WO2001077775A2 - Network content access control - Google Patents
Network content access control Download PDFInfo
- Publication number
- WO2001077775A2 WO2001077775A2 PCT/IL2001/000324 IL0100324W WO0177775A2 WO 2001077775 A2 WO2001077775 A2 WO 2001077775A2 IL 0100324 W IL0100324 W IL 0100324W WO 0177775 A2 WO0177775 A2 WO 0177775A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- server
- data
- ticket
- content
- request
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2115—Third party
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
Definitions
- the present invention relates to computer network communications in general, and more particularly to preventing unauthorized access to data sent via computer networks.
- BACKGROUND OF THE INVENTION Methods for controlling access to data via computer networks are well known. Some methods require that IDs and passwords be provided to the data server in order to gain access to data. In other methods a data server provides encrypted data to the client, where the data is then decrypted using a key and decryption software previously provided to the client. In other methods digital watermarks are embedded into the data at the data source allowing for distribution of the data to be monitored for unauthorized distribution.
- proxy servers are often used to "mirror" data stored at the data owner's server and provide data to clients.
- these proxy servers are often not under the direct control of the data owner, and steps taken by the data owner at the original data source to protect unauthorized access to data are often not taken by the proxy servers, leading to unauthorized access.
- the present invention seeks to provide a system for preventing unauthorized access to data sent via computer networks that overcome disadvantages of the prior art.
- a method for preventing unauthorized access by a requestor to data sent via computer networks including a) requesting, from a requesting computer, access to data from a first server, at the first server b) determining if the request is a valid request, c) receiving a ticket from a ticket server, if the request is a valid request d) providing the ticket identifying the requestor to a second server the data is stored, e) directing the requesting computer to request access to the data from the second server, at the second server f) receiving the request from the requesting computer, g) verifying the ticket as identifying the requestor, and h) sending the data to the requesting computer in response to the request.
- the requesting computer is a client computer.
- the second server is either of a proxy server and a cache server.
- the data is encrypted and the providing step d) further includes the first server providing a decryption key to the second server for decrypting the data.
- the data is encrypted and the providing step d) further includes the ticket server providing a decryption key to the second server for decrypting the data.
- the providing step d) further includes providing the ticket to the second server by way of the client computer.
- the method further includes the client computer locating the second server using a search engine.
- the verifying step g) further includes i) sending the ticket to the ticket server for validation, and j) receiving a communication from the ticket server validating the ticket.
- the sending step h) further includes embedding a marking into the data prior to sending the data to the client computer.
- the marking is a digital watermark.
- the marking is a personalized marking for the requestor.
- a method for preventing unauthorized transfer of data sent via computer networks including the steps of instructing a first server to send content to a second server, notifying a ticket server of the instructions, validating the instructions at the ticket server, if the instructions are valid notifying either of the servers that the instructions are valid, sending the content from the first server to the second server, if the instructions are invalid notifying either of the servers that the instructions are invalid, performing any of ignoring the instructions, corrupting the content, and discarding the content.
- the method further includes the steps of embedding a marking into the data, checking the validity of the marking at either of the servers, and if the marking is invalid, performing any of ignoring the instructions, corrupting the content, and discarding the content.
- the validating step includes validating the instructions in accordance with a policy.
- the embedding step includes embedding any of an identification unique to the first server, an identification unique to the second server, routing information, and rule-based information.
- the method further includes the first server receiving an encryption key from the ticket server, and encrypting the content using the encryption key.
- the method further includes the second server receiving a decryption key from either of the first server and the ticket server, and decrypting the content using the decryption key.
- a data transfer validation server for validating a request for data transfer, the server comprising: a request input for receiving a request from a distribution server to distribute data from said distribution server to a requesting client, a distribution parameter table comprising predetermined distribution parameters, a comparator for comparing said request against said predetermined distribution parameters, a verifier connected to said comparator for verifying said request, at least partly in accordance with an output of said comparator, and a ticket issuer for issuing ticket data indicating acceptance of said request.
- said predetermined distribution parameters comprise approved times for providing content. Additionally or alternatively, the predetermined distribution parameters comprise approved regions for providing content.
- the predetermined distribution parameters comprise approved distribution portals. Additionally or alternatively, the predetermined distribution parameters comprise approved users.
- the predetermined distribution parameters comprise non-approved distribution portals.
- the predetermined distribution parameters comprise non-approved users.
- the predetermined distribution parameters comprise different parameters for content items from different content sources.
- the predetermined distribution parameters comprise different parameters for different content items. Additionally or alternatively, the predetermined distribution parameters comprise a requirement for an endpoint rights protection scheme.
