PERMUTATION-BASED CONTENT ENCRYPTION WITH MANIFESTS IN A CONTENT CENTRIC NETWORK
    1.
    发明申请
    PERMUTATION-BASED CONTENT ENCRYPTION WITH MANIFESTS IN A CONTENT CENTRIC NETWORK 审中-公开
    内容中心网络中基于排序的内容加密方法

    公开(公告)号:WO2017223000A1

    公开(公告)日:2017-12-28

    申请号:PCT/US2017/038185

    申请日:2017-06-19

    Abstract: One embodiment provides a system that facilitates encryption of manifest content based on permutation. During operation, the system partitions, by a computer system, a collection of data into a first set of content objects, wherein a content object is a chunk comprised of a plurality of bytes. The system performs a first permutation function on the first set of content objects to obtain a first set of permuted content objects. The system creates a manifest based on the permuted content objects, wherein a manifest is a content object which indicates a second set of content objects, wherein a respective content object of the second set is a data object or another manifest. The system encodes the first permutation function and the permuted content objects in the manifest, thereby facilitating an authorized entity that receives the manifest to reassemble the manifest contents based on the permutation function.

    Abstract translation: 一个实施例提供了一种有助于基于置换对清单内容进行加密的系统。 在操作期间,系统通过计算机系统将数据集合分割成第一组内容对象,其中内容对象是由多个字节组成的组块。 系统对第一组内容对象执行第一置换功能以获得第一组置换内容对象。 系统基于置换的内容对象创建清单,其中清单是指示第二组内容对象的内容对象,其中第二组的相应内容对象是数据对象或另一清单。 系统对清单中的第一置换函数和置换后的内容对象进行编码,从而便于接收清单的授权实体根据置换函数重新组装清单内容。

    CRYPTOGRAPHIC METHOD AND SYSTEM OF PROTECTING DIGITAL CONTENT AND RECOVERY OF SAME THROUGH UNIQUE USER IDENTIFICATION
    2.
    发明申请
    CRYPTOGRAPHIC METHOD AND SYSTEM OF PROTECTING DIGITAL CONTENT AND RECOVERY OF SAME THROUGH UNIQUE USER IDENTIFICATION 审中-公开
    通过独特用户识别来保护数字内容并恢复其相关内容的密码方法和系统

    公开(公告)号:WO2015163967A3

    公开(公告)日:2015-12-23

    申请号:PCT/US2015014471

    申请日:2015-02-04

    Abstract: A computer-implemented method and related system controls access to protected content with certificate-based access authorization. Protected content stored in a memory of a computer is enciphered using a content key to produce a quantity of enciphered, protected content, wherein the content key is derived from a content encryption algorithm. A user key is derived from user credentials using a credential encryption algorithm. The content key is enciphered with the user key using a content key encryption algorithm to produce a certificate, wherein the certificate contains the enciphered content key. Access to the protected content is controlled by the user credentials and the certificate containing a second enciphered content key. A decryption user key is generated and access authorization to the protected content is determined based on the decryption user key in response to a match of the decryption user key with the user key.

    Abstract translation: 计算机实现的方法和相关系统利用基于证书的访问授权来控制对受保护内容的访问。 存储在计算机的存储器中的受保护内容使用内容密钥加密以产生一定数量的加密的受保护内容,其中内容密钥是从内容加密算法导出的。 用户密钥是使用凭证加密算法从用户凭证导出的。 内容密钥用用户密钥使用内容密钥加密算法加密以产生证书,其中证书包含加密的内容密钥。 访问受保护的内容由用户凭证和包含第二个加密内容密钥的证书控制。 生成解密用户密钥,并且响应于解密用户密钥与用户密钥的匹配,基于解密用户密钥确定对受保护内容的访问授权。

    EXTENSIBLE MEDIA FORMAT SYSTEM AND METHODS OF USE
    4.
    发明申请
    EXTENSIBLE MEDIA FORMAT SYSTEM AND METHODS OF USE 审中-公开
    可扩展媒体格式系统和使用方法

    公开(公告)号:WO2015020910A3

    公开(公告)日:2015-11-12

    申请号:PCT/US2014049477

    申请日:2014-08-01

    Applicant: RISOFTDEV INC

    Abstract: A system and associated methods for managing digital content in an extensible media format ("EMF") are disclosed. In at least one embodiment, an initial request server is located in memory on a computing device and configured for receiving and processing content requests from an at least one client device in the possession of a user. A content server is also located in memory on a computing device and is configured for storing and selectively distributing the content. The content server stores the content in an at least one EMF file, each EMF file comprising a frame page containing a frame page identifier and an at least one frame; each frame containing at least a portion of the content along with a frame identifier. Upon the initial request server receiving a content request from the user via the associated client device, the content server transmits the associated EMF files.

