Koninklijke Philips Corporation N.v.

Signify Holding B.v.

U.S. Philips Corporation

Philips Lighting Holding B.v.

Koninklike Philips N.v.

Adrea, LLC

Petrus Johannes Lenoir

Mark Henricus Verberkt

Jules Martinus Adrianus Gerardus De Laat

Sanjay Krupakar Bhat

Tony Petrus Van Endert

Jurgen Mario Vangeel

Franciscus Lucas Antonius Johannes Kamperman

Wijnand Johannes Rietman

Robert Paul Koster

Lukasz Szostek

Michael Petrus Franciscus Verschoor

Wouter Baks

Lokesh Narayan

Simon Dingle

Franciscus L A J Kamperman

Sye Loong Keoh

Johan Cornelis Talstra

Johan Paul Marie Gerard Linnartz

Alphons Antonius Maria Lambertus Bruekers

Xiangyu Wang

Paulus Mathias Hubertus Mechtildis Antonius Gorissen

Sandeep Shankaran Kumar

Stephanus Joseph Johannes Nijssen

Engel Johannes Knibbe

Marten Erik Van Dijk

Emmanuel David Lucas Michael Frimout

Muhammad Asim

Sebastiaan Antonius Fransiscus Arnoldus Van Den Heuvel

Klaus Kursawe

Onno Martin Janssen

Koen Hendrik Johan Vrielink

Hendrik D L Hollmann

Hans Van Amstel

Hassan Mansouri Jajai

Sebastiaan Antonius Fransiscus Van Den Heuvel

Joost Reuzel

Paulus Mathias Hubertus Mechtildis Anton Gorissen

Ileana R Buhan

Willem Jonker

Sanjay Bhat

Lokesh Narayan Raj Urs

Simon Garven Dingle

Jajai Hassan Mansouri

The invention relates to a system and methods for providing conditional access to indoor location information in a system comprising a mobile device (), a positioning webservice () and an authorization authority (), the method comprising: the mobile device () performing the steps of: transmitting license information to the authorization authority () and transmitting a request for indoor location information to the positioning webservice, the request comprising a request-location-estimate corresponding to a location estimate of the mobile device () at the time of making the request, the authorization authority () performing the steps of: receiving the license information, verifying whether the license information authorizes access to indoor location information by the mobile device (), issuing a secure proof, verifiable by the positioning webservice () upon successful verification, the secure proof indicating that the license information authorizes access to indoor location information by the mobile device () for an authorized region; the positioning webservice () performing the steps of: receiving the request for indoor location information and the secure proof; verifying whether the secure proof authorizes the transmission of indoor location information to the mobile device () for the request-location-estimate; and upon successful verification sending indoor location information for the request-location-estimate to the mobile device ().

Methods and systems for providing conditional access to indoor location information

Disclosed are systems and methods for adjusting environmental conditions based on automatically and manually generated requests. A commissioned unit comprising at least one IP luminaire (), transmits a signal comprising one or more identification codes. The signal may be, for example, a coded light signal. An environment control device () receives the signal, detects user input indicating one or more preferred environmental conditions, and transmits an environment control request comprising the one or more preferred environmental conditions. An environment manager module () receives the environment control request, generates an environment control command using the control request, and transmits the environment control command to one or more commissioned units to alter environmental conditions in a space in accordance with the user input.

Systems and methods for managing environmental conditions

A network node () is provided having a normal mode and a coordinator mode. The network node comprises a counter () and an incrementing unit (), the incrementing unit being arranged to increment the counter at regular time intervals. If the network node does not receive counter synchronization messages it switches to coordinator mode.

Network node

The resource metering system comprises: an end-point device () consuming a resource, in particular for usage in a building () or in an outdoor lighting system, said device comprising a detection unit that produces status information and an indicator of usefulness; a smart meter () comprising: a communication circuitry provided with an interface adapted for receiving from said device status information and said indicator of usefulness; a metrology device connected to a medium () that provides the resource to said device; and a control circuitry connected to the metrology device for collecting resource consumption data, the control circuitry being connected to the communication circuitry and adapted to produce monitoring data to be securely transmitted to a server () after processing the status information and said indicator. Monitoring data are used when determining consumption tariffs, so as to encourage energy efficient usage of the device.

Resource metering system and method using such a system for smart energy consumption

A method of controlling access to a content item in a domain comprising a set of mutually authenticated devices, the method comprising deriving one or more domain-specific rights from a right associated with the content item, the one or more domain-specific rights being bound to the domain and allowing the devices in the domain access to the content item. Also system comprising a set of mutually authenticated devices, said set making up a domain, the system comprising a central rights manager arranged for executing said method.

