System and method for integrating secure and non-secure software objects

    公开(公告)号:US20060143437A1

    公开(公告)日:2006-06-29

    申请号:US11357551

    申请日:2006-02-17

    申请人: Attila Narin

    发明人: Attila Narin

    IPC分类号: H04L9/00

    CPC分类号: G06F21/53

    摘要: A secure first process uses a non-secure software object by hosting said non-secure software object in a separate second process, where the first process's address space is inaccessible to the second process. The first process communicates with the second process, preferably by means of a COM API that the second process exposes to the first process. The application that runs in the second process may expose APIs of the hosted non-secure object to the first process, and the first process may communicate with the non-secure object hosted in the second process through this API. In a preferred embodiment, the second process renders its output in a child window of the first process, so that the use of a second process to host non-secure software objects is transparent to a user of the first process.

    Supplemental request header for applications or devices using web browsers

    公开(公告)号:US20060031416A1

    公开(公告)日:2006-02-09

    申请号:US11169709

    申请日:2005-06-30

    申请人: Attila Narin

    发明人: Attila Narin

    IPC分类号: G06F15/16

    摘要: A method and system for generating and/or servicing requests for information requested across networks, such as the Internet, is disclosed. In some embodiments, supplemental request header information is included with HyperText Transfer Protocol (HTTP) requests for a web page. The supplemental request header information may identify one or more characteristics of an application for which the HTTP request was generated. In further embodiments, the Internet server servicing the HTTP request having such a supplemental request header may extract and use information from this header to select and/or modify the requested web page to best suit the requesting application's status and/or current characteristic.

    Digital license with referral information
    13.
    发明授权
    Digital license with referral information 有权
    具有转介资料的数位牌照

    公开(公告)号:US07366915B2

    公开(公告)日:2008-04-29

    申请号:US10135303

    申请日:2002-04-30

    IPC分类号: G06F11/30 G06F12/14 H04L9/32

    摘要: A digital license corresponds to encrypted digital content and includes a content key for decrypting same. The content key is encrypted and is decryptable by a decryption key available only to the first persona, the license thereby being tied to the first persona. The license is a first license and further includes referral information specifying a first location at which a second persona may obtain a second license for the content tied thereto. The second persona requests to render the content by way of the first license and the request is denied because the first license is not tied to the second persona. The referral information is obtained from the first license and employed to initiate contact with the specified first location and obtain the second license tied to the second persona.

    摘要翻译: 数字许可证对应于加密的数字内容,并且包括用于对其进行解密的内容密钥。 内容密钥被加密,并且可以通过仅可用于第一个角色的解密密钥进行解密,该许可证因此被绑定到第一个角色。 该许可证是第一许可证,并且进一步包括指定第二个人物角色可获得与其相关的内容的第二许可的第一位置的转介信息。 第二个人物请求通过第一个许可证呈现内容,并且请求被拒绝,因为第一个许可证不与第二个角色相关联。 转介信息是从第一个许可获得的,并且被雇用以发起与指定的第一个位置的联系,并获得与第二个角色相关的第二个许可。

    Server controlled branding of client software deployed over computer networks
    14.
    发明授权
    Server controlled branding of client software deployed over computer networks 有权
    通过计算机网络部署的客户端软件的服务器控制品牌

    公开(公告)号:US07188342B2

    公开(公告)日:2007-03-06

    申请号:US09839784

    申请日:2001-04-20

    IPC分类号: G06F9/44 G06F17/30

    CPC分类号: G06Q30/06

    摘要: This invention describes a system and method for branding software deployed over computer networks. A user contacts the distributor's web site and initiates a download of the software. When the user visits the download website, the identity of the particular web site from which the download was initiated is transmitted to a branding server and captured on the user's computer, preferably in the form of a cookie. Subsequently, the user contacts the branding server and branding instructions are provided to the user's computer in accordance with the cookie. Branding may take the form of featuring the distributor's web site more prominently in an “integrated shopping service” or in a directory, or it may perform other alterations to the software. Branding is controlled by the software manufacturer's branding server, and can be modified at any time after the software is released.

    摘要翻译: 本发明描述了通过计算机网络部署的软件品牌化的系统和方法。 用户联系分销商的网站,并启动软件的下载。 当用户访问下载网站时,发起下载的特定网站的身份被传送到品牌服务器并且被捕获在用户的计算机上,优选地以cookie的形式。 随后,用户联系品牌服务器,并且根据cookie将品牌指示提供给用户的计算机。 品牌形式可能采用在“综合购物服务”或目录中更突出地展示分销商网站的形式,或者可以对软件进行其他更改。 品牌由软件制造商的品牌服务器控制,并可在软件发布后随时进行修改。

    Tracking usage behavior in computer systems
    15.
    发明授权
    Tracking usage behavior in computer systems 有权
    跟踪计算机系统中的使用行为

