US20070276759A1 - Trusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transaction and rights management - Google Patents
Trusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transaction and rights management Download PDFInfo
- Publication number
- US20070276759A1 US20070276759A1 US11/834,784 US83478407A US2007276759A1 US 20070276759 A1 US20070276759 A1 US 20070276759A1 US 83478407 A US83478407 A US 83478407A US 2007276759 A1 US2007276759 A1 US 2007276759A1
- Authority
- US
- United States
- Prior art keywords
- control set
- permissions
- clearinghouse
- electronic
- usage
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
- 238000000034 method Methods 0.000 title claims description 356
- 238000012545 processing Methods 0.000 claims description 232
- 238000012550 audit Methods 0.000 claims description 88
- 230000006854 communication Effects 0.000 claims description 65
- 238000004891 communication Methods 0.000 claims description 65
- 238000007726 management method Methods 0.000 claims description 58
- 238000013475 authorization Methods 0.000 claims description 43
- 238000009826 distribution Methods 0.000 claims description 43
- 230000004044 response Effects 0.000 claims description 40
- 238000007639 printing Methods 0.000 claims description 11
- 230000006870 function Effects 0.000 abstract description 291
- 238000013461 design Methods 0.000 abstract description 30
- 238000003491 array Methods 0.000 abstract description 6
- 230000008569 process Effects 0.000 description 178
- 230000000694 effects Effects 0.000 description 92
- 230000008520 organization Effects 0.000 description 76
- 230000007246 mechanism Effects 0.000 description 38
- 230000008093 supporting effect Effects 0.000 description 35
- 230000008901 benefit Effects 0.000 description 34
- 230000002776 aggregation Effects 0.000 description 31
- 238000004220 aggregation Methods 0.000 description 31
- 238000004886 process control Methods 0.000 description 31
- 238000004458 analytical method Methods 0.000 description 27
- 230000003993 interaction Effects 0.000 description 25
- 238000012384 transportation and delivery Methods 0.000 description 24
- 239000000203 mixture Substances 0.000 description 23
- 239000000047 product Substances 0.000 description 22
- 238000013474 audit trail Methods 0.000 description 19
- 230000000875 corresponding effect Effects 0.000 description 18
- 239000000463 material Substances 0.000 description 18
- 238000004519 manufacturing process Methods 0.000 description 16
- 238000011160 research Methods 0.000 description 16
- 230000009471 action Effects 0.000 description 13
- 235000013550 pizza Nutrition 0.000 description 13
- 230000010076 replication Effects 0.000 description 11
- 230000000977 initiatory effect Effects 0.000 description 10
- 230000029305 taxis Effects 0.000 description 10
- 238000012790 confirmation Methods 0.000 description 9
- 230000004931 aggregating effect Effects 0.000 description 8
- 235000008429 bread Nutrition 0.000 description 8
- 230000001419 dependent effect Effects 0.000 description 8
- 238000010586 diagram Methods 0.000 description 8
- 238000012423 maintenance Methods 0.000 description 8
- 230000005540 biological transmission Effects 0.000 description 7
- 239000003795 chemical substances by application Substances 0.000 description 7
- 230000000295 complement effect Effects 0.000 description 7
- 230000001276 controlling effect Effects 0.000 description 7
- 238000005516 engineering process Methods 0.000 description 7
- 230000000737 periodic effect Effects 0.000 description 7
- 238000012546 transfer Methods 0.000 description 7
- 238000009434 installation Methods 0.000 description 6
- 238000004801 process automation Methods 0.000 description 6
- 230000008859 change Effects 0.000 description 5
- 230000001010 compromised effect Effects 0.000 description 5
- 239000004744 fabric Substances 0.000 description 5
- 230000004048 modification Effects 0.000 description 5
- 238000012986 modification Methods 0.000 description 5
- 238000012795 verification Methods 0.000 description 5
- 230000002860 competitive effect Effects 0.000 description 4
- 238000013480 data collection Methods 0.000 description 4
- 238000005315 distribution function Methods 0.000 description 4
- 239000000446 fuel Substances 0.000 description 4
- 230000003287 optical effect Effects 0.000 description 4
- 230000036961 partial effect Effects 0.000 description 4
- 238000012797 qualification Methods 0.000 description 4
- 238000003860 storage Methods 0.000 description 4
- 238000009825 accumulation Methods 0.000 description 3
- 230000009286 beneficial effect Effects 0.000 description 3
- 230000033228 biological regulation Effects 0.000 description 3
- 238000006243 chemical reaction Methods 0.000 description 3
- 238000013497 data interchange Methods 0.000 description 3
- 238000011161 development Methods 0.000 description 3
- 230000018109 developmental process Effects 0.000 description 3
- 239000000284 extract Substances 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 230000006855 networking Effects 0.000 description 3
- 230000037361 pathway Effects 0.000 description 3
- 239000004065 semiconductor Substances 0.000 description 3
- 230000032258 transport Effects 0.000 description 3
- 244000291564 Allium cepa Species 0.000 description 2
- 235000002732 Allium cepa var. cepa Nutrition 0.000 description 2
- 230000003044 adaptive effect Effects 0.000 description 2
- 230000003466 anti-cipated effect Effects 0.000 description 2
- 230000000981 bystander Effects 0.000 description 2
- 238000004364 calculation method Methods 0.000 description 2
- 235000013339 cereals Nutrition 0.000 description 2
- 235000013351 cheese Nutrition 0.000 description 2
- 239000002131 composite material Substances 0.000 description 2
- 239000000470 constituent Substances 0.000 description 2
- 235000013312 flour Nutrition 0.000 description 2
- 239000000383 hazardous chemical Substances 0.000 description 2
- 230000010354 integration Effects 0.000 description 2
- 230000002452 interceptive effect Effects 0.000 description 2
- 230000007935 neutral effect Effects 0.000 description 2
- 238000004806 packaging method and process Methods 0.000 description 2
- 230000002829 reductive effect Effects 0.000 description 2
- 235000013580 sausages Nutrition 0.000 description 2
- 230000008685 targeting Effects 0.000 description 2
- 238000013519 translation Methods 0.000 description 2
- 238000010200 validation analysis Methods 0.000 description 2
- 230000003442 weekly effect Effects 0.000 description 2
- 101001073212 Arabidopsis thaliana Peroxidase 33 Proteins 0.000 description 1
- SPNQRCTZKIBOAX-UHFFFAOYSA-N Butralin Chemical compound CCC(C)NC1=C([N+]([O-])=O)C=C(C(C)(C)C)C=C1[N+]([O-])=O SPNQRCTZKIBOAX-UHFFFAOYSA-N 0.000 description 1
- 241001522296 Erithacus rubecula Species 0.000 description 1
- 241000287828 Gallus gallus Species 0.000 description 1
- 101001123325 Homo sapiens Peroxisome proliferator-activated receptor gamma coactivator 1-beta Proteins 0.000 description 1
- 102100028961 Peroxisome proliferator-activated receptor gamma coactivator 1-beta Human genes 0.000 description 1
- 241001620634 Roger Species 0.000 description 1
- 238000013528 artificial neural network Methods 0.000 description 1
- 238000000429 assembly Methods 0.000 description 1
- 230000003190 augmentative effect Effects 0.000 description 1
- 235000015173 baked goods and baking mixes Nutrition 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 230000007175 bidirectional communication Effects 0.000 description 1
- 230000002146 bilateral effect Effects 0.000 description 1
- 230000015556 catabolic process Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 235000013330 chicken meat Nutrition 0.000 description 1
- 230000003749 cleanliness Effects 0.000 description 1
- 230000008867 communication pathway Effects 0.000 description 1
- 239000012141 concentrate Substances 0.000 description 1
- 230000001143 conditioned effect Effects 0.000 description 1
- 230000003750 conditioning effect Effects 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000012938 design process Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 230000005611 electricity Effects 0.000 description 1
- ZINJLDJMHCUBIP-UHFFFAOYSA-N ethametsulfuron-methyl Chemical compound CCOC1=NC(NC)=NC(NC(=O)NS(=O)(=O)C=2C(=CC=CC=2)C(=O)OC)=N1 ZINJLDJMHCUBIP-UHFFFAOYSA-N 0.000 description 1
- 238000009432 framing Methods 0.000 description 1
- 239000004519 grease Substances 0.000 description 1
- 238000009499 grossing Methods 0.000 description 1
- 230000012010 growth Effects 0.000 description 1
- 239000013056 hazardous product Substances 0.000 description 1
- 230000036541 health Effects 0.000 description 1
- 230000008676 import Effects 0.000 description 1
- 230000001976 improved effect Effects 0.000 description 1
- 238000010348 incorporation Methods 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000000670 limiting effect Effects 0.000 description 1
- 230000033001 locomotion Effects 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 238000005259 measurement Methods 0.000 description 1
- 239000002184 metal Substances 0.000 description 1
- 230000005012 migration Effects 0.000 description 1
- 238000013508 migration Methods 0.000 description 1
- 239000003607 modifier Substances 0.000 description 1
- 230000001737 promoting effect Effects 0.000 description 1
- 239000002994 raw material Substances 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 230000001105 regulatory effect Effects 0.000 description 1
- 230000008439 repair process Effects 0.000 description 1
- 230000000717 retained effect Effects 0.000 description 1
- 230000011218 segmentation Effects 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 238000004088 simulation Methods 0.000 description 1
- 239000000779 smoke Substances 0.000 description 1
- 239000013589 supplement Substances 0.000 description 1
- 230000000153 supplemental effect Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 230000007474 system interaction Effects 0.000 description 1
- 230000026676 system process Effects 0.000 description 1
- 235000019640 taste Nutrition 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
- 238000012549 training Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
- 230000007723 transport mechanism Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/109—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by using specially-adapted hardware at the client
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/16—Program or content traceability, e.g. by watermarking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/33—User authentication using certificates
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/606—Protecting data by securing the transmission between two devices or processes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/86—Secure or tamper-resistant housings
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q20/023—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] the neutral party being a clearing house
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/12—Payment architectures specially adapted for electronic shopping systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/12—Payment architectures specially adapted for electronic shopping systems
- G06Q20/123—Shopping for digital content
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/12—Payment architectures specially adapted for electronic shopping systems
- G06Q20/123—Shopping for digital content
- G06Q20/1235—Shopping for digital content with control of digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/14—Payment architectures specially adapted for billing systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/24—Credit schemes, i.e. "pay after"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
- G06Q30/0601—Electronic shopping [e-shopping]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06T—IMAGE DATA PROCESSING OR GENERATION, IN GENERAL
- G06T1/00—General purpose image data processing
- G06T1/0021—Image watermarking
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F9/00—Details other than those peculiar to special kinds or types of apparatus
- G07F9/02—Devices for alarm or indication, e.g. when empty; Advertising arrangements in coin-freed apparatus
- G07F9/026—Devices for alarm or indication, e.g. when empty; Advertising arrangements in coin-freed apparatus for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00137—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to contents recorded on or reproduced from a record carrier to authorised users
- G11B20/00159—Parental control systems
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00188—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised devices recording or reproducing contents to/from a record carrier
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00485—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
- G11B20/00557—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0071—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a purchase action
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00731—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction
- G11B20/00746—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction wherein the usage restriction can be expressed as a specific number
- G11B20/00753—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction wherein the usage restriction can be expressed as a specific number wherein the usage restriction limits the number of copies that can be made, e.g. CGMS, SCMS, or CCI flags
- G11B20/00768—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction wherein the usage restriction can be expressed as a specific number wherein the usage restriction limits the number of copies that can be made, e.g. CGMS, SCMS, or CCI flags wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B27/00—Editing; Indexing; Addressing; Timing or synchronising; Monitoring; Measuring tape travel
- G11B27/02—Editing, e.g. varying the order of information signals recorded on, or reproduced from, record carriers
- G11B27/031—Electronic editing of digitised analogue information signals, e.g. audio or video signals
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B27/00—Editing; Indexing; Addressing; Timing or synchronising; Monitoring; Measuring tape travel
- G11B27/10—Indexing; Addressing; Timing or synchronising; Measuring tape travel
- G11B27/19—Indexing; Addressing; Timing or synchronising; Measuring tape travel by using information detectable on the record carrier
- G11B27/28—Indexing; Addressing; Timing or synchronising; Measuring tape travel by using information detectable on the record carrier by using information signals recorded by the same method as the main recording
- G11B27/32—Indexing; Addressing; Timing or synchronising; Measuring tape travel by using information detectable on the record carrier by using information signals recorded by the same method as the main recording on separate auxiliary tracks of the same or an auxiliary record carrier
- G11B27/327—Table of contents
- G11B27/329—Table of contents on a disc [VTOC]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/40—Bus networks
- H04L12/40052—High-speed IEEE 1394 serial bus
- H04L12/40104—Security; Encryption; Content protection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/40—Bus networks
- H04L12/40052—High-speed IEEE 1394 serial bus
- H04L12/40117—Interconnection of audio or video/imaging devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/234—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs
- H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs involving video stream encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/234—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs
- H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs involving video stream encryption
- H04N21/23476—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs involving video stream encryption by partially encrypting, e.g. encrypting the ending portion of a movie
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/235—Processing of additional data, e.g. scrambling of additional data or processing content descriptors
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/236—Assembling of a multiplex stream, e.g. transport stream, by combining a video stream with other content or additional data, e.g. inserting a URL [Uniform Resource Locator] into a video stream, multiplexing software data into a video stream; Remultiplexing of multiplex streams; Insertion of stuffing bits into the multiplex stream, e.g. to obtain a constant bit-rate; Assembling of a packetised elementary stream
- H04N21/2362—Generation or processing of Service Information [SI]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/254—Management at additional data server, e.g. shopping server, rights management server
- H04N21/2541—Rights Management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/254—Management at additional data server, e.g. shopping server, rights management server
- H04N21/2543—Billing, e.g. for subscription services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/254—Management at additional data server, e.g. shopping server, rights management server
- H04N21/2543—Billing, e.g. for subscription services
- H04N21/2547—Third Party Billing, e.g. billing of advertiser
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
- H04N21/25866—Management of end-user data
- H04N21/25875—Management of end-user data involving end-user authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/41—Structure of client; Structure of client peripherals
- H04N21/414—Specialised client platforms, e.g. receiver in car or embedded in a mobile appliance
- H04N21/4143—Specialised client platforms, e.g. receiver in car or embedded in a mobile appliance embedded in a Personal Computer [PC]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/434—Disassembling of a multiplex stream, e.g. demultiplexing audio and video streams, extraction of additional data from a video stream; Remultiplexing of multiplex streams; Extraction or processing of SI; Disassembling of packetised elementary stream
- H04N21/4345—Extraction or processing of SI, e.g. extracting service information from an MPEG stream
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/435—Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs involving video stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/442—Monitoring of processes or resources, e.g. detecting the failure of a recording device, monitoring the downstream bandwidth, the number of times a movie has been viewed, the storage space available from the internal hard disk
- H04N21/44204—Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
- H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
- H04N21/4627—Rights management associated to the content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/47—End-user applications
- H04N21/475—End-user interface for inputting end-user data, e.g. personal identification number [PIN], preference data
- H04N21/4753—End-user interface for inputting end-user data, e.g. personal identification number [PIN], preference data for user identification, e.g. by entering a PIN or password
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client
- H04N21/65—Transmission of management data between client and server
- H04N21/658—Transmission by the client directed to the server
- H04N21/6581—Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/81—Monomedia components thereof
- H04N21/8166—Monomedia components thereof involving executable data, e.g. software
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
- H04N21/8355—Generation of protective data, e.g. certificates involving usage data, e.g. number of copies or viewings allowed
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
- H04N21/8355—Generation of protective data, e.g. certificates involving usage data, e.g. number of copies or viewings allowed
- H04N21/83555—Generation of protective data, e.g. certificates involving usage data, e.g. number of copies or viewings allowed using a structured language for describing usage rules of the content, e.g. REL
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
- H04N21/8358—Generation of protective data, e.g. certificates involving watermark
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/173—Analogue secrecy systems; Analogue subscription systems with two-way working, e.g. subscriber sending a programme selection signal
- H04N7/17309—Transmission or handling of upstream communications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1408—Protection against unauthorised use of memory or access to memory by using cryptography
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1458—Protection against unauthorised use of memory or access to memory by checking the subject access rights
- G06F12/1483—Protection against unauthorised use of memory or access to memory by checking the subject access rights using an access-table, e.g. matrix or list
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
- G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2101—Auditing as a secondary aspect
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2135—Metering
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2151—Time stamp
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B2220/00—Record carriers by type
- G11B2220/20—Disc-shaped record carriers
- G11B2220/21—Disc-shaped record carriers characterised in that the disc is of read-only, rewritable, or recordable type
- G11B2220/215—Recordable discs
- G11B2220/216—Rewritable discs
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B2220/00—Record carriers by type
- G11B2220/20—Disc-shaped record carriers
- G11B2220/21—Disc-shaped record carriers characterised in that the disc is of read-only, rewritable, or recordable type
- G11B2220/215—Recordable discs
- G11B2220/218—Write-once discs
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B2220/00—Record carriers by type
- G11B2220/20—Disc-shaped record carriers
- G11B2220/25—Disc-shaped record carriers characterised in that the disc is based on a specific recording technology
- G11B2220/2537—Optical discs
- G11B2220/2562—DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B2220/00—Record carriers by type
- G11B2220/20—Disc-shaped record carriers
- G11B2220/25—Disc-shaped record carriers characterised in that the disc is based on a specific recording technology
- G11B2220/2537—Optical discs
- G11B2220/2562—DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
- G11B2220/2575—DVD-RAMs
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/60—Digital content management, e.g. content distribution
- H04L2209/603—Digital right managament [DRM]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/102—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/103—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for protecting copy right
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/068—Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
- Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10S707/00—Data processing: database and file management or data structures
- Y10S707/99931—Database or file accessing
- Y10S707/99939—Privileged access
Abstract
An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives. Modular support functions can be combined in different arrays to form different Commerce Utility Systems for different design implementations and purposes.
Description
- This is a continuation of application Ser. No. 10/727,324, filed Dec. 2, 2003, which is a continuation of application Ser. No. 09/426,764, filed Oct. 26, 1999, now U.S. Pat. No. 6,658,568, which is a continuation of application Ser. No. 09/398,665, filed Sep. 17, 1999, now U.S. Pat. No. 7,133,846, which is a continuation of application Ser. No. 09/398,665, now abandoned, which is a continuation of application Ser. No. 08/699,712, filed Aug. 12, 1996, now abandoned, which is a continuation-in-part of application Ser. No. 08/388,107, filed Feb. 13, 1995, now abandoned, a file wrapper continuation of which issued as U.S. Pat. No. 5,982,891, all of which are incorporated herein by reference.
- These inventions generally relate to optimally bringing the efficiencies of modern computing and networking to the administration and support of electronic interactions and consequences and further relate to a secure architecture enabling distributed, trusted administration for electronic commerce.
- These inventions relate, in more detail, to a “Distributed Commerce Utility”—a foundation for the administration and support of electronic commerce and other electronic interaction and relationship environments.
- In still more detail, these inventions generally relate to:
-
- efficient administration and support of electronic commerce and communications;
- methods and technologies for electronic rights administration and support services;
- techniques and arrangements for distributing administration and support services such as secure electronic transaction management/administration, electronic process control and automation, and clearing functions across and/or within an electronic network and/or virtual distribution environment; and/or
- clearing, control, automation, and other administrative, infrastructure and support capabilities that collectively enable and support the operation of an efficient, secure, peer-to-peer collection of commerce participants within the human digital community.
- Efficient, effective societies require capabilities enabling their inhabitants to control the nature and consequences of their participation in interactions. Every community needs certain basic services, facilities and installations:
-
- the post office delivers our mail,
- the schools teach our children,
- the highway department keeps our roads passable and in good repair,
- the fire department puts out fires,
- the power company delivers electrical power to our homes,
- the telephone company connects people and electronic devices near and far and provides directory services when you don't know the right number,
- banks keep our money safe,
- cable TV and radio stations deliver news and entertainment programming to our homes.
- police keep order,
- the sanitation department collects refuse, and
- social services support societal policies for the needy.
- These and other important “behind the scenes” administrative and support services provide an underlying base or foundation that makes the conveniences and necessities of modern life as we know it possible and efficient, and allow the wheels of commerce to spin smoothly.
- Suppose you want to buy bread at the local bakery. The baker doesn't have to do everything involved in making the bread because he can rely on support and administration services the community provides. For example:
-
- The baker doesn't need to grow or mill grain to make flour for the bread. Instead, he can purchase flour from a supplier that delivers it by truck.
- Similarly, the baker doesn't need to grow or produce fuel to keep its ovens hot; that fuel can be delivered in pipes or tanks by people who specialize in producing and supplying fuel.
- You can also have confidence in the cleanliness of the local bakery because it displays an inspection notice certifying that it has been inspected by the local health department.
- Support and administrative services are also very important to ensure that people are compensated for their efforts. For example:
-
- You and the bakery can safely trust the government to stand behind the currency you take out of your wallet or purse to pay for the bread.
- If you pay by check, the banking system debits the amount of your check from your bank account overnight and gives the bakery the money.
- If you and the bakery use different banks, your check may be handled by an automated “clearinghouse” system that allows different banks to exchange checks and settle accounts—efficiently transferring money between the banks and returning checks drawn on accounts that don't have enough money in them.
- If the bakery accepts credit cards as payment, the flexibility of payment methods accepted in exchange for the bakery products is increased and provides increased convenience and purchasing power to its customers.
- Such support and administrative services provide great economies in terms of scale and scope—making our economy much more efficient. For example, these important support and administrative services allow the baker to concentrate on what he knows how to do best—make and bake bread. It is much more efficient for a bakery and its experienced bakers to make many loaves of bread in its large commercial ovens than it is for individual families to each bake individual loaves in their own home ovens, or for the growers of grain to also bake the bread and pump the fuel needed for baking and accept barter, for example, chickens in exchange for the bread. As a result, you and the bakery can complete your purchasing transaction with a credit card because both you and the bakery have confidence that such a payment system works well and can be trusted to “automatically” function as a highly efficient and convenient basis for non-cash transactions.
- The Electronic Community Needs Administrative and Support Services
- There is now a worldwide electronic community. Electronic community participants need the ability to shape, control, and, in an electronic world, automate, their interactions. They badly need reliable, secure, trusted support and administrative services.
- More and more of the world's commerce is being carried on electronically. The Internet—a massive electronic network of networks that connects millions of computers worldwide—is being used increasingly as the vehicle for commerce transactions. Fueled largely by easy-to-use interfaces (e.g., those allowing customers to “point and click” on items to initiate purchase and then to complete a simple form to convey credit card information), the Internet is rapidly becoming a focal point for consumer and business to business purchases. It is also becoming a significant “channel” for the sale and distribution of all kinds of electronic properties and services, including information, software, games, and entertainment.
- At the same time, large companies use both private and public data networks to connect with their suppliers and customers. Driven by apparently inexorable declines in the cost of both computing power and network capacity, electronic commerce will increase in importance as the world becomes more and more computerized. This new electronic community—with its widespread electronic commerce—is generating great new demands for electronic administrative, support and “clearing” services.
- The electronic community badly needs a foundation that will support both commercial and personal electronic interactions and relationships. Electronic commerce on any significant scale will require a dependable, efficient, scaleable, and secure network of third party support and administrative service providers and mechanisms to facilitate important parts of the transaction process. For example:
-
- People who provide value to the electronic community require seamless and efficient mechanisms allowing them to be compensated for the value they provide.
- Providers who sell goods or services to the electronic community need reliable, efficient electronic payment mechanisms to service themselves and other value chain participants.
- Purchasers in the electronic marketplace, while often unaware of the behind-the-scenes intricacies of payment transaction activity, nonetheless require easy to use, efficient and flexible interfaces to payment mechanisms and financial obligation fulfillment systems.
- Rights holders in all types of electronic “content” (for example, analog or digital information representing text, graphics, movies, animation, images, video, digital linear motion pictures, sound and sound recordings, still images, software computer programs, data), and to many types of electronic control processes, require secure, flexible and widely interoperable mechanisms for managing their rights and administering their business models, including collecting, when desired, payments and relevant usage information for various uses of their content.
- All parties require infrastructure support services that remain dependable, trusted, and secure even as the volume of commerce transactions increases substantially.
- An important cornerstone of successful electronic transaction management and commerce is therefore the development and operation of a set of administrative and support services that support these objectives and facilitate the emergence of more diverse, flexible, scaleable, and efficient business models for electronic commerce generally.
- The Ginter Patent Specification Describes a Comprehensive Solution
- The above-referenced Ginter, et al. patent specification describes technology providing unique, powerful capabilities instrumental to the development of secure, distributed transaction-based electronic commerce and rights management. This technology can enable many important, new business models and business practices on the part of electronic commerce participants while also supporting existing business models and practices.
- The Ginter et al. specification describes comprehensive overall systems and wide arrays of methods, techniques, structures and arrangements that enable secure, efficient distributed electronic commerce and rights management on the Internet (and Intranets), within companies large and small, in the living room, and in the home office. Such techniques, systems and arrangements bring about an unparalleled degree of security, reliability, efficiency and flexibility to electronic commerce and electronic rights management.
- The Ginter, et al. patent specification also describes an “Information Utility”—a network of support and administrative services, facilities and installations that grease the wheels of electronic commerce and support electronic transactions in this new electronic community. For example, Ginter, et al. details a wide array of support and administrative service providers for interfacing with and supporting a secure “Virtual Distribution Environment.” These support and administrative service providers include:
-
- transaction processors,
- usage analysts,
- report receivers,
- report creators,
- system administrators,
- permissioning agents,
- certification authority
- content and message repositories,
- financial clearinghouses,
- consumer/author registration systems,
- template libraries,
- control structure libraries,
- disbursement systems,
- electronic funds transfer, credit card, paper billing systems, and
- receipt, response, transaction and analysis audit systems.
The Present Inventions Build on and Extend the Solutions Described in the Ginter Patent Specification
- The present inventions build on the fundamental concepts described in the Ginter, et al. patent specification while extending those inventions to provide further increases in efficiency, flexibility and capability. They provide an overlay of distributed electronic administrative and support services (the “Distributed Commerce Utility”). They can, in their preferred embodiments, use and take advantage of the “Virtual Distribution Environment” (and other capabilities described in the Ginter et al patent specification and may be layered on top of and expand on those capabilities.
- Brief Summary of Some of the Features and Advantages of the Present Inventions
- The present inventions provide an integrated, modular array of administrative and support services for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting financial management, rights management, certificate authority, rules clearing, usage clearing, secure directory services, and other transaction related capabilities functioning over a vast electronic network such as the Internet and/or over organization internal Intranets, or even in-home networks of electronic appliances.
- These administrative and support services can be adapted to the specific needs of electronic commerce value chains. Electronic commerce participants can use these administrative and support services to support their interests, and can shape and reuse these services in response to competitive business realities.
- The present inventions provide a “Distributed Commerce Utility” having a secure, programmable, distributed architecture that provides administrative and support services. The Distributed Commerce Utility can make optimally efficient use of commerce administration resources, and can scale in a practical fashion to accommodate the demands of electronic commerce growth.
- The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many or all of its participants.
- Different support functions can be collected together in hierarchical and/or in networked relationships to suit various business models and/or other objectives. Modular support functions can be combined in different arrays to form different Commerce Utility Systems for different design implementations and purposes. These Commerce Utility Systems can be distributed across a large number of electronic appliances with varying degrees of distribution.