Digital rights management method and system

Disclosed are systems and methods for adjusting environmental conditions within a physical structure comprising a plurality of linked commissioned units. One or more occupancy sensors (--) produce data indicating that a designated zone has transitioned from an unoccupied state to an occupied state. A first one or more luminaires (--) associated with a first one of the plurality of linked commissioned units (D), produces a background level of illumination within a predetermined reaction period following the production of the sensor data. The first one of the plurality of linked commissioned units transmits data indicative of the state change of the designated zone, and at least a second one of the plurality of linked commissioned units receives the data indicative of the state change, and causes at least a second one or more luminaires to alter illumination.

A method of and system for digital rights management, in which access to a piece of content is granted in accordance with a license owned by a license owner to a client who is a member of a domain. This requires successfully verifying that a membership relation exists between the client and the domain as reflected in a first state variable, and that an association relation exists between the license owner and the domain as reflected in a second state variable. Both relationships are revoked by executing an online protocol between the parties in the relationship after which both remove the corresponding state variable. The domain controller propagates the state administration relating to the domain is propagated to the client so that the client can update its state administration.

DRM system

A system including a server system, a user terminal and a hardware token, for providing secure access to a data record. The server system comprises storage means () for storing a plurality of data records, a data record () having associated therewith a sequence of secrets () shared with a hardware token () corresponding to the data record (), the server system () further being arranged for storing user authentication information (). User authenticating means () are provided for receiving authentication credentials () of a user from a user terminal () and authenticating the user as an authorized user, based on the authentication credentials () of the user and the stored authentication information (). Secret-receiving means () are provided for receiving a representation of a secret () revealed by a hardware token () and information identifying the data record corresponding to the hardware token from the terminal. Marking means () are provided for marking the unused secret (s) as used.

Secure access to personal health records in emergency situations

This invention relates to a system and a method of generating an Authorized Domain (AI)), the method comprising the steps of selecting a domain identifier (Domain ID) uniquely identifying the Authorized Domain, binding at least one user (P, P, . . . , PN) to the domain identifier (Domain ID), and binding at least one device (D, D, . . . , DM) to at least one user (P, P, . . . , PN), thereby obtaining a number of devices (D, D, . . . , DM) and a number of users (P, P, . . . , PN) that is authorized to access a content item (C, C, CN) of said Authorized Domain (). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of said Authorized Domain () is obtained. Additionally, it is possible to enable automatic assignment of imported content being imported on a device belonging to the Authorized Domain (AD) since it now is given to which person a given authorized device belongs to. Further, a simple and efficient way of implementing domain boundaries is enabled.

Method of and system for generating an authorized domain

The invention relates to a method of allowing access to an authorized domain (), the authorized domain () being managed by a domain manager (), comprising a step in which a user authentication device (), which user authentication device is linked to a foreign device (), asserts to the domain manager that a local link () between the user authentication device and the foreign device is limited in distance, and a step in which the domain manager allows the foreign device to operate as a member of the authorized domain if the assertion is accepted as accurate.

Access to domain

The invention relates to a method of outsourcing intermediate results of an internal data processing to an external memory, to a corresponding device for processing data having an interface for outsourcing intermediate results, to a disk drive having a corresponding device for processing data, and a cellular phone having a device for processing data. This method can be applied when confidential data is processed but intermediate results thereof need to be stored externally to the processing. First intermediate result data units (I ) are combined with first verification data units (V ) in order to provide a data signal (S ), which is encrypted (E ) and stored in an external memory ( ). When the intermediate result data units (I ) stored in the external memory ( ) are needed during a subsequent internal data processing a data signal (E ) is read from the external memory ( ). After the decryption of the read data signal second verification data units (V ) and second intermediate result data units (I ) are obtained. Said second read verification data units (V ) are verified with said first verification data units (V ) in order to detect any manipulation of the intermediate result data during the time that they were stored in the external memory ( ).

Watermark detector

An encrypting exponentiation modulo M is effected by a modular multiplication X*YmodM, where M is a temporally steady but instance-wise non-uniform modulus. The method involves an iterative series of steps. Each step executes one or two first multiplications to produce a first result, and a trim-down reduction of the size of the first result by one or more second multiplications to produce a second result. The method furthermore takes a distinctive measure for keeping the final result of each step below a predetermined multiplicity of the modulus. In particular, the method postpones substantially any subtraction of the modulus as pertaining to the measure to a terminal phase of the modular exponentiation. This is possible through choosing in an appropriate manner one or more parameters figuring in the method. This further maintains overall temporal performance.

Method and device for executing a decrypting mechanism through calculating a standardized modular exponentiation for thwarting timing attacks

Growing community of inventors

's Hertogenbosch, Netherlands

Petrus Johannes Lenoir