Access Control

Access Control patent applications listed are from June 2005 to current and include Date, Patent Application Number, Patent Title, Patent Abstract summary and are linked to the corresponding patent application page.

11/15/07 - 20070266444 - Method and system for securing data stored in a storage device
A method and system for securing data stored in a secured partition of a storage device coupled to a computer having an insecure operating system that is subservient to a secure operating system operating on the computer. When access to the secured partition is detected, the secure operating system is ...

11/15/07 - 20070266443 - Certified hdd with network validation
A data storage device can be validated through a network before the data storage device can be operated. In one embodiment, the data storage device includes a magnetic disk and a head assembly having a read/write head which reads and writes data from/on the magnetic disk. The data storage device ...

11/15/07 - 20070266442 - System and method for protecting apis from untrusted or less trusted applications
In accordance with embodiments, there are provided mechanisms and methods for securing execution of untrusted applications. These mechanisms and methods for securing execution of untrusted applications can enable embodiments to provide a “sandbox” environment in which applications that are less than trusted may execute. The ability of embodiments to provide ...

11/08/07 - 20070261125 - Systems and methods for secure transaction management and electronic rights protection
The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. ...

11/08/07 - 20070261124 - Method and system for run-time dynamic and interactive identification of software authorization requirements and privileged code locations, and for validation of other software program analysis results
A system, method and computer program product for identifying security authorizations and privileged-code requirements; for validating analyses performed using static analyses; for automatically evaluating existing security policies; for detecting problems in code; in a run-time execution environment in which a software program is executing. The method comprises: implementing reflection objects ...

11/08/07 - 20070261123 - Method and apparatus for runtime memory executable separation
A computer implemented method, apparatus, and computer usable program code for assuring data integrity is shown. A partition receives a request to execute an executable file from a source external to the partition. A memory region is created within the partition. The partition or service interface makes an authentication determination. ...

11/01/07 - 20070256141 - Content distribution system
A content distribution system for transferring contents between transmission device and reception device. The transmission device includes: key obtaining unit that obtains, from reception device, public keys and public key identifiers; watermark embedding unit that embeds a different public key identifier, as electronic watermark, into each of contents that are ...

10/25/07 - 20070250937 - Systems and methods for secure transaction management and electronic rights protection
The present invention provides systems and methods for secure transaction management and electronic rights protection. Electronic appliances such as computers equipped in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. ...

10/11/07 - 20070240229 - Method and apparatus for importing content having plurality of parts
A digital content protection apparatus and method for digital rights management (DRM) are provided in which a content file including a plurality of content parts is imported such that a header is included which stores location information required for decoding each of the content parts. Therefore, the number of content ...

10/11/07 - 20070240227 - Managing an entity
In one aspect the invention is a method of managing an entity. The method includes associating an identity of an entity to reputation data, associating a rule to the identity based on status data and the reputation data associated with the identity. The method also includes determining a response based ...

10/11/07 - 20070240226 - Method and apparatus for user centric private data management
A data management method and system allows user centric, secured management and sharing of user information such as e-commerce data (including login details, credit card information etc.), policies and preferences set by a user in a networked home environment. A technique to encrypt and decrypt the user data is utilized, ...

09/27/07 - 20070226807 - Systems and methods for secure transaction management and electronic rights protection
The present invention provides systems and methods for electronic commerce including secure transaction management and electronic rights protection. Electronic appliances such as computers employed in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality ...

09/27/07 - 20070226806 - Method and apparatus for enhancing cryptographic engines against security attacks
Apparatus, systems and methods for enhancing cryptographic engines against attack are disclosed. In one implementation, a method is disclosed including limiting a cryptographic device to a first number of cryptographic operations, and reconfiguring the cryptographic device to limit the cryptographic device to a second number of cryptographic operations. Additional implementations ...

09/27/07 - 20070226805 - Facilitating and authenticating transactions
A device or “dongle” (30) is provided for controlling communications between a Subscriber Identity Module (or SIM) (12), such as of the type used in a GSM cellular telephone system, and a computer, such as a Windows-based PC (10). The SIM (12) can be authenticated by the telephone network, in ...

09/20/07 - 20070220614 - Distributed access to valuable and sensitive documents and data
A method for providing access to documents and data files that are inherently valuable, and also documents that contain sensitive information, is configured with robust user identification and document control capabilities and facilitates document submission by, for or on behalf of a user who perhaps is the subject of the ...

08/23/07 - 20070199076 - System and method for remote data acquisition and distribution
Methods and systems for remote data collection and distribution include components and operations for receiving, at a server, data transmitted by a first client device via a communication network. The method may also include selecting, by one or more client devices associated with the communication network, a second device to ...

08/23/07 - 20070199075 - Method of and device for generating authorization status list
A method of generating an authorization status list, comprising generating a run-length encoded representation of an authorization status of a number of devices and storing the representation in the authorization status list. Preferably comprises generating the representation by indicating, for each of a number of ranges of devices, the devices ...

08/16/07 - 20070192875 - Method and apparatus for importing content having plurality of parts
A digital content protection apparatus and method for digital rights management (DRM) are provided in which a content file including a plurality of content parts is imported such that a header is included which stores location information required for decoding each of the content parts. Therefore, the number of content ...

08/16/07 - 20070192874 - Advanced encryption standard to provide hardware key interface
A system to control access to at least one protected device, the system comprising a test access port operable to mate with an external key device and an internal key device that is operable to receive synchronized cipher words during an idle state of the test access port from a ...

08/09/07 - 20070186287 - Data storage
A method of storing a data set on a storage device carrying a file of random data comprising the steps of: selecting, in dependence on a user input passphrase, a first location within the file of random data for storing a file index (FI); selecting a second location within the ...

08/02/07 - 20070180535 - Apparatus and method of managing hidden area
Provided is a method of hiding a specified directory with no effect on compatibility with an existing file system. According to an aspect of the invention, an apparatus for managing a hidden area includes a hidden area generation unit which sets a portion of the data area as a hidden ...

07/26/07 - 20070174919 - Digital rights management device and method
A portable storage device includes a meclhanismn for receiving a value of an identification parameter from a receiving device, a non-volatile memory for storing digital content, a licensing policy, and a license for viewing the digital content on the receiving device as identified by the identification parameter, and a controller ...

07/12/07 - 20070162980 - System and method for providing content security in upnp systems
A Content Directory Service (CDS) security service specifying, in a user friendly manner, which users of a media server or other UPnP device own which content. The security service also permits the owners of content to control who is permitted to read the content. A CDS account manager is used ...

07/12/07 - 20070162979 - Connection linked rights protection
The present invention relates to a method and a system for performing digital rights management. The idea of the invention is that a master right associated with a content is stored at a first authorised device (211). An authorised device is a device which can be considered trusted and performs ...

07/12/07 - 20070162978 - Information processing device and method
A configuration is provided which enables usage management and secure data management of data newly generated or obtained that is different from data already stored in an information recording medium. New data such as information which the user has newly generated or downloaded related to content information increments of content ...

07/05/07 - 20070157320 - Software, systems, and methods for processing digital bearer instruments
Methods and apparatus are described which enable flexible and secure processing of digital bearer instruments. An architecture is provided that enables provision of an extensible applications framework that flexibly supports a variety of features and functionality supporting title-based rights processing operations. A wide range of methods of defining and assuring ...

07/05/07 - 20070157319 - Location based security modification system and method
A method or system for providing a level of data security dependent on the location of the user of a wireless device is disclosed. One exemplary embodiment relates to a method of adjusting security for a network user node in communication with a network based upon the location of the ...

07/05/07 - 20070157318 - Method and apparatus for managing digital rights of secure removable media
Disclosed is a method and apparatus for managing rights object of SRM in a digital rights management system. The method for managing rights object bound to the SRM, comprises: transmitting ROAP trigger from a rights issuer to a terminal; transmitting an RO request message from the terminal to the rights ...

07/05/07 - 20070157317 - Xml schema for service provisioning
An XML provisioning schema for provisioning and configuring a prepaid and/or a subscription based usage of a provisioned resource is used to communicate between a provisioning server and a client computer. The XML schema disclosed in here includes a content node containing content data identifying the service to be provisioned ...

06/28/07 - 20070150965 - Data security system and method adjunct to a browser, telecom or encryption program
Data security for processing data or securing browser-input data operates on security sensitive content which is extracted, then either encrypted or stored in remote extract stores, and processed separate from remainder data. Extracted data, in one system, is remotely stored. Other methods attach, append, add or insert an encrypted version ...

06/28/07 - 20070150964 - Application rights enabling
Methods and apparatus, including computer program products, implementing and using techniques for controlling capabilities of a user software application. A user software application is provided, the user software application including a set of disabled operations. Content capable of being operated on by one or more of the disabled operations in ...

06/28/07 - 20070150963 - Mp3 player with digital rights management
A portable media player receives encrypted audio files and an encrypted content key from a central license server on the Internet. The media player supports digital rights management (DRM) by storing the encrypted audio file in its flash memory and disabling copying or playing of the audio file after a ...

06/28/07 - 20070150962 - Image processing apparatus, information processing apparatus, and methods thereof
Upon applying a DRM protection process to an image which is generated by an image processing apparatus, which doesn't have any communication means that allows direct communications with a PC, without any alteration, encryption of the image in the apparatus and that of the image in the PC as an ...

