Software or other information integrity verification using variable block length and selection
    51.
    发明申请
    Software or other information integrity verification using variable block length and selection 有权
    使用可变块长度和选择的软件或其他信息完整性验证

    公开(公告)号:US20080168564A1

    公开(公告)日:2008-07-10

    申请号:US11651359

    申请日:2007-01-08

    IPC分类号: G06F12/14

    CPC分类号: G06F21/64

    摘要: An integrity verification process and associated apparatus to detect tampering or other alterations to computer code (software) or other computer files, and especially useful to detect tampering with code by hackers who might try to plant their own malicious code in the software. To make the verification process more robust versus hackers, each e.g., object code file to be protected is first selected using some sort of rule, then partitioned into variable length blocks or portions, the lengths varying in an unpredictable manner. Each portion has its checksum or hash value computed. An accompanying verification file is created which includes a vector for each portion including the portion's start address in memory, length, and the computed checksum or hash value. When the code is later to be run (executed) the verification file is conventionally read and each portion is verified by computing its checksum or hash value using the same algorithm as before, and comparing that to the value in the associated verification file vector. Lack of a match in the two values indicates tampering, so execution of the code can be halted.

    摘要翻译: 完整性验证过程和相关联的设备,用于检测对计算机代码(软件)或其他计算机文件的篡改或其他更改,并且特别有用于检测骇客可能尝试在软件中种植自己的恶意代码的篡改代码。 为了使验证过程比黑客更健壮,每个例如待保护的目标代码文件首先使用某种规则来选择,然后被分割成可变长度的块或部分,长度以不可预测的方式变化。 每个部分都有其计算的校验和或散列值。 创建伴随的验证文件,其中包括每个部分的向量,包括部分在内存中的起始地址,长度以及计算的校验和或哈希值。 当代码稍后运行(执行)时,常规地读取验证文件,并且通过使用与之前相同的算法计算其校验和或散列值来验证每个部分,并将其与相关联的验证文件向量中的值进行比较。 两个值中缺少匹配表示篡改,因此可以停止执行代码。

    Protection of audio or video data in a playback device
    52.
    发明申请
    Protection of audio or video data in a playback device 有权
    保护播放设备中的音频或视频数据

    公开(公告)号:US20080165961A1

    公开(公告)日:2008-07-10

    申请号:US11651300

    申请日:2007-01-08

    IPC分类号: H04N7/167

    摘要: Method and apparatus to prevent hacking of encrypted audio or video content during playback. Hackers, using a debugging attachment or other tools, can illicitly access encrypted data in memory in a playback device when the data is decrypted during playback and momentarily stored in digital form. This hacking is defeated here by methodically “poisoning” the encrypted data so that it is no longer playable by a standard decoder. The poisoning involves deliberate alteration of certain bit values. On playback, the player invokes a special secure routine that provides correction of the poisoned bit values, for successful playback.

    摘要翻译: 播放期间防止加密音频或视频内容黑客入侵的方法和装置。 使用调试附件或其他工具的黑客可以在播放过程中解密数据并立即以数字形式存储时非法访问播放设备中的加密数据。 这个黑客在这里通过有条不紊地“中毒”加密的数据,使其不能被标准解码器播放,从而被击败。 中毒涉及故意改变某些位值。 在播放时,播放器调用特殊的安全程序,提供中毒位值的校正,以便成功播放。

    System and method for pseudo-random polymorphic tree construction
    53.
    发明授权
    System and method for pseudo-random polymorphic tree construction 有权
    伪随机多态树构建系统与方法

    公开(公告)号:US08699703B2

    公开(公告)日:2014-04-15

    申请号:US13276612

    申请日:2011-10-19

    IPC分类号: H04L9/00

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for obfuscating data via a pseudo-random polymorphic tree. A server, using a seed value shared with a client device, generates a tag stream according to a byte-string algorithm. The server passes the tag stream and the data to be transmitted to the client device through a pseudo-random polymorphic tree serializer to generate a pseudo-random polymorphic tree, which the server transmits to the client device. The client device, using the same seed and byte-string algorithm, generates the same tag stream as on the server. The client passes that tag stream and the received pseudo-random polymorphic tree through a pseudo-random polymorphic tree parser to extract the data. Data to be transmitted from the server to the client device is hidden in a block of seemingly random data, which changes for different seed values. This approach obfuscates data and has low processing overhead.