- FIG. 1 which is a simplified conceptual illustration of a system for preventing unauthorized access to data sent via computer networks, constructed and operative in accordance with a preferred embodiment of the present invention
- Fig. 2 is a simplified flowchart illustration of a method of operation of the system of Fig. 1, the method being operative in accordance with a preferred embodiment of the present invention
- FIG. 3 is a simplified conceptual illustration of a system for preventing unauthorized transfer of data sent via computer networks, constructed and operative in accordance with another preferred embodiment of the present invention.
- Fig. 4 is a simplified flowchart illustration of a method of operation of the system of Fig. 3, operative in accordance with a preferred embodiment of the present invention
- Fig. 1 is a simplified conceptual illustration of a system for preventing unauthorized access to data sent via computer networks, constructed and operative in accordance with a preferred embodiment of the present invention.
- data such as text-based or numeric data, graphical data, audio data, or any other kind or combination of data that may be transmitted via a computer network
- server 10 such as a proxy or cache server
- a data source server 12 such as via a computer network 14, such as the Internet.
- the data provided by server 12 to server 10 is encrypted using any conventional encryption technique.
- a ticket server 18 provides data transfer verifications 20 hereinafter referred to as tickets, to server 12, such as via network 14, where each ticket includes an identifier that is preferably unique to all other tickets provided to server 12 and/or all other tickets provided by server 18 to any other server, and that is preferably encrypted using any conventional encryption technique. Tickets 20 may be provided to server 12 in response to a request sent by server 12 to server 18 for tickets, such as upon server 12 receiving a request from a user at a client computer 16 who wishes to access the data stored on server 10, and/or may be provided not in connection with any such request, such as for future use by server 12.
- Client computer 16 may be any network-connectable computer or appliance, such as a personal computer, a personal digital assistant, a cellular telephone, and a web-enabled television appliance.
- a typical operational scenario of the system of Fig. 1 may be seen with additional reference to Fig. 2, which is a simplified flowchart illustration of a method operative in accordance with a preferred embodiment of the present invention.
- a user at client computer 16 who wishes to access the data stored on server 10 sends a request to server 12 to access the data, such as via network 14 (step 100).
- Server 12 identifies the user using any conventional technique, such as by a user identifier sent with the request or by the source address of the request being previously known to server 10 (step 110), and determines whether the user is authorized to access the data (step 120). This authorization process may include checking the user's current credit status or account balance or any other known authorization criteria (or other methods in use today). If the user is authorized to access the data, server 12 requests a ticket from ticket server 18 (step 130). Alternatively or additionally, server 12 may request or otherwise receive one or more tickets prior to receiving requests from clients. The ticket, preferably encrypted, is sent by server 12 to server 10 together with a user and/or client computer identifier identifying the requestor and preferably a decryption key, where the data at server 10 is encrypted (step 140).
- the key may be provided to server 10 by ticket server 18 as part of the verification process (see step 180 below).
- Client 16 is then directed to server 10, typically by server 12, which client 16 then contacts (step 150).
- server 10 or another server on client 16's request route may intercept the client 16's request and redirect client 16 to server 10.
- client 16 receives ticket 20 from server 12 and searches for the most suitable server, in terms of distance, load and other parameters, where the desired data may be found. In this case, once client 16 locates an appropriate server 10 it sends ticket 20 to server 10 which validates it with server 18 and transmits the content to client 16.
- server 10 Upon being contacted by client 16, server 10 identifies the requesting user using any conventional technique, such as by a user identifier sent with the request or by the source address of the request being previously known to server 10, and searches for a ticket bearing the user's identity (step 160). Server 10 then sends information from the ticket, such as the ticket identifier and/or the user identifier, or the entire ticket 20 to ticket server 18 for verification (step 170). Ticket server 18 then verifies the ticket (step 180), preferably taking steps that the ticket either be cancelled or removed from the ticket pool (such as in the case where client 16's access to the data is limited) or allowed to remain at ticket server 18 (such as where client 16's access to the data is unlimited).
- Ticket server 18 then notifies server 10 that the ticket is valid (step 190).
- Server 10 then decrypts the data if required using the decryption key received with the ticket (step 200), and sends the data to the user at client 16 (step 210).
- server 10 may, using conventional techniques, embed a digital watermark or any other type of known marking into the data before it is sent to client 16. The embedded marking may be sent to server 10 as part of ticket 20. The digital watermark may be personalized for the specific user.
- Server 10 may also encrypt the data before it is sent to client 16, with the decryption key having been previously sent to client 16 by server 12 as part of the redirect message or otherwise.