- The comprehensive “Distributed Commerce Utility” provided by the present invention:
-
- Enables practical and efficient electronic commerce and rights management.
- Provides services that securely administer and support electronic interactions and consequences.
- Provides infrastructure for electronic commerce and other forms of human electronic interaction and relationships.
- Optimally applies the efficiencies of modern distributed computing and networking.
- Provides electronic automation and distributed processing.
- Supports electronic commerce and communications infrastructure that is modular, programmable, distributed and optimally computerized.
- Provides a comprehensive array of capabilities that can be combined to support services that perform various administrative and support roles.
- Maximizes benefits from electronic automation and distributed processing to produce optimal allocation and use of resources across a system or network.
- Is efficient, flexible, cost effective, configurable, reusable, modifiable, and generalizable.
- Can economically reflect users' business and privacy requirements.
- Can optimally distribute processes—allowing commerce models to be flexible, scaled to demand and to match user requirements.
- Can efficiently handle a full range of activities and service volumes.
- Can be fashioned and operated for each business model, as a mixture of distributed and centralized processes.
- Provides a blend of local, centralized and networked capabilities that can be uniquely shaped and reshaped to meet changing conditions.
- Supports general purpose resources and is reusable for many different models; in place infrastructure can be reused by different value chains having different requirements.
- Can support any number of commerce and communications models.
- Efficiently applies local, centralized and networked resources to match each value chain's requirements.
- Sharing of common resources spreads out costs and maximizes efficiency.
- Supports mixed, distributed, peer-to-peer and centralized networked capabilities.
- Can operate locally, remotely and/or centrally.
- Can operate synchronously, asynchronously, or support both modes of operation.
- Adapts easily and flexibly to the rapidly changing sea of commercial opportunities, relationships and constraints of “Cyberspace.”
- In sum, the Distributed Commerce Utility provides comprehensive, integrated administrative and support services for secure electronic commerce and other forms of electronic interaction.
- Some of the advantageous features and characteristics of the Distributed Commerce Utility provided by the present inventions include the following:
-
- The Distributed Commerce Utility supports programmable, distributed, and optimally computerized commerce and communications administration. It uniquely provides an array of services that perform various administrative and support roles—providing the administrative overlay necessary for realizing maximum benefits from electronic automation, distributed processing, and system (e.g., network) wide optimal resource utilization.
- The Distributed Commerce Utility is particularly adapted to provide the administrative foundation for the Internet, organization Intranets, and similar environments involving distributed digital information creators, users, and service systems.
- The Distributed Commerce Utility architecture provides an efficient, cost effective, flexible, configurable, reusable, and generalizable foundation for electronic commerce and communications administrative and support services. Providing these capabilities is critical to establishing a foundation for human electronic interaction that supports optimal electronic relationship models—both commercial and personal.
- The Distributed Commerce Utility architecture provides an electronic commerce and communication support services foundation that can be, for any specific model, fashioned and operated as a mixture of distributed and centralized processes.
- The Distributed Commerce Utility supported models can be uniquely shaped and reshaped to progressively reflect optimal blends of local, centralized, and networked Distributed Commerce Utility administrative capabilities.
- The Distributed Commerce Utility's innovative electronic administrative capabilities support mixed, distributed, peer-to-peer and centralized networked capabilities. Collections of these capabilities, can each operate in any mixture of local, remote, and central asynchronous and/or synchronous networked combinations that together comprise the most commercially implementable, economic, and marketable—that is commercially desirable—model for a given purpose at any given time.
- The Distributed Commerce Utility architecture is general purpose. It can support any number of commerce and communication models which share (e.g., reuse), as appropriate, local, centralized, and networked resources. As a result, the Distributed Commerce Utility optimally enables practical and efficient electronic commerce and rights management models that can amortize resource maintenance costs through common usage of the same, or overlapping, resource base.
- One or more Distributed Commerce Utility commerce models may share some or all of the resources of one or more other models. One or more models may shift the mix and nature of their distributed administrative operations to adapt to the demands of Cyberspace—a rapidly changing sea of commercial opportunities, relationships, and constraints.
- The Distributed Commerce Utility supports the processes of traditional commerce by allowing their translation into electronic commerce processes. The Distributed Commerce Utility further enhances these processes through its use of distributed processing, rights related “clearinghouse” administration, security designs, object oriented design, administrative smart agents, negotiation and electronic decision making techniques, and/or electronic automation control techniques as may be necessary for efficient, commercially practical electronic commerce models.
- Certain Distributed Commerce Utility operations (financial payment, usage auditing, etc.) can be performed within participant user electronic appliance secure execution spaces such as, for example, “protected processing environments” disclosed in Ginter et al.
- Distributed clearinghouse operations may be performed through “virtually networked and/or hierarchical” arrays of Commerce Utility System sites employing a general purpose, interoperable (e.g., peer-to-peer) virtual distribution environment foundation.
- For a given application or model, differing arrays of Distributed Commerce Utility Services may be authorized to provide differing kinds of administrative and/or support functions.
- Any or all of the roles supported by the Distributed Commerce Utility may be performed by, and/or used by, the same organization, consortium or other grouping of organizations, or other electronic community participants, such as individual user web sites.
- One or more parts of the Distributed Commerce Utility may be comprised of a network of distributed protected processing environments performing one or more roles having hierarchical and/or peer-to-peer relationships.
- Multiple Distributed Commerce Utility protected processing environments may contribute to the overall role of a service, foundation component, and/or clearinghouse.
- Distributed protected processing environments contributing to a Distributed Commerce Utility role may be as distributed, in a preferred embodiment, as the number of VDE participant protected processing environments and/or may have specific hierarchical, networked and/or centralized administration and support relationship(s) to such participant protected processing environments.
- In a given model, certain one or more Distributed Commerce Utility roles may be fully distributed, certain other one or more roles may be more (e.g., hierarchically), and/or fully, centralized, and certain other roles can be partially distributed and partially centralized.
- The fundamental peer-to-peer control capabilities provided by the Distributed Commerce Utility allows for any composition of distributed roles that collectively provide important, practical, scaleable, and/or essential commerce administration, security, and automation services.
- Combinations of Distributed Commerce Utility features, arrangements, and/or capabilities can be employed in programmable mixtures of distributed and centralized arrangements, with various of such features, arrangements, and capabilities operating in end-user protected processing environments and/or “middle” foundation protected processing environments (local, regional, class specific, etc.) and/or centralized service protected processing environments.
- The Distributed Commerce Utility is especially useful to support the Internet and other electronic environments that have distributed information creators, users and service providers. By helping people to move their activities into the electronic world, it plays a fundamentally important role in migration of these non-electronic human activities onto the Internet, Intranets, and other electronic interaction networks. Such network users require the Distributed Commerce Utility foundation and support services in order to economically realize their business and privacy requirements. This secure distributed processing foundation is needed to optimally support the capacity of electronic commerce models to meaningfully scale to demand and efficiently handle the full range of desired activities and service volume.
- The Distributed Commerce Utility technologies provided by the present inventions provide a set of secure, distributed support and administrative services for electronic commerce, rights management, and distributed computing and process control.
- The Distributed Commerce Utility support services including highly secure and sophisticated technical and/or contractual services, may be invoked by electronic commerce and value chain participants in a seamless, convenient, and relatively transparent way that shields users against the underlying complexity of their operation.
- The Distributed Commerce Utility can ensure appropriately high levels of physical, computer, network, process and policy-based security and automation while providing enhanced, efficient, reliable, easy to use, convenient functionality that is necessary (or at least highly desirable) for orderly and efficiently supporting of the needs of the electronic community.
- The Distributed Commerce Utility, in its preferred embodiments, support the creation of competitive commercial models operating in the context of an “open” VDE based digital marketplace.
- The Distributed Commerce Utility can provide convenience and operating efficiencies to their value chain participants. For example, they may offer a complete, integrated set of important “clearing” function capabilities that are programmable and can be shaped to optimally support multi-party business relationship through one seamless, “distributed” interface (e.g., a distributed application). Clearing and/or support functions and/or sub-functions can, as desirable, be made available individually and/or separately so as to serve business, confidentiality, efficiency, or other objectives.
- The Distributed Commerce Utility can make it easy for providers, merchants, distributors, repurposers, consumers, and other value chain participants to attach to, invoke, and work with Distributed Commerce Utility services. Hookups can be easy, seamless and comprehensive (one hook-up may provide a wide variety of complementary services).
- The Distributed Commerce Utility can further enhance convenience and efficiency by providing or otherwise supporting consumer brand images for clearing services offered by participant organizations, but utilizing shared infrastructure and processes.
- The Distributed Commerce Utility can realize important efficiencies resulting from scale and specialization by participant organizations by supporting “virtual” models that electronically and seamlessly employ the special services and capabilities of multiple parties.
- The Distributed Commerce Utility makes it possible for consumers to conveniently receive a benefit such as a service or product, where such service or product results from the invocation of a “fabric” of various support services—each of which service may be comprised of a distributed fabric of more specialized services and/or participating constituent service providers (the overall fabric is apparent to the value chain participant, the underlying complexity is (or can be) largely or entirely hidden).
- Distributed Commerce Utility services and capabilities in their preferred embodiments can employ and be combined in any reasonable manner with any one or more Virtual Distribution Environment capabilities described in Ginter, et. al., including for example:
- A. VDE chain of handling and control,
- B. secure, trusted internodal communication and interoperability,
- C. secure database,
- D. authentication,
- E. cryptographic,
- F. fingerprinting,
- G. other VDE security techniques,
- H. rights operating system,
- I. object design and secure container techniques,
- J. container control structures,
- K. rights and process control language,
- L. electronic negotiation,
- M. secure hardware, and
- N. smart agent (smart object) techniques (for example, smart agents employed as process control, multi-party, and/or other administrative agent capabilities supporting distributed node administrative integration).
Commerce Utility Systems can be Distributed and Combined
- The support and administrative service functions provided by the Distributed Commerce Utility can be combined in various ways and/or distributed through an electronic community, system or network. The preferred embodiment uses the protected processing environment based Virtual Distribution Environment described in Ginter et al. to facilitate such combinations and distributedness. Since all such Virtual Distribution Environment protected processing environments are at least to some degree trusted, every protected processing environment can be a clearinghouse or a part of a clearinghouse. Commerce models acceptable to the interest and desires of VDE commerce node users, can support Distributed Commerce Utility services that are pushed all the way to end-user electronic appliances employing, for example, other VDE protected processing environments, secure communication techniques and other VDE capabilities (as discussed elsewhere VDE capabilities can be directly integrated with the present inventions). Such appliances, along with more centralized value chain nodes can together form combinations that function as virtual clearing protected processing environments. In the end, cyberspace will be populated, in part, by big, “virtual” computers where access to resources is based upon “availability” and rights.
- The Distributed Commerce Utility is a modular, programmable and generalizable context that it can support such virtual computers. The Distributed Commerce Utility is a unique architectural foundation for the design of electronic commerce value chain models and virtual computers. The programmable nature of a particular implementation can support differing actual (logical and/or physical), and/or degrees of, distribution for the same and/or similar services For example:
-
- Centralized Commerce Utility Systems and services may be used to provide certain support service functions, or collections of functions, efficiently from a centralized location.
- Other Commerce Utility Systems might be provided in a partially or wholly distributed manner.
- Some support and administrative service functions might be distributed in and/or throughout existing or new communications infrastructure or other electronic network support components.
- Other support services might operate within secure execution spaces (e.g., protected processing environments) on any or all user electronic appliances, using peer-to-peer communications and interactions, for example, to provide a secure web of support service fabric.
- Other support services might operate both in the network support infrastructure and at user electronic appliances.
- Such distributed support services may complement (and/or eliminate the need for) more centralized support service installations. Different combinations of the same and/or differing, non-distributed and differently distributed services may be provided to support different activities. Moreover, the nature and distribution of services for one overall model may differ from one implementation to another. Such differing model implementations can, if desired, share both the same Commerce Utility Systems and Services and/or any particular and/or any combination of Distributed Commerce Utility administrative and/or support functions.
- Further, a particular Commerce Utility Systems and Service infrastructure may be used by differing value chains (e.g., business model or relationship set) in differing manners. For example, certain value chains may elect to keep certain support service functions more centralized for efficiency, security, control or other reasons, others may elect more and/or differently distributed models.
- Provided that, for example, payment methods and rightsholders and/or other value chain participants concur, any one or more of the Distributed Commerce Utility secure infrastructure support services may distribute and/or delegate a portion or all of their functions and authority to any arbitrary collection or set of end-user and/or other value chain electronic appliances. Distributing and delegating these services and functions has various advantages including, for example, enabling flexible and efficient creation of temporary, ad hoc webs of secure electronic commerce in which any, a number, or all appliance(s) in the collection or set may participate as at least a partial (if not full) peer of other appliances in the same commerce web fabric.
- The present invention provides the following non-exhaustive list of additional features relating to distributing administrative and support functions:
-
- Any mixture of any administrative and/or support functions may be integrated with any other mixture of administrative and/or support functions.
- Any set or subset of Commerce Utility System functions can be combined in an integrated design with any other mixture of Commerce Utility system functions. Such mixtures can be distributed to any desired degree and any one or more portions of the mixture may be more or less distributed than any other one or more portion. This allows a value chain to employ optimum desired and/or practical designs. Any mixture, including any degrees of distribution, of rights clearing, financial clearing, usage aggregation, usage reporting and/or other clearing and/or other Distributed Commerce Utility functions, can be provided. Such Distributed Commerce Utility functions and/or administrative and/or support services can be combined with any other desired Distributed Commerce Utility functions and/or administrative and/or support services.
- Any one or more such administrative and/or support services and/or functions can operate as a Commerce Utility System and support a web of Commerce Utility System nodes, each of which supports at least a portion of such Commerce Utility administrative service activities. Each Commerce Utility System may be capable of granting authority and/or providing services to and/or otherwise securely interoperating with other Commerce Utility Systems and/or nodes.
- Each Commerce Utility System (or combination of Commerce Utility Systems) may be capable of participating as a “virtual clearinghouse” comprised of plural Commerce Utility Systems. In the preferred embodiment, these “virtual clearinghouses” may, when in accordance with VDE rules and controls, interoperate—in a fashion prescribed by such rules and controls—with other Commerce Utility Systems and/or other virtual clearinghouses participating in the same web. Such “virtual clearinghouses” may receive authority from secure chain of handling and control embodied in electronic control sets, and may participate in electronic commerce process automation resulting from such chain of handling and control and other VDE capabilities.
- This ability to distribute, and, if desired to subsequently adapt (modify), any support service functions to any desired degree across a system or network provides great power, flexibility and increases in efficiency. For example, distributing aspects of support services such as clearing functions will help avoid the “bottlenecks” that a centralized clearing facility would create if it had insufficient capacity to handle the processing loads. Taking advantage of the distributed processing power of many value chain participant appliances also has great benefits in terms of improved effectiveness and system response time, much lower overhead of operation, greater fault tolerance, versatility in application implementations, and, in general much greater value chain appeal resulting from the present inventions adaptability to each value chain participant's needs and requirements.
- Some Examples of Administrative and/or Support Services Provided by the Distributed Commerce Utility
- The Distributed Commerce Utility may be organized into a number of different, special and/or general purpose “Commerce Utility Systems.” The Commerce Utility Systems can be centralized, distributed, or partially distributed and partially centralized to provide administrative, security, and other services that practical commerce management layer requires. Certain Commerce Utility Systems comprise Distributed Commerce Utility implementations of certain well known administrative service functions, such as financial clearinghouse and certifying authorities. Other Commerce Utility Systems involve new forms of services and new combinations and designs for well known service activities. A Commerce Utility System is any instanstiation of the Distributed Commerce Utility supporting a specific electronic commerce model, and a Commerce Utility System may itself be comprised of constituent Commerce Utility Systems. Commerce Utility Systems may include any or all of the following, in any combination of capabilities and distribution designs, for example:
-
- financial clearinghouses,
- usage clearinghouses,
- rights and permissions clearinghouses,
- certifying authorities,
- secure directory services,
- secure transaction authorities,
- multi-purpose, general purpose and/or combination Commerce Utility Systems including any combination of the capabilities of the systems listed immediately above, and
- other Commerce Utility Systems.
- These Commerce Utility Systems are far-reaching in their utility and applicability. For example they may provide administrative support for any or all of the following:
-
- trusted electronic event management,
- networked, automated, distributed, secure process administration and control,
- Virtual Distribution Environment chain-of-handling and control, and
- rights administration and usage (e.g., event) management (e.g., auditing, control, rights fulfillment, etc.), across and/or within electronic networks, including “unconnected,” virtually connected, or periodically connected networks.
- The Commerce Utility Systems may govern electronic process chains and electronic event consequences related to, for example:
-
- electronic advertising,
- market and usage analysis,
- electronic currency,
- financial transaction clearing and communications,
- manufacturing and other distributed process control models,
- financial clearing,
- enabling payment fulfillment or provision of other consideration (including service fees, product fees or any other fees and/or charges) based at least in part on content, process control (event) and/or rights management,
- performing audit, billing, payment fulfillment (or provision of other consideration) and/or other clearing activities,
- compiling, aggregating, using and/or providing information relating to use of one or more secure containers and/or content and/or processes (events), including contents of secure containers and/or any other content,
- providing information based upon usage auditing, user profiling, and/or market surveying related to use of one or more secure containers and/or content and/or processes (events),
- employing information derived from user exposure to content (including advertising) and/or use of processes (events),
- providing object registry services; and/or rights, permissions, prices, and/or other rules and controls information; for registered and/or registering objects;
- electronically certifying information used with and/or required by rules and controls, such as authenticating identity, class membership and/or other attributes of identity context including for example, certification of class identity for automating processes, such as rights related financial transaction fulfillment based upon governing jurisdiction (taxation(s)), employment and/or other group membership including, for example, acquired class rights (e.g., purchased discount buyers club membership);
- third party archiving and/or authenticating of transactions and/or transaction information for secure backup and non-repudiation,
- providing programmed mixed arrays of Commerce Utility System process control and automation services, where different Commerce Utility Systems support different value chains and/or business models requirements, and where such Commerce Utility Systems further support distributed, scaleable, efficient networked and/or hierarchical fixed and/or virtual clearinghouse models which employ secure communication among a Commerce Utility System's distributed clearinghouse protected processing environments for passing clearinghouse related rules and controls and derived, summarized, and/or detailed transaction information,
- EDI, electronic trading models, and distributed computing arrangements where participants require trusted foundation that enables efficient, distributed administration, automation, and control of transaction value chains, and
- other support and/or administrative services and/or functions.
- These and other features and advantages provided by the present inventions will become better and more completely understood by studying the following detailed description of presently preferred example embodiments in conjunction with the drawings, of which:
-
FIG. 1 shows an example Distributed Commerce Utility supporting a consumer's example electronic appliance; -
FIG. 1A shows a protected processing environment(s) (“PPE”) within the consumer's electronic appliance(s); -
FIG. 1B shows that the Distributed Commerce Utility may comprise a number of example Commerce Utility Systems; -
FIGS. 2A-2E show examples of how administrative and support service functions can be distributed; -
FIGS. 3A-3C show example distributed Commerce Utility Systems; -
FIG. 4 shows an example web of Commerce Utility Systems; -
FIG. 4A shows a limitless web of consumer appliances and Commerce Utility Systems; -
FIG. 5 shows how rights holders can select between multiple Commerce Utility Systems connected to an electronic “information highway”; -
FIG. 6 shows an example of how different Commerce Utility Systems can work together; -
FIG. 7 shows an example of how multiple administrative and support service functions can be combined and integrated within Commerce Utility Systems; -
FIG. 7A shows an example web of combined function Commerce Utility Systems; - FIGS. 8A?8B show example Commerce Utility System hierarchies;
-
FIG. 9 shows an example hierarchy of multi-function Commerce Utility Systems -
FIG. 10 shows an example financial clearinghouse; -
FIG. 11 shows an example usage clearinghouse; -
FIG. 12 shows an example rights and permissions clearinghouse; -
FIG. 13 shows an example certifying authority; -
FIG. 14 shows an example secure directory service; -
FIG. 15 shows an example transaction authority; -
FIGS. 16A-16F show that Commerce Utility Systems can support other commerce utility systems; - FIGS. 17A through 17D-3 show an example Commerce Utility System architecture;
-
FIG. 17E-1 through 17E-4 show Commerce Utility System example interaction models; -
FIG. 17F shows an example arrangement for distributing portions of administrative and support service operations; -
FIG. 18 shows an example financial clearinghouse Commerce Utility System; -
FIG. 19 shows an example financial clearinghouse arrangement; -
FIG. 20 shows an example financial clearing process; - FIGS. 20A?20F show an additional example of financial clearing activities and processes;
-
FIG. 21 shows a simplified value chain (payment) disaggregation example; -
FIG. 22 shows an example of how theFIG. 21 disaggregation can be implemented within a financial clearinghouse context; -
FIG. 22A shows an example arrangement for implementing payment disaggregation on a user protected processing environment; -
FIG. 23 shows a more complex value chain (payment) disaggregation example; -
FIG. 24 shows an example of how disaggregation can be implemented within a financial clearinghouse context; -
FIG. 25 shows a value chain disaggregation example that also details compensation to the Distributed Commerce Utility; -
FIG. 26 shows an example value chain (payment) disaggregation to any number of payees; -
FIG. 27 shows an additional example of how value chain (payment) disaggregation and redistribution may be accomplished through a financial clearinghouse; -
FIG. 28 shows an example superdistribution payment and redistribution scenario using a financial clearinghouse for financial clearing; -
FIG. 29 shows an example value chain (payment) aggregation at a consumer protected processing environment or other site; -
FIG. 30 shows example value chain (payment) aggregation across multiple transactions; -
FIG. 31 shows example value chain (payment) aggregation across multiple transactions and multiple consumers; -
FIG. 32 shows an example Commerce Utility System architecture providing payment aggregation; -
FIG. 33 shows an example usage clearinghouse Commerce Utility System; -
FIG. 34 shows an example usage clearinghouse architecture; -
FIG. 35 shows an example usage clearing process; -
FIG. 36 shows an additional example usage clearing process using multiple usage clearinghouses; -
FIG. 37 shows an example usage clearing process using usage and financial clearinghouses; -
FIG. 38 shows an example usage clearinghouse media placement process; -
FIG. 39 shows an example usage clearing process providing discounts based on different levels of consumer usage information disclosure; -
FIG. 40 shows an example rights and permissions clearinghouse Commerce Utility System; -
FIG. 41 shows an example rights and permissions clearinghouse architecture; -
FIG. 42 shows an example rights and permissions clearing process; -
FIG. 42A shows an example control set registration process for updates; -
FIG. 43 shows an additional example rights and permissions clearing process; -
FIGS. 44A-44E show an additional rights and permissions clearing example; -
FIGS. 45A and 45B show example rights template(s); -
FIG. 45C shows an example control set corresponding to the example rights template(s); -
FIG. 46 shows another example rights and permissions clearing process; -
FIG. 47 shows an example certifying authority Commerce Utility System; -
FIG. 48 shows an example certifying authority architecture; -
FIG. 49 shows an example certifying process; -
FIG. 50 shows an example distributed certifying process; -
FIG. 50A shows an example control set that conditions performance and/or other consequences on the presence of digital certificates; - FIGS. 51A?51D show example digital certificate data structures;
-
FIG. 51E shows an example technique for generating digital certificates based on other digital certificates and a trusted database(s); -
FIGS. 51F-51H show an example technique for defining a virtual entity; -
FIG. 52 shows an example secure directory services Commerce Utility System; -
FIG. 53 shows an example secure directory services architecture; -
FIG. 54 shows an example secure directory services process; -
FIG. 55 shows an example transaction authority Commerce Utility System; -
FIG. 56 shows an example transaction authority architecture; -
FIG. 57 shows an example transaction authority process; -
FIG. 58A shows an example of how the transaction authority creates a control superset; -
FIG. 58B shows example steps performed by the transaction authority; -
FIGS. 58C and 58D show an example secure checkpoint Commerce Utility System; -
FIGS. 59 and 60 show examples of how the Distributed Commerce Utility can support different electronic value chains; -
FIG. 61 shows a purchase, licensing and/or renting example; -
FIG. 62 shows a tangible item purchasing and paying example; -
FIG. 63 shows an example of a customer securely paying for services; -
FIG. 64 shows example value chain disaggregation for purchase of tangibles; -
FIG. 65 shows an example of cooperation between Commerce Utility Systems internal and external to an organization; -
FIG. 66 shows an example inter and intra organization transaction authority example; -
FIG. 67 shows an international trading example. - Distributed Commerce Utility
-
FIG. 1 shows anexample consumer appliance 100 electronically connected to DistributedCommerce Utility 75. In this example, anelectronic network 150 connectsappliance 100 to DistributedCommerce Utility 75. DistributedCommerce Utility 75 supports the activities going on withinconsumer appliance 100. - Distributed
Commerce Utility 75 provides a foundation of administrative and support services for electronic commerce and communications. This foundation is efficient, cost effective, flexible, configurable, reusable, programmable and generalizable. It supports all kinds of electronic relationships, interactions and communications for both personal and business use. - The Distributed Commerce Utility can Support any Electronic Appliance
-
Appliance 100 may be any sort of electrical or electronic device such as for example, a computer, an entertainment system, a television set, or a video player—just to name a few examples. In the particular example shown inFIG. 1 , theconsumer appliance 100 is a homecolor television set 102, a video player/recorder 104, and a settop box 106.Appliance 100 may be controlled by hand heldremote controller 108, for example. Settop box 106 could receive television programs fromtelevision broadcasters 110 and/orsatellites 112 via a cable television network 114, for example. Player/recorder 104 could play various types of program material from tapes, optical disks or other media, and may also have the capability of recording program materials received through settop box 106. - The
Appliance 100 can have a “Protected Processing Environment” -
Appliance 100 preferably is a secure electronic appliance of the type shown for example inFIGS. 7 and 8 of the Ginter et al. patent specification. It is preferably part of the “Virtual Distribution Environment” described in the Ginter, et al. patent specification.FIG. 1A shows thattelevision 102, settop box 106, media player/recorder 104 andremote control 108 may each have a “protected processing environment” (“PPE”) 154. DistributedCommerce Utility 75 may interact with and support the processes going on within each of these protectedprocessing environments 154. - Protected
processing environments 154 may be based on one or more computer chips, such as a hardware and/or software based “secure processing unit” as shown inFIG. 9 of the Ginter et al. Patent specification. The protectedprocessing environment 154 provides a highly secure, trusted environment in which electronic processes and transactions can be reliably performed without significant danger of tampering or other compromise. The Ginter et al. patent disclosure describes techniques, systems and methods for designing, constructing and maintaining the protectedprocessing environment 154 so that rights holders and other value chain participants (including consumers 95) can trust its security and integrity. In the preferred embodiment, this trustedness is important in the interaction between the DistributedCommerce Utility 75 andelectronic appliance 100. - The Distributed Commerce Utility can be Made Up of Many “Commerce Utility Systems”
-
FIG. 1B shows that DistributedCommerce Utility 75 can be made up of a number ofCommerce Utility Systems 90. There can be different kinds of Commerce Utility Systems, for example: -
- a
financial clearinghouse 200; - a
usage clearinghouse 300; - a rights and
permissions clearinghouse 400; - a certifying
authority 500; - a
secure directory services 600; - a
transaction authority 700; - a
VDE administrator 800; and - other kinds of
Commerce Utility Systems 90.
