PROBLEM TO BE SOLVED: To solve the problem, wherein it is impossible for an electronic content information provider to provide commercially secure and effective method, for a configurable general-purpose electronic commercial transaction/distribution control system. SOLUTION: In this system, having at least one protected processing environment for safely controlling at least one portion of decoding of digital information, a secure content distribution method comprises a process for encapsulating digital information in one or more digital containers; a process for encrypting at least a portion of digital information; a process for associating at least partially secure control information for managing interactions with encrypted digital information and/or digital container; a process for delivering one or more digital containers to a digital information user; and a process for using a protected processing environment, for safely controlling at least a portion of the decoding of the digital information. COPYRIGHT: (C)2006,JPO&NCIPI

https://apps.dtic.mil/dtic/tr/fulltext/u2/a423264.pdf

Systems and Methods for Secure Transaction Management and Electronic Rights Protection

A system for controlling use and distribution of digital works, in which the owner
of a digital work (101) attaches usage rights (102) to that work. Usage rights are granted by the
"owner" of a digital work to "buyers" of the digital work. The usage rights define how a
digital work may be used and further distributed by the buyer. Each right has associated with it
certain optional specifications which outline the conditions and fees upon which the right may
be exercised. Digital works are stored in a repository. A repository will process each request
(103,104) to access a digital work by examining the corresponding usage rights (105). Digital
work playback devices, coupled to the repository containing the work, are used to play, display
or print the work. Access to digital works for the purposes of transporting between
repositories (e.g. copying, borrowing or transfer) is carried out using a digital work transport
protocol. Access to digital works for the purposes of replay by a digital work playback
device(e.g. printing, displaying or executing) is carried out using a digital work playback
protocol. Access is denied (106) or granted (107) depending whether the requesting repository
has the required usage rights.

System for controlling the distribution and use of digital works

A method and system for establishing and maintaining a secure TCP/IP session between a server (1) having a database (3) and a client (21-a, 21-b, 21-c), the method includes sending a hello message from the client to the server (1) to establish client authorization, the server (1) sends a server session ID and a session private key to the client to establish the session.

Determining the visibility to a remote database client

An imaging system for a vehicle includes an imaging device having a field of view exteriorly and forward of the vehicle in its direction of travel, and an image processor operable to process the captured images in accordance with an algorithm. The algorithm comprises a sign recognition routine and a character recognition routine. The image processor processes the image data captured by the imaging device to detect signs in the field of view of the imaging device and applies the sign recognition routine to determine a sign type of the detected sign. The image processor is operable to apply the character recognition routine to the image data to determine information on the detected sign. The image processor applies the character recognition routine to the captured images in response to an output of the sign recognition routine being indicative of the detected sign being a sign type of interest.

Imaging system for vehicle

Rights management information is used at least in part in a matching, narrowcasting, classifying and/or selecting process. A matching and classification utility system comprising a kind of Commerce Utility System is used to perform the matching, narrowcasting, classifying and/or selecting. The matching and classification utility system may match, narrowcast, classify and/or select people and/or things, non-limiting examples of which include software objects. The Matching and Classification Utility system may use any pre-existing classification schemes, including at least some rights management information and/or other qualitative and/or parameter data indicating and/or defining classes, classification systems, class hierarchies, category schemes, class assignments, category assignments, and/or class membership. The Matching and Classification Utility may also use at least some rights management information together with any artificial intelligence, expert system, statistical, computational, manual, or any other means to define new classes, class hierarchies, classification systems, category schemes, and/or assign persons, things, and/or groups of persons and/or things to at least one class.

Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information

The present invention allows for the electronic management and enforcement of software licenses. The present invention can be used in a network or non-network environment to facilitate product licensing and upgrades. Further, the present invention accommodates the use of compact disc read-only memory (CD ROM) product distribution. Further, the present invention can retain useful, after-market information. The present invention provides the ability to implement a license policy. Further, the license policy can be implemented or modified without requiring a new version of the associated product. The present invention provides the ability to create electronic licenses. Further, the present invention provides the ability to extract and transfer licenses from an inventory of licenses to a final distribution media. Licenses can be transferred to a reseller in batches. A reseller can extract unused licenses from these batches to generate licenses. An optional companion license can be generated. Installed licenses can be managed and enforced by the present invention. Further, Upgrades (e.g., version and connections) can be accomplished independent of the product. License documents can be used to retain information related to a license. Portions of a license document can be encrypted using a private key and message digests. The encrypted result can be stored in the license document, and examined to validate a license. License documents can be created in batches. One or more licenses in a batch of licenses can be enabled to create a software license.

Method and apparatus for electronic licensing

A method of providing authoritative access control to computer networks that employs a distributed network directory using a static means of resolving object attributes is disclosed. The method employs the existing directories and an authentication procedure for each server. A first object that is under the physical control of the administrator of one partition of the distributed network directory requests access to a second object that is under the physical control of the administrator of another partition of the distributed network directory. The directory verifies that the access control list of the first object includes the second object. The access control list of the second object is then checked to verify that it includes a reference to the first object as an object that is permitted access to the second object. As a result, access is only granted in response to requests from objects that appear in the access control list of the second object. A method of synchronizing the access control lists based upon an authoritative access control list is also disclosed.

Method and apparatus to secure digital directory object changes

The present invention provides a method and apparatus for message packet authentication to prevent the forging of message packets. A portion of the message digest, referred to as the signature, is then appended to the actual message when it is sent over the wire (205). The receiving station strips the signature from the message (208), preappends the same secret session key (209) and creates its own message digest (212). The signature of the digest created by the receiving station is compared to the signature of the digest appended by the sending station (213). If there is a match, an authentic message is assumed (214). If there is no match, the message is considered as invalid and discarded (216).

Method and apparatus for authentication of client server communication

An apparatus and method provide a controlled, dynamically loaded, modular, cryptographic filler for integration into a base executable having a "slot" minimizing the interface between the filler and the base executable, and between individual component modules in the filler. Cryptographic engines provide for security (privacy and integrity) of data. The base executable having potential cryptographic capability may rely on an integrated loader to control linking of the filler and its modules according to a controlling policy set by export or import laws. A base executable may be a network operating system having a "slot" for dynamically linking the filler and its modules. Modules may be created by a third party vendor within controls enforced by the loader and a management module in the filler. Asymmetric key cryptography may assure that modules have not been modified, functionally extended, or created by unauthorized sources, and may ensure that keys used in the modules come only from authorized sources. The policy may limit each module's function, access, and potential for modification or substitution. The filler and modules, typically representing a relatively small portion of the overall coding required by the base executable, may provide strong controls limiting integration by providing layered access between modules, and excluding direct access to or by them from the base executable or supported applications.

Controlled modular cryptography apparatus and method

An apparatus and method provides one or more controlled, dynamically loaded, modular, cryptographic fillers. Fillers may be loaded by a single loader, multiple independent loaders, or nested loaders. Loaders may be adapted to load other loaders, within cryptographic controls extant and applicable thereto. Integration into a base executable having one or more slots, minimizes, controls, and links the interface between the fillers and base executables. The filler may itself operate recursively to load another filler in nested operations, whether or not the fillers are in nested relation to one another. An ability of any filler to be loaded may be controlled by the base executable verifying the integrity, authorization, or both for any filler. The base executable may rely on an integrated loader to control loading and linking of fillers and submodules. A policy may limit each module function, access, and potential for modification or substitution. Dynamically loaded modules (loaders, other fillers, and submodules thereof), typically represent a relatively small portion of the overall coding required by the base executable, and may provide strong controls limiting integration by providing access that is nested, layered, or both between modules excluding direct access to or by them from the base executable or supported applications.

Kevin W. Kingdon

Papers

Method and apparatus for electronic licensing

Method and apparatus to secure digital directory object changes

Method and apparatus for authentication of client server communication

Controlled modular cryptography apparatus and method

Nested strong loader apparatus and method