part 106, the job information is associated with the password and stored in a management part 104 as a job management table, and the process waits. In a case where a security program is executing, in case that a main power 110 is turned off, the operation of a backup part 105 to supply power to the management part 104 is inhibited, so that the job information table stored in the management part 104 is deleted. In a case where the security program is not executing, power is supplied to the management part 104 by the backup part, thereby maintaining the job management table stored in the management part 104.

Abstract: A storage section stores a data belonging to a first group and data belonging to a second group, the first and second groups being distinguishable from each other. A communication section communicates with another game apparatus. A transmission control section transmits at least one piece of data of the data stored in the storage section to another game apparatus using the communication section. A reception control section receives the data transmitted from another game apparatus using the communication section. In this configuration, a game apparatus stores the data received using the reception control section, as data belonging to the second group, into the storage section.

Abstract: A method and system for encouraging users of computer readable content to register. The method involves embedding in the computer readable content, instruction codes operable to direct a processor circuit to automatically establish a connection to a server, when the content is in use by the processor circuit, to transmit registration information to the server and operable to control further use of the content by the processor circuit in response to a key received from the server.

Abstract: An information processing apparatus includes: a data processing unit which performs copy processing for recording recorded data of a first medium in a second medium, wherein the data processing unit performs processing for referencing copy restriction information received from a management server, comparing the copy restriction information with apparatus setting information set in a memory of the information processing apparatus, determining whether or not the copy processing is permitted in accordance with the comparison result, and copying recorded data of the first medium to the second medium under the condition it is determined that the copy processing is permitted.

Abstract: A content recording apparatus includes a key selecting unit that selects an encryption key for performing an encrypting process to adjunct data from pieces of information recorded on a recording medium, when a user generates the adjunct data which is data derived from a title content, wherein the recording medium records thereon a title key for encrypting the title content as program content and content data including the title content encrypted by the title key. The content recording apparatus also includes an encryption processing unit that performs an encrypting process to the adjunct data by the selected encryption key; and a recording unit that records the adjunct data to which the encryption process is performed and the selected encryption key in the recording medium.

Abstract: Bait files and signatures allow security software vendors to track both authorized and unauthorized usage of the security vendor's signatures/products by third party security vendors. A bait file providing module anonymously provides a bait file to a third party security vendor for security detection, where the bait file is a non-malware file. A signature providing module provides a bait signature corresponding to the bait file that is included in a signature database which is made publicly available. A scanner monitoring module monitors security detections made over a period of time by a security scanner operated by the third party vendor. A determination module determines whether the scanner positively detected the bait file following the release of the bait signature for the bait file. A use detection module detects, in response to a positive determination, that the third party vendor used the bait signature provided to detect the bait file.

Abstract: Near-duplicate documents may be identified by processing an accepted set of documents to determine a first set of near-duplicate documents using a first technique, and processing the first set to determine a second set of near-duplicate documents using a second technique. The first technique might be token order dependent, and the second technique might be order independent. The first technique might be token frequency independent, and the second technique might be frequency dependent. The first technique might determine whether two documents are near-duplicates using representations based on a subset of the words or tokens of the documents, and the second technique might determine whether two documents are near-duplicates using representations based on all of the words or tokens of the documents.

Abstract: Access to content may be administered by storing content, the content comprising one or more selections, accessing a passive optical out-of-band token associated with the content, determining an access right for the content based on the passive optical out-of-band token, and enabling access to the content in accordance with the access right.

Abstract: A content distribution system distributes a content key and content use conditions for controlling a content use in a client apparatus to the client apparatus, via a communication channel, from either a multicast distribution server or a unicast distribution server. A content distribution management server determines by which distribution method to send the content key and content use conditions of each content according to an attribute of the content (a compression format, a compression ratio, a content holder, and the like). An encrypted content distribution server distributes only encrypted content whose content key and content use conditions are to be distributed by the unicast, and the multicast distribution server distributes encrypted content whose content key and content use conditions are superimposed by the multicast.

Abstract: The invention provides methods for embedding digital watermarks for authentication of printed objects, and corresponding methods for authenticating these objects. One aspect of the invention is a method of embedding a digital watermark in a digital image to be printed on an object. The method embeds an auxiliary signal in the digital image so that the auxiliary signal is substantially imperceptible, yet machine readable. It converts the image to a halftone image using a halftoning process. If copies are made of the printed image, the image characteristics change due a change in the halftoning process used to create the copies. These changes are detected to determine whether a suspect document is authentic.

Abstract: A method of preventing use of an illegally copied optical medium comprises the step of identifying the media type of the optical medium to determine whether the optical medium is an original version or an unauthorized copy. If the media type indicates that the optical medium is an original version, use of the optical medium is not prevented. If the media type indicates that the optical medium is an unauthorized copy, use of the optical medium is inhibited. The media type can be identified by reviewing a medium-type code field contained in a mode parameter header of the optical medium, which corresponds to the media type of the optical medium, and is a feature integrated into the media that cannot be copied.

Abstract: A system for identifying a work represented by digital data. This system detects events in data of the content of an unknown work and measures a metric between the events. The system then compares the detected events and metrics from an unknown work with the events and metrics of a known work. If the events and metrics match, the unknown work is identified as a copy of the known work.

Abstract: A Secure Micro (SM) copy detection system includes at least one Access Point (AP) that is connected to at least one host group including at least one SM, at least one Multiple-Services Operator (MSO) that is used to manage the at least one SM and includes the at least one AP, and a host information management server that is used to perform authentication of the at least one SM and that is independently connected to the at least one MSO.

Abstract: A method to apply a protection mechanism to a binary object includes using operating system resources to load a binary object from a storage medium along with a manifest and a digital signature. Authentication of the binary object is performed using the digital signature and the manifest is read to determine a category of protection for the binary object. The operating system selects a protection mechanism corresponding to the protection category and injects protection mechanism code, along with the binary object into a binary image on computer RAM. When the binary image is accessed, the protection mechanism executes and either allows full access and functionality to the binary object or prevents proper access and operation of the binary object. The protection mechanisms may be updated independently from the information on the storage medium.