    摘要翻译: 本文公开了用于通过伪随机多态树来模糊数据的系统,方法和非暂时的计算机可读存储介质。 使用与客户端设备共享的种子值的服务器根据字节串​​算法生成标签流。 服务器通过伪随机多态树序列化器将标签流和要发送到客户端设备的数据传递给服务器发送给客户端设备的伪随机多态树。 使用相同种子和字节串算法的客户端设备生成与服务器上相同的标签流。 客户端通过伪随机多态树解析器传递该标签流和接收的伪随机多态树,以提取数据。 要从服务器发送到客户端设备的数据被隐藏在看似随机数据的块中,其对于不同的种子值而变化。 这种方法模糊数据并具有较低的处理开销。

    Digital rights management system with diversified content protection process
    54.
    发明申请
    Digital rights management system with diversified content protection process 审中-公开
    具有多元化内容保护过程的数字版权管理体系

    公开(公告)号:US20070220585A1

    公开(公告)日:2007-09-20

    申请号:US11366191

    申请日:2006-03-01

    IPC分类号: H04L9/00

    CPC分类号: G06F21/10

    摘要: Some embodiments of the invention provide a digital rights management (DRM) method for distributing content to users over a network. Based on a first set of diversity indicia, the method identifies a first security element for distributing a set of content to a first computer. The set of content includes one or more pieces of content. Based on a second set of diversity indicia, the method identifies a second security element for distributing the set of content to a second computer. Based on the first security element, method protects the set of content for the first computer and sends the protected set of content to the first computer through the network. Based on the second security element, the method protects the set of content for the second computer and sends the protected set of content to the second computer through the network.

    摘要翻译: 本发明的一些实施例提供了一种用于通过网络向用户分发内容的数字版权管理(DRM)方法。 基于第一组分集标记,该方法识别用于将一组内容分发给第一计算机的第一安全元件。 该组内容包括一个或多个内容。 基于第二组分集标记,所述方法识别用于将所述内容集合分发给第二计算机的第二安全元件。 基于第一安全元素,方法保护第一计算机的内容集合,并通过网络将受保护的内容集合发送到第一计算机。 基于第二安全元件,该方法保护第二计算机的内容集,并通过网络将受保护的内容集合发送到第二计算机。

    Storage, homogenisation and dosing system
    55.
    发明授权
    Storage, homogenisation and dosing system 有权
    储存,均质和给药系统

    公开(公告)号:US07407319B2

    公开(公告)日:2008-08-05

    申请号:US11104302

    申请日:2005-04-12

    IPC分类号: B01F11/00

    CPC分类号: B01F11/0022

    摘要: Storage, homogenisation and dosing system of substances able to precipitate or aggregate comprising at least one tank (20) for storage and a valve (40) for dosing. The at least one tank (20) comprises a tubular portion (21), a bottom (22) and a cover (23).The at least one valve (40) is housed near to the bottom (22) of the at least one tank (20) and the system also comprises oscillating support means for allowing a good homogenisation of the substances contained in the at least one tank (20).

    摘要翻译: 能够沉淀或聚集的物质的储存,均化和给料系统包括至少一个用于储存的罐(20)和用于定量给料的阀(40)。 所述至少一个罐(20)包括管状部分(21),底部(22)和盖(23)。 所述至少一个阀(40)容纳在所述至少一个罐(20)的底部(22)附近,并且所述系统还包括振荡支撑装置,用于允许包含在所述至少一个罐中的物质 20)。

    Use of media storage structure with multiple pieces of content in a content-distribution system
    56.
    发明申请
    Use of media storage structure with multiple pieces of content in a content-distribution system 有权
    在内容分发系统中使用具有多条内容的媒体存储结构