- a
-
Commerce Utility Systems 90 can support and administer functions or operations within protected processing environment(s) 154. For example: -
- The
appliance 100 protectedprocessing environment 154 may provide an automaticelectronic payment mechanism 118 that debits the consumers' bank or other money account based on program consumption. DistributedCommerce Utility 75 may include a special purposeCommerce Utility System 90 a called a “financial clearinghouse” 200 that supports financial aspects of the operation of the protectedprocessing environment 154—ensuring that rights holders and others get paid appropriate amounts and that theconsumers 95 are not charged excessive amounts. - The broadcaster of a
television program 102 a may requireappliance 100's protectedprocessing environment 154 to meter, with an electronicusage metering mechanism 116, how much ofvideo program 102 a theconsumers 95 watch, and which video programs they watch. DistributedCommerce Utility 75 may include a special purposeCommerce Utility System 90 b called a “usage clearinghouse” 300 that receives usage information metered by ausage meter 116 within the protectedprocessing environment 154, analyzes it and provides reports. - The rights holders in
video program 102 a may insist upon the protectedprocessing environment 154 providing acopy protection mechanism 120 that securely protects against copyingvideo program 102 a. DistributedCommerce Utility 75 may include a special purpose Commerce Utility System 90 c called a “rights and permissions clearinghouse” 400 that supplies the protectedprocessing environment 154 with necessary permissions to allowconsumers 95 to watch particular programs (for example, on a pay per view basis) and to assist in enforcing prohibitions, such as, for example, acopy protection mechanism 120. - Rights holders in
video program 102 a may further require theappliance 100 protectedprocessing environment 154 to possess a “digital certificate” 122 certifying the consumer's identity, age, or the like beforeconsumers 95 can watchvideo program 102 a. DistributedCommerce Utility 75 may include a special purposeCommerce Utility System 90 d called a “certifying authority” 500 that creates and provides “digital certificates” 504 to the protectedprocessing environment 154—allowing the consumers to efficiently interact with the permissions provided by the rights holders.
- The
- Other
Commerce Utility Systems 90 shown inFIG. 1B include: -
- A “Secure directory services” 600 that may assist the protected
processing environment 154 in communicating electronically with other computers and appliances overnetwork 150; - A “transaction authority” 700 that may be available for process control and automation such as, for example, securely auditing and overseeing complicated electronic transactions involving protected
processing environment 154; and - A virtual distribution environment (?VDE?) “administrator” 800 that may, in the preferred embodiment, keep the protected
processing environment 154 operating smoothly and securely.
- A “Secure directory services” 600 that may assist the protected
- Still other
Commerce Utility Systems 90 not shown inFIG. 1B may be used to administer and/or support additional functions and operations. The variousCommerce Utility Systems 90 can work together, dividing up the overall tasks to support theconsumers 95 efficiently and effectively. - Commerce Utility Systems can be Distributed
-
FIGS. 2A-2E show how DistributedCommerce Utility 75 can be distributed. Some administrative and support functions ofCommerce Utility Systems 90 can be performed within a consumer'selectronic appliance 100—or even in a “spread out” fashion over a large number of different appliances cooperating together. - As described above,
appliances 100 each provide a protectedprocessing environment 154 that is tamper resistant and provides a secure place in which administrative and support operations can be performed. This allows anelectronic appliance 100 within a consumer's home to perform operations that can trusted by other parties, such as rights holders, electronic commerce participants, and the like. Because of the trusted, protected characteristics of protectedprocessing environment 154, the parts, extensions or even the entirety of aCommerce Utility System 90 may exist within each or any of the protectedprocessing environments 154 and associated electronic appliances within the overall system. -
FIGS. 2A-2E represent the overall functions of an exampleCommerce Utility System 90 such asUsage Clearinghouse 300 as a four-piece jigsaw puzzle.FIGS. 2A-2E show that these Commerce Utility System functions can be distributed to varying degrees. For example: -
-
FIG. 2A shows an example in which all functions of theCommerce Utility System 90 are performed in a secure central facility. -
FIG. 2B shows an example in which most functions of theCommerce Utility System 90 are performed in a secure central facility, but some of its functions are performed within the protectedprocessing environment 154 of a userelectronic appliance 100. -
FIG. 2C shows an example in which some functions of theCommerce Utility System 90 are performed in a secure central facility, but most of its functions are performed within the protectedprocessing environment 154 of a userelectronic appliance 100. -
FIG. 2D shows an example in which some functions of theCommerce Utility System 90 are performed in a secure central facility, some of its functions are performed within the protectedprocessing environment 154A of a first userelectronic appliance 100A, and some of its functions are performed within the protected processing environment 154B of a second userelectronic appliance 100B. -
FIG. 2E shows an example in which none of the functions of theCommerce Utility System 90 are performed in a secure central facility; some of its functions are performed within the protected processing environment 154(1) of a first user electronic appliance 100(1), some of its functions are performed within the protected processing environment 154(2) of a second user electronic appliance 100(2),), some of its functions are performed within the protected processing environment 154(3) of a third user electronic appliance 100(3), and some of its functions are performed within the protected processing environment 154(N) of a Nth user electronic appliance 100(N).
-
- Alternately or in addition, some of the functions of the
Commerce Utility System 90 may be distributed withinnetwork 150—for example, in the equipment used to communicate data betweenappliances 100. - Distributing Multiple Administrative and Support Functions
-
FIG. 3A shows how multipleCommerce Utility System 90 functions or sub-functions can be distributed into the same protectedprocessing environment 154. - For example:
-
-
Financial clearinghouse function 200 a operating withinconsumer appliance 100A's protectedprocessing environment 154 a may provide certain financial clearing such as auditing that can take the place of and/or support some of the financial clearing operations performed by a centralizedfinancial clearinghouse 200. -
Usage clearinghouse function 300 a operating withinconsumer appliance 100A's protectedprocessing environment 154 a may perform certain usage information clearing operations, such as, for example, combining or analyzing collected usage information to complement, substitute for, or add to usage clearing operations performed byusage clearinghouse 300. -
Appliance 100A's protectedprocessing environment 154 a may perform certain rights and permissions clearing operations 400 a, certain certifyingauthority operations 500 a, and certain secure directory services support operations 600 a all at the consumer's site to complement, add to or substitute for operations performed by rights andpermissions clearinghouse 400, certifyingauthority 500 andsecure directory services 600.
-
-
FIG. 3B shows that another example consumer electronic appliances 100(2), . . . , 100N (in this case personal computers 124) might perform different combinations of support or administrative functions locally (for example, some or all of the functions performed by transaction authority 700). For example: -
- the processes within protected processing environment 154(1) may rely on a partially distributed and partially centralized
financial clearinghouse 200A, a partially distributed and partiallycentralized usage clearinghouse 300A, a partially distributed and partially centralized rights andpermissions clearinghouse 400A, a partially distributed and partially centralized certifyingauthority 500A, a centralizedsecure directory services 600A, and acentralized transaction authority 700A; - the processes within protected processing environment 154(2) may rely on a centralized
financial clearinghouse 200B, a partially distributed and partiallycentralized usage clearinghouse 300B, a partially distributed and partially centralized rights andpermissions clearinghouse 400B, a centralized certifyingauthority 500B, a centralizedsecure directory services 600B, and a partially distributed and partiallycentralized transaction authority 700B; and - the processes within protected processing environment 154(N) may rely on a partially distributed and partially centralized financial clearinghouse 200N, a partially distributed and partially
centralized usage clearinghouse 300N, a partially distributed and partially centralized rights andpermissions clearinghouse 400N, a partially distributed and partially centralized certifyingauthority 500N, a partially distributed and partially centralizedsecure directory services 600N, and a partially distributed and partiallycentralized transaction authority 700N.
- the processes within protected processing environment 154(1) may rely on a partially distributed and partially centralized
- Taking this concept of distributed clearing services further, it would be possible to completely distribute the Distributed
Commerce Utility 75 as shown inFIG. 3C —relying mostly or completely on administrative and support service operations and activities within the secure, protectedprocessing environments 154 of users'electronic appliances 100. Thus, the users' ownelectronic appliances 100 could—in a distributed manner—perform any or all of financial, usage, and rights and permissions clearing, as well as certification, secure directory services and transaction authority services. Such “local” and/or parallel and/or distributed processing transaction clearing might more efficiently accommodate the needs of individual consumers. For example, this is one way of allowing consumers to contribute controls that prevent certain private data from ever leaving their own electronic appliance while nevertheless providing rightsholders with the summary information they require. - The distributed arrangements shown in
FIGS. 2A-2E and 3A-3C are not mutually exclusive ways of providing centralizedCommerce Utility System 90. To the contrary, it may be advantageous to provide hybrid arrangements in which some administrative and support service functions (such as, for example, micro-payment aggregation, usage data privacy functions, and some issuing of certificates, such as parents issuing certificates for their children) are widely distributed while other administrative and support service functions (for example, issuance of important digital certificates, maintaining massive data bases supporting secure directory services, etc.) are much more centralized. The degree of distributedness of any particular administrative and support service, clearinghouse or function may depend on a variety of very important issues including, for example, efficiency, trustedness, scalability, resource requirements, business models, and other factors. In addition, the degree of distribution may involve multiple levels of hierarchy based, for example, on sub-sets determined by specific business models followed by specific business sub-models, or, for example, geographic and/or governing body and/or region areas. - Since a given
electronic appliance 100 can participate in multiple activities, it is possible that its different activities may rely on different blends of distributed and centralizedCommerce Utility Systems 90. For example, for one activity a protectedprocessing environment 154 may rely on a centralizedfinancial clearinghouse 200, for another activity it may rely on a partially distributed and partially centralizedfinancial clearinghouse 200, and for still another activity it may rely on a wholly distributedfinancial clearinghouse 200. Different degrees of distributedness may be used for different activities or business models. - Web of Commerce Utility Systems
-
FIG. 4 shows thatCommerce Utility System 75 may comprise a vast “web” of distributed, partly distributed and/or centralizedCommerce Utility Systems 90.Network 150 can be used to connect this web ofCommerce Utility Systems 90 to a variety of differentelectronic appliances 100 that can all share the DistributedCommerce Utility 75. For example,electronic network 150 can connect to: -
- set
top boxes 106 and/ormedia players 104, -
personal computers 124, -
computer graphics workstations 126, - multi-media/
video game systems 128, or - any other kinds of
electronic appliances 100 including for example, manufacturing control device, household appliances, process control equipment, electronic networking and/or other communication infrastructure devices, mainframe and/or mini computers, etc.
- set
- In this example, the same Distributed
Commerce Utility 75 can support a variety of different kinds of activities of a number of different consumers, authors, distributors, providers, merchants, and other people—and the DistributedCommerce Utility 75 can support a very large variety of different electronic activities.FIG. 4 also shows thatCommerce Utility Systems 90 may communicate with electronic appliances 100 (and with each other) by exchanging electronic “containers” 152 of the type disclosed in Ginter et al. for purposes of security (for example, secrecy, authenticity and integrity) and managed through the use of secure rules and controls processed in protected processing environments. - The Commerce Utility Systems Web can be Virtually Limitless
-
FIG. 4A shows that the web of Commerce Utility Systems may be vast or limitless. Indeed,network 150 may be a seamless web stretching around the world and connecting millions upon millions of electronic appliances with any number ofCommerce Utility Systems 90. - The
Commerce Utility Systems 90 web may provide a very complex interconnection with a variety of different types of electronic appliances performing a variety of different electronic functions and transactions. As mentioned above, any ofelectronic appliances 100 may be able to communicate with any of theCommerce Utility Systems 90 or with any other electronic appliance. This allows maximum efficiency and flexibility in terms of allocating different Commerce Utility Systems to different electronic transactions. For example: -
- Geographically close Commerce Utility Systems might best be used to minimize the amount of time it takes to get messages back and forth.
- In some cases, more distant Commerce Utility Systems might be better equipped to efficiently handle certain kinds of specialized transactions.
- Government regulations might also, at least in part, dictate the selection of certain Commerce Utility Systems over others. (for example, a Japanese customer may run into legal problems if she tries to use a
financial clearinghouse 200 located in the Cayman Islands—or a New Jersey resident might be required by law to deal with afinancial clearinghouse 200 that reports New Jersey sales tax). - Different, competitive Commerce Utility Systems are likely to be offered by different parties and these different systems would populate the web comprising Distributed
Commerce Utility 75. Interoperability between such System and/or their nodes is important for efficiency and to allow reusability of electronic commerce resources.
Rights Holders and Providers can Choose Among Commerce Utility Systems
-
FIG. 5 shows how rights holders can select between differentCommerce Utility Systems 90. In this example, Bob operates afirst usage clearinghouse 300 a, Alice operates asecond usage clearinghouse 300 b, and Helen operates athird usage clearinghouse 300 c. These various usage clearing service providers may compete with one another based on quality and/or price, or they may be complementary (for example, they may each specialize in different kinds of transactions). - Because
electronic network 150 may connectelectronic appliances 100 to many differentCommerce Utility Systems 90, rightsholders in the digital properties the consumers are using may have a number of different Commerce Utility Systems to choose from. Content providers and rights holders may authorize particular (or groups of)Commerce Utility Systems 90 to handle different aspects of transactions. For example: -
- Computer software distributor might specify that a
personal computer 124 should sendmetering information 116 a to Helen'susage clearinghouse 300 c for monitoring usage of the computer software or other activities performed by the personal computer. - A rights holder in
video program 102 a might specify that settop box 106 should sendmetering information 116 about the video to Alice's usage clearinghouse. - A multimedia content provider might specify that Bob's
usage clearinghouse 300 a should be used for processingusage data 116 c generated bymultimedia player 128.
- Computer software distributor might specify that a
- In some instances,
particular consumers 95 may also pay a role in specifying in advance particular clearinghouses or otherCommerce Utility Systems 90 they prefer to use.FIG. 5 illustrates the provider's (and/or consumer's) choice by a policeman directing metering traffic to selected usage clearinghouses 300 (electronic controls as described herein and in Ginter et al. would preferably be the mechanism actually controlling how traffic is directed). - A content provider or rights holder could allow a
consumer 95 to select from a group of Commerce Utility Systems 90 (and/orCommerce Utility Systems 90 providers) the content provider/rights holder wants to deal with. For example: -
- A television studio might authorize specific individual or classes of
Commerce Utility Systems 90 to handle transactions relating to its television programs and/or it may specify particular individual or classes ofCommerce Utility Systems 90 that it doesn't want to have handle its transactions. - Particular
Commerce Utility Systems 90 may set requirements or standards for individual (or classes of) providers and/orconsumers 95. - Value chain participants could enter into legal agreements and/or business relationships with different
Commerce Utility Systems 90.
Commerce Utility Systems can Work Together
- A television studio might authorize specific individual or classes of
-
FIG. 6 shows that differentCommerce Utility Systems 90 can work together to support different kinds of operations. In this example: -
-
Usage clearinghouse 300 a, rights and permissions clearinghouse 400 a, certifyingauthority 500 a, andfinancial clearinghouse 200 a (left-hand side of drawing) might be used to support a particular operation by settop box 106 andtelevision set 102. - The same
financial clearinghouse 200 a but adifferent usage clearinghouse 300 b, a different certifyingauthority 500 b and a different rights and permissions clearinghouse 400 b (top of drawing) might be used to support certain activities onpersonal computer 124. - A still different financial clearinghouse 200 c, certifying authority 500 c and
usage clearinghouse 300 c but the same rights and permissions clearinghouse 400 b (right-hand side of drawing) might be used to support electronic activities ofmultimedia system 128. - A still different combination of Commerce Utility Systems (in this example,
usage clearinghouse 300 c, financial clearinghouse 200 d, rights and permissions clearinghouse 400 c and certifyingauthority 500 a—along the bottom of the drawing) might be used to supportsound system 130.
-
- This example shows that various
Commerce Utility Systems 90 may operate in combination, and that different combinations of Commerce Utility Systems might be used to support different electronic transactions. - Administrative and Support Service Functions can be Combined within General Purpose Commerce Utility Systems for Efficiency or Convenience
-
FIG. 7 shows that different special purposeCommerce Utility Systems 90 administrative and support service functions or sub-functions may be integrated together into more general or multi-purposeCommerce Utility Systems 90 for maximum convenience, efficiency or other reasons. For example: -
- Bob may operate an integrated or combined
Commerce Utility System 90 a providing afinancial clearinghouse 200 a function, a certifyingauthority 500 a function, and ausage clearinghouse 300 a function. - Anne may operate an integrated or combined
Commerce Utility System 90 b providing a financial clearinghouse function 200 b, a rights and permissions clearinghouse function 400 b and a transaction authority function 700 b. - Helen may operate an integrated or combined Commerce Utility System 90 c providing a rights and permissions clearinghouse function 400 c and a certifying authority function 500 c.
- Roger may operate an integrated or combined
Commerce Utility System 90 d providing secure directory services 600 d, usage clearinghouse services 300 d, financial clearinghouse services 200 d and rights and permissions clearinghouse 400 d.
- Bob may operate an integrated or combined
- A consumer operating
electronic appliances 100 may access any or all of these differentCommerce Utility Systems 90 or combinations. For example, settop box 106 might obtain rights and permissions and certificates from Helen's Commerce Utility System 90 c, but might make use of Bob'sCommerce Utility System 90 a for financial clearing and usage analysis. - A
Commerce Utility System 90 may provide any combination of administrative and support functions or subfunctions as may be desirable to perform the operations required in certain business models, provide maximum efficiency, and/or maximize convenience. For example, Anne's Commerce Utility System 90(2) might provide only a specialized subset of financial clearinghouse function -
FIG. 7A shows another illustration of howCommerce Utility Systems 90 can offer a wide variety of different combinations or subcombinations of administrative and support functions. In thisFIG. 7A diagram, each of the various administrative and support service functions is represented (for purposes of illustration) as a different kind of child's play block: -
- financial clearing functions 200 are shown as square blocks,
- Usage clearing functions 300 are shown as half-circle blocks,
- Rights and
permissions clearing functions 400 are shown as rectangular blocks, - Certifying authority functions 500 are shown as triangular blocks,
- Secure directory service functions 600 are shown as tunnel blocks, and
- Transaction authority functions 700 are shown as cylinders.
- Consumer and
user appliances 100 are shown as standing-up rectangular columns in the diagram.Electronic network 150 is shown as a road which connects the various Commerce Utility Systems to one another and to consumerelectronic appliances 100. Electronicdigital containers 152 may be carried along this electronic network or “information highway” 150 between different electronic installations. -
FIG. 7A illustrates just some of the many possible administrative and support service combinations that might be used. For example: -
- In the upper left-hand corner, a
Commerce Utility System 90A provides at least some financial clearing functions 200 a, at least some rights and permissions clearing functions 400 a, and at least some certifyingfunctions 500 a. This type of overall electronicCommerce Utility System 90A might, for example, be in the business of managing and granting rights on behalf of rights holders and in handling payments based on those rights. - The
Commerce Utility System 90D just to the right ofinstallation 90A comprises financial clearing services 200 d and transaction authority services 700 a. It might be especially useful in, for example, auditing and/or managing an overall complex multi-step transaction while also ensuring that appropriate parties to the transaction are paid. - In the lower center of the diagram there is a
Commerce Utility System 90B including financial clearing functions 200 f and usage clearing functions 300 c. ThisCommerce Utility System 90B could be especially useful, for example, for handling payment and other financial details relating to electronic usage transactions and also providing audit and report services based on the electronic usage. - The
Commerce Utility System 90C shown in the bottom center of the drawing combines certifyingauthority services 500 with usage clearing services 300 f. It could be especially useful in issuing digital certificates and then tracking the usage of those certificates (for example, in order to evaluate risks, potential liability, insurance costs, etc.).
- In the upper left-hand corner, a
- The various examples shown in
FIG. 7A are for purposes of illustration. Other combinations are possible or likely depending on business objectives, convenience and other factors. - Commerce Utility System Hierarchies
-
FIG. 8A shows thatCommerce Utility Systems 90 or functions can be arranged in a hierarchy. For example, an overall financial (or other) clearinghouse 200(N) may oversee and/or have ultimate responsibility for the operations of numerous other financial (or other) sub-clearinghouses 200(1), 200(2), . . . . In theFIG. 8A example, a consumerelectronic appliance 100 might interact with a clearinghouse 200(1), which might in turn interact with another clearinghouse 200(2), etc. This administrative and support service “hierarchy” might be thought of as being similar in some ways to a chain of command in a large corporation or in the military—with some clearinghouses exercising and/or delegating power, control and/or supervision over other clearinghouses. -
FIG. 8B shows another example of a administrative and support service hierarchy. In this example, a number of centralized overall clearinghouses and/or otherCommerce Utility Systems 90 delegate some or all of their work responsibilities to otherCommerce Utility Systems 90. In this particular example shown, organizations, such as companies, non-profit groups or the like may have their ownCommerce Utility Systems 156. Certain electronic commerce or other activities (the entertainment industry, for example) might have their own vertically-specializedCommerce Utility Systems 158. Certain geographical, territorial or jurisdictional groups (e.g., all purchasers of particular products within the state of Wisconsin) may have their own territorial/jurisdictional specializedCommerce Utility Systems 160.Commerce Utility Systems - In one example arrangement, the
Commerce Utility Systems 90 to which authority has been delegated may perform substantially all of the actual support work, but may keep the more over archingCommerce Utility Systems 90 informed through reporting or other means. In another arrangement, the over archingCommerce Utility Systems 90 have no involvement whatsoever with day to day activities of the Commerce Utility Systems to whom they have delegated work. In still another example arrangement, the more specialized Commerce Utility Systems do some of the work and the more overarching Commerce Utility Systems do other parts of the work. The particular division of work and authority used in a particular scenario may largely depend on factors such as efficiency, trustedness, resource availability, the kinds of transactions being managed, and a variety of other factors. Delegation of clearing authority may be partial (e.g., delegate usage aggregation but not financial or rights management responsibilities), and may be consistent with peer-to-peer processing (e.g., by placing some functions within consumers' electronic appliances while keeping some more important functions centralized). - Multi-Function Commerce Utility Systems can be Organized Hierarchically or Peer-To-Peer
-
FIG. 9 shows a still different, more complex Commerce Utility System environment including elements of both a hierarchical chain of command and a high degree of cooperation in the horizontal direction between different multi-functionCommerce Utility Systems 90. In this example, there are five different levels of responsibility with a master or overarching Commerce Utility Systems 90(1) (for example, a financial clearinghouse 200) onlevel 1 having the most authority and with additional Commerce Utility Systems onlevels FIG. 9 also shows that different Commerce Utility Systems on the same level may have different functions, scopes and/or areas of responsibility. For example: -
- a Commerce Utility System 90(2)(1) may be a “type A” Commerce Utility System,
- Commerce Utility System 90(2)(2) might be a “type B” Commerce Utility System, and
- Commerce Utility System 90(2)(3) might be a “type C” Commerce Utility System.
- On the next level down, Commerce Utility Systems might be type A Commerce Utility System (such as, 90(3)(1) and 90(3)(2)), they might be type B Commerce Utility Systems (such as, 90(3)(4)), they might be type C Commerce Utility Systems (such as, 90(3)(5), 90(3)(6)), or they might be hybrids—such as, Commerce Utility System 90(3)(3) which is a hybrid having type A and type B functions.
