Nortel Networks Corporation

Irdeto B.v.

Rockstar Consortium US LP

Ciena Corporation

Rockstar Bidco, LP

Rpx Clearinghouse LLC

Martin Soukup

Michael Heffernan

Gregory Hughes

Daniel Elie Murdock

Arn Close Hyndman

Dominic Goodwill

Clifford Liem

Arnoud Evert Van Foreest

Sharon Chisholm

Sergio Adrian Fiszman

Catherine Chambers

Chris Mcevilly

Chris Ramsden

Albert Frederich Reiche

Annie Liu

Mohammad Zulkernine

Walter Collins

Luc Martel

April Pennisi

Hongbo Li

Stephen Gaito

James Alves

Charles Gale

Doug Trump

Lama Moukahal

Martin Meier

Fernando Berra Kossik

Grant Goode

Daniel Murdoch

A method for a testing system to perform fuzzy testing of a software system, wherein the software system comprises a plurality of callable units and is arranged to receive input for the software system to process, the method comprising: determining, for each callable unit of the plurality of callable units, based on one or more security vulnerability metrics, a target number of times that callable unit is to be tested; initializing a ranked plurality of queues, each queue for storing one or more seeds, said initializing comprising storing one or more initial seeds in a corresponding queue of the ranked plurality of queues; performing a sequence of tests, wherein performing each test comprises: obtaining a seed from the highest ranked non-empty queue; performing a mutation process on the obtained seed to generate a test seed, wherein the mutation process is configured, at least in part, by mutation guidance information; providing the test seed as input to the software system for the software system to process; and evaluating the processing of the test seed by the software system to generate a result for the test; wherein each queue in the ranked plurality of queues has an associated seed addition criterion and wherein performing each test comprises either (a) adding the test seed to the highest ranked queue in the ranked plurality of queues for which the test seed meets the seed addition criterion associated with that queue; or (b) discarding the test seed if the test seed does not meet the seed addition criterion associated with any of the queues in the ranked plurality of queues; wherein the seed addition criteria are configured so that, if processing of a first test seed by the software system involves execution of, or an execution path approaching, a callable unit of interest and if processing of a second test seed by the software system does not involve execution of, or an execution path approaching, a callable unit of interest, then the queue to which the first test seed is added is of higher rank than the queue to which the second test seed is added, wherein a callable unit is a callable unit of interest if the current number of tests that have resulted in execution of that callable unit is less than the target number of times that callable unit is to be tested.

Fuzzy testing a software system

Methods and systems for providing secure digital access to services are described. Embodiments include user behavior tracking, learning, and updating one or more contextual access algorithms and thereafter can act as multi-factor authentications. The method may include receiving data for a group of users and initializing a machine learning algorithm with the group data. The method may also collect individual user data and context data periodically, including characteristic behavior data, and update the machine learning algorithm with the individual user data. The method may further calculate a threshold for tolerance based on the updated algorithm, and verify user requests for access to the service. A multi-factor authentication may be presented to the user when the verifications are not acceptable, such as by being below a threshold. A permissions data structure can be generated and used to control access to the service.

System and method for context-sensitive access control

A method and system for watermarking content utilizing a user device GPU. Embodiments include receiving on a processing server a request from a video server for a video to be played on the user's device. The processing server may extract a set of identifying information, such as user information, from the request for the video. The processing server may further prepare shader software code which is to be executed on a GPU present on the user's device. The code preparation may include creating a watermarking procedure to be executed during playback on the user device. The processing server may further transmit the shader software code to the streaming video server to be transmitted to the user device for execution during video playback.

Device and method for GPU-based watermarking

A method of providing access to content at a first device, the method comprising: receiving an item of content, wherein at least part of the item of content is encrypted, the encrypted at least part of the item of content being decryptable using at least one decryption key; in a first software client: obtaining a transformed version of the at least one decryption key; performing a decryption operation on the encrypted at least part of the item of content based on the at least one decryption key to obtain an intermediate version of the at least part of the item of content, wherein said performing the decryption operation uses a white-box implementation of the decryption operation that forms part of the first software client and that operates using the transformed version of the at least one decryption key; and performing an encryption operation on at least a portion of the intermediate version based on at least one encryption key to obtain re-encrypted content, wherein said performing the encryption operation uses a white-box implementation of the encryption operation that forms part of the first software client; and providing, to a digital rights management client that executes on the first device, (a) a rights object that enables the digital rights management client to obtain one or more second decryption keys corresponding to the at least one encryption key, the one or more second decryption keys enabling the digital rights management client to decrypt the re-encrypted content and (b) the re-encrypted content.