- server 12 may send the ticket to client 16 in addition to or instead of sending the ticket to server 10.
- client 16 provides the ticket to server 10 which then verifies the ticket with ticket server 18 as described hereinabove.
- server 12 may provide other information to client 16, such as keywords identifying server 10, that client 16 may then use to search for server 10 (which has the required content) using conventional techniques, such as by using publicly-available search engines.
- Verification step 180 may include determining the validity of the ticket in accordance with a policy table 8, which typically includes distribution parameters preferably specified by the content owner. Examples of such distribution parameters may include approved times for providing content, approved sources of specific content, types of end-point protection schemes required (such as Microsoft Digital Rights Management, Intertrust DigiBox, etc.), as well as a list of unauthorized set-top boxes, and users. Examples of policies may include:
- Example I The KickBox portal is not authorized to sell Disney movies.
- Example II A user which is located in Belgium (region 2), is not authorized to receive/view Star Wars 8, which is currently authorized for users in region 1 only.
- Encryption keys referred to hereinabove may be alternatively provided by client 16 to server 10 for encrypting data prior to transmission to client 16.
- the keys may be preconfigured with client 16 or generated by client 16 using conventional software techniques.
- decryption keys referred to hereinabove that are sent to client 16 may be likewise preconfigured with client 16, thus obviating the need to transmit decryption keys to client 16.
- Fig. 3 is a simplified conceptual illustration of a system for preventing unauthorized transfer of data sent via computer networks, constructed and operative in accordance with another preferred embodiment of the present invention
- Fig. 4 is a simplified flowchart illustration of a method of operation of the system of Fig.
- authorized content 30 resides on a server 32, such as a proxy or cache server.
- a content delivery controller 36 such as a server, instructs server 32 to send content 30 to a server 34 (step 300). Controller 36 may be configured to determine the current network load on servers 32 and 34 using conventional load balancing techniques, instructing server 32 to send content 30 to server 34 in order to redistribute the load in accordance with predefined load balancing criteria.
- a ticket server 38 is notified of the transfer instructions, either by server 36 or by server 32 (step 310). Ticket server 38 preferably checks the validity of the transfer parameters against a policy table 40 (step 320).
- Server 32 and/or server 34 are notified of the validity of the instructions by ticket server 38 (step 330), with server 32 and/or server 34 ignoring the instructions should they be proven invalid (step 340).
- Server 36 may also be notified of the instructions not having been carried out by server 32, 34, or 38.
- Ticket server 38 may send a ticket to server 32 and/or server 34 in anticipation of the transfer of content 30 (step 350).
- server 32 Prior to sending content 30 to server 34, server 32 preferably embeds into content 30, using digital watermarking or other known data embedding technique, an identification unique to server 32, an identification unique to server 34, and/or other routing and/or rule-based data, such as "do not pass through a specific region" where the region is identified by routers or proxies along the way (step 360).
- Server 32 preferably encrypts content 30 using an encryption key that server 32 receives as part of the ticket sent to it by ticket server 38 (step 370). Server 32 then sends content 30 to server 34 (step 380) and preferably reports to ticket server 38 that content 30 was sent to server 34 (step 390).
- Content 30 then arrives at server 34. If content 30 is encrypted server 34 may decrypt it, preferably with a decryption key received from ticket server 38 (step 400). Server 34 then determines that content 30 is allowed to reside on server 34 by checking the validity of content 30's embedded information (step 410). If content 30 lacks a correctly encoded digital watermark, or if the information embedded into content 30 otherwise contraindicates a valid content transfer, then content 30 is deemed to be invalid. Additionally or alternatively, server 34 may send a ticket to ticket server 38 with content 30's ID for validation. If either server 34 or ticket server 38 determine that content 30 is improperly marked or otherwise identified, server 34 discards content 30 (step 420). Server 34 and subsequent servers may similarly mark and encrypt content 30 prior to sending content 30 to another server.
- the watermarking of content 30 in accordance with conventional techniques is preferably done such that if content 30 is modified, the watermark in content 30 will change. Thus, if server 34 does not identify a proper digital watermark in content 30, or if server 34 determines that the watermark has been removed, content 30 is discarded.
- content that is received from a server in accordance with the present invention may identify the particular server from which it came where the digital watermark embedded by the server is unique to that server.
- any attempt to store content on a server in an unauthorized fashion will result in the content being discarded or corrupted in accordance with the method of Fig. 4.