    Abstract translation: 公开了一种用于以可扩展媒体格式(“EMF”)管理数字内容的系统和相关方法。 在至少一个实施例中,初始请求服务器位于计算设备上的存储器中,并且被配置为接收和处理来自用户拥有的至少一个客户端设备的内容请求。 内容服务器还位于计算设备上的存储器中,并且被配置为存储和选择性地分发内容。 内容服务器将内容存储在至少一个EMF文件中,每个EMF文件包括包含帧页标识符和至少一个帧的帧页; 每个帧包含内容的至少一部分以及帧标识符。 当初始请求服务器经由相关联的客户端设备从用户接收到内容请求时,内容服务器发送关联的EMF文件。

    EXTENSIBLE MEDIA FORMAT SYSTEM AND METHODS OF USE
    5.
    发明申请
    EXTENSIBLE MEDIA FORMAT SYSTEM AND METHODS OF USE 审中-公开
    可扩展的媒体格式系统和使用方法

    公开(公告)号:WO2015020910A2

    公开(公告)日:2015-02-12

    申请号:PCT/US2014/049477

    申请日:2014-08-01

    Abstract: A system and associated methods for managing digital content in an extensible media format ("EMF") are disclosed. In at least one embodiment, an initial request server is located in memory on a computing device and configured for receiving and processing content requests from an at least one client device in the possession of a user. A content server is also located in memory on a computing device and is configured for storing and selectively distributing the content. The content server stores the content in an at least one EMF file, each EMF file comprising a frame page containing a frame page identifier and an at least one frame; each frame containing at least a portion of the content along with a frame identifier. Upon the initial request server receiving a content request from the user via the associated client device, the content server transmits the associated EMF files.

    Abstract translation: 公开了用于管理可扩展媒体格式(“EMF”)中的数字内容的系统和相关方法。 在至少一个实施例中,初始请求服务器位于计算设备上的存储器中,并被配置用于接收和处理来自用户拥有的至少一个客户端设备的内容请求。 内容服务器也位于计算设备上的存储器中,并被配置为存储和选择性地分发内容。 内容服务器将内容存储在至少一个EMF文件中,每个EMF文件包括包含帧页面标识符和至少一个帧的帧页面; 每个帧至少包含内容的一部分以及帧标识符。 在初始请求服务器通过相关联的客户端设备从用户接收内容请求时,内容服务器传送相关联的EMF文件。

    END-TO-END SECURE COMMUNICATION SYSTEM
    7.
    发明申请
    END-TO-END SECURE COMMUNICATION SYSTEM 审中-公开
    端到端安全通信系统

    公开(公告)号:WO2014196963A1

    公开(公告)日:2014-12-11

    申请号:PCT/US2013/044112

    申请日:2013-06-04

    Abstract: The present disclosure is directed to an end-to-end secure communication system wherein, in addition to encrypting transmissions between clients, communication-related operations occurring within each client may also be secured. Each client may comprise a secure processing environment to process encrypted communication information received from other clients and locally-captured media information for transmission to other clients. The secure processing environment may include resources to decrypt received encrypted communication information and to process the communication information into media information for presentation by the client. The secure processing environment may also operate in reverse to provide locally recorded audio, image, video, etc. to other clients. Encryption protocols may be employed at various stages of information processing in the client to help ensure that information being transferred between the processing resources cannot be read, copied, altered, etc. In one example implementation, a server may manage interaction between clients, provision encryption keys, etc.

    Abstract translation: 本公开涉及一种端到端安全通信系统,其中除了加密客户端之间的传输之外,还可以确保在每个客户端内发生的与通信相关的操作。 每个客户端可以包括用于处理从其他客户端接收的加密通信信息和本地捕获的媒体信息以便传输到其他客户端的安全处理环境。 安全处理环境可以包括用于解密所接收的加密通信信息并将通信信息处理成媒体信息以供客户呈现的资源。 安全处理环境也可以相反地操作,以向其他客户端提供本地记录的音频,图像,视频等。 可以在客户端的信息处理的各个阶段采用加密协议,以帮助确保在处理资源之间传递的信息不能被读取,复制,改变等。在一个示例实现中,服务器可以管理客户端之间的交互,提供加密 钥匙等