Providing access to content

There are described methods and apparatus for scrambling digital content, such as video or audio content, by dividing the digital content into blocks set out in an original arrangement, and reordering the blocks from the original arrangement to a scrambled arrangement. Additional manipulation transforms such as rotations and reflections may be applied to individual blocks. A subsequent compression step may then be carried out. Methods and apparatus for carrying out corresponding descrambling of digital content are also described.

Processing digital content

A technique for enabling a plurality of software components to communicate in a software component matrix environment is disclosed. In one particular exemplary embodiment, the technique may be realized by a method for enabling a plurality of software components to communicate in a software component matrix environment comprising the steps of encoding a request at a client side; communicating the request to a server at a server side via a communication interface; comparing the request to a plurality of operations supported at the server side; determining whether a function match exists at the server side; and returning a response comprising the function match to the client side in response to the request via the communication interface wherein the response is mapped to a data model of a client.

Technique for enabling a plurality of software components to communicate in a software component matrix environment

Subscribers request programs from a network based content server and view the requested programs via their customer equipment. The content server receives various programs and breaks the program content for each program into a sequence of program segments, which are logically linked by program association indicia. The content server also receives advertisements and stores the advertisements as advertising segments, which generally contain at least one complete advertisement, but the invention is not limited thereto. Upon receiving a program request from a subscriber, the content server will identify advertising segments to provide along with the program segments for the requested program, and where to place the advertising segments among the program segments. Next, the content server will generate composite association indicia identifying the sequence of program and advertising segments, and effect delivery of the program and advertising segments to the subscriber in the sequence defined by the composite association indicia.

Dynamic advertising control

In a streaming media environment in which multiple channels of media content are available, the present invention reduces the time interval between a user requesting a new channel and the media content of the requested channel being made available to the user.

System and method for increasing responsiveness to requests for streaming media

System and method for transparent single sign-on authentication on computers in a networked environment. A preferred embodiment comprises receiving an authentication request from an operating system of a first computer, requesting credentials of an application making the authentication request, authenticating the credentials, storing the credentials if the authentication is successful, and transmitting the credentials to a second computer. On subsequent access requests made by the user on the second computer, the credentials can be retrieved from the secure store, eliminating the need to prompt the user to re-enter authentication information.

System and method for transparent single sign-on

A technique for monitoring source addresses through statistical clustering of packets is disclosed. In one particular exemplary embodiment, the technique may be realized by a method for monitoring source addresses through statistical clustering of packets. The method may comprise identifying at least part of a source address of a packet. The method may also comprise searching at least one recorded source address based on the at least part of the source address, the at least one recorded source address being organized into at least one cluster. The method may further comprise routing the packet if the at least part of the source address falls within one of the at least one cluster and the one of the at least one cluster contains at least a predetermined number of source addresses.

Technique for monitoring source addresses through statistical clustering of packets

Performance of applications such as service capabilities in a container for providing a multimedia service is monitored. Performance monitoring indicates how well the applications are functioning in terms of predefined metrics and also whether the applications are functioning at all. Responses are prompted if performance monitoring indicates that an application is performing below a predefined level or failing to perform entirely. For example, a hung application may be restarted and other applications may alter their manner of function. This allows complex recovery logic through combinations of simple rules.

Self-healing containers

A technique for tracing source addresses of packets is provided. In one particular exemplary embodiment, the technique may be realized by/as a method for tracing source addresses of packets. The method comprises identifying at least part of a source address of a packet and determining whether the at least part of the source address matches at least one source address recorded within a predetermined time period prior to arrival of the packet.

Growing community of inventors

Ottawa, Canada

Martin Soukup