-
FIG. 9 also shows that additional clearinghouses onlevels financial clearinghouse 200 for example, Type A might be responsible for consumer credit, Type B for electronic checks, and Type C for commercial credit. Another demarcation might be clearing for Visa (Type A), Mastercard (Type B) and American Express (Type C). A Type A/B clearinghouse would then be a clearing delegation that could handle both consumer credit and electronic check clearing. A Type B Subtype I might be responsible for commercial electronic checks. A Type C Subtype I might be commercial credit card transactions, and Subtype III might be credit drafts. The rationale for multiple instances might be based on jurisdictional boundaries (e.g., France, Germany, New York, and Alabama), and/or contractual arrangements (e.g., delegation of responsibility for bad credit risks, small purchasers, very large transactions, etc.) The peer-to-peer dimension might reflect a need to coordinate an overall transaction (e.g., between a small purchaser's clearinghouse and a large commercial player's clearinghouse). - A rights and
permissions clearinghouse 400 might break out along content types (e.g., movies; scientific, technical and medical; and software). Subtype A might include first run movies, oldies, and art films; subtype B might handle journals and textbooks; and type C might be responsible for games, office, educational content. Peer-to-peer communications between clearinghouses could involve multimedia presentation permissions (e.g., a multimedia presentation might have permissions stored at one clearinghouse that uses a back channel to other clearinghouses to ensure that the latest permissions are distributed). - Some Example Commerce Utility Systems
- As described above,
Commerce Utility Systems 90 are generalized and programmable—and can therefore provide a mix of different support and administration functions to meet requirements of a given transaction. Thus, many or mostCommerce Utility Systems 90 as actually implemented may provide a range of different support and administrative functions that may make it difficult to categorize the implementation as being of one particular “kind” of Commerce Utility System as opposed to another. - Nevertheless, certain types of idealized specialized
Commerce Utility Systems 90 are particularly useful for a wide range of models, transactions and applications. It is helpful and convenient to describe some of the characteristics of these “pure” Commerce Utility Systems of different types—recognizing that actual implementations may mix functions or function subsets from several of these idealized models. The following are brief vignettes of some of the characteristics of such “pure” idealized Commerce Utility Systems. -
Financial Clearinghouse 200 -
FIG. 10 shows an examplefinancial clearinghouse 200 in more detail.Financial clearinghouse 200 handles payments to ensure that those who provide value are fairly compensated.Financial clearinghouse 200 may securely coordinate with otherCommerce Utility Systems 90 in performing this task. - In this example,
financial clearinghouse 200 may communicate with appliance protectedprocessing environment 154 overelectronic network 150 in a secure manner usingelectronic containers 152 of the type described, for example, in the Ginter et al. patent specification in connection withFIGS. 5A and 5B .Financial clearinghouse 200 may receivepayment information 202 from protectedprocessing environment 154 in thesesecure containers 152, and interact electronically or otherwise with various banking, credit card or other financial institutions to ensure that appropriate payment is made. -
Financial clearinghouse 200 may, for example, interact with a consumer'sbank 206 a, a provider'sbank 206 b and a consumer'scredit card company 206 c. For example,financial clearinghouse 200 can debit funds from the consumer'sbank 206 a and credit funds to the rights holder'sbank 206 b to pay for the consumers' watching of a movie, television program or other content. Additionally or alternately,financial clearinghouse 200 may interact with a consumer'scredit card company 206 c to request credit checks, obtain credit authorizations, payments and the like. -
Financial clearinghouse 200 may providepayment statement statements 204 toconsumers 95—for example, by transmitting the statements toappliance 100 in a secureelectronic container 152 b to preserve the confidentiality of the statement information. In this example,consumers 95 can view thestatements 204 using theirappliance 100 protectedprocessing environment 154, and may also be able to print or save them for record-keeping purposes. - In one example, the
payment mechanism 118 provided by protectedprocessing environment 154 might be an electronic wallet supplying electronic money for use in paying for electronic services or content. This electronic wallet may hold money in digital form.Consumers 95 can spend the digital money on whatever they wish. When the electronic wallet is empty,consumers 95 can have thefinancial clearinghouse 200 replenish the wallet by authorizing the financial clearinghouse to debit the funds from the consumers' account in theirbank 206 a.Financial clearinghouse 200 may process electronic money payments, arrange for the electronic wallet to be refilled automatically (based on the consumers' pre-authorization, for example) when the consumers have spent all of its former contents, and provide the consumers with detailed reports andstatements 204 about how they have spent their electronic money. -
Usage Clearinghouse 300 -
FIG. 11 shows anexample usage clearinghouse 300.Usage clearinghouse 300 in this example receivesusage information 302 fromusage meter 116, analyzes the usage information and provides reports based on the analysis it performs.Usage clearinghouse 300 may securely coordinate with otherCommerce Utility Systems 90 in accomplishing these tasks. - For example,
usage clearinghouse 300 may send the consumers 95 adetailed report 304 a of all the movies, television programs and other material the consumers have watched over the last month. The communication between protectedprocessing environment 154 andusage clearinghouse 300 may be in the form ofsecure containers 152. As described in the Ginter et al. patent disclosure,usage meter 116 can meter use on the basis of a number of different factors, and can range from being extremely detailed to being turned off altogether. The consumers, if they desire, could view thedetailed usage report 304 a on theirtelevision set 102. -
Usage clearinghouse 300 can report to others about the consumers' viewing habits consistent with protecting the consumers' privacy. These reports can also be sent withinsecure containers 152. For example,usage clearinghouse 300 might provide asummary report 304 b toadvertisers 306 that does not reveal the consumers' identity but provides the advertisers with valuable information about the consumers' viewing habits. On the other hand, with the consumers' consent,usage clearinghouse 300 could provide a more detailed report revealing the consumers' identity toadvertisers 306 or to other specified people. In return, theconsumers 95 could be given incentives, such as, for example, discounts, cash, free movies, or other compensation. -
Usage clearinghouse 300 can also issuereports 304 c torights holders 308—such as the producer or director of thevideo program 102 a theconsumers 95 are watching. These reports allow the rights holders to verify who has watched their program material and other creations. This can be very useful in ensuring payment, or in sending the consumers other, similar program material they may be interested in. -
Usage clearinghouse 300 might also sendreports 304 d to aratings company 310 for the purpose of automatically rating the popularity of certain program material.Usage clearinghouse 300 might also send reports to other market researchers 312 for scientific, marketing or other research. - Rights and
Permissions Clearinghouse 400 -
FIG. 12 shows an example rights andpermissions clearinghouse 400. Rights andpermissions clearinghouse 400 stores and distributes electronic permissions 404 (shown as a traffic light in these drawings).Permissions 404 grant and withhold permissions, and also define consequences. Rights andpermissions clearinghouse 400 may work with otherCommerce Utility Systems 90 to accomplish its tasks. - In this example, rights and
permissions clearinghouse 400 may act as a centralized “repository” or clearinghouse for rights associated with digital content. For example, broadcasters, authors, and other content creators and rights owners can register permissions with the rights andpermissions clearinghouse 400 in the form of electronic “control sets.” These permissions can specify what consumers can and can't do with digital properties, under what conditions the permissions can be exercised and the consequences of exercising the permissions. Rights andpermissions clearinghouse 400 can respond torequests 402 from electronic appliance protectedprocessing environment 154 by delivering permissions (control sets) 188 in response. - For example, suppose that
consumers 95 want to watch a concert or a fight ontelevision set 102. They can operate theirremote control unit 108 to request the right to watch a certain program. Protectedprocessing environment 154 may automatically contact rights andpermissions clearinghouse 400 overelectronic network 150 and send anelectronic request 402. The rights andpermissions clearinghouse 400 can “look up” the request in its library or repository to see if it has received (and is authorized to provide) the necessary permission 404 b from the program'srights holder 400. It may then send the requestedpermission 188 to protectedprocessing environment 154. - For example,
permission 188 might allow the consumers to view the concert or fight only once and prohibit its copying withcopy protection mechanism 120.Permission 188 may also (or in addition) specify the price for watching the program (for example, $5.95 to be deducted from the consumers' electronic wallet).Appliance 100 can ask theconsumers 95 if they want to pay $5.95 to watch the program. If they answer “yes” (indicated, for example, by operating remote control 108), theappliance 100 can automatically debit the consumers' electronic wallet and “release” the program so the consumers can watch it. - Rights and
permissions clearinghouse 400 can deliverpermissions 188 within asecure container 152 b that may optionally also contain the information controlled by the permissions—orpermission 188 may arrive at a different time and over a different path than the program or other content travels to theappliance 100. For example, the permissions could be sent overnetwork 150, whereas the program it is associated with may arrive directly fromsatellite 112 or over some other path such as cable television network 114 (seeFIG. 1 ). - Rights and
permissions clearinghouse 400 may also issuereports 406 to rights holders or other people indicating which permissions have been granted or denied. For example, the author of a book or video might, consistent with consumer privacy concerns, be able to learn the exact number of people who have requested the right to publish excerpts from his or her work. These kinds of reports can supplement reports provided byusage clearinghouse 300. - Certifying
Authority 500 -
FIG. 13 shows an example of a certifyingauthority 500. Certifyingauthority 500 issuesdigital certificates 504 that provide a context for electronic rights management. Certifyingauthority 500 may coordinate with otherCommerce Utility Systems 90 to accomplish its tasks. - Certifying
authority 500 issuesdigital certificates 504 that certify particular facts. Digital certificate 122 is like a driver's license or a high school diploma in some respects, since they each provide proof of a certain fact. For example, we may show our drivers' license to prove that we are old enough to vote, buy liquor, or watch an “R” rated movie. This same driver's license attests to the fact that we have a certain name and live at a certain address, and that we have certain knowledge (of state motor vehicle laws) and skills (the ability to maneuver a motor vehicle).Digital certificate 504 is similar to that aspect of a driver's license that confirms the identity of, and related facts pertaining to the licensee, except that it is made out of digital information instead of a laminated card. - In this example, certifying
authority 500 may receive consumer requests and associatedevidence 502, and may issue correspondingdigital certificates 504 that certify particular facts. Certifyingauthority 500 may also receive evidence, credentials and possibly also certificate definitions from other people such asgovernment authorities 506,professional organizations 508 and universities 510. As one example, the certifyingauthority 500 might receive birth certificate or other identity information from agovernment authority 506. Based on this identity information, the certifyingauthority 500 may prepare and issue adigital certificate 504 that attests to person's identity and age. The certifyingauthority 500 might also issuedigital certificates 504 attesting to professional status, employment, country of residence, or a variety of other classes and categories based on various evidence and inputs from various people. - Certifying
authority 500 may certify organizations and machines as well as people. For example, certifyingauthority 500 could issue a certificate attesting to the fact that Stanford University is an accredited institution of higher learning, or that the ACME Transportation Company is a corporation in good standing and is authorized to transport hazardous materials. Certifyingauthority 500 could also, for example, issue acertificate 504 to a computer attesting to the fact that the computer has a certain level of security or is authorized to handle messages on behalf of a certain person or organization. - Certifying
authority 500 may communicate with protectedprocessing environment 154 and with other parties by exchangingelectronic containers 152.Electronic appliance 100's protectedprocessing environment 154 may use thedigital certificates 504 the certifyingauthority 500 issues to manage or exercisepermissions 188 such as those issued by rights andpermissions clearinghouse 400. For example, settop box 106 might automatically prevent any consumer under 17 years of age from watching certain kinds of program material, or it might provide a payment discount to students watching educational material—all based oncertificates 504 issued by certifyingauthority 500. - Secure Directory Services
-
FIG. 14 shows an example ofsecure directory services 600.Secure directory services 600 acts something like a computerized telephone or name services directory.Consumers 95 can send arequest 602 specifying the information they need.Secure directory services 600 can “look up” the information and provide theanswer 604 toconsumers 95.Secure directory services 600 can work with otherCommerce Utility Systems 90 to perform its tasks. - For example, suppose
consumers 95 want to electronically order a pizza from Joe's Pizza. They decide what kind of pizza they want (large cheese pizza with sausage and onions for example). However, they don't know Joe's Pizza's electronic address (which may be like an electronic phone number).Consumers 95 can useremote control 108 to input information about what they want to have looked up (“Joe's Pizza, Lakeville, Conn.”). Protectedprocessing environment 154 may generate arequest 602 containing the identification information and send this request to securedirectory services 600. It can send the request in asecure container 152 a. - When
secure directory services 600 receives therequest 602, it may access a database to locate the requested information.Secure directory services 600 may have earlier obtained Joe's electronic address directly from Joe or otherwise.Secure directory services 600 may send the requested information back toappliance 100 in aresponse 604.Response 604 may also be in asecure container 152 b. Theconsumers 95 can use this information to electronically send their order to Joe's Pizza—which can display on Joe's order terminal within a few seconds after the consumers send it. Joe may deliver to consumer 95 a piping hot cheese, sausage and onion pizza a few minutes later (by car—not electronically—since a physical pizza is much more satisfying than an electronic one). -
Secure directory services 600 can help anyone connected to network 150 contact anyone else. As one example,secure directory services 600 can tellusage clearinghouse 300 how to find afinancial clearinghouse 200 onnetwork 150. Anyelectronic appliance 100 connected to network 150 could usesecure directory services 150 to help contact any other electronic appliance. - As mentioned above, the
request 602 to securedirectory services 600 and theresponse 604 it sends back may be encased withinsecure containers 152 of the type described in the Ginter et al patent specification. The use ofsecure containers 152 helps prevent eavesdroppers from listening into the exchange betweenconsumers 95 andsecure directory services 600. This protects the consumers' privacy. Theconsumers 95 may not care if someone listens in to their pizza order, but may be much more concerned about protecting the fact that they are corresponding electronically with certain other people (e.g., doctors, banks, lawyers, or others they have a relationship of confidence and trust with).Secure containers 152 also help ensure that messages sent acrossnetwork 150 are authentic and have not been altered.Electronic containers 152 allow Joe's Pizza to trust that the just-received pizza order actually came from consumers 95 (as opposed to someone else) and has not been altered, and the consumers can be relatively sure that no one will send Joe a fake pizza order in their name. The use ofsecure containers 152 and protectedprocessing environment 154 in the preferred embodiment also ensures that theconsumers 95 cannot subsequently deny that they actually placed the order with Joe's Pizza if they in fact did so. -
Transaction Authority 700 -
FIG. 15 shows anexample transaction authority 700.Transaction authority 700 in this example provides process control and automation. It helps ensure that processes and transactions are completed successfully.Transaction authority 700 may work with otherCommerce Utility Systems 90 to perform and complete its tasks. - In more detail,
transaction authority 700 in this example monitors the status of an electronic transaction and/or process and maintains a secure, reliable record of what has happened so far and what still needs to happen for the overall transaction and/or process to complete.Transaction authority 700 may also, if desired, perform a more active role by, for example, generating requests for particular actions to occur.Transaction authority 700 may in some cases be the only participant in a complex transaction or process that “knows” all of the steps in the process.Transaction authority 700 can also electronically define an overall process based on electronic controls contributed by various participants in the process. -
FIG. 15 illustrates an example of howtransaction authority 700 can be used to allowconsumers 95 to order merchandise such as a sweater. In this particular electronic home shopping example (which is for purposes of illustration but is not intended to be limiting in any way), theconsumers 95 can use theirremote control 108 to select the particular seller, style and color of a sweater they want to order at a particular price. In this home shopping example,appliance 100's protectedprocessing environment 154 may generate anelectronic order 702 which it sends to theorder receiving department 704 of an electronic “mail order” company. Theorder 702 may be sent within asecure container 152 a. - In this example,
transaction authority 700 may assist the electronic mail order company to coordinate activities and make sure that all steps required to deliver the sweater are performed in an accurate and timely fashion. For example: -
- Upon receiving the
electronic order 702, theorder receiving department 704 might provide anelectronic notification 706 totransaction authority 700. Thetransaction authority 700 stores theelectronic notification 706, and may issue a “requirement” 708. -
Transaction authority 700 may have issued therequirement 708 before the order was placed so that theorder receiving department 704 knows what to do when the order comes in. - In accordance with the “requirement” 708,
order receiving department 704 may issue an electronic and/or paper (or other) version of theorder 710 to amanufacturing department 712. - The
transaction authority 700 may issue amanufacturing requirement 714 to the manufacturing department to make the sweater according to the consumers' preferences. -
Transaction authority 700 might also issue asupply requirement 716 to asupplier 718. For example,transaction authority 700 may requestsupplier 718 to deliver supplies, such as balls ofyarn 711, somanufacturer 712 has the raw materials to manufacture the sweater. -
Supplier 718 may notifytransaction authority 700 when it has delivered the supplies by issuing anotification 720. - When manufacturing
department 712 has finished the sweater, it may alerttransaction authority 700 by sending it anotification 722. - In response to the
notification 722 sent bymanufacturing department 712,transaction authority 700 may issue ashipping requirement 724 to ashipping department 726, for example, requesting the shipping department to pick up completedsweater 728 from the manufacturing department and to deliver it to the consumers. -
Transaction authority 700 may coordinate with otherCommerce Utility Systems 90, such as afinancial clearinghouse 200, to arrange payment.
- Upon receiving the
- Of course, this example is for purposes of illustration only.
Transaction authority 700 may be used for all kinds of different process control and automation such as, for example, handling electronic orders and sales, electronic data interchange (EDI), electronic contract negotiation and/or execution, electronic document delivery, inter and intra company transactions, and the secure electronic integration of business processes within or among business organizations—just to name a few of many useful applications. -
VDE Administration Services 800 - VDE administrator 800 (see
FIG. 1 of this application andFIG. 1A and associated discussion in the Ginter et al. specification) may, in the preferred embodiment, provide a variety of electronic maintenance and other functions to keepnetwork 150,appliance 100 protectedprocessing environments 154 and DistributedCommerce Utility 75 operating securely, smoothly and efficiently. For example,VDE administrator 800 may manage cryptographic keys used for electronic security throughoutnetwork 150, and may also provide services relating to the maintenance of secure data byappliances 100, the variousCommerce Utility Systems 90, and other electronic appliances. As described in detail in the Ginter et al. patent disclosure, other important functions performed byVDE administrator 800 include installing and configuring protectedprocessing environments 154, and helping protected processing environments to securely maintain stored permissions and/or usage data. TheVDE administrator 800 may work with otherCommerce Utility Systems 90. -
Commerce Utility Systems 90 can Support One Another - In addition to supporting
consumers 95,Commerce Utility Systems 90 can support other Commerce Utility Systems. This is shown inFIGS. 16A-16F . For example: -
-
financial clearinghouse 200 can help ensure otherCommerce Utility Systems 90 are paid for their contributions (seeFIG. 16A ); and - usage clearinghouse 300 (see
FIG. 16B ) may inform otherCommerce Utility Systems 90 concerning how the support they provide is being used. For example,usage clearinghouse 300 may tell certifyingauthority 500 how the certifying authority's certificates have been used (very useful for the certifying authority to keep tabs on the amount of potential liability it is undertaking or in helping to detect fraudulent certificates). -
FIG. 16C shows that a rights andpermissions clearinghouse 400 can support otherCommerce Utility Systems 90 such as, for example, afinancial clearinghouse 200, ausage clearinghouse 300, another rights andpermissions clearinghouse 400′, a certifyingauthority 500, asecure directory services 600, and atransaction authority 700. - Certifying
authority 500 can issuedigital certificates 504 certifying the operation of one or more other Commerce Utility Systems 90 (seeFIG. 16D )—supporting otherCommerce Utility Systems 90 such as, for example, afinancial clearinghouse 200, ausage clearinghouse 300, a rights andpermissions clearinghouse 400, another certifyingauthority 500′,secure directory services 600, andtransaction authority 700. -
FIG. 16E shows that asecure directory services 600 may support otherCommerce Utility Systems 90, such as, for example,financial clearinghouse 200,usage clearinghouse 300, rights andpermissions clearinghouse 400, certifyingauthority 500, othersecure directory services 600′, andtransaction authority 700. -
FIG. 16F shows that atransaction authority 700 can support otherCommerce Utility Systems 90, such as, for example, afinancial clearinghouse 200, ausage clearinghouse 300, a rights andpermissions clearinghouse 400, a certifyingauthority 500, asecure directory services 600, and anothertransaction authority 700′.
“A Piece of the Tick”
-
- The
Commerce Utility Systems 90 described herein provide valuable, important services and functions. The operators of such services can and should be compensated for the services they provide. Financial ClearinghouseCommerce Utility Systems 200 can ensure that they and other support service providers receive this compensation without inconvenience to other electronic community and value chain participants. - In assisting or compensating value chain participants, a
Commerce Utility System 90 may (based on pre-approved contractual arrangements) take its own portion or percentage to compensate it for the clearing services it provides Support services can be compensated based on a small portion of payment (i.e., a “micro-payment”) attributable to each electronic transaction (a “piece of the tick”). Providers may pass some or all of these fees along to their own value chain participants in various ways. - Several different classes of value chain participants may be called upon to compensate the
Commerce Utility Systems 90, including: -
- Information Consumers (including for example, people who make use of the information “exhaust” generated by electronic commerce, electronic transaction management and rights management activities);
- Content Rightsholders and other Electronic Providers;
- Participants in the broadest range of secure, distributed electronic commerce transactions.
- In addition, various support service providers may also need to support one another in various ways—and may therefore need to compensate one another. For example:
- One
Commerce Utility System 90 may act as an intermediary for anotherCommerce Utility System 90's customer; - One
Commerce Utility System 90 may be required to support the operation of anotherCommerce Utility System 90; and/or - Commerce Utility System 90 s may need to work together to support a common transaction.
- Different Commerce Utility System 90 s may cooperate to establish a common fee that they then divide among themselves. In another scenario, each
Commerce Utility System 90 may independently charge for the value of its own services. There may be competition among different Commerce Utility System 90 s based on quality of service and price—just as credit card companies now compete for providers' and consumers' business. - Example Distributed Commerce Utility System Architecture
- The Ginter et al. patent disclosure describes, at
pages 180 and following, and shows inFIG. 10-12 , for example, a “Rights Operating System” providing a compact, secure, event-driven, compartmentalized, services-based, “component” oriented, distributed multi-processing operating system environment that integrates VDE security control information, components, and protocols with traditional operating system concepts. The preferred exampleCommerce Utility System 90 architecture provided in accordance with these inventions builds upon and extends the Rights Operating System described in Ginter et al. - For example, the preferred example
Commerce Utility System 90 architecture provides a collection of service functions that the Rights Operating System may execute as applications. These service functions define a variety of useful tasks that any and/or allCommerce Utility Systems 90 may need to perform. These service functions are distributable, scaleable and reusable. They can be combined in various combinations and sub-combinations—depending upon business models, for example—to provide the overall functionality desired for any particularCommerce Utility System 90 implementation. -
FIG. 17A shows an example overall architecture of aCommerce Utility System 90,FIG. 17B shows an example of the application architecture of a Commerce Utility System, andFIG. 17C shows more detail of a service function. - Referring first to
FIG. 17B , in this example the application software architecture for aCommerce Utility System 90 contains a commerceutility system descriptor 90A. Commerceutility system descriptor 90A contains information about theCommerce Utility System 90 that may be used to identify such system and its capabilities, as well as to describe, aggregate and/or interface with any number of service functions 90B(1), 90B(2), . . . . Commerce utility system descriptor 90A and service functions 90B may, for example, be implemented using object oriented programming techniques to help ensure that such descriptor and service functions are modular and reusable—as well as abstracting the specifics of how actions requested ofCommerce Utility System 90 are actually carried out and/or implemented. - Commerce
utility system descriptor 90A(1) may also be responsible for coordinating the action of service functions 90B. In this example,descriptor 90A is used to direct requests and other system actions to the appropriate service functions 90B, and to ensure that actions requiring more than one service function are coordinated by reconciling differences in interfaces, data types and the like that may exist between the service functions 90B—as well as helping to direct overall process flow amongst the various service functions 90B. A non-exhaustive list of examples of such service functions 90B include the following: -
- audit,
- maintaining records,
- overseeing processes,
- monitoring status,
- complete process definition,
- process control,
- interface(s) to settlement services,
- funds transfer,
- currency conversion,
- tax calculation and application,
- account creation and identifier assignment,
- payment aggregation,
- payment disaggregation,
- budget pre-authorization,
- status notification,
- confirmation,
- uncompleted events record,
- requirements generation,
- report generation,
- event consequences,
- account reconciliation,
- identity authentication,
- electronic currency creation,
- event database management,
- routing database,
- generating requests,
- replication,
- propagation,
- usage database management,
- bill creation and processing,
- market research,
- negotiation,
- control set database management,
- control set generation,
- process control logic,
- event flow generation,
- routing,
- archiving,
- rights and permissions database management,
- template database management,
- commerce management language processing,
- rights management language processing,
- advertising database management,
- automatic class generation,
- automatic class assignment,
- notary,
- seal generator,
- digital time stamp,
- fingerprint/watermark,
- offers and counteroffers,
- object registry,
- object identifier assignment,
- copyright registration,
- control set registry,
- template registry,
- certificate creation,
- revocation list maintenance,
- director database management,
- database query and response processing,
- other service functions.
-
FIG. 17C shows more detail of aservice function 90B. In this example,service function 90B is comprised of aservice function descriptor 90C, and any number ofservice application components 90D(1), 90D(2), . . . .Service function descriptor 90C performs a role similar to that of commerceutility system descriptor 90A, except that it acts with respect toservice function 90B andservice application components 90D.Service function descriptor 90C andservice application components 90D may, for example, also be implemented using object oriented programming techniques to help ensure that such descriptor and service application components are modular and reusable, as well as abstracting the specifics of how actions requested ofservice function 90B are actually carried out and/or implemented. In this example, theservice application components 90D implement most of the capabilities of theservice function 90B by carrying out steps of, or subfunctions of, theservice function 90B. -
FIG. 17A shows an example overallCommerce Utility System 90 architecture. The overall architecture shown in this example is an object oriented system in which the overallCommerce Utility System 90 is a single object, that is in turn comprised ofreusable service function 90B objects. Theseservice function 90B objects are comprised of reusable service application components (objects) 90D. Any or all of these objects may make use of the services provided by a commerce utility support service layer 90-4, as described in more detail below. The preferred embodiment CommerceUtility System architecture 90 shown is built upon the Rights Operating System 90-1 described in detail in the Ginter et al. patent specification (seeFIG. 12 of Ginter, et al., for example). A set of service functions 90B comprise “applications” executed by the Rights Operating System 90-1. There can be any number of service functions 90B. - The object oriented design of the
Commerce Utility System 90 architecture shown inFIG. 17A has several desirable attributes. For example, aCommerce Utility System 90 may easily add, remove and/or replaceservice functions 90B to alter, extend and/or enhance its capabilities. Similarly, the architecture allows the addition, removal, and/or replacement ofservice application components 90D to permit similar flexibility in the case of service functions. Furthermore, object oriented design significantly improves the ease and efficiency of reuse of service functions and/or service application components in differentCommerce Utility Systems 90, ordifferent service functions 90B (as shown inFIG. 17A ); respectively. - The application layer, which is comprised of service function layer 90-2 and service application component layer 90-3 (comprising
components 90DA), may be, if desired, supported by a commerce utility support services layer 90-4. Commerce utility support services layer 90-4 may provide increased efficiency for large numbers of transactions. Such commerce utility support services 90-4 may include, for example: -
- session management,
- fault tolerance,
- memory management,
- load balancing,
- database bridging, and
- other commerce utility support services.
- In this example, service functions 90B are component based, and may make use of the reusable and component based
service application components 90D. Theservice application components 90D typically perform steps of, or subfunctions of, service functions 90B. Eachservice application component 90D can have either or both of two parts: - a component 90-Ba that need not execute within protected
processing environment 154; and - a secure component 90-Bb that needs to execute within protected
processing environment 154. - In this example architecture, there may be a correspondence between
components 90Da andcomponents 90Db. For example, at least onecomponent 90Da may correspond with at least onesecure component 90Db. There may be a one-to-one correspondence between components 90-Da andcomponents 90Db(as indicated inFIG. 17A by common geometric shapes). In the preferred embodiment, this separation of function permits, when required and/or desired, the interaction between secure processes operating inPPE 154 andservice application components 90D. By using this architecture, it is easier and more efficient to create service functions that implement capabilities requiring both application level support as well as secure processing. - For example, some administrative and/or support functions for performance by
commerce utility systems 90 may involve use of both application level database functions as well as information protected by a protected processing environment (“PPE”) 154 in the preferred embodiment. A specific example of this might be the records of payment by a user of afinancial clearinghouse 200. If the operator of such afinancial clearinghouse 200 chose to keep payment history information in an application level database, but needed information protected byPPE 154 in order to accurately determine the current account status of a customer, implementing aservice application component 90DA that coordinated the information in the application level database with information protected byPPE 154 and processed byservice application component 90DB into a single object may significantly simplify the task of using this information in the context of a givenservice function 90B (e.g. a decision to extend additional credit). Furthermore, this example service application component may be reusable in other service functions 90B. - In another example,
service application component 90DA might serve principally as an application level interface object to acorresponding PPE 154object 90DB. For example, if anotary service function 90B requires the application of a digital signature, aservice application component 90DA might principally provide an interface that transports information to, and receives information from, a correspondingservice application component 90DB that performs essentially all of the actual work of creating and applying a digital signature. In addition, the applicationlevel service component 90DA might provide additional exception handling, protocol conversion, or other functions designed to help integrate capabilities more easily or in a different manner than originally designed for aservice function 90B. -
FIG. 17D-1 shows an example correspondence betweenservice functions 90B and general types of useful examplecommerce utility systems 90. Example service functions 90B (“Audit”, “Maintaining Records”, . . . ) are shown horizontally. These example service functions 90B may be useful for implementingcommerce utility system 90 example types (“Financial Clearinghouse”, “Usage Clearinghouse”, . . . ) written vertically in the row of boxes along the top of the diagram. TheFIG. 17D-1 diagram is not exhaustive—additional useful commerce utility system types are possible and additional service functions 90B are also possible. Indeed, the architecture ofCommerce Utility System 90 ensures that both types and service functions 90B are extensible as business models or other factors change. - Although certain business needs and models may tend to inspire the use of certain combinations and collections of important service functions in almost any implementation, the
Commerce Utility System 90 architecture is inherently flexible—allowing the implementer to freely mix and combine a variety of different service functions depending upon their needs. For example, it is useful to provide aCommerce Utility System 90 that functions as a “financial clearinghouse 200”—providing payment processing, communications, database management, and other related service functions. The Commerce Utility System architecture can provide such a “financial clearinghouse”—and is also inherently much more generalized and generalizable. For example, a particularCommerce Utility System 90 implementation of a “financial clearinghouse” could also combine “non-financial” service functions with financial service functions. The particular functions or sets of functions that are realized in any givenCommerce Utility System 90 implementation depend upon the individual needs of the implementer—as dictated for example by business model(s) or functions. -
FIG. 17D-2 shows, for example, how the overall functionality of an example “financial clearinghouse”commerce utility system 200 can be constructed from example service functions 90B. In this example, the service functions 90B surrounded by darker lines are included within the commerceutility system descriptor 90 a shown inFIG. 17B .FIG. 17D-2 shows an example usage clearinghousecommerce utility system 300 constructed based on a different subset of service functions 90B surrounded by dark lines (shown inFIG. 17D-1 ). ComparingFIGS. 17D-2 and 17D-3, one can see that someservice functions 90B (for example, “audit,” “status notification,” “event database management,” etc.) may be reused for both financial and usage clearing operations. A combination financial and usage clearinghousecommerce utility system 90 might use the union of the service functions 90B surrounded by dark lines inFIG. 17D-2 and the service functions 90B surrounded by dark lines inFIG. 17D-3 . More, less and/or different functionality can be provided for a particularcommerce utility system 90 simply by providing and invoking more, less and/or different service functions 90B. - Distributing
Commerce Utility System 90 - The secure application components 90-3 described above may, in the preferred embodiment, include or comprise reciprocal control structures and associated rules and methods shown in
FIGS. 41A-41D and 48 of the Ginter et al. patent application. These reciprocal control structures can be used to interlink different or the same control sets operating on the same or differentCommerce Utility Systems 90 or otherelectronic appliances 100. Hence, each actor can have one or more reciprocal relationships with every other actor—withCommerce Utility System 90 involved in some role in some of the various actions. -
FIGS. 17E-1 through 17E-4 show different examples of interaction modelsCommerce Utility System 90 may use to interact with an ongoing transaction or process based in part on these reciprocal control structures: -
-
FIG. 17E-1 shows an event intermediation model in which aCommerce Utility System 90 receives anevent notification 748 from a secure entity (e.g., a first protected processing environment) and generates anevent 758 which triggers activities of another (and/or the same) secure entity (e.g., a second and/or the first protected processing environment). -
FIG. 17E-2 shows a different Commerce Utility System interaction model in which the first secure entity providesevent notification 748 to both aCommerce Utility System 90 and another secure entity to perform a step, but the second entity awaits receipt of an authorization fromCommerce Utility System 90 to proceed before it actually performs the next step in the process. -
FIG. 17E-3 shows a notification model in whichCommerce Utility System 90 is more of a passive bystander, receivingevent notifications 748 for purposes of secure auditing but otherwise not interacting directly with the ongoing process or transaction unless needed to resolve exceptions (e.g., an error condition). -
FIG. 17E-4 shows a prior authorization model in which theCommerce Utility System 90 must issue anotification 748 to one secure entity in response to receipt of anevent notification 748 from that entity before that entity may pass theevent notification 748 along to the next secure entity to perform the next step in a overall process or transaction.