- the validity of a ticket may be determined in accordance with policy table 40 including distribution parameters preferably specified by the content owner and implemented at ticket server 38. Examples of such distribution parameters may include allowing only proxies located at specific geographical regions to receive and/or supply content, as well as a list of unauthorized servers, or servers whose security has been compromised. Examples of policies may include a server which is located in Italy (region 2) is not authorized to contain Star Wars 8, which is currently authorized for region 1 servers only.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Health & Medical Sciences (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Bioethics (AREA)
- Storage Device Security (AREA)
- Computer And Data Communications (AREA)
Abstract
Description
Claims
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP01923922A EP1279087A4 (en) | 2000-04-09 | 2001-04-05 | Network content access control |
AU50602/01A AU5060201A (en) | 2000-04-09 | 2001-04-05 | Network content access control |
CA002406010A CA2406010A1 (en) | 2000-04-09 | 2001-04-05 | Network content access control |
US10/240,151 US20030233554A1 (en) | 2000-04-09 | 2001-04-05 | Network content access control |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
IL135555 | 2000-04-09 | ||
IL13555500A IL135555A0 (en) | 2000-04-09 | 2000-04-09 | Preventing unauthorized access to data sent via computer networks |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2001077775A2 true WO2001077775A2 (en) | 2001-10-18 |
WO2001077775A3 WO2001077775A3 (en) | 2002-02-28 |
Family
ID=11074037
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IL2001/000324 WO2001077775A2 (en) | 2000-04-09 | 2001-04-05 | Network content access control |
Country Status (6)
Country | Link |
---|---|
US (2) | US6928545B1 (en) |
EP (1) | EP1279087A4 (en) |
AU (1) | AU5060201A (en) |
CA (1) | CA2406010A1 (en) |
IL (1) | IL135555A0 (en) |
WO (1) | WO2001077775A2 (en) |
Cited By (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1363424A2 (en) * | 2002-05-15 | 2003-11-19 | Microsoft Corporation | Authentication method and system encrypting a ticket with an symmetric key, said symmetric key being encrypted with an asymmetric key |
WO2003098409A1 (en) * | 2002-05-17 | 2003-11-27 | Telefonaktiebolaget Lm Ericsson (Publ) | Secure content sharing in digital rights management |
EP1472813A1 (en) * | 2002-01-29 | 2004-11-03 | Plumtree Software, Inc. | Single sign-on over the internet using public-key cryptography |
US7356711B1 (en) | 2002-05-30 | 2008-04-08 | Microsoft Corporation | Secure registration |
US7379551B2 (en) | 2004-04-02 | 2008-05-27 | Microsoft Corporation | Method and system for recovering password protected private data via a communication network without exposing the private data |
US7437551B2 (en) | 2004-04-02 | 2008-10-14 | Microsoft Corporation | Public key infrastructure scalability certificate revocation status validation |
US7636941B2 (en) | 2004-03-10 | 2009-12-22 | Microsoft Corporation | Cross-domain authentication |
US7715934B2 (en) | 2003-09-19 | 2010-05-11 | Macrovision Corporation | Identification of input files using reference files associated with nodes of a sparse binary tree |
US7809943B2 (en) | 2005-09-27 | 2010-10-05 | Rovi Solutions Corporation | Method and system for establishing trust in a peer-to-peer network |
US7877810B2 (en) | 2004-03-02 | 2011-01-25 | Rovi Solutions Corporation | System, method and client user interface for a copy protection service |
US8086722B2 (en) | 2005-12-21 | 2011-12-27 | Rovi Solutions Corporation | Techniques for measuring peer-to-peer (P2P) networks |
Families Citing this family (56)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
ATE318580T1 (en) * | 1996-12-20 | 2006-03-15 | Alza Corp | GEL COMPOSITIONS AND METHODS |
US7756892B2 (en) * | 2000-05-02 | 2010-07-13 | Digimarc Corporation | Using embedded data with file sharing |
US7689532B1 (en) | 2000-07-20 | 2010-03-30 | Digimarc Corporation | Using embedded data with file sharing |
US8332478B2 (en) * | 1998-10-01 | 2012-12-11 | Digimarc Corporation | Context sensitive connected content |
IL135555A0 (en) * | 2000-04-09 | 2001-05-20 | Vidius Inc | Preventing unauthorized access to data sent via computer networks |
JP4974405B2 (en) * | 2000-08-31 | 2012-07-11 | ソニー株式会社 | Server use method, server use reservation management apparatus, and program storage medium |