    AD-HOC, FACE-RECOGNITION-DRIVEN CONTENT SHARING
    8.
    发明申请
    AD-HOC, FACE-RECOGNITION-DRIVEN CONTENT SHARING 审中-公开
    AD-HOC,面部识别驱动内容共享

    公开(公告)号:WO2014178853A1

    公开(公告)日:2014-11-06

    申请号:PCT/US2013/038909

    申请日:2013-04-30

    Abstract: Example embodiments relate to ad-hoc, face-recognition-driven content sharing. In example embodiments, a system matches a face in a face image extracted from a video stream from a sharing device to a face profile of a receiving user, where the face profile of the receiving user is generated based on a training face image that is extracted from a training video stream of a training device of the receiving user. In response to generating a temporary token that is associated with the face profile, the system sends the temporary token and an arbitrary handle from the face profile to the sharing device. At this stage, the system receives a context identifier from the sharing device and provides the context identifier to the receiving device of the receiving user.

    Abstract translation: 示例性实施例涉及自组织,面部识别驱动的内容共享。 在示例实施例中,系统将从从共享设备的视频流提取的面部图像中的脸部匹配到接收用户的面部轮廓,其中基于提取的训练面部图像来生成接收用户的面部轮廓 来自接收用户的训练装置的训练视频流。 响应于生成与面部轮廓相关联的临时令牌,系统将临时令牌和任意句柄从面部轮廓发送到共享装置。 在这个阶段,系统从共享设备接收上下文标识符,并向接收用户的接收设备提供上下文标识符。

    COMMUNITY-BASED DE-DUPLICATION FOR ENCRYPTED DATA
    9.
    发明申请
    COMMUNITY-BASED DE-DUPLICATION FOR ENCRYPTED DATA 审中-公开
    用于加密数据的基于社区的去重复

    公开(公告)号:WO2014158604A1

    公开(公告)日:2014-10-02

    申请号:PCT/US2014/018669

    申请日:2014-02-26

    Abstract: Technologies for de-duplicating encrypted content include fragmenting a file into blocks on a computing device, encrypting each block, and storing each encrypted block on a content data server with associated keyed hashes and member identifications. The computing device additionally transmits each encrypted block with an associated member encryption key and member identification to a key server. As part of the de-duplication process, the content data server stores only one copy of the encrypted data for a particular associated keyed hash, and the key server similarly associates a single member encryption key with the keyed hash. To retrieve the file, the computing device receives the encrypted blocks with their associated keyed hashes and member identifications from the content data server and receives the corresponding member decryption key from the key server. The computing device decrypts each block using the member decryption keys and combines to blocks to generate the file.

    Abstract translation: 用于解密加密内容的技术包括将文件分解成计算设备上的块,加密每个块,以及将每个加密的块存储在具有相关联的密钥哈希和成员标识的内容数据服务器上。 计算设备另外向密钥服务器发送具有相关联的成员加密密钥和成员标识的每个加密块。 作为重复数据删除过程的一部分,内容数据服务器仅存储用于特定关联密钥哈希的加密数据的一个副本,并且密钥服务器类似地将单个成员加密密钥与密钥哈希相关联。 为了检索文件,计算设备从内容数据服务器接收具有相关联的密钥哈希和成员标识的加密块,并从密钥服务器接收相应的成员解密密钥。 计算设备使用成员解密密钥对每个块进行解密,并组合到块以生成该文件。

    一种数字权益管理方法
    10.
    发明申请

    公开(公告)号:WO2014026462A1

    公开(公告)日:2014-02-20

    申请号:PCT/CN2013/000698

    申请日:2013-06-14

    Inventor: 王国家

    CPC classification number: G06F21/10 G06F21/6209 H04L9/32 H04L2209/60

    Abstract: 本发明公开一种数字权益管理方法,其包括如下步骤:步骤S1:服务器端对原始电子文件进行加密,加密时同时对流程码、文件唯一标识、授权位置和校验信息注入;步骤S2:从加密文件中获取流程码、文件标识、授权位置和校验信息,进行完整性验证,步骤S3:验证无误后,将相关信息发送给授权服务器;步骤S4:授权服务器收到加密文件注入信息,先进行完整性验证,接着根据流程码,来判断加密文件类型,根据类型,进行授权文件生成和发送;步驟S5:解密工具获取授权文件,进行授权信息的完整性验证,然后进行解密、解析、在权限控制下使用。本发明的方法是在不改变或很少改变加/解密工具情况下,用户可以自定义文件加密强度。

Patent Agency Ranking