Koninklijke Philips Corporation N.V.

Signify Holding B.v.

Koninlijke Philips Electronics N.v.

Adrea, LLC

Robert Paul Koster

Milan Petkovic

Petrus Johannes Lenoir

Geert Jan Schrijen

Franciscus Lucas Antonius Johannes Kamperman

Alphons Antonius Maria Lambertus Bruekers

Antonius Hermanus Maria Akkermans

Paulus Mathias Hubertus Mechtildis Antonius Gorissen

Koen Hendrik Johan Vrielink

Najib Koraichi

Franciscus L A J Kamperman

Peter Petrus Van Liesdonk

Lukasz Szostek

Bartholomeus Johannes Van Rijnsoever

Klaus Kursawe

Mina Deng

Sye Loong Keoh

Marijn Christian Damstra

Javier Montaner

Johan Gerhard Herman Reuzel

Stefan Katzenbeisser

Daniel Pletea

Julien Kunzi

Paulus Mathias Hubertus Mechtildis Anton Gorissen

Rafih Berkane

Ileana R Buhan

Sebastiaan Antonius Fransiscus Van Den Heuvel

Sorin Marcel Iacob

Joost Reuzel

Franciscus Lucas Antonius Johannes Kampeman

Franciscus Lucas Kamperman

The resource metering system comprises: an end-point device () consuming a resource, in particular for usage in a building () or in an outdoor lighting system, said device comprising a detection unit that produces status information and an indicator of usefulness; a smart meter () comprising: a communication circuitry provided with an interface adapted for receiving from said device status information and said indicator of usefulness; a metrology device connected to a medium () that provides the resource to said device; and a control circuitry connected to the metrology device for collecting resource consumption data, the control circuitry being connected to the communication circuitry and adapted to produce monitoring data to be securely transmitted to a server () after processing the status information and said indicator. Monitoring data are used when determining consumption tariffs, so as to encourage energy efficient usage of the device.

Resource metering system and method using such a system for smart energy consumption

This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P, P, . . . , PN), at least one device (D, D, . . . , DM), and at least one content item (C, C, . . . , CN) to the Authorized Domain (AD) given by the domain identifier (Domain_ID). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of the Authorized Domain () is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure, and reliable way.

Hybrid device and person based authorization domain architecture

This invention relates to a method of healthcare data handling by a trusted agent possessing or having an access to decryption keys for accessing healthcare data. A request is received from a requestor requesting accessing healthcare data. A log is generated containing data relating to the request or the requestor or both. Finally, the requestor is provided with an access to the healthcare data.

Method and a system of healthcare data handling

A method of performing measurement of a subject comprises measuring a physiological parameter of a subject, deriving data from the measured parameter, optionally, obtaining metadata relating to the measurement of the physiological parameter, determining the quality of the derived data from the derived data and/or the obtained metadata, and if the determined quality matches a predefined criteria, performing a predefined corrective action. In one embodiment, the method further comprises calculating one or more qualifiers from the derived data and/or from the obtained metadata, and wherein the step of determining the quality of the derived data comprises determining the quality of the derived data from the calculated qualifiers.

Performing measurement of a subject

A system for executing a virtual machine instance is provided. An executing environment () is arranged for creating a virtual machine instance (). The virtual machine instance () comprises an instance authorization unit () for receiving an instance authorization credential, wherein the instance authorization credential is uniquely associated with the virtual machine instance (). A data key unit () is arranged for generating a request for a data key, based on the instance authorization credential associated with the virtual machine instance (). A decryption unit () is arranged for decrypting a data item () based on the data key. A key server system () is arranged for issuing keys to a virtual machine instance (). An instance authorization providing unit () is arranged for providing the instance authorization credential to the virtual machine instance ().

Secure data handling by a virtual machine

This invention relates to a method () for creating, on a device (), an authorized domain () for sharing a () of a content item () between a first person () and a second person (). The method () alleviates the hassle of having end-users managing authorized domains. If the first person is bound () to the right (), and the device is bound () to the first person (), the device () grants () the second person () the right () in response to the device () associating () to the second person ().

Method, device, system, token creating authorized domains

This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P, P, PN), at least one device (D, D, . . . , DM), and at least one content item (C, C, . . . , CNZ) to the Authorized Domain (AD) given by the domain identifier (Domain ID). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of the Authorized Domain () is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure and reliable way.