    公开(公告)号:US20070083473A1

    公开(公告)日:2007-04-12

    申请号:US11249123

    申请日:2005-10-11

    IPC分类号: G06Q99/00 H04L9/00 H04K1/00

    摘要: Some embodiments of the invention provide a method for distributing content over a network. The method distributes a single media storage structure to a device (e.g., a computer, portable player, etc.) that connects to the network. The media storage structure includes first and second pieces of encrypted content. Based on whether the device is allowed to access the first piece of content, the second piece of content, or both, the method provides the device with a set of keys for decrypting the pieces of the content that the device is able to access. The provided set of keys might include one or more keys for decrypting only one of the two encrypted pieces of content. Alternatively, it might include one or more keys for decrypting both encrypted pieces of content. For instance, the selected set of keys might include a first key for decrypting the first encrypted piece and a second key for decrypting the second encrypted piece. Based on the provided set of keys, the device can then decrypt and access either one of the two pieces of content in the media storage structure or both pieces of encrypted content in the media storage structure.

    摘要翻译: 本发明的一些实施例提供了一种通过网络分发内容的方法。 该方法将单个媒体存储结构分发到连接到网络的设备(例如,计算机,便携式播放器等)。 媒体存储结构包括第一和第二片加密内容。 基于该设备是允许访问第一条内容,第二条内容还是两者,该方法向设备提供一组密钥,用于解密设备能够访问的内容片段。 所提供的密钥集可以包括用于仅解密两个加密的内容中的一个的一个或多个密钥。 或者,它可以包括用于解密加密的内容片段的一个或多个密钥。 例如,所选择的密钥集合可以包括用于解密第一加密片段的第一密钥和用于解密第二加密片段的第二密钥。 基于所提供的一组密钥,设备可以解密和访问媒体存储结构中的两条内容中的任何一个或媒体存储结构中的两条加密内容。

    SYSTEM AND METHOD FOR PSEUDO-RANDOM POLYMORPHIC TREE CONSTRUCTION
    57.
    发明申请
    SYSTEM AND METHOD FOR PSEUDO-RANDOM POLYMORPHIC TREE CONSTRUCTION 有权
    PSOUDO随机多态树构造的系统与方法

    公开(公告)号:US20130103942A1

    公开(公告)日:2013-04-25

    申请号:US13276612

    申请日:2011-10-19

    IPC分类号: H04L9/32 G06F15/16

    摘要: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for obfuscating data via a pseudo-random polymorphic tree. A server, using a seed value shared with a client device, generates a tag stream according to a byte-string algorithm. The server passes the tag stream and the data to be transmitted to the client device through a pseudo-random polymorphic tree serializer to generate a pseudo-random polymorphic tree, which the server transmits to the client device. The client device, using the same seed and byte-string algorithm, generates the same tag stream as on the server. The client passes that tag stream and the received pseudo-random polymorphic tree through a pseudo-random polymorphic tree parser to extract the data. Data to be transmitted from the server to the client device is hidden in a block of seemingly random data, which changes for different seed values. This approach obfuscates data and has low processing overhead.

    摘要翻译: 本文公开了用于通过伪随机多态树来模糊数据的系统,方法和非暂时的计算机可读存储介质。 使用与客户端设备共享的种子值的服务器根据字节串​​算法生成标签流。 服务器通过伪随机多态树序列化器将标签流和要发送到客户端设备的数据传递给服务器发送给客户端设备的伪随机多态树。 使用相同种子和字节串算法的客户端设备生成与服务器上相同的标签流。 客户端通过伪随机多态树解析器传递该标签流和接收的伪随机多态树,以提取数据。 要从服务器发送到客户端设备的数据被隐藏在看似随机数据的块中,其对于不同的种子值而变化。 这种方法模糊数据并具有较低的处理开销。

    Storage, homogenisation and dosing system
    58.
    发明申请
    Storage, homogenisation and dosing system 有权
    储存,均质和给药系统

    公开(公告)号:US20050243645A1

    公开(公告)日:2005-11-03

    申请号:US11104302

    申请日:2005-04-12

    CPC分类号: B01F11/0022

    摘要: Storage, homogenisation and dosing system of substances able to precipitate or aggregate comprising at least one tank (20) for storage and a valve (40) for dosing. The at least one tank (20) comprises a tubular portion (21), a bottom (22) and a cover (23). The at least one valve (40) is housed near to the bottom (22) of the at least one tank (20) and the system also comprises oscillating support means for allowing a good homogenisation of the substances contained in the at least one tank (20).