06/28/07 - 20070150961 - Data-use restricting system, data-use restricting method, and computer product
A job administrator terminal embeds control information in service data and transmits the service data to a job executor terminal. The job executor terminal receives the service data, extracts the control information from the service data, and stores the control information in a storing unit. When the job administrator terminal ...

06/28/07 - 20070150960 - Method and system for conditional access applied to protection of content
The invention relates to a method for controlling access to a transmitted digital data stream which has been previously encrypted. The inventive method comprises the following steps: upon transmission, generation of a message R-ECMc for controlling the right of access to the recording of the contents of the flow according ...

06/21/07 - 20070143858 - Providing sip signaling data for third party surveillance
sessions conducted over a communications network, such as a voice over Internet protocol (VoIP) network, that employs a session initiation protocol (SIP). The method includes receiving a subscription request from a third party subscriber, the subscription request identifying a targeted user to be monitored, monitoring communication sessions in which the ...

06/14/07 - 20070136821 - Method and system for protecting user data in a node
A method and system for protecting data stored in a node are disclosed. Upon detection of an attempt to compromise security at a residing node, the data may be moved from the residing node to an escrow node which is a trustworthy intermediary node. The data may be encrypted prior ...

06/14/07 - 20070136820 - Server apparatus, client apparatus, control method therefor, and computer program
A server apparatus capable of communicating with a client apparatus via plurality of transmission paths includes a memory unit adapted to store first authentication information of the client apparatus which communicates via at least one of the plurality of transmission paths, a request unit adapted to request transmission of second ...

06/14/07 - 20070136819 - Dynamic conditional security policy extensions
Systems, methods, and machine-readable media are disclosed for providing conditional grants of permission in an externally configured security policy. In one embodiment, a method is provided which comprises reading a condition clause from a grant statement defined in the security policy. The grant statement can cause the granting of permission ...

06/14/07 - 20070136818 - Method and device for preventing a control error of a machine tool
Machine tool (2, 2a) protected against improper activation, which has an open-loop and/or dosed-loop control device for the activation of machine functions, preferably machine axes, and means for reading in machine control parameters for the open-loop and/or closed-loop control device from a data carrier or electronic carrier signal (3), and ...

06/07/07 - 20070130627 - Electronic document management program, electronic document management system and electronic document management method
It is possible to control electronic documents for partial disclosures and non-disclosures and prove to the third party that information other than non-disclosure part thereof has not been altered and the originality of decrypted information is assured. There is provided a section that controls electronic information for partial disclosures and ...

06/07/07 - 20070130626 - Device-aware content delivery
A system for device-aware content delivery includes a distributor and a database. The distributor includes modules for determining the type of portable computing device and delivering content that is operable on the specific type of portable computing device and uses the unique capabilities of the identified portable computing device. The ...

05/31/07 - 20070124821 - Information processing apparatus and encrypting/decrypting method
According to one embodiment, an information processing apparatus includes, encrypting unit which encrypts digital audio data by using an encryption key, multiplexing unit which multiplexes information of the encryption key on a digital video signal, extracting unit which extracts the information of the encryption key multiplexed on the digital video ...

05/24/07 - 20070118910 - Identification of files in a file sharing environment
The methods and systems disclosed herein support identification of video media in a file sharing and/or file distribution environment where both known media and unknown media are circulated. The identification techniques can be deployed in a variety of client and server configurations, and may use a centralized or global database ...

05/17/07 - 20070113294 - Password presentation for multimedia devices
A multimedia device or other type of processing device comprises a memory, a processor coupled to the memory, and playback circuitry coupled to the processor. In one aspect, the processor is operative to control the storage in the memory of at least one multimedia file containing a one-time password or ...

05/17/07 - 20070113293 - Systems and methods for secure sharing of information
Systems and methods for managing digital assets in a distributed computing environment are described. Meta-data for the digital assets is stored separately from the digital assets. Meta-data for some of the digital assets is copied and stored at a central location. Meta-data for the digital assets is generated by clients ...

05/17/07 - 20070113292 - Automated rule generation for a secure downgrader
A system generates rules for classifying documents are generated by building a vocabulary of features (e.g., words, phrases, acronyms, etc.) that are related to classifying concepts. The system includes a security document reader receives a security document that defines security concepts for a particular project and parses the security document ...

05/17/07 - 20070113291 - Method for administrating the function access
A method for examining a user's identity and/or administrating the access right(s) of a called function is disclosed. Before the called function is functioned in a computer system, the method redirects the executing procedure to an interception means, which further processes a user's identity verification and/or the access right(s) examination. ...

05/17/07 - 20070113290 - Method of detecting and preventing illicit use of certain network protocols without degrading legitimate use thereof
A method of preventing illegitimate use of a network protocol consisting of a stream of data packets, wherein the method comprises steps of calculating a delay that is an increasing function of the bit rate of a stream coming from a machine, and forwarding packets of the stream after said ...

05/10/07 - 20070107064 - Recording method, recording apparatus, reproducing method and reproducing apparatus
In the case where data are recorded in a medium, after a specific type of a medium in which recording is performed is set, if it is detected that information is recorded on an address of specific position at which decoding information is to be located, then data at a ...

05/10/07 - 20070107063 - Method and means for writing decryption information to a storage medium, storage medium, method and means for reading data from a storage medium, and computer program
A concept for digital content protection makes use of a storage medium having an encrypted data content, being encrypted using a data content key such that the data content key can be decrypted using a first cryptographic method, a first-method-encrypted version of the data content key, encrypted such that it ...

05/03/07 - 20070101438 - Location-based authentication
A method and system to configure data, such that access to data is protected based on a location. Once the data is configured, it can only be accessed from authorized locations, which are locations from which the location protected data is allowed to be accessed. Moreover, the location protected data ...

05/03/07 - 20070101437 - Document managing system, document managing apparatus and document managing method
A document managing system is provided with a plurality of document managing apparatuses each configured to retrieve a document stored in a storage according to a document ID and to judge whether or not an operation with respect to the retrieved document is possible according to a user ID that ...

05/03/07 - 20070101436 - Data security system and method
The method for securing data in a distributed computer system for security sensitive content includes granularly extracting sensitive content, per security level, from remainder data. The security sensitive content is classified into security levels, each having a security clearance. The extracted data is remotely stored in extract stores. The controlled ...

05/03/07 - 20070101435 - System and methodology providing secure workspace environment
System and methodology providing a secure workspace environment is described. In one embodiment, for example, in a computer system, a method is described for creating a secured workspace within an existing operating system for allowing users to run applications in a secured manner, the method comprises steps of: creating a ...

04/12/07 - 20070083936 - Methods and apparatuses for authorizing use of an information processing feature
A method for authorizing use of an information processing feature (“IPF”) (12, 13) with an information processing device (“IPD”) (14). The method includes receiving a data structure (20), which includes a first data portion (402) having information identifying the IPF, identifying a hash algorithm (405), and identifying an access condition ...

04/05/07 - 20070079385 - Managing user permissions in a computer system
A method of operating a printer coupled to a computer, the method comprising associating one or more permissions of a printer driver resident on the computer with an operating system managed object and, when an attempt is made to print on said print device or a User Interface of the ...

04/05/07 - 20070079384 - System and/or method for authentication and/or authorization
The subject matter disclosed herein relates to authenticating an identity of users desiring access to an application program and determining whether an authenticated user is authorized to access one or more aspects of the application program. ...

03/29/07 - 20070074294 - Method for preventing unauthorized use of content in mobile terminal
Disclosed is a method for preventing unauthorized use of content data in a mobile terminal, which includes downloading content data to the mobile terminal and analyzing the downloaded content data, determining whether DRM (Digital Rights Management) for preventing unauthorized use of digital content is applied to the downloaded content data, ...

03/15/07 - 20070061893 - Methods and devices for copy protection of software
Disclosed are methods and devices for storing and accessing software on several devices such that any given purchased or licensed software title can only be run on one device at a time. ...

03/15/07 - 20070061892 - Information provision system, content information copying device, user terminal device and user management device
A content encryption device generates encrypted content and an encrypted content copying device copies the encrypted content on an information storage medium. The storage medium is sold at a charge or distributed at no charge. A user gets the storage medium to connect or set it to or in a ...

03/15/07 - 20070061891 - Environment information transmission method, service controlling system, and computer product
When changes occur in an environment of the service user terminal, a network operator terminal acquires hashed environment information indicative of the changes from the service user terminal. The network operator terminal sends the hashed environment information to an environment management authority terminal. The environment management authority terminal calculates an ...

03/08/07 - 20070056045 - Controlled access to objects or areas in an electronic document
Methods, systems, and computer products provide for designating areas or objects in an electronic document as controlled access regions for prohibiting or limiting access to the regions and/or for limiting application functionalities that may be utilized in the regions. ...

03/08/07 - 20070056044 - Matching entitlement information for multiple sources
A method, apparatus and computer-usable medium for executing, at an Entitlement Broker Service (EBS), a request from a requesting user for a protected computer resource that is available only to entitled users. Entitlement identifications are located using a Standardized Entitlement Credentials Data Store (SECDS) in the EBS. The SECDS contains ...