JP2002108840A (en) * | 2000-09-28 | 2002-04-12 | Toshiba Corp | Distributed order-receiving system, receiving server, contents server, method for distributed receiving order and computer program product |
US7124173B2 (en) * | 2001-04-30 | 2006-10-17 | Moriarty Kathleen M | Method and apparatus for intercepting performance metric packets for improved security and intrusion detection |
US7809944B2 (en) * | 2001-05-02 | 2010-10-05 | Sony Corporation | Method and apparatus for providing information for decrypting content, and program executed on information processor |
US20050198379A1 (en) | 2001-06-13 | 2005-09-08 | Citrix Systems, Inc. | Automatically reconnecting a client across reliable and persistent communication sessions |
US20020198929A1 (en) * | 2001-06-25 | 2002-12-26 | International Business Machines Corporation | Method and apparatus to encourage client into a distributed peer to peer sharing technology |
US20020198930A1 (en) * | 2001-06-25 | 2002-12-26 | International Business Machines Corporation | Method and apparatus for wide-spread distribution of electronic content in a peer to peer fashion |
US20030046407A1 (en) * | 2001-08-30 | 2003-03-06 | Erickson John S. | Electronic rights management |
US7028300B2 (en) * | 2001-11-13 | 2006-04-11 | Microsoft Corporation | Method and system for managing resources in a distributed environment that has an associated object |
US8001052B2 (en) | 2001-12-10 | 2011-08-16 | Dunkeld Bryan C | System and method for unique digital asset identification and transaction management |
US7984157B2 (en) | 2002-02-26 | 2011-07-19 | Citrix Systems, Inc. | Persistent and reliable session securely traversing network components using an encapsulating protocol |
US7661129B2 (en) * | 2002-02-26 | 2010-02-09 | Citrix Systems, Inc. | Secure traversal of network components |
EP1490993A1 (en) * | 2002-04-04 | 2004-12-29 | Telefonaktiebolaget LM Ericsson (publ) | Arrangements and methods for secure data transmission |
US20030204410A1 (en) * | 2002-04-26 | 2003-10-30 | Clariant International, Ltd. | Method and apparatus for approving color samples |
US20040009815A1 (en) * | 2002-06-26 | 2004-01-15 | Zotto Banjamin O. | Managing access to content |
US20040059939A1 (en) * | 2002-09-13 | 2004-03-25 | Sun Microsystems, Inc., A Delaware Corporation | Controlled delivery of digital content in a system for digital content access control |
US7363651B2 (en) | 2002-09-13 | 2008-04-22 | Sun Microsystems, Inc. | System for digital content access control |
US7240365B2 (en) * | 2002-09-13 | 2007-07-03 | Sun Microsystems, Inc. | Repositing for digital content access control |
US7913312B2 (en) | 2002-09-13 | 2011-03-22 | Oracle America, Inc. | Embedded content requests in a rights locker system for digital content access control |
US7380280B2 (en) * | 2002-09-13 | 2008-05-27 | Sun Microsystems, Inc. | Rights locker for digital content access control |
US20040083370A1 (en) * | 2002-09-13 | 2004-04-29 | Sun Microsystems, Inc., A Delaware Corporation | Rights maintenance in a rights locker system for digital content access control |
US20040059913A1 (en) * | 2002-09-13 | 2004-03-25 | Sun Microsystems, Inc., A Delaware Corporation | Accessing for controlled delivery of digital content in a system for digital content access control |
US7398557B2 (en) * | 2002-09-13 | 2008-07-08 | Sun Microsystems, Inc. | Accessing in a rights locker system for digital content access control |
US7512972B2 (en) | 2002-09-13 | 2009-03-31 | Sun Microsystems, Inc. | Synchronizing for digital content access control |
US7900245B1 (en) * | 2002-10-15 | 2011-03-01 | Sprint Spectrum L.P. | Method and system for non-repeating user identification in a communication system |
FR2849563B1 (en) * | 2002-12-31 | 2005-02-11 | Medialive | CUSTOMIZED MARKING FOR THE PROTECTION OF DIGITAL AUDIOVISUAL STREAMS |
US7249373B2 (en) * | 2003-01-15 | 2007-07-24 | Microsoft Corporation | Uniformly representing and transferring security assertion and security response information |
US20040181673A1 (en) * | 2003-03-13 | 2004-09-16 | Paul Lin | Method and apparatus for preventing unauthorized access to data and for destroying data upon receiving an unauthorized data access attempt |
FR2855691B1 (en) * | 2003-06-02 | 2005-11-11 | Canon Kk | SECURING THE DISTRIBUTION OF DIGITAL DOCUMENTS IN A PAIRING NETWORK |
WO2004108180A1 (en) * | 2003-06-04 | 2004-12-16 | Inion Ltd | Biodegradable implant and method for manufacturing one |
KR100965437B1 (en) * | 2003-06-05 | 2010-06-24 | 인터트러스트 테크놀로지즈 코포레이션 | Interoperable systems and methods for peer-to-peer service orchestration |