-
- The various
Commerce Utility System 90 interaction models shown inFIGS. 17E-1 through 17E-4 are not exhaustive or mutually exclusive—any given transaction or process may include some or all of these in different combinations based upon business models or other requirements. - As mentioned above, the present inventions provide techniques for distributing the operation of a particular service function 90-2 or service application component 90-3 throughout a system 50 or network—including for example to electronic appliances of
individual consumers 95.FIG. 17F shows an example of a control set 188 that can be used to control a remotely located protected processing environment (for example, a consumer's electronic appliance) to perform a “local” portion of a clearing operation. ACommerce Utility System 90 could deliver this control set 188 to a consumer's electronic appliance, to anotherCommerce Utility System 90, or to some other electronic appliance (e.g., one that is part of a communicating infrastructure). TheCommerce Utility System 90 can, for example, delegate part of its clearing authority (implemented, for example, as one or more service functions 90-2, each including one or more service application components 90-3) to a process that can be performed within the protectedprocessing environment 154 of a user's electronic appliance. - The
FIG. 17F example is a method 850 (e.g., meter, billing, or budget) whose AUDIT event 852(1) is processed by an audit method 854. Theexample meter method 850, for example, might have: -
- a USE event 852(2) (e.g., “click” the meter),
- an INITIALIZE event 852(1) (e.g., prepare the meter for use),
- a RESET event 852(3) (e.g., restore the meter to a known good state after an error condition),
- an AUDIT event 852(4) (e.g., gather up records generated during USE events, as well as a copy of the current UDE value, and arrange for shipment to the auditor(s)),
- a READ USE RECORD event 852(5) (e.g., return a copy of the requested use record),
- a READ UDE event 852(6) (e.g., return a copy of the current UDE),
- a READ MDE event 852(7) (e.g. that returns a copy of the requested MDE), and
- other miscellaneous events.
- The AUDIT event 852(4), in this example, may be linked to an audit method 854. In order to access the data in this example, the
Commerce Utility System 90 might need permission in the form of access tags and/or an appropriate PERC control set defining more detailed usage permissions, and semantic knowledge of the record format written out by themeter method 850's USE event 852(2). The semantic knowledge could come from an out-of-band agreement (e.g., a standard), or through access to the MDE (or relevant MDE portion) of themeter method 850 that describes the use record format. - The events of audit method 854 would include a USE event 856(2) that performs the functions expected by the calling method's event—in this case, gathering use records and a copy of the current UDE, and sending them off. In this example, let's assume there is an INITIALIZE event 856(1) in this method as well. When called, the INITIALIZE event 856(1) would be sent internally, and its associated load module(s) would call back to the READ MDE event 852(7) of the
meter method 850 to learn the semantics of the use records. Then, the USE event 856(2) would be called and the load module(s) 858(2) associated with processing this event would call the appropriate events of the meter method 850 (e.g., READ USE RECORD repeatedly, and READ UDE once). At this point, the expectations of the calling method have been fulfilled, except for administrative object packaging and transmission. - In order to implement more distributed clearing functions, the USE event 856(2) may do more processing. For example, while reading in the USE records from the meter, the audit method 854 may implement analysis functions (e.g., categorizing the types of objects used, and reducing the information reported up the clearing chain to a simple count of how many times various types of content were accessed). Records from content types that are not interesting may be discarded. The detailed records themselves may be discarded after analysis. In another example, the UDE values (e.g., how many clicks are recorded) may be compared to the number of use records retrieved, and if there is a discrepancy, they can be reported and/or acted upon locally (e.g., disabling use of the objects from a given provider until further interaction). In still another example, records may have user identity information removed to ensure privacy. In a further example, some use records may be processed and analyzed locally (and then discarded), while other detail records are saved for later processing.
- Once the distributed clearing functions have been performed, the information can be packaged up in one or more administrative objects for transmission up the clearing chain to a centralized location. This may involve a direct report to the provider(s), and/or a report to another clearing function, for example. The processed records may be released (for deletion, summary, filing, etc. by the meter method) by the audit method 854 when received, processed, transmitted, or on receipt of a confirmation by the recipients.
- In another example using the
meter method 850 shown inFIG. 17F , the AUDIT event 854 could be performed “internally” by themeter method 850. In this example, the use records and UDE would be bundled up in one or more administrative objects for transmission to the auditor(s) by the load module(s) 853 associated with the AUDIT event 854(4) of themeter method 850. However, rather than transmitting these objects, they could be processed locally. To do this, the name services record used by ROS (see Ginter et al.FIGS. 12 and 13 ) to find the named auditor(s) could be redirected back to thelocal PPE 154. In thePPE 154, a process controlled by theCommerce Utility System 90 can be created (based on methods and/or load modules delivered on their behalf) to perform the local clearing functions described above, except using the content of the administrative object(s), rather than calls to the meter method events. This is more analogous to the function that would be performed at a remote clearing facility in the sense that the operations are performed on administrative objects and their contents—but the processing can instead be done on the local consumer electronic appliance, on a networked appliance. - Distributing support services in this manner provides additional capabilities that may not be present or available in a centralized architecture. For example, a rights and permissions clearinghouse could delegate a local server within an organization to keep track of requests and to cache copies of permissions previously requested by the organization. Such a local rights and permissions clearinghouse could reduce network traffic and provide a convenient local repository for organization-specific permissions (e.g., site licenses for computer software). The local rights and permissions server could be authorized by rights holders or a rights and permissioning agency or other rights distribution organization to grant licenses on a request basis.
- As another example, many secure, largely automated administrative and support services may be distributed in whole and/or in part to an at least occasionally connected appliance—regardless of whether that appliance is a computer, set top box, personal digital assistant (PDA) digital telephone, intelligent digital television, or any other digital appliance. Such appliances can use a protected processing environment to ensure that the support service is performed securely and reliably, free from tampering and other interference (e.g., as described in the Ginter, et al. patent specification).
- In another example, one possible VDE content distribution scenario involves content providers performing the initial packaging role, distributors performing the distribution function, users keeping track of usage records, and clearinghouses processing usage and financial information. This is in contrast to a centralized processing model, in which all of these functions are performed by a single centralized party.
- As still another example, efficiency increases can be realized by distributing clearinghouse functions across individual user machines, local area network (LAN) servers, and/or corporate “gateway” machines that bridge the corporate LAN/WAN environment with the outside world, and commercial “backbone” servers.
- As another example, a company's computer might be authorized by a central certificate authority to grant certain kinds of digital certificates. For example, the company might be a member of a certain trade organization. The trade organization's certifying authority might give the company a digital certificate attesting to that fact, and delegate to the company's own computer the certifying authority to issue certificates attesting to the fact that each of the company's employees is a member of the trade organization. Similarly, parents may be authorized to issue digital certificates on behalf of their offspring.
- The techniques described above illustrate how the Distributed Commerce Utility, through use of the
Commerce Utility System 90 architecture, can be distributed across multiple Commerce Utility Systems. Furthermore, the service functions 90-2 provided by one or moreCommerce Utility Systems 90 may be decomposed into complete, or even partial, process steps (e.g., service application components 90-2) that are performed in whole or in part on otherCommerce Utility Systems 90, or any other system (including end user systems) selected by the participants in a given scenario. - Example Commerce Utility System Types
-
Financial Clearinghouse 200 -
FIG. 18 shows an example of a Financial ClearinghouseCommerce Utility System 200. “Financial Clearinghouses” support automated, efficient financial fulfillment for electronic transactions. For example,financial clearinghouse 200 may collect payment related information and details, and efficiently arrange for the transfer of money and other compensation to ensure that value providers get paid, including the automated, selective disaggregation of a payment into payment portions directed to appropriate value chain participants.Financial clearinghouses 200 may also provide credit, budgets limits, and/or electronic currency to participant (e.g., end-user) protected processing environments, wherein the financial clearinghouse may have distributed some of its operations to such protected processing environments for secure, local performance of such operations. The following are some example financial clearing support functions that can be provided through the use of the present inventions: -
- Clearing of financial transactions in a secure, efficient, timely and accurate manner.
- Providing secure financial clearing on payment mechanisms that are trusted by, and convenient for value providers and users/consumers.
- Assuring payment to rights holders and other value chain participants (for example, providers who supply value to the electronic community in some part of the process from creation, to distribution, to sale, and to delivery) without requiring them to take on the task of managing a large number of financial interfaces with widely dispersed customers and/or a variety of often complex financial services standards and protocols.
- Allowing content consumers to pay for information goods and associated services using a variety of different payment vehicles via a common, trustable interface.
- Allowing each party involved in a transaction to verify that a given exchange has occurred as it was mutually intended, and to preclude repudiation of the transaction by any party.
- Reconciling accounts at time of purchase or usage reporting (e.g., transferring funds from a value chain participant account to one or more provider accounts).
- Supporting frequent and granular transaction clearing activities.
- Providing financial clearing services to all value chain participants (e.g., buyers, distributors and sellers of digital content of all kinds as well as buyers, distributors, and sellers of physical goods and user of other services).
- Interfacing distributed electronic commerce domains with existing electronic, paper and/or other payment and/or clearing services, including but not limited to credit card systems, bank debit card systems, smart card systems, electronic data interchange, automatic clearinghouses, digital money, etc.
- The effecting, by one or more banks and/or other organizations, of settlement and reconciliation and/or interfacing directly with entities who may legally perform settlement services.
- The effecting of the creation of, and assigning of, identifying labels, numbers, names or other unique identifiers, by one or more banks and/or other organizations to digital process and/or digital information creators, information distributions and/or modifiers, and/or customer and/or other user accounts for funds, credits and debits.
- Using secure containers in any step, part, or process of providing secure financial clearing services.
- Controlling secure financial clearing processes based, at least in part, on rules and controls stipulating the distribution of processes to be performed at each protected processing environment of a distributed financial clearinghouse systems, e.g., clearing performed by the user protected processing environments, web servers, centralized clearing facilities.
- Efficiently and securely handling conversions from one currency to another.
- Enabling payment fulfillment on provision of other consideration including service fees, product fees and/or any other fees or charges based at least in part on content, process control, and/or rights management use.
- Supporting wide use of micro-fees and micro-payments at least in part based on content, process control, and/or other usage transactions, wherein said support may include the distributed, secure accumulation and/or processing of micro-transaction activity and the periodic passing of information related to such activity through a clearinghouse network for further processing and/or accumulation.
- Efficiently measuring and managing micro-payment activity while minimizing transaction overhead.
- Minimizing latency in micro-payment transaction handling.
- Aggregating or “bundling” transactions against local value store or other payment vehicles (methods).
- Employing value chain rules and controls and chain of handling and control for efficiently administrating the disaggregation (splitting apart) of payments, including the assignment or transfer to different value chain providers of payments based on the same or differing electronic control sets controlling usage and/or other permissions (e.g., securely controlling payment consequences through the parsing of payment amounts among various value chain parties as required by rules and controls before specific payment methods are activated.
- Reducing (e.g., minimizing) the number of electronic messages required to support a given set of electronic transactions through, for example, distributed transaction processing and/or transaction activity accumulation.
- Supporting local aggregation (bundling or combining together) of multiple payments or micro-payments at a value chain participant's site.
- Allowing value providers (e.g., value chain participants) to efficiently check another value chain participant's ability to pay before providing services or goods (physical and/or electronic) on credit.
- Allowing value providers to authorize an appropriate level of funding for estimated purchase levels on a value chain participant's preferred payment vehicle, including, for example, allowing the provision of budgets for credit and/or currency that can be expended towards all and/or only certain classes of transactions (e.g., content and/or process control types) including, for example, budgets for disbursement for expressly specified categories of expenditures such as only G and PG movies.
- Providing verification of the identity of a potential value chain participant and binding of that identity to the value chain participant's selected payment vehicle(s).
- Providing periodic reporting of transaction activity for clearinghouse reconciliation and recordation purposes. Performing auditing, billing, payment fulfillment and/or other consideration and/or other clearing activities.
- Providing event driven reporting based, for example, on time, place, depletion of local funds, and/or class of disbursement activity such as purpose (for business, entertainment, travel, household expense), family member or other individual or group identity, category of content or other goods and/or services acquired, and/or category any of type of disbursement activity
- Receiving authority from secure chain of handling and control embodied in electronic control sets.
- Granting authority and/or providing services to, and/or in conjunction with, one or more distributed financial clearinghouses that are some combination of subordinate to, and/or have peer-to-peer relationships with, one or more of said clearinghouses.
- Distributing financial clearing functions across a network or other system (for example, every consumer or other value chain participant node can perform distributed financial clearing services and wherein said participant node may communicate financial clearing information directly to one or more other participants) and in accordance with rules and controls and other VDE techniques as described in the Ginter, et al patent specification.
- Granting authority and/or providing services to, or in conjunction with, one or more financial sub-clearinghouses whose operations may be located logically and/or physically elsewhere, such as within a company or government agency and/or within one or more jurisdictions and/or serving subsets of the overall business focus area of a senior financial clearinghouse.
- Distributing and/or otherwise authorizing financial clearing functions across a system or network, for example, where every consumer and/or certain or all other value chain participant nodes can potentially support a distributed usage clearing service initiating its own, secure financial clearing transactions and function in the context of the overall clearinghouse network including clearinghouse interoperation with one or more other participant, interoperable nodes, and as elsewhere in this list, all activities employing VDE techniques as appropriate.
- Efficiently calculating, collecting, and dispersing sales and “value added taxes” imposed by at least one jurisdiction.
- Supporting a web of financial clearinghouses in which one or more classes (groups) of clearinghouse have interoperable, peer-to-peer relationships and in which, differing groups may have differing rights to interoperate with members of other groups, for example financial clearinghouses on end-user protected processing environments may have limited rights to inter-operate with “primary” financial clearinghouses.
- Supporting a web of clearinghouse protected processing environments in which such protected processing environments comprise discreet “banks” or banking protected processing environments, and where such protected processing environments can employ VDE capabilities to securely govern and perform banking functions such as the secure storage (locally and/or remotely) of notational currency, the right to “lend” stored currency to end-user and/or other clearinghouse protected processing environments, the right to launch electronic currency objects, the right to fulfill payment from local or remote currency store(s), the ability to receive communications representing obligations to pay (e.g., electronic bills), the ability to fulfill such payments, and the ability to operate as a component banking “branch” of one or more virtual bank(s) (or banking network(s)) wherein such bank performs many of the roles currently performed by conventional banks.
- Supporting the ability for financial clearinghouses to create electronic currency that is conditionally anonymous and where such currency may be employed in the fulfillment of payment obligations and where such currency is treated as authentic without the requirement that a receiving party connect after such receipt with a remote banking authority for assessing that the currency is valid or authorized for use.
- Supporting the ability for distributed clearinghouse protected processing environments to operate—in conjunction with one or more capabilities described above—on portable devices such as smart cards (e.g., electronic wallets, etc.) where cellular or land-line communication means (or other transport mechanisms) support on-line or asynchronous communication of information related to a current or an plural transactions such as billing or other audit information regarding commerce activity including identification, for example, of purchasers, sellers, and/or distributors, and authorization information, budget information, credit provision, currency provision, and/or disbursement information, etc. related to such activity.
- Supporting the provision of discounts, subsidies and/or coupons to value chain participants, for example to consumer users, in exchange for usage data or more finely grained usage data (for example, ameliorating privacy concerns in some contexts).
- May be organized hierarchically, peer-to-peer, or in a combined mode where responsibility for financial clearing may be distributed in differing fashions for differing commerce models and/or activities and/or value chains and where certain one or more parties may be, for example, hierarchically more senior to other parties in one or more instances and hierarchically a peer or less senior in one or more other instances.
- The relationship among participants is programmable and may be set (and later modified) to represent one or more desired financial clearing arrangements for given commerce activities, value chains, or models.
- Distributing payments to plural parties, including, for example, taxes to one or more governments (e.g., city, state, and federal).
-
FIG. 18 shows an example function oriented diagram forfinancial clearinghouse 200. In this example,financial clearinghouse 200 is highly automated, and operates in a trusted, secure domain to provide a protected processing environment. It efficiently provides financial clearing services to all kinds of electronic commerce chains. It can also serve as a gateway between the highly secure virtual distribution environment (VDE) domain and other domains—providing protocol support for the existing infrastructure. The gateway functions can allow the highly flexible and distributed VDE protected processing environments to exploit the inflexible and centralized, but ubiquitous and trusted, existing financial infrastructure services. - The core functions of
financial clearinghouse 200 relate topayment processing 208,payment aggregation 212,payment disaggregation 214, andmicro-payment management 216—since these functions collect money from customers and other value chain participants, and pay money to value chain service or product providers such as merchants. - In more detail,
financial clearinghouse 200 may perform the following functions in this example: -
-
payment processing 208, -
credit checks 210, -
payment aggregation 212, -
payment disaggregation 214, - micro-payment handling 216,
- event driven reporting 218,
-
reconciliation 220, - database maintenance/
management 222, -
replication 224, and -
propagation 226.