03/01/07 - 20070050853 - Portable storage device and system of the same
A portable storage device and a system using the same are disclosed. The apparatus includes a first interface module for receiving metadata on content and authentication information on the content, a second interface for communicating with a player for playing the content, and a control module for transferring the received ...

03/01/07 - 20070050852 - Processor, memory, computer system, and method of authentication
A processor communicating with a first memory configured to store first information and first data, and communicating with a second memory configured to store second information and second data, includes a computing unit configured to perform computation using the first data and the second data; an storing unit configured integrally ...

03/01/07 - 20070050851 - Information processing apparatus and information processing method
An information processing apparatus for realizing coexistence of a high-speed editing function for contents whose copyright is protected and a defending function for limitless movement due to alteration of the contents and a defending function for an illegal process using power-off. When the contents constructed on a block unit basis ...

03/01/07 - 20070050850 - Control method, control program, and control system
This invention is to appropriately cope with abnormal states. A control method according to the present invention includes: identifying an abnormal level according to abnormal level reference data stored in advance in an abnormal level reference data storage, from context relating to abnormalities, which has been collected in advance and ...

02/22/07 - 20070044159 - Information processing apparatus
A license server offering a content decryption key assigns leaves of a key-managed hierarchical tree structure to clients, and generates a set of node keys as a device node key for transmission to each client together with a leaf ID and a private key of the client in question. When ...

02/22/07 - 20070044158 - Hardware key control of debug interface
In one embodiment, a system comprises debug functionality, a debug interface communicatively coupled to the debug functionality, and a hardware key interface. Communication with the debug functionality over the debug interface is not permitted if an authorized hardware key is not communicatively coupled to the hardware key interface. ...

02/22/07 - 20070044157 - Distribution control method and distribution control system for digital information
A server (1) generates delivery data obtained by adding distribution control information which designates the possibility/impossibility of data transfer, the necessity/unnecessity of encryption, the possibility/impossibility of server inquiry, and the like to contents data such as digital contents, an electronic ticket, or the like and delivers the delivery data to ...

02/15/07 - 20070039059 - Method and system for controlling data output
The present invention provides a method and system for controlling data output which can surely prevent data leakage from data output devices, and can also prevent data browsing by the remote operation which strikes weakness of a system. Security levels are set up for respective data output devices which output ...

02/15/07 - 20070039058 - Revocation information management
Systems and/or methods (“tools”) are described that enable encrypted media files to be sent without revocation lists while permitting the encrypted media files to be passed to trusted entities. The tools may also ensure continuation of protection when media files are passed between different protection systems. ...

02/08/07 - 20070033658 - Connected support entitlement system method of operation
An entitlement system and method for computers allowing controlled access to operating systems, software applications, data, or hardware for a computer system. More particularly, the entitlement system involves localized control to access computer operations, including operating systems, software, internet access, data, hardware, or the like, which may be updated remotely, ...

02/08/07 - 20070033657 - Recording medium and device administration apparatus
In a recording medium, a device administration program for making a computer execute the following steps using a usage restriction definition file is recorded. The usage restriction definition file is capable of defining at least one administration function among a plurality of administration functions of a device and includes a ...

02/08/07 - 20070033656 - Access control technique for resolving grants to users and groups of users on objects and groups of objects
Various embodiments of a method, system and article of manufacture resolve access to a specific principal on a particular resource. A set of candidate access rights to at least one principal on at least one resource is determined based on at least one grant. Any candidate access right for which ...

02/08/07 - 20070033655 - Transportable computing environment apparatus system and method
An apparatus, system, and method are disclosed that provides a user-specific transportable computing environment. The apparatus, system, and method facilitate users configuring their own personal computing environment on a properly configured computing host. Users can insert a personal environment key into the computing host and automatically activate and configure any ...

02/08/07 - 20070033654 - Method, system and program product for versioning access control settings
The present invention allows changes to access control settings for a computer-based resource to be detected and stored in a set (e.g., one or more) of electronic documents. In a typical embodiment each stored change includes a previous access control setting and a new access control setting so that the ...

02/01/07 - 20070028308 - Decoding apparatus
A decoding apparatus includes: a decoding section for decoding input encoded video data and input encoded audio data; an output section for outputting video data and audio data decoded by the decoding section, in accordance with an output control signal; a decoding control section for controlling the decoding section in ...

02/01/07 - 20070028307 - Verification system and method
A verification system and method for audit data obtained from an infrastructure serving a plurality of entities are disclosed. A central repository and a number of leaf agents are used, each leaf agent being deployed to a part of the infrastructure and arranged to generate one or more index chains, ...

01/18/07 - 20070016960 - Nto input validation technique
This invention relates to an apparatus and method for an input validation and security server for validating and scanning data information between a client and a server application. Input validation mistakes are the heart of major web application security problems. In web applications the inputs are the GPC, which stands ...

01/18/07 - 20070016959 - Information processing device and information processing system
An information-processing device for communicating with an external communication target device according to the present invention comprises an access permission request signal generator for generating an access permission request signal which requests the communication target device to permit an access and outputting the generated signal to the communication target device, ...

01/18/07 - 20070016958 - Allowing any computer users access to use only a selection of the available applications
A computer system operates in normal mode where all applications and files are accessible to an authorized user, where an authorized user enters a required log in to access all applications. When a trigger to change the control access from normal mode to selective lock mode is detected, access to ...

01/04/07 - 20070006326 - Data security system and method
The method for securing data in a server-client computer system for security sensitive content includes extracting sensitive content and separating the security sensitive content from remainder data. The security sensitive content is grouped into security levels, each with a security clearance. The extracted data, for each security level, is remotely ...

01/04/07 - 20070006325 - Method, system and computer program for controlling access to resources in web applications
A method (300) for controlling access to resources of a data processing system is proposed. The method includes the steps under the control of a server entity (105) of: receiving (306) a request for accessing at least one selected resource from a client entity (110), the request being addressed to ...

01/04/07 - 20070006324 - Image forming method, image forming system, image forming apparatus, driver program, information processing apparatus, and license management server
This invention provides a system to solve a problem that in outputting print data from another device by using a storage medium storing a print job, the obtained result changes depending on the difference in environment. In this system, device configuration information necessary for processing an image is stored in ...

01/04/07 - 20070006323 - Identifying dependencies of an application upon a given security context
A technique for identifying dependencies of an application upon a given security context includes monitoring security checks generated by the application. The security checks requiring elevated rights are identified and the state of execution of the application corresponding to the identified security checks may be logged. The security checks requiring ...

01/04/07 - 20070006322 - Method and system for providing a secure multi-user portable database
A system and method for providing, managing, and accessing a multi-user secure portable database using secure memory cards is provided. The database has a secure portion for storing security keys and a non-secure portion for encrypted data files. Access to the encrypted data files is controlled by assigning access rights ...

01/04/07 - 20070006321 - Methods and apparatus for implementing context-dependent file security
The present invention concerns methods and apparatus for implementing context-dependent security for files and other computer system resources. In particular, methods and apparatus of the present invention implement context-based permissions that are used in context-dependent file security. In examples of the present invention, the context-based permissions may allow access to ...

01/04/07 - 20070006320 - Anti-hack protection to restrict installation of operating systems and other software
In a personal Internet communication device, a security key is stored on the master boot record. Any bootable device attempting to write operating system files or software files must have an authorized signature key in order to be eligible to install files on the personal Internet communication device. ...

01/04/07 - 20070006319 - Method and apparatus to facilitate message transmission and reception using multiple forms of message alteration
One provides (101) message content comprising at least a first message content part and a second message content part. One then selects (103) (at least) a first and second form of message alteration wherein each form of message alteration has corresponding recovery content that can be used to facilitate recovering ...

01/04/07 - 20070006318 - Entitlement designation in web services for remote portlets environment
A consumer system is registered on a producer system, which can be accomplished by submitting one or more registration values. The producer system checks each application according to acceptable registration values for each application. A set of applications that are available is generated according to which applications have permissions associated ...

12/28/06 - 20060294597 - Method for increasing security of plaintext authentication in wireless local area network
A method for increasing security of plaintext authentication in a wireless local area network (WLAN) is provided. The method includes steps of: establishing a basic server set in the WLAN; establishing a blank learning table for saving identities of the faked users; generating identities to the faked users; performing a ...

12/28/06 - 20060294596 - Methods, systems, and apparatus to detect unauthorized resource accesses
A tamper-proof access monitor monitors accesses by software executing on a host processor to memory-mapped regions of memory that control input/output resources. ...

12/28/06 - 20060294595 - Component selector
A method for securing a server undergoing data communication with a remote client computer in a client/server network. The method includes requesting an application by a user of the remote client computer. In response to the request, the server transmits a module which runs on the remote client computer. When ...

12/14/06 - 20060282904 - Memory tag, method for providing information and enabling the release of stored content, and apparatus therefor
A method of providing information, the method comprising interrogating a memory tag; receiving content from the memory tag by wireless electromagnetic communication in response to the interrogation, the memory tag comprising a memory and a transponder to enable the wireless electromagnetic communication; storing the content; sending a release request to ...