Hybrid device and person based authorized domain architecture

A method of controlled access to content, comprising joining an access sharing network, obtaining a content item from the access sharing network which requires access control data to enable playback, obtaining the access control data, determining from the access control data that a particular other device is authorized to play back the content item, and enabling playback of the content item in accordance with the access control data upon a positive determination that said other device is a member of said access sharing network. Preferably the access control data is used also during a predetermined period of time after making a determination that said other device has ceased to be a member of the access sharing network. Also a device () configured to carry out the method.

Method of controlled access to content

This invention relates to a system and a method of generating an Authorized Domain (AI)), the method comprising the steps of selecting a domain identifier (Domain ID) uniquely identifying the Authorized Domain, binding at least one user (P, P, . . . , PN) to the domain identifier (Domain ID), and binding at least one device (D, D, . . . , DM) to at least one user (P, P, . . . , PN), thereby obtaining a number of devices (D, D, . . . , DM) and a number of users (P, P, . . . , PN) that is authorized to access a content item (C, C, CN) of said Authorized Domain (). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of said Authorized Domain () is obtained. Additionally, it is possible to enable automatic assignment of imported content being imported on a device belonging to the Authorized Domain (AD) since it now is given to which person a given authorized device belongs to. Further, a simple and efficient way of implementing domain boundaries is enabled.

Method of and system for generating an authorized domain

The present invention relates to a method for exchanging data between at least two servers with use of a gateway. Preferably the method is applied to healthcare systems. Each server holds a unique federated identifier, which identifier identifies a single patient (P). Thus, it is possible for the servers to communicate with each other without having to reveal the true identity of patient. By creating one session pseudonym for each pair of providing server () holding relevant patient data and a requesting server () and by formatting an inbound session identifier related to the requesting server and an outbound session identifier related to the providing server for each session pseudonym the servers may communicate anonymous data with each other. The patient data is transferred from the at least one providing server to the requesting server and all session pseudonyms are replaced, in the requesting server, with the identifier of the requesting server for the patient (P).

Method for exchanging data

In a domain comprising a plurality of devices, the devices in the domain sharing a common domain key, a method of enabling a entity that is not a member of the domain to create an object that can be authenticated and/or decrypted using the common domain key, the method comprising providing to the entity that is not a member of the domain a diversified key that is derived using a one-way function from at least the common domain key for creating authentication data related to said object and/or for encrypting said object, the devices in the domain being configured to authenticate and/or decrypt said object using the diversified key.

Access to authorized domains

Authentication of a user to an electronic device in a communication network is described. The method comprises obtaining a biometric characteristic of the user, transmitting, to a social networking service, information that specifies at least one primary user of the device, receiving, from the social networking service, information that specifies a group of persons who have a social relationship with the at least one primary user, obtaining information that specifies a result from a biometric matching operation with the biometric characteristic of the user and biometric characteristics of persons in the specified group of persons, the result indicating whether or not the user is authenticated to the electronic device. By narrowing down the size of the searching space-needed during a matching operation by utilizing information regarding a group of persons in a social network, the false acceptance rate is reduced and biometric authentication of a user to an electronic device is thereby facilitated, e.g. to access desired functionality of the device or access a desired service.

Biometric authentication and identification

The invention relates to a method of allowing access to an authorized domain (), the authorized domain () being managed by a domain manager (), comprising a step in which a user authentication device (), which user authentication device is linked to a foreign device (), asserts to the domain manager that a local link () between the user authentication device and the foreign device is limited in distance, and a step in which the domain manager allows the foreign device to operate as a member of the authorized domain if the assertion is accepted as accurate.

Access to domain

This invention relates to a method of processing rights relating to content, that can be communicated between devices. Typically, a Digital Rights Management (DRM) system imposes limitations of use and distribution, imposed by the service provider, content provider or distributor. The method of the invention renders it possible for a user who has received DRM rights to restrict the right further. The invention is more particularly related to the receipt of DRM rights to Authorized Domain Digital Rights Management (AD-DRM) systems and the introduction of user attributed rights in the form of further restrictions introduced to the received DRM rights. The invention further relates to a Rights Program Template (RPT) facilitating the introduction of such further restrictions in a user friendly way. Finally, the invention relates to a system supporting the method of the invention.

Growing community of inventors

Eindhoven, Netherlands

Robert Paul Koster