-
-
Financial clearinghouse 200 may receivepayment information 202,customer information 230,provider information 232, and aggregated reports andbills 234 from the outside world. It may generatedebit orders 236,credit orders 238, statements and reports 204, 240, release signals 242, and credit checks andauthorizations 244. -
Database management 222 and event driven reporting 218 may be used to securely provide accurate financial reports to value chain participants.Reconciliation function 220—which is related to both reporting and financial management—allowsfinancial clearinghouse 200 to provide more reliable financial management.Replication function 224 andpropagation function 226 are used byfinancial clearinghouse 200 to facilitate distributed processing with otherfinancial clearinghouses 200 and/or other secure or insecure protected processing environments, permitting the financial clearinghouse to securely share state and update information with other Commerce Utility Systems or other participants. - In the example shown, the payment information 202 (which may arrive in one or more secure containers 152) is the primary input to
payment processing block 208. If desired,payment information 202 can also include some or all of the usage information sent to ausage clearinghouse 300—or it may include different types of usage information more relevant to financial auditing and transaction tracking. Thispayment information 202 can arrive in real time or on a delayed (e.g., periodic or other event-driven) basis. -
Financial clearinghouse 200 usesprovider information 232 andcustomer information 230 to effect funds transfers between customers and providers.Financial clearinghouse 200 uses aggregated reports andbills 234 to guide theoverall payment processing 208 as well aspayment aggregation 212 andpayment disaggregation 214. For example,financial clearinghouse 200 may issue debit andcredit orders Financial clearinghouse 200 may issuestatements 204 andreports 240 for secure auditing and/or informational purposes.Financial clearinghouse 200 may issuecredit authorizations 244 after performingcredit checks 210, thereby extending credit to appropriate value chain participants.Such authentication 244 may include an input/output function, unless they are performed entirely locally (i.e., an authorization request comes in, andclearinghouse 200 is the source of credit and/or credit limit information). -
Financial clearinghouse 200 may issue release signals 242 in appropriate circumstances to allowelectronic appliances 100 to stop maintaining and/or keep “pending” financial information after it has been transferred, analyzed and/or processed byfinancial clearinghouse 200. In one example, theuser appliance 100 may, within business model limitations, store the financial information even after it is “released,” reduce it to a summary, etc. Of course, it may have already done this with a copy of the data (e.g., if previously allowed to access it). For example, suppose the local copy of financial usage information contains confidential business model information. A property might cost $1.00 to view, and that dollar may be split among several parties. Normally, the user is only aware of the overall bottom line, not the details of the split—even though a record may exist locally for each of the participants in the transaction. -
FIG. 19 shows an example architectural diagram forfinancial clearinghouse 200.Financial clearinghouse 200 in this example includes asecure communications handler 246, atransaction processor 248, adatabase manager 250, aswitch 252, and one or more interface blocks 244. This example financial clearinghouse architecture may be based, for example, on the operating system architecture shown inFIGS. 12 and 13 of the Ginter et al. patent specification (general purposeexternal services manager 172 in that example could support settlement service interfaces 254 for example).Secure communications handler 246 allowsfinancial clearinghouse 200 to communicate securely with other electronic appliances 100(1) . . . 100(N). Such communications may be by way of securedigital containers 152. It is desirable for most Commerce Utility Systems 90 (including financial clearinghouse 200) to support both real time and asynchronous receipt ofcontainers 152. In addition,financial clearinghouse 90 may also support a real time connection protocol that does not requirecontainers 152 for simple transactions such as making a credit card payment that doesn't have disaggregation requirements. The advantage to using a real time connection is real time results. This may be beneficial in circumstances where users need more money or credit because they have run out (rather than simply making a report or receiving a periodic replenishment of a budget that has not been exhausted), and also when a provider (e.g., of content or budget) insists on clearing a transaction before allowing whatever activity initiated the transaction to go forward. - A connection for a real time transaction doesn't always require
secure containers 152, but usingcontainers 152 even in this scenario has advantages. For example,containers 152 permit attachment of rules and controls to the contents, allowing users to specify how the contents may be used. In addition, use ofcontainers 152 leverages existing capabilities in the protected processing environment. Using a technique such as electronic mail to deliver containers 152 (e.g., as attachments to SMTP mail messages, or as attachments to any other e-mail protocol that supports attachments) permits asynchronous processing of contents, thereby allowingCommerce Utility Systems 90 to smooth out their peak processing loads. A cost of operating a commercial clearinghouse is the depreciation expense of the equipment. The amount of equipment is principally driven by the peak load requirement. One can expect a significant variance in load (for example, compare Friday night at 8 pm versus Tuesday morning at 3 am). Smoothing out this function can lead to quite considerable savings in equipment and related costs (electricity, personnel, maintenance, etc.) -
Transaction processor 248 may process and analyze received information, anddatabase manager 250 may store received information in a database for later analysis and/or for historical analysis (to increase credit limits, analyze payment histories, etc.) In addition,database manager 250 may also store information associated with existing credit limits, addresses for communications (physical and/or electronic), and other account information. For example, the Ginter et al. patent specification discusses budget encumbrances. Thedatabase manager 250 may be used to store information used to track encumbrances as well. There may also be sets of security information used to communicate with protected processing environments and/or users employing the protected processing environments, and the settlement services. Records associated with communications with the settlement services may also be stored there as well. Thedatabase 250 may also be outfitted with various reporting facilities related to its contents. -
Transaction processor 248 anddatabase manager 250 together perform most of the functions shown inFIG. 18 .Switch 252 is used to route information to and from interface blocks 244. Interface blocks 244 are used to communicate with third party settlement services, such as credit card companies, Automatic Clearing House (ACH) systems for bank settlements, debit card accounts, etc. Optionally, the internal settlement services provided by aFederal Reserve Bank 256 may be used in lieu of or in addition to the third party settlement services shown to provide settlement of accounts in accordance with prevailing banking arrangements and legal requirements. The payment mechanisms used byfinancial clearinghouse 200 may be symmetrical (e.g., tell VISA to charge consumer A's charge account and credit vendor Y's account) or asymmetrical (e.g., tell VISA to debit consumer A's charge account and provide the money to the financial clearinghouse which will credit vendor Y's account using some other payment mechanism) as allowed by applicable financial and banking regulations. - Example Financial Clearing Processes
-
FIG. 20 shows an example financial clearinghouse process. In this example, aprovider 164 provides goods, services or content to aconsumer 95. For example,provider 164 may provide one or more digital properties 1029 and associatedcontrols 404 within an electronicsecure container 152. A secure protectedprocessing environment 154 at theconsumer 95 site keeps track of payment, usage and other information, and may provide anaudit trail 228 specifying this information.Audit trail 228 may be transmitted from the site ofconsumer 95 tofinancial clearinghouse 200 within one or moresecure containers 152 b.Audit trail 220 might include, for example, the identification of the reportingelectronic appliance 100; the amount of payment; provider identification; the consumer's desired payment method; the name or other identification of the electronic appliance user; and the type(s) of transaction(s) involved. The time and/or frequency of reporting might be based on a number of different events such as for example, the time of day, week, month, year or other time interval; the occurrence of some related or unrelated event (e.g., pre-approval for a purchase is required, a certain number of purchases have taken place, a local electronic purse has been exhausted of funds, reporting is necessary for some other reason, etc.); or a combination of these. -
Financial clearinghouse 200 analyzes theaudit trail 228, and generates one or more summary reports 240.Financial clearinghouse 200 may provide thesummary report 240 toprovider 164 by transmitting it electronically within asecure container 152 c.Financial clearinghouse 200 may also coordinate with afinancial intermediary 258 and one or morefinancial processors 260 to effect a debiting of a bank or other account owned byconsumer 95 and corresponding crediting of a bank or other account owned byprovider 164. - For example, the
financial clearinghouse 200 may receive the audit information, disaggregate the transactions (into value chain amounts for creators, distributors, and others; as well as for tax authorities and other governmental entities), and then calculate an amount due it from each of the transaction beneficiaries. Then, if desired or necessary (due to the size of the transactions, per transaction fees, or other efficiency and/or cost considerations), the transactions may be rolled up into lump sums for each of the parties, and submitted to a financial intermediary 258 (along with appropriate account information) that is responsible for performing credit card transactions. The financial intermediary 258 (who may also charge a fee or take a percentage) may then cause transactions to occur at thefinancial processor 260 such that the beneficiaries each receive the appropriate amounts. Alternatively, if thefinancial clearinghouse 200 has the ability and authorizations necessary to submit credit card transactions directly to credit card companies, it may cause the transactions to occur directly with the financial processor 260 (e.g., Visa). -
Financial processor 260 may send astatement 204 to provider 164 (and/or to consumer 95) detailing the financial debits and payments that have occurred. It may providestatement 204 within a secure container (not shown) if desired.Financial clearinghouse 200 may receive a portion or percentage of the debited funds to compensate it for the financial clearing services it has provided. -
FIGS. 20A-20F show an example financial clearing activity using a localelectronic money purse 262 maintained at the consumer'selectronic appliance 100. In this example,financial clearinghouse 200 may initially provideconsumer 100 with electronic money in the form of electronic cash by transmitting the electronic cash within one or moresecure containers 152.Financial clearinghouse 200 may automatically debit the consumer'sbank 206 a or other account to obtain these funds, and may do so at the consumer's request (seeFIG. 20A ). - The consumer's
electronic appliance 100 upon receiving the electronic funds may deposit them within anelectronic cash purse 262 it maintains within its protected processing environment 154 (e.g., as an “MDE” described in Ginter et al.) (seeFIG. 20B ). The customer'selectronic appliance 100 may use this locally stored electronic money to pay for goods and services consumed by the consumer. For example, a publisher 68 may provide awork 166, such as a book, film, television program, or the like, to the consumer's electronic appliance by transmitting it within one or moresecure containers 152 b. The consumer may operate his or herelectronic appliance 100 to open the container and access thework 166, allowing the consumer to use the work in the manner specified by its associated electronic controls (seeFIG. 20C ). - Assuming that the rights owner requires payment in return for usage of the
work 166, the consumer'selectronic appliance 100 may automatically debitelectronic purse 262 by the amount of payment required (in this case $5) (FIG. 20C ). Additionally,electronic appliance 100 may automatically generate ausage record 264 recording this usage event. Based on time and/or other event occurrence, the consumer'selectronic appliance 100 may automatically send anaudit trail 264—which may comprise a package of audit records transmitted at audit time or set of related records stored in the secure database—(or a summary of it to protect the consumer's privacy)—tofinancial clearinghouse 200 in the form of one orelectronic containers 152 c (seeFIG. 20D ). - Upon receiving the
usage record 262 and successfully storing it within itsown database 250,financial clearinghouse 200 may send arelease signal 242 within anelectronic container 152 d (seeFIG. 20D ). Thisrelease signal 242 may allow the consumer'selectronic appliance 100 to delete theusage record 264 it had previously maintained (seeFIG. 20D ). - The consumer may use the same or
different work 166 again to prompt generation of anadditional usage record 264; and to decrement theelectronic purse 262 by another usage charge (in this case exhausting the purse's contents) (seeFIG. 20E ). Exhaustion ofelectronic purse 262 may prompt the consumer'selectronic appliance 100 to again contactfinancial clearinghouse 200 to request additional funds (see request 228 ) and to also provide usage record 264 (both pieces of information are transmitted within the sameelectronic container 152 e in this example) (seeFIG. 20F ). -
Financial clearinghouse 200 may respond by transmitting additional electronic funds (after debiting the consumer's bank or other account), and may also provide another release signal allowing the consumer'selectronic appliance 100 to delete usage record 264 (seeFIG. 20F ). The money collected may be paid to the rights holders (after any appropriate reductions to compensate Commerce Utility Systems 90). - Payment Disaggregation
-
FIG. 21 shows an example financial clearing activity involving value chain “disaggregation.”Financial clearinghouse 200 in this example efficiently, reliably and securely supports payment disaggregation within a value chain.FIG. 21 shows a content creator, such as an author, delivering awork 166 to apublisher 168. The publisher publishes the work (for example, within an electronic book 166 ) and delivers it to aconsumer 95. In this example, theconsumer 95 pays $20 for his copy of thebook 166 . The consumer's payment is “disaggregated” or split up between theauthor 164 and thepublisher 168 based, for example, upon a contractual agreement. In this example, the publisher receives four of the consumer's $20 and the author receives the rest. - Disaggregation allows
financial clearinghouse 200 to automatically split up a consumers' payment among any number of different value chain participants. This is extremely useful in ensuring that all contributors to a product or service can reliably and efficiently receive compensation for their respective contributions. -
FIG. 22 shows howfinancial clearinghouse 200 can support the value chain disaggregation shown inFIG. 21 . In theFIG. 22 electronic example, thecustomer 95 may deliver his payment electronically tofinancial clearinghouse 200. This payment may be in the form of electronic currency packaged within a secureelectronic container 152 a, or it might be in some other form (e.g., reported usage information coupled with a preexisting authorization forfinancial clearinghouse 200 to debit the bank account of customer 95). -
Financial clearinghouse 200 may distribute appropriate shares of the customer's payment toauthor 164 andpublisher 168 in accordance with the agreement between the author and the publisher. What tellsfinancial clearinghouse 200 who should receive the disaggregated parts of the payment? In thisFIG. 22 example, thework 166 may pass from theauthor 164 to thepublisher 168 and from thepublisher 168 tocustomer 95 in electronic form within one or more secureelectronic containers 152. One or more electronic control sets 188 may be included within the same or different containers, these control sets being associated with thework 166 or other property. Control sets 188 may specify, among other things, the amount ofpayment customer 95 must supply in order to be able to use thework 166. -
Controls 188 may also specify and control how the customer's payment will be disaggregated among the other value chain participants. For example,author 164 may specify withincontrols 188 b the author provides, that she is to receive $16 for each copy ofwork 166 purchased by anultimate consumer 95. Because of the secure chain of handling and control provided in accordance with the virtual distribution environment (see the Ginter et al. patent disclosure),author 164 can be confident (to the degree required by the commercial priorities of the author and allowed by the strength of the overall system) thatpublisher 168,customer 95 and any other consumers or potential users ofproperty 166 will be subject to thiscontrol 188 b. Thepublisher 168 may add its own controls to the one specified byauthor 164, the publisher controls 188 c providing a $4 mark up (for example) that it will receive for the use of its brand name, distributing and marketing services. -
FIG. 22A shows a detailed example of how payment disaggregation can be performed within the customer's protectedprocessing environment 154 using control sets 188 as described in the Ginter et al patent disclosure. Ginter et al. teaches, inFIG. 48 and associated text, how a control set can implement and control an overall metering, billing and budgeting process within a user's protectedprocessing environment 154.FIG. 22A illustrates payment disaggregation based on one or more control sets 188 provided to a consumer's protectedprocessing environment 154. Each of the processing blocks shown inFIG. 22A may be in response to a user request (event) to open and access content. - In this particular example, a
metering method 275 is designed to pass an event tobilling method 277 whenever the consumer first uses a particular piece of content (meter event 275 could also or alternatively pass the event along each time the consumer uses the content to provide a “pay per view” functionality if desired). - The
billing methods 277 include twodifferent billing methods Methods author 164 could deliver billing sub-method 277 a, and thepublisher 168 could deliverbilling sub-method 277 b.Billing method 277 a writes information to a billing trail data structure specifying how much theauthor 164 is to be paid ($16 in this example).Billing method 277 b writes information to the same or different billing trail data structure specifying how much the publisher is to be paid ($4).Billing methods meter method 275, and may each write billing records to the same (or different) billing trail data structure. - In this example, a
budget method 279 may be delivered independently of thebilling methods Budget method 279 may write records to a budgettrail data structure 281 specifying (among other things) the payment disaggregation arrangement (i.e., the $16/$4 split between author and publisher) specified by thebilling methods billing methods author 164 and/or the publisher 168) might be sent to afinancial clearinghouse 200. Thefinancial clearinghouse 200 would perform payment and debit financial clearing as described above to result in the consumer's account being debited by $20, the author's account being credited by $16 and the publisher's account being credited by $4 (thus disaggregating the user's $20 payment between theauthor 164 and the publisher 168). Meanwhile, the billing trail data structure could be sent to ausage clearinghouse 300 specified by theauthor 164 and/or thepublisher 168.Usage clearinghouse 300 could analyze the billing trail data structure and letauthor 164 and/orpublisher 168 know what payments they might expect to receive from thefinancial clearinghouse 200. - Thus, in this example, electronic control sets 188 may specify or define, among other things: (i) rights available in a particular digital object, (ii) the cost of exercising such rights, and (iii) how payments for exercising rights will be divided (disaggregated) among rightsholders. This ability to define payment disaggregation in advance (before customers' payment methods and arrangements are activated) provides a high degree of efficiency and flexibility—since it can use the consumers' payment method, for example, to automatically direct parts of the consumers' payment to appropriate people who need to be compensated. Since the same
electronic appliance 100 that is being used to exercise the rights is also being used to help direct payments to various different value chain participants, a portion of the overall financial clearing process is effectively distributed throughout a large number of parallel computing resources. Because of the high degree of trustedness that can be provided by the system disclosed in the Ginter et al. patent specification, for example, rightsholders can release such control sets 188 into the stream of commerce with an appropriate that their payment arrangements will be carried out.Financial clearinghouse 200 can help to ensure that such disaggregated payments efficiently and rapidly reach their required destinations. - A protected
processing environment 154 at the site ofcustomer 95 securely enforces theaugmented controls 188 c, requiring total payment and/or payment authorization from thecustomer 95 before allowing the customer to accesswork 166.Controls 188 c may also specify whichfinancial clearinghouse 200 is to be used to handle payment processing, and what payment methods are acceptable while still givingcustomer 95 flexibility in terms of choosing a desired payment method. The customer's protectedprocessing environment 154 c may then automatically send appropriate payment orpayment authorization 190 a tofinancial clearinghouse 200 for disaggregation in accordance withcontrols 188 a—which may be the same controls (or a subset of those controls relating to payment disaggregation) specified by the author and/or the publisher. - Because the customer's protected
processing environment 154 c generatescontrols 188 a subject to thecontrols FIG. 22 ), these payment controls 188 a can be trusted to carry out the payment wishes of the author and the publisher and to reflect the payment dividing agreement between the two of them. The customer's protectedprocessing environment 154 c may send the customer's payment orpayment authorization 152 a and these payment controls 188 a tofinancial clearinghouse 200 within one or more secureelectronic containers 152 a. -
Financial clearinghouse 200 processes the payment orpayment authorization 152 a in accordance withcontrols 188 a, distributingpayment 152 b to the publisher andpayment 152 c to the author in accordance with the payment dividing agreement reached between the author and the publisher. Thus, for example,financial clearinghouse 200 might send $4 of electronic money to the publisher and $16 of electronic money to the author; or it might credit the bank or other accounts of the author and publisher in these amounts. Because this entire process takes place in a secure, trusted virtual distribution environment, each of the value chain participants can trust that they will in fact receive the payment they require and the process can be carried on automatically and electronically in a very efficient way that flexibly accommodates a wide variety of different business models and ad hoc relationships. -
FIG. 23 shows a further, somewhat more complex payment disaggregation example that adds a content distributor oraggregator 170 to the value chain. In this example, theconsumer 95's $20 may now need to be split three ways instead of two, with theauthor 164 still receiving $16, the publisher receiving only $3 and the content distributor/aggregator 170 receiving $1 for his or her efforts.FIG. 24 shows that the same basic arrangement shown inFIG. 22 can be used to accommodate the payment and other interests of this new value chain participant. -
FIG. 25 shows a further payment disaggregation example.FIG. 25 shows how disaggregation can be used to compensateCommerce Utility Systems 90 for their role in maintaining and managing the value chain. As described above, the DistributedCommerce Utility 75 provides very important services, such as financial clearing, usage auditing, permissioning, certification, etc. Entire businesses or industries may be based on efficiently and reliably providing these kinds of administrative and support services. Commerce Utility Systems need to be compensated for their own investments and efforts. One way for them to be compensated is to receive a small part of every transaction—“a piece of the tick.” The same payment disaggregation mechanisms described above can also be used to support such micropayments toCommerce Utility Systems 90. -
FIG. 23 shows one example in which theCommerce Utility Systems 90 receive 3% (e.g., $0.60 in the example shown) of the value of each transaction. Because electronic control sets 188 discussed above can be used to implement such micro-payment capabilities, any desired business arrangement or objective can be flexibly and efficiently accommodated. -
FIG. 26 shows that payment disaggregation can be used to disaggregate or split up a single consumer payment into an arbitrary number of different amounts (even recording amounts in different types of currencies for international trading purposes) at a variety of different destinations and using a variety of different payment mechanisms (e.g., credit cards, bank accounts, electronic money, etc.). -
FIGS. 27 and 28 show still additional payment disaggregation examples to further illustrate the flexibility in which DistributedCommerce Utility 75 can handle these and other arrangements. TheFIG. 27 example shows the customer's payment being split up among theauthor 164, thepublisher 168, theaggregator 170, arepackager 174 and two additional authors 164 a, 164 b supplying additional works incorporated within the electronic property being provided to the customer. TheFIG. 27 example is particularly applicable, for example, where therepackager 174 takes content from several sources on related matters and combines them into mixed source products such as multimedia combinations, “current awareness” packages, or newsletter-like publications for sale to interested parties. - For example,
repackager 174 might publish a newsletter on contemporary politics, and select an essay written byauthor 164 for publication along with two other works written by authors 164 a, 164 b for publication in the next newsletter issue.Authors 164, 164 a and 164 b may grantrepackager 174 the right to reformat and redistribute the work. Taking advantage of this reformatting right,repackager 174 may create the latest issue of the newsletter and distribute it in a secure electronic container for reading bycustomer 95. In this example, the secureelectronic container 152 a may contain at least four separately “delivered” sets of business requirements—one for each of the three works (as specified by each ofauthor 164, author 164 a and author 164 b) and one for the overall newsletter (as specified by repackager 174). Alternatively, the various works and/or the controls applying to them can be sent and delivered in independentsecure containers 152, and/or some or all of the works and/or controls may be located remotely. - To read the newsletter,
customer 95 openselectronic container 152 a. Suppose that the newsletter cost (as set by repackager 174) is $10 per issue. The customer's $10 payment or payment authorization is sent tofinancial clearinghouse 200, which resolves it to give each value chain participant compensation (for example,author 164 may get $1,publisher 168 may get $1,aggregator 170 may get $0.50, each additional author 164 a, 164 b may each get $1 and therepackager 174 may get the rest—all as directed by the applicable electronic controls. Thus, the repackager can be compensated for selecting appropriate articles on the topic and combining them in a single, easy to read publication, and may also bring its own brand name recognition as an indicator of overall quality, and may itself add unique content of its own creation. -
FIG. 28 shows a “superdistribution” example. One key rights holder concern is copyright infringement from “pass-along”—that is, illegal duplication and redistribution. This pass-along problem is serious in digital environments such as the Internet. The virtual distribution environment disclosed in the Ginter et al. patent specification and the administrative and support services arrangements disclosed in this specification fundamentally transform pass-along from a clear threat to an important opportunity. Because of the unique, automated, secure electronic management of value chain rights provided by the virtual distribution environment in the preferred embodiment, the consumer can be treated as a trusted member of the value chain. This makes possible a superdistribution model in which all customers become potential distributors. Since revenue from superdistribution incurs only minimal rights holder costs, superdistribution provides large profit potentials to holders of rights in successful works. - Looking at
FIG. 28 , assume thatcustomer 95 received a work fromaggregator 170 that she likes so much that she wants to pass it along to several friends and colleagues. Assuming thataggregator 170 has grantedcustomer 95 the right to redistribute the work, the customer may simply and easily be able to send a copy of the work to each of any number of additional potential customers 95(1) . . . 95(N). These additional people may knowcustomer 95 and believe that she would not be sending them something that was not potentially interesting and of high quality. In addition, the downstream customers may be able to read an abstract or see extracts of the work (e.g., view a trailer of a film, read the first chapter of a novel, or the like) without triggering payment. - After reading the abstract or watching the first five minutes of the film without cost, suppose six of the downstream customers 95(3)-95(8) agree to pay for the content at an example cost of $3.25 each.
Financial clearinghouse 200 may ensure that theauthor 164,publisher 168 andaggregator 170 each receive an appropriate share of the income (e.g., $7 to the author, $7 to the publisher and $8.75 to the aggregator). - Superdistribution makes possible any number of levels of redistribution. For example, suppose that of the six downstream customers 95(3)-95(8), three of them decide to pass the work along to each of six additional potential customers—so that eighteen additional people receive a copy. Since the redistributed works have associated control structures mandating the same payment arrangement,
author 164,publisher 168 andaggregator 170 each receive additional payments from each of these new customers. The snowballing effect of redistribution can continue in this manner across any number of consumers for a long time, and can dramatically increase revenue with minimal additional cost to the value chain members. - Payment Aggregation or Bundling
- Micro-fees and micropayments may become an important basis for content usage transactions. For example, a consumer might pay each time she views a particular work or uses a certain piece of computer software, or listens to a certain piece of music. Different payment arrangements can be flexibly provided so that the consumer might have the option of paying a larger initial fee for unlimited usage or smaller micropayments on a per use basis. In addition, micropayments may be the least burdensome and most practical way for
Commerce Utility Systems 90 to be compensated for their services. The ability to efficiently handle micropayments is thus very important in terms of supporting and enabling small charges. - Traditional financial payment mechanisms, such as credit cards, checks and the like, are unsuited to manage micropayments. These systems typically have levels of transaction overhead that impose severe burdens on business models based on many purchases below $5 each. For example, if it costs $0.50 to handle a payment transaction, it becomes uneconomical to handle payments for less than some value, perhaps $2 each because the cost of handling the payment is such a large portion of the transaction value, or even exceeds the payment itself. Hence, traditional financial payment mechanisms favor larger purchases and disfavor micro-purchases.
-
FIG. 29 shows how payment aggregation or bundling can be used to circumvent these concerns by reducing the number of individual financial transactions that need to be cleared, and/or by reducing the amount of messaging required to clear those transactions. The example payment aggregation shown inFIG. 29 may be performed on the consumer's ownelectronic appliance 100 within a protectedprocessing environment 154; or at a centralizedfinancial clearinghouse 200; or part of it can be performed at the appliance and part of it performed at the centralized clearinghouse. This payment aggregation process can aggregate or combine many small payments together into larger payments—or into a bundle of small payments that can be handled all at once. Such larger payments and/or bundles can be reported periodically along with other transaction data if desired to be reconciled and recorded by DistributedCommerce Utility 75. This ability to aggregate smaller payments has important beneficial effects in terms of increasing efficiency, reducing the number of individual transactions that need to be cleared, and decreasing messaging traffic overelectronic network 150. Of course, payment aggregation is not necessarily suitable for every transaction (some large, critical or risky transactions may require real time clearing, for example), but can be used in a large number of routine transactions to reduce the burdens onCommerce Utility Systems 90 and overall system 50. - In one variation on this concept, payment aggregation may preserve the amounts of each individual transaction to allow high degree of reporting granularity but may be used to trigger when reporting occurs (e.g., after X dollars have been charged, or Y number of transactions have occurred) so that many individual transactions can be bundled and transmitted/processed together. This type of aggregation is useful for reducing the number and frequency of individual messages traveling over
electronic network 150. In such instances, the reportingelectronic appliance 100 may report: (i) the sum of the aggregated individual transactions, or (ii) each of the individual transactions, or (iii) both, or (iv) a combination of the two. -
FIG. 29 shows that a consumer may use his or herelectronic appliance 100 for a number of different activities, such as, for example, reading a novel, watching a video program, obtaining and reviewing research results, interacting with and enjoying multimedia presentations, and home financial management such as checkbook balancing. A per use micro-payment may be associated with each of these activities. For example, the consumer might pay $1 to a publisher A and $1.50 to an author A each time the consumer accesses an electronic version of a work written by the author and distributed by the publisher. Suppose that the author A's works have become so popular that they have been made into films. The consumer might pay on a per-use basis to watch one of these films—paying the publisher A $5, the author A $3 and DistributedCommerce Utility 75 $0.50. - Payment aggregators 266 (which may, if desired, operate at the consumer's site within the protected
processing environment 154 provided by the consumer's electronic appliance 100) may aggregate payments to common entities, keeping a running total of the amount of money owed to publisher A, the amount of money owed to author A, and the amount of money owed to the DistributedCommerce Utility 75. This running total can be incremented each time the consumer triggers an additional payment event. The aggregated payment amounts can be periodically or otherwise reported tofinancial clearinghouse 200 or otherCommerce Utility Systems 90 based on certain time intervals (for example, weekly, monthly, or daily), the occurrence of certain events (for example, the consumer has exceeded her credit authorization and needs a new one, certain electronic controls have expired, etc.), and/or a hybrid of any or all of these techniques. -
FIG. 30 shows another example of payment aggregation across a number of consumer transactions. In this example, payments to the same value chain participants and using the same payment method are aggregated together to provide totals. This payment aggregation—which may take place at the consumer's site and/or within a financial clearinghouse—reduces the number of overall financial transactions that need to be cleared. This increases efficiency and throughput, and decreases the cost for handling each individual consumer transaction. -
FIG. 31 shows a still additional payment aggregation example in which aggregation is performed over transactions of a number of different consumers. For example, all transactions using a particular payment method pertaining to a particular provider could be aggregated by afinancial clearinghouse 200. Note that the payment aggregation techniques shown inFIGS. 29-31 do not necessarily result in loss of individual transaction detail. In other words, it is still possible for consumerelectronic appliances 100 to log and report detailed per-transaction information, and forfinancial clearinghouse 200 and/or theusage clearinghouse 300 to report detailed usage information on a transaction-by-transaction basis—even though individual transaction payments are being combined for more efficient payment processing and handling. This ability to separately handle and process more detailed and granular usage information while at the same time aggregating payments can provide a high level of auditing accountability without unduly burdening the payment handling mechanism. In some cases, loss of the detail records leads to savings on the clearinghouse side. They may be discarded, but there are advantages to keeping them around on the user's system and/or in a repository on aCommerce Utility System 90. If there is a billing dispute, for example, the local copy of the detail records might serve as useful evidence of what actually occurred—even if they were never transmitted to the clearinghouse. -
FIG. 32 shows how an examplefinancial clearinghouse 200 might be modified to include apayment aggregator component 268.Payment aggregator 268 could be used to aggregate payments incoming from a number of different consumerelectronic appliances 100 or other sources, and provide those aggregated payments to switch 200 for handling via third party settlement services, for example.Payment aggregator 268 could selectively aggregate only certain payments while permitting other payments to pass through directly to switch 200 for direct handling without aggregation. Payment aggregation can be based on a number of different factors. For example, payments can be aggregated based on consumer, provider, payment method, or a combination of any or all of these factors. This aggregation function can be performed entirely or in part withinconsumer 95 electronic appliances, or it could be performed centrally by acentralized clearinghouse 200. -
Usage Clearinghouse 300 -
FIG. 33 shows an example usage clearinghouseCommerce Utility System 300. Usage clearinghouses services and functions, in general, may collect, analyze and “repurpose” detailed, summary, and/or derived usage information about the use and/or execution of digital properties and/or digital processes. This information may include any information descriptive of electronic transaction activity. Usage clearinghouses and/or support services may, for example, provide and/or facilitate the following: -
- Independent auditing and reporting (which may be presented independently of financial settlement clearing services);
- General market researching;
- Negotiating, implementing, determining, and communicating levels of privacy and confidentiality with customers and value chain participants regarding such usage information; and
- Mass customized marketing and consolidated list selling, renting, or licensing.
- In more detail, usage clearing services in accordance with the present inventions may provide, for example, any combination of the following detailed features and/or functions:
-
- Compiling, aggregating, using, deriving and/or providing information descriptive of and/or otherwise relating to, use of a secure container(s), secure container contents, and/or any other content and/or any digital control process(es), wherein such information describes and/or otherwise relates to (a) one or more users of content and/or processes, (b) one or more classes of content, control processes, uses of content, and/or users, and/or (c) one or more recipients of such usage information.
- Enabling tracking and reporting of content and/or process control usage and/or processing information at a highly granular (e.g., detailed) level.
- Can collect, aggregate, analyze, summarize, extract, report, distribute, rent, license, and/or sell usage information.
- Employing information derived from user exposure to content, such as advertising, information materials, entertainment, training materials, business productivity software applications, etc., and securely supplying at least a portion of such derived information and/or related to such information, through the use of VDE mechanisms in the preferred embodiment, to usage information aggregating and/or analyzing clearinghouses, and where such clearinghouse securely provides at least a portion of said usage information, or information derived from said information to at lest one further clearinghouse and/or value chain rightsholder; and wherein said clearinghouse may securely provide differing derived usage information to different other parties who have a clearinghouse role or other rightsholder role.
- Using the “information exhaust” audit trails created by, and/or derived from, user protected processing environment metering based on a variety of different techniques (for example those disclosed in Ginter, et al.).
- Ability to collect and analyze detailed usage information such as the number of times a digital property or any portion of a property has been opened, extracted from, embedded into, or executed; or the length of time a value chain participant has used a property such as an interactive game or multimedia presentation, computer software, or modules or subparts of such products.
- Providing a variety of repurposing capabilities for usage information arriving from consumers or other secure protected processing environments.
- Providing independent third party auditing capabilities useful, for example, for archiving and non-repudiation.
- Providing information based upon usage auditing, user profiling and/or market surveying related to use of one or more secure containers and/or content and/or VDE managed process control in the preferred embodiment.
- Providing neutral, trusted third-party audit usage aggregating and reporting services for rights holders, consumers, and/or other value chain participants and/or interested parties such as governmental bodies (information for taxation, law enforcement, commercial surveying and statistics, etc.).
- Providing audit opportunities in conjunction with rules and controls rights and permissions clearing (for example, to provide a report about which rules and controls permissions and rights, were exercised, for example by whom, for what, and when—thereby tying actual user activity back to specific permissioning and rights and/or rules and controls templates).
- In the preferred embodiment, providing standardized and custom reporting and analyzing based upon VDE rules and controls and produced and delivered in VDE containers to each and/or any one or more grouping of content creators, content distributors, industry analysts, trade associations, and any other stakeholders and value chain participants, and/or any other interested parties such as government statisticians, regulators, and/or taxation authorities.
- Providing any combination of raw, refined, summarized, derived, and aggregated trusted data reporting for the support of plural business models within any value chain, and/or across and/or plural value chains.
- Distributing, to value chain participants and other parties within or outside of the electronic community, usage information separately from and/or with financial settlement clearing services.
- Supporting privacy and confidentiality controls fully protecting rights of all value chain participants interests related to usage information, including, for example, rights inherent in VDE chain of handling and control managed business models.
- Can accommodate privacy concerns, e.g., to not reveal more information than a consumer or value chain content distributor, aggregator, repurposer, or other user of an electronic device that employs, in the preferred embodiment, VDE for secure, managed content or other process control, authorizes, and, for example, to inform such authorizing user of what kind of information is being gathered and/or cleared).
- Can be trusted to automatically, based at least in part upon rules and controls, conceal (e.g., encrypt), remove, and/or transform one or more portions of confidential or proprietary usage information before further processing of such information or delivering of such information to any one or more additional parties, including any further usage clearinghouse(s), thereby efficiently protecting privacy and confidentiality, including protecting business trade secret information.