12/14/06 - 20060282903 - User accessibility to electronic paper
A system and method helps to control “read” and/or “write” access to electronic paper (e-paper). Informational data may be on a restricted portion of e-paper material that is protected by a security methodology accessible to authorized entities. Some embodiments maintain a record of access activity regarding the restricted portion, and ...

12/07/06 - 20060277608 - Electronic apparatus, function selection method of electronic apparatus and management system of electronic apparatus
An electronic device including a processing unit; a display unit; an operation unit; a control unit for controlling the display unit and causing the processing unit to execute a function; and an external interface, wherein the control unit causes the display unit to display a screen to select only part ...

12/07/06 - 20060277607 - Authenticating method and apparatus
A reproducing apparatus and method are provided to reproduce an interactive content requiring authentication from a recording medium such as a disc or a remote server, via the Internet. An authenticating method employed at a remote server includes: (a) transmitting program codes for performing authentication to a reproducing apparatus in ...

11/30/06 - 20060272030 - Content control in a device environment
Devices and methods are disclosed for controlling content within a device environment through interaction among electronic devices of the environment. The device has a transmitter, receiver, memory storing interaction rules and content rules and a processor for implementing the interaction rules and content rules in association with the transmitter, receiver, ...

11/30/06 - 20060272029 - Command processing system by a management agent
In a system where a management application sends commands to a remotely-located agent over a network, the agent maintains a security specification table defining the security level for each combination of the cipher and authentication algorithms of the communication path to/from the management application and a required security level table ...

11/30/06 - 20060272028 - Platform and service for management and multi-channel delivery of multi-types of contents
A platform for managing delivery of content originating from one or more content providers to users is provided. The platform includes a portal that is configured to support access through a plurality of access channels configured to receive requests through one or more access channels. A request for content is ...

11/30/06 - 20060272027 - Secure access to segment of data storage device and analyzer
The present invention relates to data security. A data storage device can include an insecure portion and a secure portion of its storage medium. A controller can control access to the storage medium by a computer operating system and communicate a signal to the computer operating system that describes portions ...

11/30/06 - 20060272026 - Method for judging use permission of information and content distribution system using the method
A method for judging use permission of information on one or more terminal apparatuses which uses content provided by a content provider and metadata provided by a metadata provider and supplementing the content, the method comprising: metadata use permission judgment judging use permission of the metadata based on usage control ...

11/23/06 - 20060265762 - Server apparatus and control method
An encrypted document file and related file are received (S42), and character strings are extracted from the related file. The document file is registered in a database (150) together with the extracted character strings (S45). ...

11/23/06 - 20060265761 - Malware containment by application encapsulation
The invention discloses a method and system for protecting a computer platform from malware. The protection is achieved by encapsulating an application that can serve as a malware conduit within a protected capsule environment, so as to prevent the conduit application or any processes originated therefrom from accessing and making ...

11/23/06 - 20060265760 - Methods and systems for managing user access to computer software application programs
According to some embodiments, a method of operating a computer system includes installing a plurality of application software programs in the computer system. The method further includes defining user access assignments for each of the application software programs for a respective plurality of users. The method further includes storing, in ...

11/23/06 - 20060265759 - Systems and methods for identifying principals to control access to computing resources
Systems and methods are provided for resource access control in computer systems. Our approach includes new techniques for composing and authenticating principals in an access control system. Our principals may comprise information that identifies the role of the user of a computer system, the mechanism by which the user was ...

11/23/06 - 20060265758 - Extensible media rights
A DRM System. A DRM system comprising a service provider, a CE device coupled to the service provider, and an XMR license disposed upon the CE device. ...

11/16/06 - 20060259982 - System and method for the propagation of drm protected content
The present invention may be utilized for the distribution of content items protected according to various digital rights management platforms. According to one embodiment, a method for the propagation of DRM protected content to one or more devices connected to a network comprises generating a request for DRM protected content ...

11/16/06 - 20060259981 - System and method of controlling and monitoring computer program usage
Embodiments of the present invention include a method of modifying a computer program to control and monitor usage, e.g., for software protection, by dividing the computer program code into protected and unprotected parts. According to some demonstrative embodiments of the invention, the protected part of the divided program may include ...

11/16/06 - 20060259980 - Method and system for limiting rights of services
A method and system for controlling access rights and privileges of services is provided. A service control system creates a security identifier that is unique for each service that executes within a service host and adds the security identifiers to the security context of the service host. The service control ...

11/16/06 - 20060259979 - Information recording medium, information processing device, information storage medium production apparatus, method, and computer program
The present invention provides an information storage medium and a method and apparatus for processing information, which manage information storage media so as to prevent unauthorized copies of contents from being distributed or used. On an information storage medium on which an encrypted content is stored, an information storage medium ...

11/02/06 - 20060248599 - Cross-domain security for data vault
A secure database appliance leverages database security in a consistent framework provides consistent, flexible, and adaptable security using mandatory access controls in addition to user and role based security for access control and accountability. A database system communicatively connected to a plurality of network domains, each network domain having a ...

11/02/06 - 20060248598 - Security claim transformation with intermediate claims
Systems and methods directed at transforming security claims in a federated authentication system using an intermediate format. The systems and methods described herein are directed at transforming security claims in a federated authentication system using an intermediate format. The federated authentication system includes an identity provider and a resource provider. ...

11/02/06 - 20060248597 - Ubiquitous personal station with an external case and a control method thereof
A ubiquitous personal station including a personal processing unit and a case is provided. The personal processing unit includes a display for displaying information, a communication unit for communicating, and a processor for processing information. The case holds the personal processing unit, and includes an input unit on at least ...

11/02/06 - 20060248596 - Secure clock with grace periods
A system of controlling playback of digital media. A system of controlling playback of digital media comprising a CE device having a secure clock and a license having a specified grace period disposed upon the CE device in which a digital media file governed by the license may be played ...

11/02/06 - 20060248595 - Reproducing encrypted content using region keys
A reproducing apparatus (1) reproduces content stored in encrypted form on a record carrier (2). The record carrier (2) further stores a carrier region code (RCC) indicating in which region content shall be allowed to be reproduced and an encrypted region key (RK) for decrypting content, in order to make ...

10/26/06 - 20060242714 - System for dynamically encrypting information for secure internet commerce and providing embedded fulfillment software
A data distribution system is provided which supplies customers with an executable for requested secured data files to provide the customer with fulfillment software, obviating the need for the customer to download fulfillment software prior to requesting secure data. The data distribution system is characterized by server technology which can ...

10/19/06 - 20060236406 - System and computer based method to automatically archive and retrieve encrypted remote client data files
A remote user establishes an interactive session. A pre-determined backup set is encrypted at a remote user site according to a key based upon the user's password. Encrypted backup data is then transmitted to a backup archive server and decrypted utilizing the user's password generated key and re-encrypted according to ...

10/19/06 - 20060236405 - Portable terminal connectable to a content server
A portable terminal MA downloads a content from a content server and stores the content in a HDD of the portable terminal after encrypting the content key with a terminal bind information which is inherent to the portable terminal. After that, when the portable terminal backs up the downloaded content ...

10/12/06 - 20060230463 - Method, apparatus, and computer program product for controlling copying and playback of digital data
A method, apparatus, and computer program product are disclosed for controlling copying and playback of digital data. Digital data is selected that is to be stored using a portable digital storage medium. Data that is stored using the medium is capable of being accessed only when the medium is inserted ...

10/12/06 - 20060230462 - Internet-based secure access control with custom authentication
A method of providing an owner with secure online control of private information comprises providing an owner-editable set of private information. Allowing the owner to edit at least one item of private information and allowing the owner to create a first relationship between a symbolic name and the item of ...

10/12/06 - 20060230461 - System and method for secure communication
A system (1) for secure communication comprises a secure electronic messaging server (11) which is accessible by the public and a database (12) for storing data of messaging users. The data comprise the tracking of trust establishing out-of-band verification and the monitoring of the trust relations derived thereof, messaging user-based ...

10/12/06 - 20060230460 - Hierarchical scheme for secure multimedia distribution
Various quality versions of an electronic content are defined, and one or more distortion algorithms (22, 32) that are executable to generate a lower quality version of the electronic content by a distortion of the highest quality version (21, 31) are defined. Each quality version is selectively assigned a content ...

10/05/06 - 20060225139 - Semiconductor integrated circuit
In a dynamic reconfigurable processor, a mechanism for effectively storing configuration data with a small hardware scale and improving processing performance is provided. Also, a sequence mechanism that is easy to be implemented with flexibility and a high operating frequency being both achieved is provided. The configuration data is hierarchically ...

10/05/06 - 20060225138 - End-to-end digital media entitlement system
A system for creating and processing customer entitlement rules employs a first interface for creating customer entitlement rules and a second interface for communicating with a portal for consuming digital content entitled to. An entitlement engine processes the entitlements, and the system interfaces with a plurality of modules in order ...

10/05/06 - 20060225137 - Trust verification in copy and move operations
When using a clipboard or drag-and-drop interface of a graphical computer interface, a source application includes trust information along with data that is proffered to a target application. The target application conditions its acceptance of such data based on the trust information. ...