FR2861240B1 (en) * | 2003-10-15 | 2006-03-03 | Medialive | SECURE DISTRIBUTED METHOD AND SYSTEM FOR AUDIOVISUAL FLOW DISTRIBUTION |
CN1997974B (en) | 2004-04-30 | 2010-05-05 | 捷讯研究有限公司 | Content protection ticket system and method |
KR100662336B1 (en) * | 2004-06-21 | 2007-01-02 | 엘지전자 주식회사 | Method for down-loading contents, and system for the same |
KR100636169B1 (en) * | 2004-07-29 | 2006-10-18 | 삼성전자주식회사 | Method for transmitting content which is processed by various DRM System, and the method for reproducing the contents |
US20060064757A1 (en) * | 2004-09-20 | 2006-03-23 | Thomas Poslinski | Method and system for user secure access to user content recordings |
JP2006155332A (en) * | 2004-11-30 | 2006-06-15 | Toshiba Corp | Apparatus and method for outputting contents, and apparatus and method for acquiring contents |
US20070067332A1 (en) * | 2005-03-14 | 2007-03-22 | Gridiron Software, Inc. | Distributed, secure digital file storage and retrieval |
JP2009512096A (en) | 2005-10-18 | 2009-03-19 | インタートラスト テクノロジーズ コーポレイション | System and method for digital rights management engine |
US9626667B2 (en) | 2005-10-18 | 2017-04-18 | Intertrust Technologies Corporation | Digital rights management engine systems and methods |
US20070250715A1 (en) * | 2006-04-19 | 2007-10-25 | Yigang Cai | File sharing control using digital watermarks |
US20080005024A1 (en) * | 2006-05-17 | 2008-01-03 | Carter Kirkwood | Document authentication system |
US8650297B2 (en) * | 2007-03-14 | 2014-02-11 | Cisco Technology, Inc. | Unified user interface for network management systems |
US20090150169A1 (en) * | 2007-05-17 | 2009-06-11 | Unlimited Cad Services, Llc | Document acquisition and authentication system |
US20090187978A1 (en) * | 2008-01-18 | 2009-07-23 | Yahoo! Inc. | Security and authentications in peer-to-peer networks |
JP5145071B2 (en) * | 2008-02-19 | 2013-02-13 | 京セラドキュメントソリューションズ株式会社 | Image output system |
GB2458568B (en) * | 2008-03-27 | 2012-09-19 | Covertix Ltd | System and method for dynamically enforcing security policies on electronic files |
US8364970B2 (en) * | 2009-02-18 | 2013-01-29 | Nokia Corporation | Method and apparatus for providing enhanced service authorization |
US20100268649A1 (en) * | 2009-04-17 | 2010-10-21 | Johan Roos | Method and Apparatus for Electronic Ticket Processing |
JP6047553B2 (en) | 2011-04-11 | 2016-12-21 | インタートラスト テクノロジーズ コーポレイション | Systems and methods for information security |
US11436598B2 (en) * | 2017-12-15 | 2022-09-06 | Fmr Llc | Social data tracking datastructures, apparatuses, methods and systems |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5506961A (en) * | 1992-09-11 | 1996-04-09 | International Business Machines Corporation | Connection authorizer for controlling access to system resources |
US5509074A (en) * | 1994-01-27 | 1996-04-16 | At&T Corp. | Method of protecting electronically published materials using cryptographic protocols |
US5948061A (en) * | 1996-10-29 | 1999-09-07 | Double Click, Inc. | Method of delivery, targeting, and measuring advertising over networks |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5491752A (en) * | 1993-03-18 | 1996-02-13 | Digital Equipment Corporation, Patent Law Group | System for increasing the difficulty of password guessing attacks in a distributed authentication scheme employing authentication tokens |
US5590199A (en) * | 1993-10-12 | 1996-12-31 | The Mitre Corporation | Electronic information network user authentication and authorization system |
US5535276A (en) * | 1994-11-09 | 1996-07-09 | Bell Atlantic Network Services, Inc. | Yaksha, an improved system and method for securing communications using split private key asymmetric cryptography |
US5809144A (en) * | 1995-08-24 | 1998-09-15 | Carnegie Mellon University | Method and apparatus for purchasing and delivering digital goods over a network |
US5684950A (en) * | 1996-09-23 | 1997-11-04 | Lockheed Martin Corporation | Method and system for authenticating users to multiple computer servers via a single sign-on |
US5754763A (en) * | 1996-10-01 | 1998-05-19 | International Business Machines Corporation | Software auditing mechanism for a distributed computer enterprise environment |
US5923756A (en) * | 1997-02-12 | 1999-07-13 | Gte Laboratories Incorporated | Method for providing secure remote command execution over an insecure computer network |
US6049877A (en) * | 1997-07-16 | 2000-04-11 | International Business Machines Corporation | Systems, methods and computer program products for authorizing common gateway interface application requests |