- Protecting key business model information from prying eyes of other interested parties, and/or from inadvertent disclosure to other interested parties and/or to the public, thereby laying the foundation for truly trusted, commercial networks.
- Allowing value chain participants, including, for example, commercial publishers and distributors, and/or consumers and service and/or product provider organizations, to negotiate the level of detail of usage information to be conveyed to any given value chain rightsholders, and wherein such level of detail may differ according to who the specific receiving parties are and the specific type and/or subtype of usage information, and where plural, differing levels of detail for differing portions of such usage information may be provided to a given usage information receiver and/or as a given deliverable, and where such determination of detail is, at least in part, determined by the rights of a given party at least in part described by VDE rules and controls information in the preferred embodiment.
- Allowing consumers and organizations to negotiate the level of detail of information conveyed to value chain rightsholders.
- Allowing consumers or other value chain participants—creators, publishers, distributors, repurposers—to specify and/or negotiate the level(s) of detail, aggregation and/or anonymity they desire with respect to usage information regarding their usage of any given piece of content, content class, specific process, process class, and/or payment requirement (e.g., anonymity, and/or the maintenance of privacy related to some or all usage details, may require a payment premium to offset the loss of the value of such information).
- Allowing information consumers and/or other value chain participants to customize their “information exhaust” and to set rules and controls for how they wish to have their usage information aggregated, or otherwise used—subject to the competing requirements of rightsholders to receive information they are entitled to and/or receive information that user and rightsholders mutually, electronically agree may be provided to rightsholders. Users and/or one or more rightsholders may have the right to specify limits upon (e.g., use VDE chain of handling and control), and/or describe specific usage information that may or must be to be delivered to, one or more other rightsholders.
- Supporting substantial value chain participant control over what kind of value chain participant usage information is accumulated, who can access which information and how such information may be used, how such information is gathered and processed, and the extent that usage records are tied to a specific value chain participant or organization.
- Securely using containers (e.g., using VDE secure containers in combination with VDE protected processing environment and communications security capabilities as described in Ginter, et al.) in any step, part, and/or process of providing secure usage clearing services.
- Supporting providing discounts, subsidies and/or coupons to value chain participants, for example to consumers, distributors, repurposers, etc., in exchange for usage data or more finely grained usage data (for example, ameliorating privacy concerns in some contexts).
- Generating and supplying to interested parties marketing research and reporting and consolidated marketing lists (for targeted mailing, direct sales, and other forms of targeted marketing. Such materials are generally analogous to independent magazine and newspaper circulation audits, television audience ratings reports, and/or commercial targeted marketing lists, but generating in a highly efficient, distributed, and secure electronic environment. Such materials, when desired, can be provided with important new forms of detail (e.g., viewing, printing, extracting, reusing, electronically saving, redistributing, etc.), with far greater granularity of information, and with customized, selective reporting of materials based upon recipients requests, payments, rights, and/or conflicts of interest with one or more parties who have a rightsholder's interest in one or more portions of the underlying information.
- Using detailed usage information to automatically generate classification hierarchies, schemes, groups, and/or classes, and automatically assigning individuals, groups of individuals, organizations, groups of organizations, digital and/or analog content or groups of digital and/or analog content to one or more classes derived from usage data created, collected, transmitted, in conjunction with at least one secure container and/or VDE in the preferred embodiment.
- Supporting advertising and marketing, including supporting efficient value chain automation of the delivery of such services, such as automatic targeting or delivery of advertising and/or other marketing materials to defined sets (e.g., one or more classes) of consumers, professionals, employees and companies, in which the sets may be defined by self-selection, usage data, usage data profiles, or by any other means, and wherein said sets may be comprised of any one or more value chain participants (e.g., creators, consumers, distributors, service providers, web sites, distributed clearinghouses) and wherein said one or more participants may receive differing, customized materials, and wherein said receiving participants may redistribute such materials, if authorized by rules and controls, and where such participants may receive credit, coupons, monetary payment, and/or other forms of consideration for such redistribution, and where such redistribution may take the form of directing some or all of such received materials to one or more other parties at least in part based upon self-selection, usage data, usage data profiles, or by any other means, and wherein all such processes may be securely managed (e.g., supported) by internodal VDE chain of handling and control in the preferred embodiment.
- Determining payments and/or other consideration due to rights holders from advertisers based on value chain user exposure to advertising and at least in part, securely automating the distribution of portions of such consideration among plural parties having rightsholder interests related to the content and/or processes that served as a basis for determining such consideration.
- Supporting superior, targeted market segmentation and the design of more suitable information products and business models based on direct, more specific and detailed usage data and on customer and value chain preferences implied, explicit, and/or automatically derived from usage information, user profiles, class(s) identification information, etc.
- Enabling “private” usage clearinghouses (a usage clearinghouse controlled and/or operated by an organization) to acquire certain detailed usage information and where such usage clearinghouses may perform usage analysis and/or other processing of such information and provide to more centralized and/or other party clearinghouses and/or other value chain participants, selectively limited usage information (e.g., employing higher level abstractions, summary information, restrictions on and/or manner of use of usage information—viewing, printing, saving, redistributing, etc.) for some or all of such usage information, and where differing limitations on such usage information may be applied to usage information derived from usage of differing classes of content, processes, users, and/or user groups, and where such limitation capabilities provide important additional protection of the confidential trade secret information of a company or other organization by concealing the detailed nature of certain internal activities, and where there may be a requirement by one or more other parties in a value chain for payment and/or other consideration in return for the retention of such detailed usage information.
- Enabling organizations to employ private usage data clearinghouses on corporate Intranets, where such clearinghouses are integrated with organization document workflow and/or data warehousing systems.
- Receiving, with private usage organization (e.g., corporation, government agency, partnership, or any other organized operating entity) clearinghouses, usage data from electronic appliances within the organization, and aggregating records into detailed reports for internal use, and/or reporting raw, detailed data for internal use, but only aggregating usage data into summary reports for external distribution, for example, to rights holders and/or other value chain participants, and/or one or more commercial clearinghouses, and where detailed data for internal use is, in the preferred embodiment, protected as VDE protected content and access or other use of such content is limited to specified parties and/or in specified ways based, at least in part, on the specified parties securely maintained electronic identity, including, for example, any relevant party class identification information (e.g., member of a certain research group, senior executive officer) that has associated specific information usage privileges.
- Identifying and supplying, through private usage clearinghouses, usage related information providing important value usage data for allocating internal organization resources, directing research, and other important business purposes.
- Distributing usage clearing (e.g., for efficiency and/or other reasons).
- Distributing usage clearing functions across a network or other system (for example, every consumer and/or other value chain participant node is potentially a distributed usage clearing service at least in part initiating its own, secure usage clearing, and where such participant node may communicate usage information directly to one or more other participants) and, in the preferred embodiment, in accordance with rules and controls and other VDE techniques as described in the Ginter, et al patent specification.
- Hierarchically organizing usage clearinghouses, at least in part to protect confidentiality at each level in the hierarchy.
- Granting authority and/or providing services to, or in conjunction with, one or more distributed usage sub-clearinghouses whose operations may be located logically and/or physically elsewhere, such as within a company or government agency and/or within one or more jurisdictions and/or serving subsets of the overall business focus area of a senior usage clearinghouse.
- Distributing and/or otherwise authorizing usage clearing functions across a system or network, for example, where every consumer and/or certain or all other value chain participant protected processing environment (node) can potentially support a distributed usage clearing service, and function in the context of the overall Distributed Commerce Utility.
- Initiating its own, secure usage clearing transactions directly with one or more other participants.
- Providing interoperable operation with one or more other participant interoperable nodes, using any or all activities employing Virtual Distribution Environment techniques.
- Use of clearinghouse to generate usage information used, at least in part, in the design and/or marketing of products and/or services related to the products and/or services whose usage is described by such usage information.
- May be organized hierarchically, peer-to-peer, or in a combined mode where responsibility for usage clearing may be distributed in differing fashions for differing commerce models and/or activities and/or value chains, and where certain one or more parties may be, for example, hierarchically more senior to other parties in one or more instances, and hierarchically a peer or less senior in one or more other instances, that is, the relationship among participants is programmable and may be set (and later modified) to represent one or more desired usage clearing arrangements for given commerce activities, value chains, or models.
-
FIG. 33 shows anexample usage clearinghouse 300 from a process point of view.Usage clearinghouse 300 in this example collects, analyzes and reports on the usage of digital information including, but not limited to, the usage of digital content.Usage clearinghouse 300 in this example performs the following functions: -
-
Data collection 314, -
Database management 316, -
Privacy control 318, -
Secure auditing 320, -
Secure reporting 322, -
Data aggregation 324, - Advertising and
marketing 326, -
Usage analysis 328, -
Replication 330, and -
Propagation 332.
-
- Communication between
usage clearinghouse 300 and otherelectronic appliances 100 may be by way of secureelectronic containers 152, if desired. As explained in more detail in connection withfinancial clearinghouse 200,usage clearinghouse 300 may receive the containers in real time and/or on an asynchronous receipt basis. In theusage clearinghouse 300, the real time requirement may involve advertising or ratings information that loses some or all of its value as a function of time (e.g., if certain ratings information isn't delivered by a particular time, it may no longer be relevant in a given market analysis; or if advertisers don't receive usage information promptly, they may not be able to respond to customer tastes as effectively). Another case may involve a required delivery of usage information (e.g., a user on vacation returns to find their required audit date and grace period has expired, and their use of certain properties is prohibited until the audit is performed). The asynchronous delivery case would still be preferable in some instances for the same reasons as above in connection withfinancial clearinghouse 200. -
Data collection function 314 is used to gatherusage records 302 in addition to other types of information, such as, rules and controls 188 (which may provide information concerning prices and permissions, for example), financial statements 240 a, detailedfinancial reports 240 b, and requests for usage information and/oranalysis 336.Data collection function 314 may closely interact withdatabase management function 316—resulting in various types of information being stored and maintained in a usage or other database. Replication andpropagation functions database 316 with other databases (for example, maintained by other usage clearinghouses 300) and/or to provide a distributed database across a number of secure network protected processing environments or electronic appliances. -
Data aggregation 324 andanalysis 328 may be used to analyze the contents of data collected bydata collection function 314 and/or stored withindatabase 316, enablingusage clearinghouse 300 to performauditing 320 and/or reporting 322.Privacy control 318 may be used in conjunction withreporting function 322 to expose only certain information and not others to third parties—thereby protecting the privacy and confidentiality concerns of consumers for whom usage information has been collected. Such pendingcontrol 316 can be expressed in rules associated with the containers in which the information arrived. -
Reporting function 322 may generate a variety of usage auditing reports 304. In addition,usage clearinghouse 300 may be used to provide advertising and/or marketing support 326 (e.g., to help target advertising to demographically appropriate consumers and/or to provide market and advertising research). Thus, in one example,usage clearinghouse 300 may itself produce and/or distributeadvertising 340 for viewing by certain targeted consumers or deliver such advertising on behalf of others.Usage clearinghouse 300 may also generate customizedresponses 342 in response toinformation requests 336, and can also generaterelease signals 344 authorizingelectronic appliances 100 to delete and/or make “no longer pending” the usage information from local databases once associated audit records have been transferred tousage clearinghouse 300 and that transfer has been confirmed.Consumer 95 may have an interest in keeping rather than deleting this usage information after it has been “released” (e.g., as a matter of curiosity, to monitor others' behavior (employees, children, etc.)) -
Usage clearinghouse 300 may generate itsown controls 188 b to, for example, govern how usage information, market analysis information or other information can be used by others. For example,usage clearinghouse 300 might be prepare a proprietary report or analysis that it provides to third parties in return for compensation.Usage clearinghouse 300 may insist that the people that they provide the report to do not redistribute the report to anyone else.Usage clearinghouse 300 may enforce this requirement electronically by delivering the report within one or moreelectronic containers 152, and associatingelectronic controls 188 b with the report. Theseelectronic controls 188 b could enforce the “no redistribute” prohibition along with other conditions grants and/or limitations (e.g., the report can't be modified, the report can be printed and viewed, the report may be excerpted, etc.). - As mentioned above,
usage clearinghouse 300 may also receive financial statements 240 a and/or detailedfinancial records 240 b or other financial information—and may generate its own financial statements 240 c and/or detailed financial records 240 d. For example, theusage clearinghouse 300 might provide a service to content providers in which theusage clearinghouse 300 receivescontrols 188 a from content providers similar to the controls delivered toconsumers 95. Based on a comparison of these data,usage clearinghouse 300 might make estimates as to the amounts of money that the content providers should expect to receive fromfinancial clearinghouses 200.Usage clearinghouse 300 might thus provide an independent audit function-serving as a double check onfinancial clearinghouses 200 and providing a fraud detection function (e.g., people submitting usage records that don't have associated payments or otherwise incorrect payment amounts may be detected by the usage clearinghouse 300). In addition, thecontrol 188 might represent closed models that content providers are considering implementing, andusage clearinghouse 300 might then offer a service in which it runs a comparison against the usage data it actually collects to build a model of what the financial results might look like if the content provider actually instituted the proposed model. -
FIG. 34 shows an example architecture ofusage clearinghouse 300. In this example,usage clearinghouse 300 includes asecure communications facility 346, a database andtransaction processor 348, anauthenticator 350, anauthorization checker 352 and adata aggregator 354.Usage clearinghouse 300 architecture may be based on the rights operating system architecture shown inFIGS. 12 and 13 of the Ginter et al. patent disclosure. -
Secure communications 346 provides communications with a variety ofelectronic appliances 100 overelectronic network 150 viasecure containers 152 in this example. Database andtransaction processor 348 in this example performs most of theFIG. 33 functions. Anauthenticator 350 may be used to authenticate consumers and/or data, anauthorization checker 352 may be used to check authorizations, and adata aggregator 354 may be used to perform thedata aggregation function 324.Authenticator 350 andauthorization checker 352 perform authentication functions as described in the Ginter et al. disclosure in connection with secure electronic appliances and protected processing environments. -
FIG. 35 shows an example overall usage clearing process. In this example, aprovider 164 provides a digital property to consumers 95(1), 95(2), 95(3). For example,provider 164 might provide a novel orother work 166 to each of theconsumers 95 withinelectronic containers 152. One or more control sets 188 may be associated with the work 166 (and may, in one example, be delivered within the sameelectronic container 152 used to deliver the work 166). Thecontrols 188 may specify that certain types of usage information must be gathered in the form of an audit trail, and that the audit trail must be reported based on certain time and/or other events. - Because
container 152 can only be opened within a secure protectedprocessing environment 154 that is part of the virtual distribution environment described in the above-referenced Ginter et al. patent disclosure,provider 164 can be confident that the required audit trails will be generated and reported as he or she instructs. Asconsumers 95 use theproperty 166, theirelectronic appliances 100 automatically gather and store the usage information in the form of audit trails 302. Then, upon the occurrence of a specified event (e.g., once a month, once a week, after a certain number of uses, etc.), the consumerelectronic appliances 100 sendaudit trail information 302 within digital containers tousage clearinghouse 300. -
Usage clearinghouse 300 collects theaudit trail information 302, may store it in itsdatabase 316, and analyzes the audit trail information to generate areport 304 which it may send toprovider 164 within a furtherelectronic container 152. -
Provider 164 automatically receives secure information auditing the amount his or her work has been used and how it has been used, withusage clearinghouse 300 relieving the provider from having to collect or analyze this detailed usage information. In addition,usage clearinghouse 300 may serve to protect the privacy ofconsumers 95 by revealing only summary details authorized by them (for example, how many consumers have used thework 166 but not their names or addresses). This confidentiality function would be more difficult or problematic ifprovider 164 attempted to analyzed detailed usage records himself or herself. -
FIG. 36 shows a more detailed example usage clearing process involving two different usage clearinghouses 300(1), 300(2). In this example, aprovider 164 delivers awork 166 directly toconsumers 95, and also todistributors 168 that may redistribute the work to the consumers. Thecontrols 188 associated with the distributedcontent 166 may specify that usage clearinghouse 300(1) is to collect and analyze information relating to the usage of thecontent 166 directly distributed bycreator 164, and that another usage clearinghouse 300(2) is to collect and analyze usage information pertaining to the usage of thework 166 as distributed bydistributor 168. Alternatively, usage clearinghouses 300(1), 300(2) may gather different types of usage information pertaining to the same electronic property 166 (for example, one usage clearinghouse might gather information pertaining to “pay per view” usage, whereas the other usage clearinghouse might gather usage information for all one-time purchases). Usage clearinghouses 300(1), 300(2) may each issue reports 304 tocreator 164 and/ordistributor 168 and/orconsumer 95. -
FIG. 37 shows how ausage clearinghouse 300 can be used in combination with afinancial clearinghouse 200. In this example, a consumer'selectronic appliance 100 may send: -
- to
usage clearinghouse 300,audit trail information 302 pertaining to usage of electronic content, and - to
financial clearinghouse 200, usage and paymentaudit trial information 228 pertaining to financial clearing activities.
- to
- If desired,
usage clearinghouse 300 andfinancial clearinghouse 200 may be operated by the same business (in this case, both usage and financial audit trail information could be sent within the same electronic container 152). The usage clearing functions performed byusage clearinghouse 300 may operate in parallel with the financial clearing functions performed byfinancial clearinghouse 200 to support both detailed usage reporting and efficient financial clearing. -
FIG. 38 shows another example usage clearing operation based on media and/or advertising content placement. Consumers 95(1), 95(2), 95(N) may subscribe to variousinformation distribution services information distribution services 170 may distribute program material and advertisements (commercial content) produced bycontent providers 164.Consumers 95 consume the distributed content, and theirelectronic appliances 100 gather and report associated usage data to usage clearinghouses 300(1), 300(2) . . . - The
usage clearinghouses 300 may perform demographic analysis on the received usage data and, based on this demographic analysis, target particular ads for othercommercial content 164 toparticular information services 170. For example,information service 170A might distribute program material andcommercial content 164 of interest to runners and others with physical fitness interests. Usage clearinghouse 300(1) might analyze the usage data provided by theconsumers 95 who subscribe to and view this type of information. Usage clearinghouse 300(1) is thus in a unique position to place ads in other commercial and non-commercial content that might be of interest to the same interest group. Similarly,information service 170B might specialize in broadcasting information of interest to car enthusiasts. Usage clearinghouse 300(2) may gather usage data about the usage of this type of information—and is thus in a unique and well placed position to distribute and target advertisements, commercial and non-commercial content to this group of consumers. -
FIG. 39 shows an additional example usage clearing operation that may be performed byusage clearinghouse 300. In this example,usage clearing house 300 may be authorized byrights holders 164 to offer discounts based on the amount of usage information aconsumer 95 is willing to disclose. This can, for example, be done withcontrols 188 for the property by selecting from among control sets and/or entering into an electronic negotiation (see Ginter et al.FIGS. 76A and B). A rights holder might premeditate this as a general rule for their property—or given rights andpermissions clearinghouses 400 could be authorized to deliver these control sets (e.g. based on their special position as collectors of particular categories of usage information). - As one example, the consumer's electronic appliance might be a personal computer, and
rights holders 164 who distribute computer software may be interested in knowing what software programsconsumer 95 is using in addition to the ones they themselves are distributing.Consumer 95, on the other hand, may not want to reveal this detailed information about all of the software programs that are present on his or her personal computer. - As another example, digital
broadcast rights holders 164 may want to know about every broadcasted program thatconsumer 95 watches, whereas the consumer may not want anyone else to know the kinds of programs he or she is interested in. -
Usage clearinghouse 300 can effectively accommodate these countervailing interests by offering consumer 95 a financial incentive for more full disclosure but giving the consumer a choice. - In this example,
rights holder 164 distributes electronic content and associated controls toconsumer 95. The controls may specify options for revealing usage information. The consumer may choose: -
- to pay full price and keep all usage information other than that essential for insuring payment absolutely secret;
- to allow limited usage disclosure in return for a small discount on price; or
- to take advantage of a big discount in return for allowing full disclosure of usage information.
- Some secretive consumers may want the outside world to know as little as possible about their usage habits and will be willing to pay full price to protect their privacy. Other consumers may not care what the outside world knows about their usage habits, and will want to take advantage of large discounts based upon more full disclosure. Any number of such option levels may be provided, allowing the consumer to, for example, select precisely what kinds of information are revealed and which ones are kept secret. Because usage data is being collected within a secure protected
processing environment 154 that is part of the consumer'selectronic appliance 100, the consumer can be confident that the usage data will be securely handled and that unauthorized disclosure will not occur without his or her consent. - Based, for example, on one or more control sets 188 provided to the consumers' protected
processing environment 154 and/or the consumer's selection made possible through such control sets, the consumer's protectedprocessing environment 154 could reveal no (or minimal) usage information, limited usage information or full usage information, tousage clearinghouse 300.Usage clearinghouse 300 can then freely analyze the limited and full usage information it collects, providing reports and analysis torights holders 164 and to other third parties such as market researchers, brokers, advertisers, auditors, scientists and others. - Rights and Permissions Clearinghouse
-
FIG. 40 shows an example of a rights and permissions clearinghouseCommerce Utility System 400. Rights and Permissions clearinghouse services may perform any combination of the following overall functions: -
- Registering digital objects and associated permissions, prices and/or other permitted and/or required operations supporting the execution of consequences for performing and/or failing to perform such operations;
- Providing pre-approved permissions on demand in accordance with specified circumstances and/or other requirements such as class(s) of permission requester, fulfillment, or ability to fulfill, payment requirements, etc.;
- Securely and efficiently performing electronic copyright registration with the appropriate agency for one or more countries and/or other jurisdictional units; and
- Reporting functions.
- In more detail, rights and permissions support services in accordance with these inventions that may include, for example, some or all of the following functions and features:
-
- Identifying, distributing and verifying specific property rights and/or other business rules and controls along a digital electronic value chain.
- Providing object registry services and rights, prices and/or other control information for registered objects.
- Assigning to each digital object at least one identifying number and/or name in accordance with its own numbering and/or naming scheme and/or in accordance with one or more numbering and/or naming schemes defined by one or more other organizations, associations (e.g., standards consortiums), companies, and/or agencies (e.g., governmental regulatory bodies).
- Receiving authority from secure chain of handling and control embodied in electronic control sets.
- Securely providing permissions (e.g., rules and controls based descriptions of permitted operations and associated consequences such as prices) for digital properties that have been registered and supporting automated association of such registered properties with rules and controls sets (e.g., updating of rules and controls, employing preset templates based upon classes of properties, etc.), that may be provided, for example, at least in part remotely and securely downloaded to the registering site during, or as a result of, such registration.
- Allowing rights holders in digital content to determine and flexibly define and securely provide to one or more rights and permissions clearinghouse ways in which they want their intellectual property products (for example, VDE protected digital properties) to be used and not used, and any consequences of such use and/or misuse.
- Providing VDE supported capabilities to distribute and manage rights and business rules (including pre-approved and other permissions) along an ad hoc electronic value chain, where such rights and business rules are persistently supported.
- Providing digital object permissions on demand to people authorized to use a digital object.
- Can provide different terms based on different permissions securely associated with one or more combinations of classes of users (e.g., different age groups, jurisdictions, business capabilities, consumers, creators, providers, partners, government, non-profit organizations, educational organizations, organization membership, etc.).
- Providing rights holders with assurances that the terms they set are being adhered to by a potentially diverse and distributed value chain participant base.
- Can provide controls that do not include all possible permissions and/or distribute further, required and/or desired permissions upon request on an ad hoc and/or pre-planned basis according to the requester's rights (class and/or individual), for example, allowing rights holders to elect to distribute only the most frequently used permissions associated with a particular digital property, and allowing appropriate parties to obtain new permissions in accordance with the rights holder's model.
- Refreshing expired permissions upon request and/or upon an automated recognition of the expiration of such rights through the use of clearinghouse database mechanisms and the automated provisioning and/or messaging to provide such permissions and/or notify, in the preferred embodiment, a VDE value chain participant of the need to acquire such permissions (notify such user, for example, before the user is actively attempting to use associated information and/or electronic control processes and thereby avoiding user frustration and inefficiency).
- Using secure containers such as those described in et al., in any step, part, or process of providing secure rights clearing services.
- Creating, storing, distributions, and receiving rights and permissions “templates” allowing rights holders to efficiently and adequately specify rights, conditions and consequences, (e.g., compensation) to be associated with operations related to the use of their digital properties (and/or the use of VDE process controlled electronic events).
- Templates can directly correspond to digital control sets associated with properties, content users, user classes, and/or other digital information and/or physical or virtual sites and/or process control for event and event consequence governance.
- Templates can be self-executing.
- Templates can apply to multiple objects/instances.
- Templates can be delivered independently of any digital objects they may be associated with.
- Templates are extensible to anticipate new operations and scenarios, including, but not limited to new payment methods, pricing models and pricing levels, and new permissions.
- Templates can flexibly recognize all kinds of digital rights including, for example, distribution and transmission and/or retransmission rights.
- Templates can flexibly recognize individual identity and/or class identity rights.
- Different templates can apply to different content and/or process control arrangement property types.
- Plural templates can apply to the same property and/or process control arrangement.
- Rights and permissions clearinghouse(s) may maintain superset templates, permitting value chain participants and/or hierarchically sub-clearinghouses to modify one or more of such superset templates to create templates employing a subset and/or extended set of said one or more superset templates.
- Templates can be completed in a number of different ways using, for example, a graphical user interface and/or a rights management language.
- Template “applications” can be created and/or modified through the use of topographical, schematic, directly editable graphical representation of value chain rules and controls, where such rules and controls and value chain relationships are represented through the display of, for example, mixed iconic, positional, flow diagram, and textual information, and wherein rules and controls are implemented, for example, through the use of a rights management language, and wherein, for example, elements or higher level representation of such elements of the rights language may directly correspond to graphical representation components.
- Multiple value chain participants can contribute to and/or modify templates and/or contribute and/or modify different templates applying to the same digital information.
- Users can select between differing templates applying to the same digital information, including, for example, digital information describing and/or governing control processes (e.g., event management information) managed through, for example, secure VDE chain of handling and control.
- Distributing rights clearing functions across a network or other system (for example, every consumer and/or other value chain participant node is potentially a distributed rights clearing service at least in part initiating its own, secure rights clearing, and wherein said participant node may communicate rights information directly to one or more other participant, interoperable clearing nodes, in the preferred embodiment, all activities employ VDE techniques as appropriate and as described in the Ginter, et al. patent specification).
- Granting authority and/or providing services to, or in conjunction with, one or more distributed rights sub-clearinghouses whose operations may be located logically and/or physically elsewhere, such as within a company or government agency and/or within one or more jurisdictions and/or serving subsets of the overall business focus area of a senior rights clearinghouse distributing and/or otherwise authorizing rights clearing functions across a system or network, for example, where every consumer and/or certain or all other value chain participant nodes can potentially support a distributed usage clearing service initiating its own, secure rights clearing transactions and function in the context of the overall clearinghouse network, including, clearinghouse interoperation with one or more other participants interoperable nodes, and as elsewhere in this list, all activities employing, for example, VDE techniques as appropriate.
- One or more rights may be automatically provided to a participant based at least in part upon some aspect of content and/or process control usage, and such provided one or more rights may be supplied, for example, as a promotional component providing coupons in compensation for certain usage (e.g., purchasing) profile which may be directly ascertained from usage information or may be derived from a weighted formula involving a variety of variables.