09/28/06 - 20060218651 - Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management
The present inventions provide an integrated, modular array of administrative and support services for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting financial management, rights management, certificate authority, rules clearing, usage clearing, secure directory services, and other transaction related ...

09/28/06 - 20060218650 - System and method for effectuating digital rights management in a home network
A system for accessing protected content within an intranet includes a remote UI server capable of providing the remote user interface (UI) service, and a user entity capable of initiating the UI service with the remote UI server. In addition, the system includes a DRM agent capable of being accessed ...

09/28/06 - 20060218649 - Method for conditional disclosure of identity information
Providing conditional access to a unique device identifier (ID) stored in a device in a processing system may be accomplished by determining if a platform state (such as firmware and/or data) is present in a non-volatile storage of the processing system; when the platform state is not present, loading the ...

09/28/06 - 20060218648 - Apparatus and method for ownership verification
A method and apparatus identifying an item by attaching a radio frequency identification device to the item; obtaining encryption information; generating an encrypted code from the encryption information by a programmer; inserting the encrypted code into the radio frequency identification device by the programmer whereas the encrypted code may be ...

09/28/06 - 20060218647 - Data transcription in a data storage device
A method of protecting information in a data storage device is provided. The method includes receiving, in the data storage device, encrypted data via a host computer in which the data storage device is employed. The encrypted data is then decrypted, and re-encrypted, in the data storage device, either before ...

09/28/06 - 20060218646 - Method and system for managing digital rights
In the method of the invention, a request for a digital right to an encrypted content item is transmitted to a server (61). The request contains a circuit identifier identifying an integrated circuit and a content identifier identifying the encrypted content. Subsequently, an encrypted digital right, being encrypted by using ...

09/14/06 - 20060206945 - Method, apparatus and program for protecting content
According to a first aspect of the present invention, a recording medium manufactured without using the latest key management information can be detected and accuracy of content protection can be improved. A license association apparatus generates a digital signature uniquely corresponding to the latest key management information and content data. ...

09/07/06 - 20060200867 - Document processing device, and document processing control method thereof
A document processing device comprises, an authentication unit adapted to authenticate the user, a history information storage unit adapted to store history information indicating that document data was processed after the document data was stored in a document management server, the history information including identification information for identifying the document ...

09/07/06 - 20060200866 - Method and system for safely disclosing identity over the internet
Exemplary embodiments disclosed herein may include a method and system for providing information to a user and safely disclosing identity information over the Internet comprising receiving information from a server, analyzing the information, presenting the analyzed information to a user for validation in a finite number of configurations controlled by ...

09/07/06 - 20060200865 - System, service, and method for enabling authorized use of distributed content on a protected media
A protected content distribution system utilizes media-based copy protection to support online distribution of protected content in a secure and legitimate fashion. Using a media-based copy protection scheme based on broadcast encryption, the protected content distribution system realizes online distribution of protected content such as, for example audio files, movies, ...

09/07/06 - 20060200864 - Memory device
A memory device 10 provided by the invention is furnished with: a memory area 51 directly inaccessible from an electronic device 60; a secure control section 42 that manages access to this memory area 51; and a device control section 20 that communicates with the electronic device and transfers a ...

08/31/06 - 20060195912 - Selectively communicating digital content
A method and system for selectively communicating digital content is disclosed. For one embodiment of the invention, digital content communications of a user are analyzed. A rule in regard to communicating the digital content of the user is formulated based upon the analysis of the digital content communications. The rule ...

08/31/06 - 20060195911 - Information processing apparatus and method, content management system, information recording medium, and computer program
An information processing apparatus including a data processor and a communication unit is provided. For a content management unit provided with corresponding usage control information, the data processor executes a program corresponding to the content management unit, and obtains identification information set for the content management unit from an information ...

08/24/06 - 20060191019 - Electronic media communication apparatus
An electronic media communication apparatus is provided in which encryption keys and decryption algorithms are provided as circuits concealed in logic programmable devices. When the client requests delivery of electronic media, the server individually encrypts the electronic media and delivers the encrypted electronic media to the client. In the client, ...

08/24/06 - 20060191018 - Method and system for fighting the illegal distribution of protected works in a digital data transmission network
To protect against the illegal distribution of files in peer-to-peer networks, a method includes activating simulated user terminals on several peer-to-peer networks by protection platforms connected at different points in the network, generating corrupted versions of files to be protected having features identical to those of the files to be ...

08/24/06 - 20060191017 - Access control management method, access control management system and terminal device with access control management function
An environment information distribution unit transmits a policy ID for specifying an access policy to be applied to a terminal device. An environment information reception unit notifies an access policy application management unit of a policy ID specified based on information received from the environment information distribution unit. The access ...

08/24/06 - 20060191016 - Systems and methods for free demonstration of online premium content prior to purchase
Key-limited use applications are maintained at a central service where the central service can receive requests from a remote computing device for access to the key-limited use applications. The key-limited use applications include publicly available portions and a locked portions accessible with a key. The central service can provide a ...

08/24/06 - 20060191015 - Copy-protecting applications in a digital broadcasting system
A digital broadcasting system, such as DVB-MHP, transmits applications (320) in encrypted form to terminals (60). Details about the application, such as encryption method, cost and payment details are transmitted to terminals. Terminals use an interaction channel (85) to obtain authorization to access the application (320) from an authorizing entity ...

08/17/06 - 20060185021 - Method and system of integrating third party authentication into internet browser code
A method and system for using an Internet client's local authentication mechanism in systems having updated browser code, so as to enable third party authentication according to an authentication scheme specified by a participating server on clients with updated browser code, while not breaking clients with legacy browser code. A ...

08/17/06 - 20060185020 - Software piracy protection device
A software piracy protection and access authorization device is provided in the form of a USB dongle key. A first end is formed with a USB connector for insertion into a USB port receptacle in a computer device. A second end is formed with a USB port receptacle for receiving ...

08/10/06 - 20060179489 - Conditional access system for digital data by key decryption and re-encryption
The invention relates to a multi layered conditional access method for processing a protected digital content between a content protector, an intermediate receiver, and final destination means. The method comprises: a) the encryption by the content protector of a key or keys for accessing protected digital content, b) the transmission ...

08/10/06 - 20060179488 - Individual authentication method using a recording medium and individual authentication system using a recording medium
An individual authentication method using a recording medium and an individual authentication system using a recording medium for facilitating a user to memorize the user information, making it difficult for a third person to set up for the user, reducing the user rejection ratio, and heightening the barrier For a ...

08/03/06 - 20060174352 - Method and apparatus for providing versatile services on storage devices
An apparatus comprises a data storage device including a plurality of virtual smart cards in a plurality of security partitions, and a controller including a card operating system for controlling access to the smart cards. ...

08/03/06 - 20060174351 - Method and system for cas key assignment for digital broadcast service
A method for assigning conditional access system (CAS) keys to a terminal to thus reduce the number of entitlement management messages (EMMs) required to send contents to a digital broadcast subscriber. To this end, a broadcast center causes transmission of the CAS-related key to limit access to the digital content, ...

08/03/06 - 20060174350 - Methods and apparatus for optimizing identity management
Methods and apparatus are describe for providing access to identity information corresponding to a first entity. The identity information includes a plurality of identity components stored in a distributed manner. A first identity access title object is generated which is operable to confer rights to access first selected ones of ...

07/27/06 - 20060168664 - Profitable free computing resources leveraging the advertising model
Computer executable modules and an associated method for delivering computer resources using an advertising based model may use a local database of advertisements and locally collected user profile data for selecting targeted advertisements for delivery to a user. A user may be allowed to select what or how much user ...

07/27/06 - 20060168663 - Secure transaction protocol
A system for engaging in secure transactions over an internetwork, involving, a consumer, a merchant and a Transaction Authority as parties to a transaction. To initiate the transaction the consumer makes an inquiry with the merchant who then returns a signed offer. The consumer then accepts the offer by also ...

07/20/06 - 20060161991 - Provision of services over a common delivery platform such as a mobile telephony network
One embodiment of a system for providing services to subscribers of a network supports the provision of a plurality of different services to multiple subscribers. A processor arrangement is provided for hosting the different services. A data structure is provided for storing data associated with subscribers of the system, wherein ...

07/13/06 - 20060156417 - Method for enhancing a digital rights management function of a data terminal
Disclosed is a method for enhancing a digital rights management (DRM) function of a data terminal which includes receiving a request to reset a real-time clock (RTC), receiving an updated RTC time from a user, calculating and storing a difference value corresponding to a difference between a current RTC time ...

07/13/06 - 20060156416 - Remote access to local content using transcryption of digital rights management schemes
Methods and devices allowing distribution of content that resides in a source device on a local area network (LAN) are described. A gateway between the LAN and a wide area network (WAN) receives from a sink device a request for an instance of content. The request is sent over the ...

07/13/06 - 20060156415 - Accessory authentication for electronic devices
Improved techniques to control utilization of accessory devices with electronic devices are disclosed. The improved techniques can use cryptographic approaches to authenticate electronic devices, namely, electronic devices that interconnect and communicate with one another. One aspect pertains to techniques for authenticating an electronic device, such as an accessory device. Another ...