    公开(公告)号:US07039699B1

    公开(公告)日:2006-05-02

    申请号:US09563706

    申请日:2000-05-02

    IPC分类号: G06F15/16

    CPC分类号: G06Q30/02

    摘要: A system and process for tracking users' usage of content in computer systems. The tracking and accumulation of content usage information allows content providers to understand more about their user base. In a computer system having numerous users, it is advantageous to provide relevant customized content in addition to any specifically requested content. By storing and processing content usage information for users in a computer system, customized content may be provided to a user based on the user's previous usage of similar content. In operation, a computer system hosting various content creates a unique identifier, having data storage space, for a given user of the computer system. When a user sends a request for content to the computer system, a unique identifier is created and/or updated with information relevant to a user's content request. The identifier is passed back to the user with the specifically desired content. When processing subsequent requests for content, the computer system updates the unique identifier with most recent usage information. In addition, the computer system processes the unique identifier for previous usage information in an effort to provide customized relevant content, in addition to the specifically desired content.

    摘要翻译: 跟踪用户在计算机系统中使用内容的系统和过程。 内容使用信息的跟踪和累积允许内容提供商更多地了解他们的用户群。 在具有许多用户的计算机系统中,除了任何特定请求的内容之外,提供相关的定制内容是有利的。 通过在计算机系统中存储和处理用户的内容使用信息,可以基于用户先前使用类似内容来向用户提供定制内容。 在操作中,托管各种内容的计算机系统为计算机系统的给定用户创建具有数据存储空间的唯一标识符。 当用户向计算机系统发送内容请求时,使用与用户的内容请求相关的信息来创建和/或更新唯一标识符。 该标识符被传回具有特定期望内容的用户。 当处理对内容的后续请求时,计算机系统使用最新的使用信息更新唯一标识符。 此外,除了特定期望的内容之外,计算机系统处理用于先前使用信息的唯一标识符以努力提供定制的相关内容。

    System and method for activating a rendering device in a multi-level rights-management architecture
    16.
    发明授权
    System and method for activating a rendering device in a multi-level rights-management architecture 有权
    用于在多级权限管理架构中激活呈现设备的系统和方法

    公开(公告)号:US07017189B1

    公开(公告)日:2006-03-21

    申请号:US09604564

    申请日:2000-06-27

    IPC分类号: H04L9/00 H04L9/32

    摘要: A digital rights management system for the distribution, protection and use of electronic content. The system includes a client architecture which receives content, where the content is preferably protected by encryption and may include a license and individualization features. Content is protected at several levels, including: no protection; source-sealed; individually-sealed (or “inscribed”); source-signed; and filly-individualized (or “owner exclusive”). The client also includes and/or receives components which permit the access and protection of the encrypted content, as well as components that allow content to be provided to the client in a form that is individualized for the client. In some cases, access to the content will be governed by a rights construct defined in the license bound to the content. The client components include an object which accesses encrypted content, an object that parses the license and enforces the rights in the license, an object which obtains protection software and data that is individualized for the client and/or the persona operating the client, and a script of instructions that provides individualization information to a distributor of content so that the content may be individualized for the client and/or its operating persona. Content is generally protected by encrypting it with a key and then sealing the key into the content in a way that binds it to the meta-data associated with the content. In some instances, the key may also be encrypted in such a way as to be accessible only by the use of individualized protection software installed on the client, thereby binding use of the content to a particular client or set of clients.

    摘要翻译: 数字版权管理系统,用于分发,保护和使用电子内容。 该系统包括接收内容的客户端架构,其中优选地通过加密保护内容,并且可以包括许可证和个性化特征。 内容受到多个级别的保护,包括:无保护; 源密封; 单独密封(或“铭刻”); 源代码; 个人化(或“独家”)。 客户端还包括和/或接收允许加密内容的访问和保护的组件以及允许以为客户端个性化的形式向客户端提供内容的组件。 在某些情况下,访问内容将受到绑定到内容的许可证中定义的权利结构的约束。 客户端组件包括访问加密内容的对象,解析许可证并执行许可证中的权限的对象,获得保护软件的对象和为客户端和/或操作客户端的个人化的数据,以及 向内容分发者提供个性化信息的指令脚本,使得可以为客户端和/或其操作人员个性化内容。 内容通常通过用密钥加密来保护,然后以将其绑定到与内容相关联的元数据的方式将密钥密封到内容中。 在某些情况下,密钥还可以以仅通过使用安装在客户端上的个性化保护软件才能访问的方式进行加密,从而将内容的使用绑定到特定客户端或客户端集合。

    Supplemental request header for applications or devices using web browsers

    公开(公告)号:US20060031417A1

    公开(公告)日:2006-02-09

    申请号:US11169939

    申请日:2005-06-30

    申请人: Attila Narin

    发明人: Attila Narin

    IPC分类号: G06F15/16

    摘要: A method and system for generating and/or servicing requests for information requested across networks, such as the Internet, is disclosed. In some embodiments, supplemental request header information is included with HyperText Transfer Protocol (HTTP) requests for a web page. The supplemental request header information may identify one or more characteristics of an application for which the HTTP request was generated. In further embodiments, the Internet server servicing the HTTP request having such a supplemental request header may extract and use information from this header to select and/or modify the requested web page to best suit the requesting application's status and/or current characteristic.

