Koninklijke Philips Corporation N.V.

Jin Qu

Xin Ge

Milan Petkovic

Fulong Ma

Fubiao Xia

Hui Li

Muhammad Asim

Raymond J Krasinski

Dan Jiang

Peter Petrus Van Liesdonk

Mo Li

Changjie Wang

Alexander Ryan Mankovich

Yong Mao

The invention provides a consent management system for managing a user's consent for a plurality of services. The system includes a consent management unit adapted to register a plurality of services to a user and obtain user consent information associated with the user. The consent management unit is further adapted to control consent operation of the plurality of services registered to the user, based on user consent information associated with the user.

System and method for consent management

Various embodiments relate to a method and apparatus for policy-hiding on ciphertext-policy attribute based encryption, the method including the steps of categorizing each of a plurality of attributes into a plurality of groups where each of the plurality of groups has a group attribute, inputting a policy and a message into an encryption algorithm and outputting a ciphertext; and encrypting an AND subtree in the policy and outputting a sub-cipher.

Method and apparatus for policy hiding on ciphertext-policy attribute-based encryption

A method for assessing risk associated with a request from an inquirer for allele frequency from a database of genetic data, comprising: (i) generating an allele database comprising allele frequency information and request frequency information for each of a plurality of alleles; (ii) generating an inquirer database comprising allele request information about a plurality of inquirers; (iii) receiving a request for genetic data from an inquirer, comprising a request for allele frequency for one or more alleles and an identifier of the inquirer; (iv) updating the request frequency information based on the received request; (v) updating the allele request information for the requesting inquirer; (vi) calculating an allele risk score; (vii) calculating an inquirer risk score; and (viii) assessing, based on the allele risk score and the inquirer risk score, a risk associated with the received request.

Proactive resistance to re-identification of genomic data

Embodiments of the present disclosure relate to digital rights management. A method for managing rights transfer of using digital content from a first device () to a second device () is proposed, comprising generating at an authentication device () a first authentication dataset C by encrypting a first verification code Rusing at least one public key for at least one device blacklisted by the authentication device (). The first authentication dataset C and a second verification code Rare provided from the authentication deviceto the first device () and a response message M is returned from the second device () to the authentication device (). The method also comprises verifying validity of the second device () at the authentication device () based on the received response message M. In accordance with embodiments of the present disclosure, the DRM protected digital content can be shared with high security, while the recipient is kept anonymous to the DRM server.

Digital rights management for anonymous digital content sharing

This invention provides a method for managing a transaction right in a digital rights management server. The transaction right is the right to a transaction of a utilization right of a digital content item. The method comprises steps of obtaining an attribute associated with the digital content item from metadata of the digital content item; and generating the transaction right on the basis of a pre-stored rule and the attribute of the digital content item. Since the transaction right is generated on the basis of the attribute of the digital content item, or in other words, the transaction right is dependent on the attribute of the digital content item, the generated transaction right of digital content items can be different if the corresponding attribute associated with the digital content items are different. Furthermore, in additional to the metadata, the generation of the transaction right only requires the pre-stored rule, resulting in affordable complexity and cost. Since the transaction right is also dependent on the pre-stored rule, the content providers need not to individually set the transaction right for each digital content item, but are still able to set the transaction right by setting the pre-stored rule.

Method and apparatus for managing a transaction right

A method of dynamically determining the access rights of a client to a record comprises receiving an access request from the client with respect to the record, determining one or more contexts relating to the access request, calculating a score for each determined context, calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, and determining the client's access rights according to a comparison of the overall score to the score for each right in the rights policy.

Dynamic determination of access rights

The present invention proposes an apparatus and a method for selecting a transport control mechanism to be used between a first device () and a second device (). Firstly, a first unit () obtains first information indicating the transport control mechanism supported by the first device () and second information indicating the transport control mechanism supported by second device (); then, a second unit () selects the transport control mechanism to be used between the first device () and the second device () on the basis of the first and second information and a preset rule. With the apparatuses and methods provided in the present invention, the problem of how to select the transport control mechanism to be used between the media server and the media client is well solved. Furthermore, by applying the defined messages and the interaction process in IGRS protocols, there is no need for additional messages nor for an additional interaction process.

Apparatuses and methods for selecting a transport control mechanism

A system is disclosed for providing interoperability between a plurality of data protection systems. The system includes an ontology () configured to store definitions () of concepts () relating to interface elements of at least two different data protection systems including a first data protection system () and a second data protection system (); and a mapping generator () configured to generate a mapping between at least one interface element of the first data protection system () and at least one interface element of the second data protection system (), based on the ontology (). The system comprises a message converter () configured to receive a message generated by the first data protection system (), convert the message based on the mapping to obtain a converted message, and transmit the converted message to the second data protection system ().

Interoperability between a plurality of data protection systems

The invention provides a method and apparatus for pseudonym generation and authentication. The method comprises the steps of: transmitting a user identity IDto a Personal Identity Manager (PIM); receiving a set of public parameters and a prime pseudonym Pcorresponding to the ID user from the PIM; and selecting at least two random parameters, and generating a sub-pseudonym Pwith the at least two random numbers, the set of public parameters, and the prime pseudonym P.

Method and apparatus for pseudonym generation and authentication

To overcome the drawback of difficulties when interchanging a patient's health record among different health information management systems and yet keep the patient's privacy, this invention proposes a method comprising the steps of: extracting, from a certificate, a signature of a first service provider and a first identifier; generating a second identifier corresponding to the first identifier; sending a request to any one of a second identifier manager and the first service provider so as to request a record associated with the first identifier; receiving the requested record from any one of the second identifier manager and the first service provider; and associating the requested record with the second identifier. Use of the proposed method provides the advantage that there is no need to unify all health information management systems adopting the same pseudonymization service, and makes it easy to share health information among different health information management systems without disclosing the patient's privacy.

Information interchange system and apparatus

A method of rights management in a first device connected to digital data content, said first device comprising a right for accessing said digital data content and available state information for reflecting the state of use of said digital data content, said method comprising the steps of: &#x2014;receiving by said first device a request for a state information from a second device; &#x2014;comparing the content of said request with said available state information; &#x2014;selecting said requested state information in said available state information according to the result of said comparing step; &#x2014;transferring said requested state information to said second device via a communication channel; and&#x2014;duplicating said fight to said second device.

Method and device for rights management

The present invention provides a method for authenticating the copy right of a device by an offline way, a digital right protection system, and a method for providing digital contents, which mainly includes embedding an authentication agent into the digital content, said authentication agent, instead of the copyright issuer at the server side, authenticates the rendering qualification of the device before rendering the digital content. If the device is a non-compliant device, the authentication agent will not permit the device to render the digital content. The technique of the invention realizes offline digital right management, so it is not restricted by the network condition and can be applied widely in various environments.

Growing community of inventors

Shanghai, China

Jin Qu