07/13/06 - 20060156414 - Increasing the extendibility of disk copy protection
The present invention relates to a method for increasing the extendibility of disk copy protection and a system for the same. The method includes the following steps: a) Compare the version number in the system for disk copy protection with that of corresponding system for the copy protection in the ...

07/06/06 - 20060150257 - Binding content to a portable storage device or the like in a digital rights management (drm) system
Digital content is rendered on a device by transferring the content to the device and obtaining a digital license corresponding to the content. A sub-license corresponding to and based on the obtained license is composed and transferred to the device, and the content is rendered on the device only in ...

07/06/06 - 20060150256 - Secure system for allowing the execution of authorized computer program code
Systems and methods are described for allowing the execution of authorized computer program code and for protecting computer systems and networks from unauthorized code execution. In one embodiment, a multi-level proactive whitelist approach is employed to secure a computer system by allowing only the execution of authorized computer program code ...

07/06/06 - 20060150255 - Manipulation-protected microcontroller system
A microcontroller system encompasses a processor unit, a source for confidential data, and a bus that connects the processor unit and source. Integrated on one single substrate together with the source is an access control unit that decides, on the basis of signals transferred on the bus, whether an output ...

07/06/06 - 20060150254 - System and method for representing a secure time in a device based upon an insecure clock
A system and method for providing modified rights information to an application on an electronic device. A centralized component monitors both a system clock and a secure clock. The centralized component calculates the difference between the time of the system clock and the time of the secure clock and thereafter ...

06/29/06 - 20060143716 - Connection device restriction program and device
A connection device restriction program for preventing use of uncalled-for connection devices. A permission list setting unit sets a connection permission list holding information defining connection devices whose connection is to be permitted, and a list memory stores the connection permission list. When a connection device is connected to one ...

06/29/06 - 20060143715 - Method and apparatus for providing security policy enforcement
A method and wireless mobile device invokes (802), under control of at least one of a plurality of applications, such as JAVA applications that run in a plurality of different execution environments, one or more common application interface (API), such as a JSR, that is common for use by the ...

06/22/06 - 20060137026 - Interactive security control system with conflict checking
An interactive system for managing access via a communications network by one or more users to multiple secured Locations. The system comprises a plurality of entry control Devices assigned for use in gaining access to the Locations by multiple users with multiple keys assigned in a hierarchy to the Locations, ...

06/22/06 - 20060137025 - Method for restriction of access to at least one content, computer program product and corresponding receiver device
In a method for the restriction of access from a sink device to a content stored in a storage device, a content protection protocol comprises an authentication phase and an encryption key exchange phase is implemented between the storage device and the sink device. The method comprises a prior step ...

06/22/06 - 20060137024 - Apparatus and method of generating and detecting prevention and control data for verifying validity of data
A method of generating prevention and control data to verify validity of data to be transmitted, and an apparatus to perform the method, the method including generating the prevention and control data according to composing information of the data to be transmitted, and transmitting the prevention and control data along ...

06/22/06 - 20060137023 - Encrypted content data structure package and generation thereof
Described herein are one or more implementations that generate and encrypted content data structure package and/or data tree. ...

06/22/06 - 20060137022 - Secure license management
Systems, methods, and computer program products for secure license management. A host computer runs in a trusted state. A license manager is installed on the host computer. The license manager is configured to provide access to one or more software programs. The one or more software programs are accessible only ...

06/22/06 - 20060137021 - Accessing protected resources via multi-identity security environments
A multi-identity security environment is created for use in controlling access to resources. The multi-identity security environment enables one process that is spawned by another process to access resources security accessible to the one process, as well as resources security accessible to the another process. The multi-identity security environment includes ...

06/22/06 - 20060137020 - Method and apparatus for accessing session data
According to some embodiments, a method and apparatus for accessing session data includes identifying a data access request from a first process, the data access request for access to data associated with a second process, and determining, prior to allowing the first process to access the data, whether the second ...

06/22/06 - 20060137019 - Techniques for managing access to physical data via a data abstraction model
A method, system and article of manufacture for managing access to a data abstraction model abstractly describing physical data and, more particularly, for creating a logical security model for a data abstraction model abstractly describing data in a database. One embodiment provides a computer-implemented method for creating a logical security ...

06/08/06 - 20060123486 - Interactive security control system with conflict checking
An interactive system for managing access via a communications network by one or more Device-Users and Database-Users with regard to at least one secured Location and an entry control Device assignable for use in gaining access to the Location by the one or more Device-Users. The system comprises a searchable ...

06/08/06 - 20060123485 - Adaptive digital rights management system for plural device domains
A system and methods of digital rights management for plural device domains that adapts in response to external use data. Domain size parameters of a target domain that includes multiple receiving devices are determined. The domain parameters are compared to a domain benchmark developed from external data. A risk index ...

06/01/06 - 20060117392 - Method for access control to conditional access data
A method is disclosed for access control to conditional access data in a multimedia unit comprising at least one security module. This process includes: reception by the multimedia unit of a control message ECM containing at least one control word cw; transmission of this message ECM to said security module, ...

06/01/06 - 20060117391 - Method and apparatus for processing digital rights management contents containing advertising contents
A method and apparatus for processing digital rights managements (DRM) contents having advertisement (AD) contents attached thereto in a DRM system are disclosed. When DRM contents including AD contents are selected by a DRM device, a rights issuer (RI) receives the AD contents and the DRM contents from a contents ...

06/01/06 - 20060117390 - Method and apparatus for securely deploying and managing applications in a distributed computing infrastructure
One embodiment of the present invention provides a system that allows secure deployment delegation and management of applications in a distributed-computing infrastructure. During operation, the system assigns a deployment-role to a user, which enables the user to deploy an application in the distributed-computing infrastructure. Moreover, by assigning the deployment-role to ...

06/01/06 - 20060117389 - Method for controlling access to informational objects
The described embodiments of invention comprises a method and an apparatus for regulating access to objects by authorized entities. Authorized entities are entities authorized for access by either an owner entity of the regulated object or an entity authorized to authorize access to the regulated object. Each user, which may ...

05/25/06 - 20060112434 - Video on demand system with selectable options of configurable random-access control
The present invention provides a method for an interactive media services system to provide media to a user through an interactive media services client device. The client device is coupled to a programmable media services server device. The method includes the step of implementing an interactive media guide. Additionally, the ...

05/18/06 - 20060107335 - Method and apparatus for provisioning software
A dynamic software provisioning system allows provisioning software on a number of different computing devices based upon a desired business process. The dynamic software provisioning system allows a user to request usage of the operating system for a specific period of time, for a specific amount of usage, or in ...

05/18/06 - 20060107334 - Trainable rule-based computer file usage auditing system
Embodiments of the present invention provide for flexible monitoring of content. The content at a client device can be monitored based on the use and actions performed by the client. In order to monitor the content at the client, a dependency is created between any recipient of the content and ...

05/18/06 - 20060107333 - Communication method and system between a recording and/or reproducing device and a remote unit
The present invention relates to a communication system comprising a recording and/or reproducing device (11) able to read a data carrier, and a first remote unit (12) comprising additional data for the data carrier. The recording and/or reproducing device (11) and the first remote unit (12) communicate via a network. ...

05/11/06 - 20060101524 - Hierarchical encryption key system for securing digital media
The hierarchical encryption key system uses multiple encryption processes for encrypting digital media content in a manner that supports both broadcast and delayed or time-shifted modes of content delivery. The hierarchical encryption key system uses a hierarchical series of encryption keys wherein each subsequent key in the hierarchy encrypts successively ...

05/04/06 - 20060095975 - Semiconductor device
A semiconductor device of the present invention includes: at least one of non-volatile memory unit operable to store data; at least one of an arithmetic-logic unit operable to perform an arithmetic-logic operation using data which is stored in the memory unit and data that is inputted from outside; and an ...

05/04/06 - 20060095974 - Apparatus and method for rendering digital content
An apparatus for rendering a digital content having license information defining specifics of permission of a rendering operation includes a license processor that acquires, from the license information of the digital content, a constraint defining conditions for rendering between the digital content and other digital content; an operation execution command ...

04/13/06 - 20060080742 - Information recording medium, information processing device, information processing method, and computer program
There are provided an information recording medium, an information processing apparatus, an information processing method, and a computer program, which can realize users' convenience for using content in accordance with a license and copyright protection. An information recording medium stores an encrypted content file including encrypted content, usage right information ...

04/06/06 - 20060075508 - Mandatory access control scheme with active objects
Access control is mediated by a set of 2-tuple labels or attributes which are associated with subject and object entities, respectively. Subject entitles, such as processes, have separate read and write attributes, while object entities, such as files, have separate integrity and write control attributes. The system implements a set ...

03/30/06 - 20060070131 - Method and apparatus for providing authorized remote access to application sessions
A method and apparatus for providing authorized remote access to one or more application sessions includes a client node, a collection agent, a policy engine, and a session server. The client node requests access to a resource. The collection agent gathers information about the client node. The policy engine receives ...

03/23/06 - 20060064762 - System and method for managing expiration date for use of contents in removable media
A system for managing expiration date for use of contents, including: a computer having a CPU, a memory for storing programs, a clock device, a network I/O, and a removable media I/O; and a removable medium having a memory for storing a content sand last access time information indicating the ...