    摘要翻译: 能够沉淀或聚集的物质的储存,均化和给料系统包括至少一个用于储存的罐(20)和用于定量给料的阀(40)。 所述至少一个罐(20)包括管状部分(21),底部(22)和盖(23)。 所述至少一个阀(40)容纳在所述至少一个罐(20)的底部(22)附近,并且所述系统还包括振荡支撑装置,用于允许包含在所述至少一个罐中的物质 20)。

    DETERMINING VALIDITY OF SUBSCRIPTION TO USE DIGITAL CONTENT
    59.
    发明申请
    DETERMINING VALIDITY OF SUBSCRIPTION TO USE DIGITAL CONTENT 审中-公开
    确定使用数字内容的认可有效性

    公开(公告)号:US20070265975A1

    公开(公告)日:2007-11-15

    申请号:US11382469

    申请日:2006-05-09

    IPC分类号: G06Q99/00

    摘要: Some embodiments provide a method for determining whether a subscription for using digital content on a user device has elapsed. The method compares a first collision free image of a first set of entities in the user device with a second collision free image for a second set of entities in the user device at a second instance in time. Based on the comparison, the method determines whether the subscription has elapsed.

    摘要翻译: 一些实施例提供了一种用于确定在用户设备上使用数字内容的订阅是否已经过去的方法。 该方法将用户设备中的第一组实体的第一无冲突图像与用户设备中的第二实例的第二无冲突图像在第二时间进行比较。 基于比较,该方法确定订阅是否已经过去。

    DEVICE-INDEPENDENT MANAGEMENT OF CRYPTOGRAPHIC INFORMATION
    60.
    发明申请
    DEVICE-INDEPENDENT MANAGEMENT OF CRYPTOGRAPHIC INFORMATION 有权
    独立管理信息的设备独立性

    公开(公告)号:US20070260548A1

    公开(公告)日:2007-11-08

    申请号:US11381486

    申请日:2006-05-03

    IPC分类号: H04L9/00

    摘要: Some embodiments provide an account-based DRM system for distributing content. The system includes several devices that are associated with one particular account. The system also includes a set of DRM computers that receives a request to access a particular piece of content on the devices associated with the particular account. The DRM computer set then generates a several keys for the devices, where each particular key of each particular device allows the particular device to access the particular piece of content on the particular device. Through a network, the DRM computer set of some embodiments sends the particular piece of content and the generated keys to the devices associated with the particular account. The network is a local area network, a wide area network, or a network of networks, such as the Internet. In some of these embodiments, the DRM computer set sends the content and keys to one device (e.g., a computer), which is used to distribute the content and the key(s) to the other devices associated with the account. In some embodiments, the DRM computer set individually encrypts each key in a format that is used during its transport to its associated device and during its use on this device.

    摘要翻译: 一些实施例提供用于分发内容的基于帐户的DRM系统。 该系统包括与一个特定帐户相关联的多个设备。 该系统还包括一组DRM计算机,其接收访问与特定帐户相关联的设备上的特定内容片段的请求。 DRM计算机组然后生成用于设备的几个密钥,其中每个特定设备的每个特定密钥允许特定设备访问特定设备上的特定内容。 通过网络,一些实施例的DRM计算机组将特定的内容片段和所生成的密钥发送到与特定帐户相关联的设备。 网络是局域网,广域网,网络网络,如互联网。 在这些实施例中的一些实施例中,DRM计算机组将内容和密钥发送到一个设备(例如,计算机),其用于将内容和密钥分发到与该帐户相关联的其他设备。 在一些实施例中,DRM计算机集合以其在其传输到其关联设备期间以及在其在该设备上的使用期间使用的格式单独地加密每个密钥。