JPH11175607A (en) * | 1997-12-05 | 1999-07-02 | Hitachi Ltd | System for sending document and method therefor |
JP4313873B2 (en) * | 1998-01-30 | 2009-08-12 | キヤノン株式会社 | Electronic device and data processing method |
US6026414A (en) * | 1998-03-05 | 2000-02-15 | International Business Machines Corporation | System including a proxy client to backup files in a distributed computing environment |
US6161182A (en) * | 1998-03-06 | 2000-12-12 | Lucent Technologies Inc. | Method and apparatus for restricting outbound access to remote equipment |
US6138235A (en) * | 1998-06-29 | 2000-10-24 | Sun Microsystems, Inc. | Controlling access to services between modular applications |
JP2000215171A (en) * | 1999-01-27 | 2000-08-04 | Hitachi Ltd | System and method for authentication |
US6678733B1 (en) * | 1999-10-26 | 2004-01-13 | At Home Corporation | Method and system for authorizing and authenticating users |
US6643701B1 (en) * | 1999-11-17 | 2003-11-04 | Sun Microsystems, Inc. | Method and apparatus for providing secure communication with a relay in a network |
IL135555A0 (en) * | 2000-04-09 | 2001-05-20 | Vidius Inc | Preventing unauthorized access to data sent via computer networks |
-
2000
- 2000-04-09 IL IL13555500A patent/IL135555A0/en unknown
- 2000-04-10 US US09/546,384 patent/US6928545B1/en not_active Expired - Lifetime
-
2001
- 2001-04-05 WO PCT/IL2001/000324 patent/WO2001077775A2/en not_active Application Discontinuation
- 2001-04-05 AU AU50602/01A patent/AU5060201A/en not_active Abandoned
- 2001-04-05 CA CA002406010A patent/CA2406010A1/en not_active Abandoned
- 2001-04-05 EP EP01923922A patent/EP1279087A4/en not_active Withdrawn
- 2001-04-05 US US10/240,151 patent/US20030233554A1/en not_active Abandoned
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5506961A (en) * | 1992-09-11 | 1996-04-09 | International Business Machines Corporation | Connection authorizer for controlling access to system resources |
US5509074A (en) * | 1994-01-27 | 1996-04-16 | At&T Corp. | Method of protecting electronically published materials using cryptographic protocols |
US5948061A (en) * | 1996-10-29 | 1999-09-07 | Double Click, Inc. | Method of delivery, targeting, and measuring advertising over networks |
Non-Patent Citations (1)
Title |
---|
See also references of EP1279087A2 * |
Cited By (19)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1472813A1 (en) * | 2002-01-29 | 2004-11-03 | Plumtree Software, Inc. | Single sign-on over the internet using public-key cryptography |
JP2005516533A (en) * | 2002-01-29 | 2005-06-02 | プラムツリー ソフトウェア インコーポレイテッド | Single sign-on on the Internet using public key cryptography |
JP4782986B2 (en) * | 2002-01-29 | 2011-09-28 | オラクル・インターナショナル・コーポレイション | Single sign-on on the Internet using public key cryptography |
EP1472813A4 (en) * | 2002-01-29 | 2009-04-29 | Bea Systems Inc | Single sign-on over the internet using public-key cryptography |
EP1363424A2 (en) * | 2002-05-15 | 2003-11-19 | Microsoft Corporation | Authentication method and system encrypting a ticket with an symmetric key, said symmetric key being encrypted with an asymmetric key |
EP1363424A3 (en) * | 2002-05-15 | 2004-05-19 | Microsoft Corporation | Authentication method and system encrypting a ticket with an symmetric key, said symmetric key being encrypted with an asymmetric key |
US7971240B2 (en) | 2002-05-15 | 2011-06-28 | Microsoft Corporation | Session key security protocol |
US7523490B2 (en) | 2002-05-15 | 2009-04-21 | Microsoft Corporation | Session key security protocol |
WO2003098409A1 (en) * | 2002-05-17 | 2003-11-27 | Telefonaktiebolaget Lm Ericsson (Publ) | Secure content sharing in digital rights management |
JP2005526320A (en) * | 2002-05-17 | 2005-09-02 | テレフオンアクチーボラゲット エル エム エリクソン(パブル) | Secure content sharing in digital rights management |
US7356711B1 (en) | 2002-05-30 | 2008-04-08 | Microsoft Corporation | Secure registration |
US7715934B2 (en) | 2003-09-19 | 2010-05-11 | Macrovision Corporation | Identification of input files using reference files associated with nodes of a sparse binary tree |
US7877810B2 (en) | 2004-03-02 | 2011-01-25 | Rovi Solutions Corporation | System, method and client user interface for a copy protection service |
US7636941B2 (en) | 2004-03-10 | 2009-12-22 | Microsoft Corporation | Cross-domain authentication |
US8689311B2 (en) | 2004-03-10 | 2014-04-01 | Microsoft Corporation | Cross-domain authentication |