03/23/06 - 20060064761 - Issuing unlock codes from a server with third party billing
The use of software is licensed on a particular central processing unit (CPU) residing on a computing device. A code is generated at a central service and provided to a third party publisher, such as a third party website, a vending machine, a retailer, or a phone service provider, for ...

03/16/06 - 20060059568 - Metric-based monitoring and control of a limited resource
Detecting unauthorized or excessive use of a resource is disclosed. The value of a metric is updated based at least in part on a first data associated with a current event associated with the metric and a second data associated with a most recent prior event associated with the metric. ...

03/16/06 - 20060059567 - System and method for controlling data access using security label components
A data processing system having memory stores data elements, and includes an access control system that controls user access to the stored data elements using security label components. Each stored data element is associated with a set of data security label components, and each user is associated with a set ...

03/16/06 - 20060059566 - System and method for using a graphic and/or audio license with digital rights management systems
A system and method for using an audio and/or graphic license with a digital rights management system. Content is downloaded with an OMA forward-lock wrapper and rendered for an individual device. Licensed graphics and/or sound files are stored in respective graphics and/or audio file subdirectories. Upon the launching of a ...

03/16/06 - 20060059565 - Allocation of network resources
Techniques are provided for allocating resources over a network. A resource consumer requests access to a resource over a network. As part of that request, the resource consumer acquires information that permits it to securely communicate with a resource provider. The resource provider controls the resource and once satisfied with ...

03/16/06 - 20060059564 - Methods, systems, and computer program products for user authorization levels in aggregated systems
Services may be provided in a networked applications services environment by authorizing access to different services from different service providers included in an aggregated system of service providers based on different aggregated authorization levels associated with users. Related systems and computer program products are also disclosed. ...

03/09/06 - 20060053494 - Embedded revocation messaging
An apparatus stores (60), transmits (1, 1′), or receives (2) a signal (5, 5′) representing user desired content (10, 10′, 10″, 10′″, 62) with device revocation information (4, 71) embedded in the user desired content. In a suitable transmitting embodiment (1, 1′), watermark content (20) including the device revocation information ...

03/02/06 - 20060048235 - Method and system for managing authentication and payment for use of broadcast material
An authentication system is disclosed. The authentication system includes a content provider configured to distribute encrypted content, wherein the encrypted content is generated using a content key, and a client having a symmetric key and configured to store the encrypted content received from the content provider and issue a request ...

03/02/06 - 20060048234 - Data management apparatus, data management system, and method of data management
A data management system includes an authentication server and a data management apparatus (or an MFP). The authentication server includes a storage part for storing affiliation information specifying at least one group that each user belongs to, an authentication part for transferring and receiving data to and from the data ...

03/02/06 - 20060048233 - Access control system and method
Access control devices are implemented at an access point of a plurality of remote properties. Each access control device has information unique to the access control device including the access control device unique identifier as well as a time determined, by an internal clock located at each access control device. ...

03/02/06 - 20060048232 - Controlling with rights objects delivery of broadcast encryption content for a network cluster from a content server outside the cluster
Methods, systems, and products are disclosed for delivering broadcast encryption content. Embodiments of the present invention typically include receiving in a cluster broadcast encryption content; receiving in a cluster a rights object defining device-oriented digital rights for broadcast encryption content; and administering the broadcast encryption content on one or more ...

02/23/06 - 20060041944 - Information processing device, information processing system, and program
The present invention provides an information processing device, an information processing system, and a program capable of improving security while maintaining convenience to the user. An information processing device 10 includes a magnetic disk 19 which stores application control information including identification information on a file in which an executable ...

02/23/06 - 20060041943 - Method and apparatus for wirelessly receiving a file using an application-level connection
Ad hoc application-level connections are established between wireless devices. Autonomous selection of files on a provider device facilitates migration of a file from the file provider to a file receiver. Once a file provider and a file receiver are communicatively coupled using an application-level connection, a portion of a determined ...

02/16/06 - 20060037082 - Filtering a permission set using permission requests associated with a code assembly
A security policy manager generates a permission grant set for a code assembly received from a resource location. The policy manager can execute in a computer system (e.g., a Web client) in combination with the verification module and class loader of the run-time environment. The permission grant set generated for ...

02/16/06 - 20060037081 - Method of and apparatus for controlling surveillance system resources
An apparatus for and method of assigning access to system resources comprising the steps of providing a set of system permissions to access the system resources, providing a role creation permission to allow a role having a role set of permissions from the set of system permissions to create a ...

02/09/06 - 20060031942 - Device internet resource access filtering system and method
A remote site filtering and monitoring system and method is described in which the Internet accesses of a remote device are monitored and categorized by a remote server in real-time. The system also provides for offline access logging and subsequent uploading, adjustable filtering sensitivities and particular HTTP port filtering. ...

02/09/06 - 20060031941 - Enhanced security using service provider authentication
A method (100) and an apparatus (210) for providing enhanced security using service provider authentication. In addition to authenticating an application signature (245) against a root certificate (235) stored on the network node (210), a first carrier identification (250) associated with the application (240) is compared to a second carrier ...

02/09/06 - 20060031940 - System and method for protecting a computer system from malicious software
In a computer system, a first electronic data processor is communicatively coupled to a first memory space and a second memory space. A second electronic data processor is communicatively coupled the second memory space and to a network interface device. The second electronic data processor is capable of exchanging data ...

02/02/06 - 20060026691 - Method of transmitting and reproducing content processed by various drm systems
Provided is a method of transmitting content processed according to first digital rights management (DRM) to a device that uses second DRM. The method includes generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the ...

02/02/06 - 20060026690 - Locking programming interface
A locking programming interface (LPI) which prevents piracy of device-related user software. An LPI Code is generated from a variety of different parameters, including a software product ID, a Production Key, and a number of device-specific parameters for the device that the user software supports. The LPI Code is burned ...

01/26/06 - 20060021064 - Key-based secure storage
A one-way hash function is applied to a seed supplied by an application to produce a hashed seed that is used to generate the application storage key. A one-way hash function is applied to a seed supplied by a user to produce a first hashed seed that is passed to ...

01/26/06 - 20060021063 - Method for transmission/reception of contents usage right information in encrypted form, and device thereof
Upon a license-data transmitter verifying a certificate C[KPdx] (the license-data receiver and the license-data transmitter will be referred to as “x” and “y”, respectively), the license-data transmitter transmits challenge information Ep(KPdx, Kcy) to the license-data receiver. In response to the challenge information, the license-data receiver transmits session information Es(Kcy, Ksx//KPpy) ...

01/26/06 - 20060021062 - Method of downloading contents and system thereof
A method of downloading content from a server to a mobile communication network and system thereof are disclosed. In particular, a method of downloading multimedia content from a server to a user equipment and a system for performing the method are disclosed. The method protects the copyright of multimedia content ...

01/19/06 - 20060015945 - Apparatus and method for storing and distributing encrypted digital content
The present invention provides for a method and system for providing a type of Managed/Secured File Transfer between one or more computers arraigned in server-client or peer-to-peer configuration. This method and system takes digital content in the form of a file, shreds this file into separate pieces and encrypts each ...

01/19/06 - 20060015944 - Apparatus and method for storing and distributing encrypted digital content and functionality suite associated therewith
The present invention provides for a method and system for providing a type of Managed/Secured File Transfer between one or more computers arraigned in server-client or peer-to-peer configuration. This method and system takes digital content in the form of a file, shreds this file into separate pieces and encrypts each ...

01/12/06 - 20060010502 - Method and apparatus for setting access restriction information
Access restriction information that an old storage device has is transferred to a new storage device. A management server 2200 obtains a port management TL 2445 that the old storage device 2400 has, through a LAN 2600 which is separated from a Fibre Channel network which is utilized for data ...

01/12/06 - 20060010501 - Digital file management and imaging system and method including secure file marking
The digital file management and imaging system and method of the present invention record additional independent data with each stored image including: a “true date” which is gleaned from a secure clock which is not settable by the user (the Authentidate™); a number derived from a cyclic redundancy code (CRC) ...

01/12/06 - 20060010500 - Protection of digital data content
Various embodiments include an apparatus, system, and method to control the distribution and usage of copyrighted digital content. The processing of a data file received over a communications network such as the Internet occurs both in a host digital appliance, such as a personal computer, notebook computer, audio player, video ...

01/05/06 - 20060005262 - Method for deactivating and reactivating security modules
This method also allows the reactivation of the security modules that have been deactivated previously. In this case, the method includes the step of sending another message containing an executable code (RUN-EMM−1) for the reactivation of the modules, this executable code having an inverted function to that of the executable ...

01/05/06 - 20060005261 - System for processing information, device for processing information, and program
An information processing system including: first and second information processing devices in communication through a network. The first device has a license information-sending unit that sends license information containing utilizing-time limit information for utilizing a content in response to a request from the second device. The second device has: a ...

01/05/06 - 20060005260 - Microprocessor
A microprocessor includes a decryption unit that decrypts information to be utilized by a processor core to obtain plaintext information when the acquired information is encrypted; and a plaintext information storing unit that stores the plaintext information. The microprocessor also includes a protected attribute adding unit that adds a protected ...