    Reviewing cached user-group information in connection with issuing a digital rights management (DRM) license for content
    18.
    发明授权
    Reviewing cached user-group information in connection with issuing a digital rights management (DRM) license for content 失效
    查看缓存的用户组信息,以发布内容的数字版权管理(DRM)许可证

    公开(公告)号:US06990502B2

    公开(公告)日:2006-01-24

    申请号:US10374324

    申请日:2003-02-26

    IPC分类号: G06F17/30

    摘要: A computer network has storage devices organized into X levels and storing element-group information. To determine whether an element is a member of any target groups, each target group is validated by searching the storage devices to find a target group item and, if found, placing the target group in a validated target bin (V). Also, the element is validated by searching the storage devices to find an element item, and if found, determining from the item all groups that the element is listed as being a member of and placing such member-of groups in a search bin (S). If (S) intersects (V), the element is a member of a target group. If not, all groups in (S) are moved to a queue (Q1) corresponding to the storage device at level 1 and an iterative process searches for a membership path from the element to any target group.

    摘要翻译: 计算机网络具有组织成X级别并存储元素组信息的存储设备。 要确定元素是否是任何目标组的成员,通过搜索存储设备来查找目标组项,并且如果找到,将目标组放置在验证的目标bin(V)中,则每个目标组都被验证。 此外,通过搜索存储设备来查找元素项目来验证元素,并且如果发现,则从所有组中确定元素被列为成员的成员并将这些成员组放置在搜索仓(S )。 如果(S)与(V)相交,则该元素是目标组的成员。 如果不是,将(S)中的所有组移动到与级别1的存储设备相对应的队列(Q 1),并且迭代过程搜索从元素到任何目标组的成员资格路径。

    Using a first device to engage in a digital rights management transaction on behalf of a second device
    19.
    发明授权
    Using a first device to engage in a digital rights management transaction on behalf of a second device 有权
    使用第一个设备代表第二个设备进行数字版权管理事务

    公开(公告)号:US07865964B2

    公开(公告)日:2011-01-04

    申请号:US11624029

    申请日:2007-01-17

    摘要: A first device is used to initiate and direct a rights-management transaction, such as content licensing, acquisition, or activation, on behalf of a second device. The first device may, for example, be a desktop computer, laptop computer, or electronic kiosk at a bricks-and-mortar store. The second device may, for example, be a handheld computer that is cradled to establish communicative connectivity with the first device. A user interacts with the first device to initiate a transaction on behalf of the second device. The first device then obtains the information from the second device that is necessary to perform the transaction on behalf of the second device, communicates with a server, and provides the result of the server communication to the first device. Thus, the first device acts as a proxy for the second device.

    摘要翻译: 第一个设备用于代表第二个设备启动和引导权限管理事务,如内容许可,获取或激活。 第一设备可以例如是在实体店的台式计算机,膝上型计算机或电子亭。 第二设备可以例如是手持式计算机,其被支撑以建立与第一设备的通信连接。 用户与第一设备交互以代表第二设备发起事务。 然后,第一设备从第二设备获取代表第二设备执行交易所需的信息,与服务器通信,并将服务器通信的结果提供给第一设备。 因此,第一设备充当第二设备的代理。

    Issuing a digital rights management (DRM) license for content based on cross-forest directory information
    20.
    发明授权
    Issuing a digital rights management (DRM) license for content based on cross-forest directory information 有权
    根据跨林目录信息发布内容的数字版权管理(DRM)许可证

    公开(公告)号:US07827156B2

    公开(公告)日:2010-11-02

    申请号:US10374321

    申请日:2003-02-26

    IPC分类号: G06F7/00 G06F17/00 G06F17/30

    摘要: An organization maintains a computer network comprising at least a forest A and a forest B, where forest A has a directory A and a querying entity A capable of querying directory A, and forest B has a directory B and a querying entity B capable of querying directory B. Querying entity A receives a request from the user and decides whether to grant the request based at least in part on whether the user is a member of the group. Thus, querying entity A queries directory A to return information on the group, is directed to forest B, contacts querying entity B, requests querying entity B to query directory B whether the user is a member of the group, receives a response, and grants the request from the user based at least in part on whether the user is a member of the group.

    摘要翻译: 组织维护至少包含森林A和森林B的计算机网络,其中森林A具有目录A和能够查询目录A的查询实体A,林B具有能够查询的目录B和查询实体B 目录B.查询实体A至少部分地基于用户是否是组的成员,接收来自用户的请求并决定是否授予请求。 因此,查询实体A查询目录A以返回组上的信息,针对森林B,联系人查询实体B,请求查询实体B查询目录B用户是否是组的成员,接收响应,并且授予 来自用户的请求至少部分地基于用户是否是该组的成员。