US7437551B2 (en) | 2004-04-02 | 2008-10-14 | Microsoft Corporation | Public key infrastructure scalability certificate revocation status validation |
US7379551B2 (en) | 2004-04-02 | 2008-05-27 | Microsoft Corporation | Method and system for recovering password protected private data via a communication network without exposing the private data |
US7809943B2 (en) | 2005-09-27 | 2010-10-05 | Rovi Solutions Corporation | Method and system for establishing trust in a peer-to-peer network |
US8086722B2 (en) | 2005-12-21 | 2011-12-27 | Rovi Solutions Corporation | Techniques for measuring peer-to-peer (P2P) networks |
Also Published As
Publication number | Publication date |
---|---|
EP1279087A2 (en) | 2003-01-29 |
CA2406010A1 (en) | 2001-10-18 |
US6928545B1 (en) | 2005-08-09 |
US20030233554A1 (en) | 2003-12-18 |
IL135555A0 (en) | 2001-05-20 |
EP1279087A4 (en) | 2004-05-06 |
AU5060201A (en) | 2001-10-23 |
WO2001077775A3 (en) | 2002-02-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6928545B1 (en) | Network content access control | |
US6801998B1 (en) | Method and apparatus for presenting anonymous group names | |
US6385728B1 (en) | System, method, and program for providing will-call certificates for guaranteeing authorization for a printer to retrieve a file directly from a file server upon request from a client in a network computer system environment | |
US7376624B2 (en) | Secure communication and real-time watermarking using mutating identifiers | |
JP4674044B2 (en) | System and method for providing a key management protocol that allows a client to verify authorization | |
US7197568B2 (en) | Secure cache of web session information using web browser cookies | |
US7231526B2 (en) | System and method for validating a network session | |
US20100017599A1 (en) | Secure digital content management using mutating identifiers | |
US7627905B2 (en) | Content transfer system, content transfer method, content transmitting apparatus, content transmission method, content receiving apparatus, content reception method, and computer program | |
US20020032873A1 (en) | Method and system for protecting objects distributed over a network | |
US20030070069A1 (en) | Authentication module for an enterprise access management system | |
US20030051172A1 (en) | Method and system for protecting digital objects distributed over a network | |
US20060041751A1 (en) | Information security architecture for remote access control using non-bidirectional protocols | |
JP2005510184A (en) | Key management protocol and authentication system for secure Internet protocol rights management architecture | |
US20030237005A1 (en) | Method and system for protecting digital objects distributed over a network by electronic mail | |
JP2004509398A (en) | System for establishing an audit trail for the protection of objects distributed over a network | |
WO2002005475A2 (en) | Generation and use of digital signatures | |
US8161565B1 (en) | Key release systems, components and methods | |
US10380568B1 (en) | Accessing rights-managed content from constrained connectivity devices | |
CN111541708A (en) | Identity authentication method based on power distribution | |
JP3877388B2 (en) | Information provision system | |
JP2005202869A (en) | Personal information disclosure system, method and program | |
JP2000112860A (en) | Method for safe information transmitting/sharing service | |
KR20010076025A (en) | A method for transmitting a encrypted file in the computer network for only selected-client's usage | |
JP2007257157A (en) | Method, system and control program for preventing rejection of digital content |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A2 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A2 Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
AK | Designated states |
Kind code of ref document: A3 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A3 Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG |
|
DFPE | Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101) | ||
WWE | Wipo information: entry into national phase |
Ref document number: 10240151 Country of ref document: US |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2406010 Country of ref document: CA |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2001923922 Country of ref document: EP |
|
WWP | Wipo information: published in national office |
Ref document number: 2001923922 Country of ref document: EP |
|
NENP | Non-entry into the national phase |
Ref country code: JP |
|
WWW | Wipo information: withdrawn in national office |
Ref document number: 2001923922 Country of ref document: EP |