01/05/06 - 20060005259 - Information-processing device, information-processing method, and information-processing program product
An information-processing device includes a first interface configured to transmit content through a network to a first communication unit having a first unique identification, a second interface configured to receive a second unique identification allocated to a second communication unit, a first storage area configured to store the second unique ...

01/05/06 - 20060005258 - Contents distribution system, method thereof, server, user terminal, encryption device, managing device and streaming device
A contents distribution system and a method thereof, a server, a user terminal, an encryption device, a managing device, and a streaming device for enabling contents to be acquired inexpensively by performing charging in accordance with viewing time only, and also a communication charge to be limited only to a ...

01/05/06 - 20060005257 - Encrypted contents recording medium and apparatus and method for reproducing encrypted contents
The present invention aims to provide an encrypted contents playback apparatus and an encrypted contents playback method that are suitable for playing back contents from a medium storing therein both contents to which conventional copy protection is applied and contents to which DRM is applied, as well as to provide ...

01/05/06 - 20060005256 - Apparatus and method for managing digital rights with arbitration
A method is disclosed for controlling access to a digital content. The method allows receipt of a notice regarding suspension of a sender's rights to use the content. A trusted third party arbiter transmits a key to restore the sender's access to the content. Information regarding at least the sender ...

01/05/06 - 20060005255 - Method and system for securely distributing content
A system for securely distributing content is provided. A distribution system includes a content server that distributes content to content clients via a communications link or a tangible medium. The distribution system uses passwords to encrypt and decrypt content and to control access to sensitive information stored on the content ...

01/05/06 - 20060005254 - Integration of policy compliance enforcement and device authentication
Methods and apparatuses for integration of authentication and policy compliance enforcement. An enforcement agent may reside on a device. If an access assignment is provided to the device in conjunction with authentication, authorization to use the access granted may be restricted by the enforcement agent. In one embodiment a reduced-access ...

12/29/05 - 20050289656 - Network apparatus
Exemplary embodiments of the present application provide an apparatus, system, method, computer program and product, each capable of authenticating a client, generating client device management data corresponding to the authenticated client in a predetermined XML-based format, and providing the client device management data to the authenticated client. ...

12/29/05 - 20050289655 - Methods and systems for encrypting, transmitting, and storing electronic information and files
Methods and systems for securely requesting, retrieving, sending, and storing files. One aspect involves receiving a request for a file from a client device that identifies a user and the client device, encrypting the file using a session key based at least in part on the user and the client ...

12/22/05 - 20050283840 - Method for the automatic analysis of security requirements of information technology system
This invention concerns a method for the automatic analysis of security requirements in information technology systems. To this end, it proposes an automatic analysis process, implemented on a processor, and which allows: taking account of all security aspects, both organisational and technical, interacting with the users (security experts, decision makers, ...

12/15/05 - 20050278792 - Method and system for validating access to a group of related elements
A method and system for validating access to a group of related elements are described. The elements within the group access a security context associated with a markup domain when a call is made to an element. An authorized call to an element is enabled such that the markup domain ...

12/08/05 - 20050273864 - Original contents creation apparatus, derived contents creation apparatus, derived contents using apparatus, original contents creation method, derived contents creation method, and derived contents using method and verification method
Disclosed is an original contents creation apparatus realizing a protection of original contents and derived contents in a derived contents distribution by any number of secondary providers. An original contents creation apparatus includes a limitation rule acquisition unit for acquiring a limitation rule of a case of inserting additional secondary ...

12/01/05 - 20050268346 - Method and apparatus for playing back content based on digital rights management between portable storage and device, and portable storage for the same
A method of playing back content based on digital rights management (DRM) between a portable storage and a device and a portable storage for the same are provided. The method of playing back content using a portable storage includes requesting the portable storage to transmit a right to play back ...

12/01/05 - 20050268345 - Method and apparatus for providing temporary access to a network device
A method and apparatus for providing access to resources of a network device is provided. A user instructs a network device to generate a user password that is concealed from the user of the network device. The network device generates the user password based on, at least in part, public ...

12/01/05 - 20050268344 - License moving apparatus and program
A personal computer PC transmits to a server encoded user information and encoded license information, etc. contained in a secure recording medium. The server decodes the encoded license information to obtain license information. Then, the server deletes the encoded license information contained in the secure recording medium via the personal ...

11/24/05 - 20050262574 - Bios lock encode/decode driver
Systems and methods for preventing the unauthorized access to data stored on removable media, such as software, include storing a predetermined signature in the area of non-volatile memory in a computer system. Upon initialization of the computer system, a check is made to verify the signature. Only if the signature ...

11/24/05 - 20050262573 - Content presentation
There are a base station and at least one end station which can communicate with each other. The end station generates an access request when wishing to present content. The access request is transferred from the end station to the base station. The base station provides an agent in response ...

11/24/05 - 20050262572 - Information processing apparatus, operation permission/ denial information generating method, operation permission/denial information generating program and computer readable information recording medium
An operation permission/denial information generating part carries out permission/denial determination for operation of one actor on one resource for each type of operation based on resource classification information classifies each resource to be operated, actor classification information classifies each actor who operates the resource and definition information defining rules concerning ...

11/24/05 - 20050262571 - System and method to support platform firmware as a trusted process
A system and method to support platform firmware as a trusted process. Measurement of a trusted portion of original firmware are measured by a core root of trust measurement (CRTM). The measurement is stored in a secure manner during pre-boot. During operating system (OS)-runtime, requests are made to access an ...

11/10/05 - 20050251866 - Storage medium and method and apparatus for separately protecting data in different areas of the storage medium
Disclosed are a method and an apparatus for protecting data on a storage medium by encrypting the data to be recorded on the storage medium with a password. This method comprises a step of, generating, for changing key data on each memory unit by one password, the key data, thereafter ...

11/03/05 - 20050246777 - Entry point for digital rights management data
Disclosed is a record carrier, in particular a recordable or rewritable optical disc, having a program memory area for storing administrative data, a lead in area, a program area for storing user data and a lead out area. In order to enable a drive to access digital rights management data ...

10/27/05 - 20050241002 - Software program storage medium, software program rights management system and management method for software program rights
A software program rights management system for managing an assignment history of rights to use a software program stored in a software program storage medium is proposed. As a storage medium for supplying a software program, a write-once storage medium or a storage medium having a read-only storage portion for ...

10/27/05 - 20050241001 - Consumable resource access control
A consumable resource access control unit includes a consumable resource and an authorization interface coupled to the consumable resource. The interface is configured to limit use of the resource. ...

10/20/05 - 20050235362 - Hierarchical trusted code for content protection in computers
An architecture for protecting premium content in a nonsecure computer environment executes only a small number of code modules in a secure memory. The modules are arranged in a hierarchy of trust, where a module names other modules that it is willing to trust, and those modules in turn name ...

10/20/05 - 20050235361 - Rendering protected digital content within a network of computing devices or the like
Transmitter and receiver computing device are interconnected by a network. The transmitter transmits protected digital content to the receiver in a manner so that the receiver can access the content even though the content is directly licensed to the transmitter and not the receiver. ...

10/13/05 - 20050229258 - Method and system for digital rights management of documents
An improved method and system for digital rights management is described. ...

10/13/05 - 20050229257 - Information device, information server, information processing system, information processing method, and information processing program
Provided are an information device, an information server, an information processing system, an information processing method and an information processing program enabling a user who obtains a content in a legitimate manner to use the content in any other information device owned by the user. An information server (4) associates ...

10/06/05 - 20050223415 - Rights management terminal, server apparatus and usage information collection system
The present invention provides a rights management terminal that can securely send and receive usage information while preventing spoofing and protecting user's privacy. The rights management terminal manages a copyright of a content using a license that includes a usage rule of the content, and includes: a first public key ...

10/06/05 - 20050223414 - Method and system for providing cryptographic document retention with off-line access
Techniques for utilizing security criteria to implement document retention for electronic documents are disclosed. The security criteria can also limit when, how and where access to the electronic documents is permitted. The security criteria can pertain to keys (or ciphers) used to secure (e.g., encrypt) electronic files (namely, electronic documents), ...

09/15/05 - 20050204405 - Method and system for digital rights management
In a method and system for digital content management, in order for an end-user application on a consumer electronic device to be fully functional, the end-user must have a secure computing device, such as a smart card or dongle, in communication with the consumer electronic device. The secure computing device ...

08/11/05 - 20050177875 - Revocation of content material
This invention relates to attaching or relating a unique identifier of an importing/screening device to content material during import from a non-compliant domain into a compliant domain. In this way, it is always possible to identify the importing device for a given content material. A list comprising unique identifiers for ...

###

Design/code © 2009 FreshContext LLC/Freshpatents.com. Website Terms and Conditions
Patent data source: patents published by the United States Patent and Trademark Office (USPTO)
Information published here is for research/educational purposes only (and in conjunction with our Keyword Monitor) and is not meant to be used in place of the full USPTO patent document/images or a comprehensive patent archive search. Complete official applications are on file at the USPTO and often contain additional data/images (Freshpatents is currently text-only). FreshPatents.com is not affiliated with or endorsed by the USPTO or firms/individuals or products/designs/ideas related to listed patents.

FreshPatents.com Support