Verimatrix, Inc.

Verimatix, Inc.

Robert T Kulakowski

Robin Ross Cooper

James B Fahy

Jeffrey Bronte

Greg Hutchins

Craig Mautner

Niels J Thorwirth

Akinwale Olugbemiga Olugbile

Thomas A Munro

Eiji Oga

Donovan Steve White

Subrata Datta

Nicolas Pauli

Christopher Rae

Jeffery Bronte

Systems and methods for protecting data being sent between a client and a server include the capability of defining programmable processing steps that are applied by the server when protecting the data and the same steps are applied by the client when unprotecting the data. The programmable processing steps can be defined uniquely for each client, and the programmable processing steps are selected from a number of functions using sequencing data that defines the processing steps. The programmable processing steps allow for each client to process encrypted data in a different manner and the programmable processing steps are defined by what is called a digital rights management (DRM) Sequencing Key, and as such the system and method introduces a key-able DRM whereby each DRM message can be processed in a unique (or pseudo unique) manner.

System and method for defining programmable processing steps applied when protecting the data

Systems and methods are described for aggregating information obtained from messages between playback devices and content protection systems, including but not limited to conditional access systems, downloadable conditional access systems, and digital rights management systems, that include a unique identifier and applying user modifiable rules to the aggregated information to identify abnormal behavior associated with the unique identifier including but not limited to one or more clone playback devices utilizing the unique identifier or a rogue playback device utilizing a unique identifier. One embodiment includes a plurality of playback devices connected to a headend via a network, where the headend includes at least one content protection system, and a clone monitor configured to register playback devices based upon a unique identification supplied by each playback device, when communicating with the at least one content protection system. In addition, the clone monitor is configured to aggregate information associated with each playback device over time, where the information is obtained from messages that are transmitted between the playback device and the headend and that include a unique identifier, and the clone monitor is configured to apply rules to the aggregated information to identify at least one pattern of abnormal behavior in the aggregated information associated with a specific unique identifier.

Systems and methods for detecting clone playback devices

System and method for identification of ownership to media objects through analysis of semantic information in the media objects are disclosed Semantic information is a term that can be used to describe aspects of the content of a media object that are apparent to a human viewing or listening to the content One embodiment of the invention includes extracting semantic information from a specified media object, matching said semantic information of the specified media object against known semantic information of known media objects, and taking action based on the result of the companson.

Systems and methods for performing semantic analysis of media objects

An enhanced cable card device is described that operates in host devices without requiring an out-of-band data channel. One embodiment includes a broadcast receiver for receiving a broadcast signal, a processor for coordinating processing in the cable card, a memory for storing data normally received by the cable card over an out-of-band signal, an in band data receiver for receiving an in band data signal, and a control program running on the processor to signal reception of an out-of-band signal to a host device electrically connected to the cable card. In addition, the control program processes data from the memory and provides processed output data to the host device simulating data normally received over an out-of-band data channel, and the cable card allows the host device to operate normally without an out-of-band receiver.

Enhanced cablecard processor including OOB simulator

Systems and methods are described for over-encrypting symmetrically pre-encrypted content for off-line delivery to playback devices using portable media drives in accordance with embodiments of the invention. One embodiment of the method of the invention includes symmetrically pre-encrypting the content, receiving a request to issue content for playback on at least one playback device associated with a user account, where each playback device includes a processor containing a private key assigned to the playback device by a conditional access system, generating a content key and over-encrypting at least a portion of the symmetrically pre-encrypted content in response to the request, obtaining a public key for each playback device, encrypting a copy of the content key using the public key of each playback device associated with the user account, and delivering the over-encrypted content and the at least one encrypted copy of the content key to a playback device associated with the user account.

Off-line content delivery system with layered encryption

In a network user authentication system, a network user is identified for authentication purposes using the unique identifier for a dedicated physical communication line associated with the building in which the network user is located or a digital certificate which is associated with a secure component or communication line physically attached to a building. An authentication server initially verifies the identification of the dedicated communication line to be associated with a network service subscriber or issues a unique digital certificate to be associated with the dedicated communication line for authentication purposes. The digital certificate may be stored in a building gateway or in an edge site module which is connected to the secure components of a plurality of buildings and stores unique digital certificates for each building.

Network user authentication system and method

In a security system for network communications with client devices, each client device has a communication module for communicating with at least one server over a network, a data storage module for storing one or more covert data values of one or more operational events at the client device, and a covert identifier generating module which creates at least one covert identifier based on the stored covert data values. The covert identifier is provided in one or more network messages to the server, or otherwise sent to the service provider, and may be provided in response to a specific request received over the network, or routinely in one or more messages normally involved in network communications. The server compares covert identifiers received from client devices having the same client identifier in order to detect possible clones.

Network security system and method

A content delivery proxy system and method delivers content to an unsupported client device within a content delivery system by converting messages and data from the unsupported client device into content delivery system supported messages and data. Client log-in messages received from the unsupported client device are converted into a content delivery system supported format and sent to the content delivery system, and user entitlement information of a user of the unsupported client device is requested from the content delivery system. If the user is a subscriber of the content provider, an unsupported client device identifier is created for the client device. A user interface for selecting content from the content delivery system is displayed on the client device in a client device supported format, and selections on the user interface are sent to the content delivery system. Selected content is provided to the client device in the proper format for playback on the client device.

Content delivery proxy system and method

A method and system for transferring electronic media information over a public network in such a way as to provide safeguards for inappropriate distribution of copyright or otherwise protected materials are described. The media information is transparently watermarked with a unique ID, such as one generated from X.509 Digital Certificate and public-key cryptography public/private key pairs, such that the information can be identified as belonging to a particular individual. A system and method for monitoring the movement of such watermarked files, positively identifying people who have inappropriately distributed copyright materials over a public network without permission, and taking appropriate enforcement action against such people.

Network-based content distribution system

A system and method for providing protection of ownership rights of digital content files while also providing distribution of the content files to consumers that are authorized to receive the digital content files. A system and method for preventing or deterring the unauthorized distribution of digital content files. Several possible protection schemes include, for example, proactive protections such as encryption, SSL or VPN technologies, and reactive protections such as watermarking, PKI, piracy watch systems, or legal action management.

Growing community of inventors

San Diego, CA, United States of America

Robert T Kulakowski