- May be organized hierarchically, peer-to-peer, or in a combined mode where responsibility for rights clearing may be distributed in differing fashions for differing commerce models and/or activities and/or value chains and where certain one or more parties may be, for example, hierarchically more senior to other parties in one or more instances and hierarchically a peer or less senior in one or more other instances, that is the relationship among participants is programmable and may be set (and later modified) to represent one or more desired rights clearing arrangements for given commerce activities, value chains, or models.
-
FIG. 40 shows an example rights andpermissions clearinghouse 400 from a functional viewpoint. In this example, rights andpermissions clearinghouse 400 may perform some or all of the following four main functions: -
- Object registration. Rights and
permissions clearinghouse 400 registers digital properties and their associated permissions and prices. - Permissions on demand. In response to queries, rights and
permissions clearinghouse 400 providespermissions 188 together with associated prices in secureelectronic containers 152. The permissions controls 188 may be provided independently of the content. - Negotiated permissions. In response to queries and requests, the rights and
permissions clearinghouse 400 negotiates permissions and/or prices on behalf of rightsholders who have delegated this responsibility to the rights and permissions clearinghouse. The rights andpermissions clearinghouse 400 may also be an intermediary in the negotiations between rightsholders and rights users. Rightsholders and rights users may negotiate among themselves and report the results of those negotiations to the rights and permissions clearinghouse. - Reporting. Rights and
permissions clearinghouse 400 can provide reports to augment reporting performed byfinancial clearinghouses 200 and/orusage clearinghouses 300.
- Object registration. Rights and
- In this example, rights and
permissions clearinghouse 400 may provide some or all of the following functions: -
- Permission creating, updating or changing 408,
-
Permission distribution 410, - Database management 412,
- Template definitions and/or
management 414, -
Negotiating permissions 416, - Reporting 417,
-
Replication 418, -
Registration 419, and -
Propagation 420.
- The rights and
permissions clearinghouse 400's primary task of object registration is performed by database management 412. In this connection, rights andpermissions clearinghouse 400 may receive control sets 188 andcorresponding object identifications 422 within the same or differentelectronic containers 152, and then “register” this information in a database 412 for later reference. Rights andpermissions clearinghouse 400 may assist rights holders in defining control sets 188 specifying rights and permissions relating to the rights holder's electronic properties by providing atemplate function 414.Registration process 419 and database 412 may register control sets 188 in addition to objects orproperties 166. - Rights and
permissions clearinghouse 400 database function 412 anddistribution function 410 may be used to distribute permissions on demand in response torequests 402, and may also be responsible for the task of distributing (via distribution function 410) all permissions relating to a particular property. Since permissions and/or prices may expire or change, rights andpermissions clearinghouse 400 can also be responsible for updating control sets 188 specifying previously issued permissions and/or prices and distributing those updated control sets. - Rights and
permissions clearinghouse 400 may also provide areporting function 417, issuingreports 406 pertaining to the permissions and/or prices it has issued or distributed, for example. In this example, the operation of rights andpermissions clearinghouse 400 provides audit opportunities, i.e., a channel through which to attach usage information. Such audit operations (which may, for example, be provided by integrating rights andpermissions clearinghouse 400 functions withusage clearinghouse 300 functions) could be used to create integrated reports about which permissions were provided and which permissions were exercised—very valuable information for market research and business consequences as well as providing additional accountability to rightsholders. - This rights and
permissions clearinghouse 400 audit function can be especially beneficial to preserve confidentiality. For example, a private rights andpermissions clearinghouse 400 may be extended to provide payment aggregation in order to hide confidential individual transaction level information from thefinancial clearinghouse 200. In another example, a rights andpermissions clearinghouse 400 can issue reports 426 indicating, for example, the number of registered objects in database 412 at the beginning of a reporting period, the number of new objects registered, and some aggregate statistics concerning perhaps the numbers of kinds of permissions associated with these objects and/or average or median prices for certain kinds of objects. - Rights and
permissions clearinghouse 400 can also respond toqueries 402 withresponses 428. A request, for example, may consist of a request for permissions—which may be automatically granted; or the request may need to be qualified by the rights andpermission clearinghouse 400 to determine whether the requester is qualified to receive the permissions. Qualifications might be established by presentation of one or more valid certificates, which might be simply checked, or stored in the database 412 for transmission to providers along with other information about permissions granted by the clearinghouse. In the preferred embodiment, other qualifications might be based on a shared secret (e.g., one or more tags from a control set 188 held by the requester) known by the requester's PPE 54 and the rights andpermissions clearinghouse 400. This shared secret might be used in combination with a certificate, or in cases when qualification requirements are lower or have already been established (e.g., to have received the shared secret in the first place), the shared secret alone might be adequate to receive, for example, a permission that replaces or updates an expired permission. - Rights and
permissions clearinghouse 400 also includes apermission negotiation engine 416 that may be used to negotiatepermissions 188 that haven't been pre-approved by the rights holder. For example, suppose that aconsumer 95 wants to exercise a right that is not within database 412. Theconsumer 95 could request the right. In response, rights andpermissions clearinghouse 400 could determine whether the rights holder has authorized it to negotiate for the right on behalf of the rights holder. If the rights holder has not given the rights andpermissions clearinghouse 400 the power to negotiate, the clearinghouse could contact the rights holder and request authorization and/or the permission itself. If the rights holder has granted the rights andpermission clearinghouse 400 negotiating authority, the clearinghouse could enter into an electronic negotiation (see Ginter et al.FIGS. 75A-76B ) between the consumer's control set and the rights holder's control set. The resulting negotiated control set could be sent to the consumer, allowing the consumer to exercise the right. -
FIG. 41 shows an example architecture for rights andpermissions clearinghouse 400. In this example, rights andpermissions clearinghouse 400 includes asecure communications facility 430, a database andtransaction processor 432, anauthenticator 434, anauthorization checker 436, and aregistration processor 438. As discussed above, the rights andpermissions clearinghouse 400 architecture may be based on the rights operating system architecture shown inFIGS. 12 and 13 of the Ginter et al. patent disclosure and described in associated text. - Database and
transaction processor 432 performs most of the functions shown inFIG. 40 .Registration processor 438 may perform theregistration function 419.Secure communications facility 430 communicates securely overelectronic network 150 withconsumers 95,authors 164,publishers 168,aggregators 170,repackagers 174, and other value chain participants viasecure containers 152.Authenticator 434 andauthorization checker 436 perform authentication functions as the Ginter et al. patent disclosure describes in connection with secure electronic appliances and protected processing environments. -
FIG. 42 shows an example rights and permissions clearing process. In this example,author 164 sends awork 166 with a control set 188A including controls A to apublisher 168.Publisher 168—in accordance with a secure chain of handling and control—adds controls B to the control set to form a new control set 188AB.Publisher 168 publishes thework 166 with control set 188AB toconsumers 95.Publisher 168 may also specify a less often used, but sometimes necessary additional set of permissions C within a more comprehensive control set 188ABC (for example, controls C may allow journalists to excerpt certain parts ofwork 166 for specific purposes). -
Publisher 168 may register control set 188ABC (and, if desired, also control set 188AB and control set 188A) with rights andpermissions clearinghouse 400. Thepublisher 168 may also include additional “controls over controls,” or “permissions for permissions” “D” (e.g., distribution controls described in connection withFIGS. 79-85 of the Ginter et al. patent disclosure) along with controls 188ABC. These additional “D” controls may specify the circumstances under which rights A, B and/or C may be granted (qualification of credentials, frequency of reissue, number of controls for a given user, etc.). - Consumer 95 (or any other provider, such as an aggregator, repackager, author, or another publisher) may request a copy of any of these various control sets registered with rights and
permissions clearinghouse 400. For example, if theconsumer 95 is a journalist who uses thework 166 in accordance with control set 188AB and decides she wants to excerpt the work for certain purposes, she may request the control super set 188ABC thatpublisher 168 previously registered with rights andpermissions clearinghouse 400. As another example, aconsumer 95 in Germany may have received the control set 188 intended for U.S. distribution, and may need to request a different control set accommodating the European legal and monetary environment. Additionally, a rightsholder may modify previously distributed controls at a later date to add new rights, provide a “sale,” take away rights, etc.—with rights andpermissions clearinghouse 400 being responsible for distributing these new control sets either on demand. -
FIG. 42A shows another example in whichconsumer 95 may register with the rights and permissions clearinghouse 400 a control set 188X that pertains to an object such as a file or software program already received byconsumer 95. This new control set 188X requests the rights andpermissions clearinghouse 400 to send to consumer 95 a new control set 188Y for the named object whenever the controls registered for that object at the rights andpermissions clearinghouse 400 are modified. The rights andpermissions clearinghouse 400 may automatically send updated control set 188Y to all registered users of a particular digital property. - In a different example,
publisher 168 might distributework 166 with a very limited control set 188X allowing theconsumer 95 to view only the abstract and specifying rights andpermissions clearinghouse 400 as a contact point for obtaining permission to view or otherwise use the content as a whole.Consumer 95 could then contact rights andpermissions clearinghouse 400 to obtain a more expansive control set 188Y allowing additional levels of usage. This provides a high degree of accountability and expanding auditing capabilities, since it requiresconsumers 95 to contact rights andpermissions clearinghouse 400 in order to actually use a previously distributed property. Similarly, rights andpermissions clearinghouse 400 may provide updated control sets 188Y to replace expired ones. This mechanism could be used, for example, to provide a variable discount on a particular item over time (for example, to allow a movie distributor to discount its first run film six months after its initial release date without having to decide at time of initial release how much the discount will be). -
FIG. 43 shows a further example rights and permissions clearing operation performed by rights andpermissions clearinghouse 400. In thisFIG. 43 example, each ofauthors 164,publishers 168,aggregators 170, and optionally other additional value chain participants, register their own control sets 188A, 188B, 188C, respectively, with a rights andpermissions clearinghouse 400—potentially also registering additional controls controlling distribution of their provider controls. Rights andpermissions clearinghouse 400 may then distribute a new, combined control set 188ABC consistent with each of the individual control sets 188A, 188B, 188C—relieving any of the value chain participants from having to formulate any control sets other than the one they are particularly concerned about. In this example, rights andpermissions clearinghouse 400 may also have an interface to other organizations (e.g., with agovernment agency 440, such as a Copyright Office—or with another type of organization such as professional associations). Rights andpermissions clearinghouse 400 may automatically register copyright in works and other objects registered with the rights andpermissions clearinghouse 400—reducing or eliminating such burdens from having to be performed by the rights holders themselves. The copyright registration interaction between the rights andpermissions clearinghouse 400 and thegovernment agency 440 may, for example, make use of VDE andsecure containers 152. -
FIGS. 44A-44E show an additional rights and permissions clearing process that may be performed using rights andpermissions clearinghouse 400. In this example, apublisher 168 may provide aproperty 166 and associated control set 188 a to a consumer 95 (seeFIG. 44A ). The consumer may use herelectronic appliance 100 and associated protectedprocessing environment 154 to attempt to access theproperty 166 using control set 188 a, but may determine that she requires an additional control set 188 b in order to access the property the way she wishes. The consumer'selectronic appliance 100 may generate arequest 402 to a rights and permissions clearinghouse 400 (seeFIG. 44B ). In response, the rights andpermissions clearinghouse 400 may distribute the requestedcontrol 188 b containing the permissions and pricing information requested by the consumer 95 (seeFIG. 44C ). The consumer may then use theproperty 166 in accordance with the control set 188 and generate usage/audit trail information 302 based on the consumer's usage (seeFIG. 44D ). The consumer'selectronic appliance 100 may report this usage information tousage clearinghouse 300, and may delete and/or release as “pending” the internally stored usage information once it receives a release signal from the appropriate clearinghouse (seeFIG. 44E ). - Rights Templates
-
FIGS. 45A and 45B showexample rights templates 450, andFIG. 45C shows an example corresponding control set 188.Rights template 450 may be analogous in some respects to “fill in the blank” forms. Rights holders can userights templates 450 to efficiently and effectively define the rights associated with a particular digital property.Such templates 450 are useful in framing the general purpose capabilities of the virtual distribution environment technology described in the Ginter et al. patent disclosure in terms that are sensible for a particular content industry, provider, content type or the like. This allows a user such as a provider to be presented with a focused menu of resources that be applicable or useful for a particular purpose. - For example,
templates 450 may make some assumptions about the character of the content or other information being controlled, how it is partitioned or otherwise organized and/or the attributes those organizational entities have.Templates 450 simplify the process of defining permissions, and reduce or eliminate the need for specialized knowledge and substantial investments of time to exploit the underlying capabilities of the virtual distribution environment. It may be possible in this example for a user to avoid usingtemplates 450 altogether and instead definepermissions 188 in terms of a rights management language (for example, a natural or computer-based language)—but a large percentage of users will prefer the easy-to-use graphics interface thattemplates 450 may provide—and won't mind giving up the additional flexibility and associated complexities when undertaking the day-to-day business of defining permissions for a large number of different pieces of content. -
Example rights template 450 shown inFIG. 45A (which may be appropriate for text and/or graphics providers for example) defines a number of different types of usage/actions relevant to a particular digital property, such as, for example, “view title,” “view abstract,” “modify title,” “redistribute,” “backup,” “view content,” and “print content.”Rights template 450 may further provide a “menu” or list of options corresponding to each type of usage. These various options allow the rights holder to define rights that others may exercise in connection with the property. For example, the rights may comprise: -
- Unconditional permission,
- Permission conditional on payment,
- Permission based on content,
- Unconditional prohibition, and
- Prohibitions and/or permissions based on other factors.
- Rights holders may “fill in” or select between these various options to define a “rights profile” corresponding to their particular property. In this example,
rights template 450 may further models and/or levels for rights to be exercised conditional on payment. Such pricing models and levels may flexibly define a variety of different sorts of business pricing, such as, for example, one time charges, pay per view, declining cost, etc. SeeFIG. 45B for an example of how pricing models and levels might be specified using a graphical interface. -
Rights template 450 in this example can be self executing and/or can be “translated” or compiled automatically into one or more control sets 188 providing the necessary controls for implementing the rights holder's selections.FIG. 45B , for example, has a “view title”control 188 a that allows unconditional viewing of the title as specified by theFIG. 45A rights template 450. Similarly, theFIG. 45B example controls 188 includes further control set elements 188(2) . . . 188(N) corresponding to other rights andpermissions 188 the rights holder has defined based upon theFIG. 45A rights template 450. - In this example,
rights template 450 can be extensible. For example, as new technology enables and/or creates new operations,rights template 450 can be extended to accommodate the new operations while still being “upward compatible” with preexisting rights templates.Different rights templates 450 can be used for different types of properties, different value chain participants, etc.—and at the same time, certain rights templates might apply to multiple objects or properties, multiple value chain participants, etc. Somerights templates 450 can be supersets of other rights templates. For example, an overallrights permissions template 450 could define all of the possible rights that might apply to a particular property or class of properties, and sub-templates could be further defined to define rights associated with different consumers, classes of consumers, or rights holders. Thus, for example, an author might use a sub-template that is different from the one used by a distributor. Templates can also be recursive, i.e., they can be used to refer to other templates (and similarly, the control sets they define can refer to other control sets). - Rights and
permissions clearinghouse 400 might partially fill inrights template 450—or an automatic process could be used (based, for example, on rights holder's pre-existing instructions) for completing and/or duplicating rights templates. Rights holders could use a graphical user interface to complete rights template 450 (e.g., by displaying a list of options on a computer screen and pointing and clicking with a mouse pointing device to fill in the options desired). In another example, a rights holder could define his or her preferences using a rights management language that a computer could automatically compile or otherwise process to fill inrights template 450 and/or construct associated control set(s) 188. -
FIG. 46 shows an example rights and permissions clearing process usingrights template 450. In this example, rights andpermissions clearinghouse 400 and/or individual rights holders define rights template 450 (FIG. 46 , block 452(1)). The rights are then filled in therights template 450 to define permissions granted and withheld, and associated pricing models and levels (block 452(2)). The rights holder associates the permissions defined by the rights template with the object (e.g., by creating one or more control sets 188 that reference and/or apply to the property being controlled) (block 452(3)). The rights holder may then convey the permissions (control set 188) with or separately from the object (block 452(4)). Rights holders may send these control sets 188 directly to consumers 95 (block 452(5)), and/or they may sent them to a rights andpermissions clearinghouse 400 for registration and storage in a database (block 452(6)). Rights andpermissions clearinghouse 400 may provide such preauthorized permissions to consumers (block 452(7)) on demand upon receiving consumer requests (block 452(8)). - As described above, providers may control distribution of such pre-authorized permissions by rights and
permission clearinghouse 400 by the mechanism of providing additional, “distribution controls” directing and/or controlling the distribution process. - Certifying Authority
-
FIG. 47 shows an example certifying authorityCommerce Utility System 500. Certifying authorities and services may, in general, create digital documents that “certify,” warrant, and/or attest to some fact. Facts include, for example, identification and/or membership in a particular class, e.g., such as an organization; age group, possession of a certain credential type; being subject to one or more certain jurisdictions; and/or having a certified one or more rights to use content and/or processes for a fixed time period or terminating at a specific time. - In more detail, a certifying authority in accordance with these inventions may provide any combination of the following advantageous features and functions, for example in the form of certificates:
-
- Electronically certifying information used with or required by rules and/or controls such as authenticating, identity, class membership and/or other attributes of identity and/or context, and including automatically certifying said information based upon the source (for example, one or more certified provider identities) and/or class of said information.
- Providing trusted verification that a consumer or other value chain participant is who she says she is and/or is a member of one or more particular groups, classes and/or organizations.
- Providing trusted verification that a group of value chain participants are collectively who they say they are, wherein a plurality of certificates from different parties are tested as an aggregate and where such aggregate of certain certificates is required under certain circumstances to use content and/or execute one or more control processes.
- Automatically producing a certificate, representing authentication of a value chain or value chain portion, as a result of the confluence of a plurality of certain certificates.
- Anticipating, through the use of rules and controls, allowable collections of certificates from plural parties that can form a certificate that virtually represents a specific group of certified parties and in the presence of certain certificates identifying two or more anticipated parties and/or parties who have met a certain criterion—e.g., sufficient transaction revenue, sufficient credit worthiness, etc.—a new certificate may be automatically generated and act as a composite certificate certifying the plural parties collective and coordinated presence, and wherein said certificate can be associated with certain rules and controls allowing certain electronic activities such as usage of content and/or control processes in, for example, multiparty EDI, content distribution, trading system, and/or financial transaction systems.
- Generating one or more certificates at least in part as a result of rules and controls governance of certificate creation, wherein such generated one or more certificates are produced, for example, as a result of secure rules and controls based one or more instructions after the satisfaction of certain required criteria such as certain specific activities by each of plural parties—e.g. provision of one or more certificates and/or authorizations and/or usage activity and/or credit and/or payment activity and/or reporting activity and/or VDE supported electronic agreement activity (including, for example, electronic negotiation activity).
- Certifying other support services (e.g., financial clearinghouses, usage clearinghouses, rights and permissions clearinghouses, transaction authorities, and other certifying authorities, etc.).
- Certifying based on another certificate (e.g., identity) and an automatic secure database lookup which may be performed locally, across a distributed database arrangement, or remotely.
- Providing non-automatic (i.e., at least in part human provided or assisted) services issuing more fundamental certificates (e.g., identity certificates) based on physical evidence in addition to automatic services for issuing dependent certificates.
- May use public key cryptography, private key, and/or secure VDE virtual networks to support, e.g. create, digital certificates.
- Can issue certificates that support the context for rights usage in an automatic, trusted, distributed, peer-to-peer secure electronic environment that supports chain of handling and control.
- As with other Distributed Commerce Utility services, supporting an unlimited variety of different business models and scenarios through general purpose, reusable, programmable, distributed, modular architecture.
- Can issue certificates that support control sets having elements whose use is dependent on presence and/or absence of specific, and/or class and/or non-specific, one or more digital certificates attesting to certain facts and where differing requirements may coexist regarding the presence or absence of certificates related to differing issues.
- Can issue one or more certificates that cooperate with conditional electronic control sets to grant certain rights only to certain consumers and/or other value chain participants, including, for example, consumers.
- Issuing replacements for expired certificates and supporting sophisticated time and/or usage and/or other event driven expiration (including termination) of certificates—for example, where criteria for such expiration may variety based upon specific certificates, classes of certificates, specific and/or classes of users, user nodes, etc.
- Maintaining and distributing, including selectively distributing to distributed nodes revocation list information, based, for example, upon node distributed profiles and/or rules and controls.
- Distributing revocation list information among interoperable, peer-to-peer networked, Distributed Commerce Utility nodes on a time based, other event based manner, wherein information is selectively distributed to certain one or more nodes in accordance with agreed to revocation information requirements and/or where revocation information is non-selectively distributed to certain one or more nodes.
- Receiving authority from secure chain of handling and control embodied in electronic control sets.
- Distributing certificate authority functions across a network or other system (for example, every consumer node is potentially a certificate authority with respect to certain kinds of certificates; parents may be empowered to issue certificates for their children).
- Organizing certificate authorities hierarchically, including allowing automatic verification of some certificate authorities (that is, their issued certificates and associated determinations regarding trustedness, appropriateness, etc.) through reliance on certificates issued by other certificate authorities at least in part for such purpose.
- Granting authority and/or providing services to, or in conjunction with, one or more distributed certificate authority sub-clearinghouses whose operations may be located logically and/or physically elsewhere, such as within a company or government agency and/or within one or more jurisdictions and/or serving subsets of the overall business focus area of a senior certificate authority clearinghouse distributing and/or otherwise authorizing rights clearing functions across a system or network
- Every consumer and/or certain or all other value chain participant nodes can potentially support a distributed certificate authority clearing service initiating its own, secure certificates and function in the context of the overall clearinghouse network, including, clearinghouse interoperation with one or more other participants interoperable nodes, and as elsewhere in this list, all activities employing VDE techniques as appropriate.
- Providing liability acceptance control (i.e., for insuring digital certificates based on the amount of liability accepted by the issuer(s)), and may include securely maintaining information regarding such liability acceptance and providing notices to recipients of such certificates regarding the liability protection afforded by such certificates, and may further include recipients of such insured certificates accepting, for example, through explicit VDE managed electronic acceptance or through implied acceptance by continuing, any liability above the insured amounts.
- May be organized hierarchically, peer-to-peer, or in a combined mode where responsibility for certificate authority activities may be distributed in differing fashions for differing commerce models and/or activities and/or value chains and where certain one or more parties may be, for example, hierarchically more senior to other parties in one or more instances and hierarchically a peer or less senior in one or more other instances, that is the relationship among participants is programmable and may be set (and later modified) to represent one or more desired specific certificate authority arrangements for given commerce activities, value chains, or models.
-
FIG. 47 shows anexample certifying authority 500 from a process viewpoint. In this example, certifyingauthority 500 creates digital documents calledcertificates 504 that “certify” some fact, such as identity or class membership. For example a trusted thirdparty certifying authority 500 can provide a secure digital assurance that a consumer is who she claims to be or has certain characteristics, attributes, class memberships, or the like. For example, some attributes may signify membership in a particular class (e.g., all employees of a certain company), those born before a certain date, those having a certain physical disability, members of the faculty, administration or student body of a college, or retired members of the armed forces. - In this example,
digital certificates 504 issued by certifyingauthority 500 are used as a conveyor of the context of rights usage and transaction authorizations. As described in the Ginter et al. patent disclosure,certificates 504 are particularly powerful in the virtual distribution environment because they provide contexts for rights usage. For example, class-based certificate use and automated, distributed governance of commerce rights may fundamentally enhance the efficiency of trusted networks. Suppose, for example, that a content publisher wants to charge commercial prices for a scientific journal subscription to all those but in higher education and is willing to give college and university students and professors a 20% discount.Digital certificates 504 issued by a trusted certifyingauthority 500 can be used to automatically provide assurances—within the context of distributed electronic network—that only people who are truly entitled to the discount will be able to exercise it (in this example, that only those certified as affiliated with an institution of higher education). - In the
FIG. 47 example, certifyingauthority 500 may perform the following overall functions: -
- Fact collection and checking 522,
-
Certification generation 524, - Maintaining revocation lists 526,
- Certificate and
revocation list distribution 528, -
Authentication 530, -
Certificate renewal 532, - Authorization 534,
- Replication 536,
-
Propagation 538, and -
Archive 554.
- Certifying
authority 500 may gatherevidence 502 as a basis for which to issuedigital certificates 504. In this example,evidence 502 may include otherdigital certificates 504′ (e.g., so that one certificate can build on another). The fact collection and checkingfunction 522 may accept thisevidence 502 as well as additional trustedness data 540 (e.g., information concerning compromised or previously misused certificates)Certificate generation function 524 may generate newdigital certificates 504 based upon this fact collection andchecking process 522.Distribution function 528 may then distribute the newdigital certificates 504, and issuebills 542 to compensate a certifying authority for undertaking the effort and liability that may be associated with issuing the certificate. - Certifying
authority 500 may also maintain arevocation list 542 based ontrustedness data 540 indicating, for example, certificates that have been compromised or that previously certified facts are no longer true (for example, Mr. Smith used to be a Stanford University professor but has since left the University's employ). The maintained revocation list function 526 is important for providing a mechanism to ensure that “bad” certificates cannot continue to be used once they are known to be bad.Certificates 504 issued by certifyingauthority 500 can expire, and the certifying authority can (for example, for a fee) renew a previously issued certificate by performingcertificate renewal function 532. The certifyingauthority 500 may maintain a record or database of the certificates it has issued, and this database can be distributed—which can benefit from replication function 536 andpropagation function 538 to accurately and efficiently distribute the database across a number of different locations. -
FIG. 48 shows an example architecture for certifyingauthority 500. In this example, certifyingauthority 500 may include asecure communications facility 544, an encryption/decryption processor 546, a billing system 548, akey generator 550, aquery mechanism 552, and anelectronic archive 554. In this example,secure communications 544 is used to communicate with otherelectronic appliances 100 and/or otherCommerce Utility Systems 90.Electronic archive 554 stores keys,certificates 504 and other information required to maintain the operation of certifyingauthority 500. Encryption/decryption processor 546 is used to createdigital certificates 504 by using strong cryptographic techniques. Billing system 548issues bills 542.Query mechanism 552 is used to queryelectronic archive 554.Key generator 550 is used to generate cryptographic keys the certifyingauthority 500 needs for its own operation. -
FIG. 49 shows an example certifying authority process. In this example, a publisher may send an electronicsecure container 152 to aconsumer 95. To usecertain permissions 188 a insecure container 152, theconsumer 95 may require a certificate from certifyingauthority 500 that certifies as to a particular fact about the consumer (e.g., the consumer is a United States citizen, the consumer is a retired member of the armed forces, the consumer is over 18 years of age, etc.). The consumer may generate arequest 502 to certifyingauthority 500 for issuance of an appropriate certificate. Certifying authority may check theevidence 502 theconsumer 95 provides, or that some third party may provide, and—once thecertificate authority 500 is satisfied—issue the consumer the requireddigital certificate 504. Thisdigital certificate 504 may be used not only with the publisher's control set 188 a, but with control sets from other rights holders that require certification of the same fact and that have agreed to trustcertificate authority 500 as an issuer of certificates. - Certifying
authority 500 may communicate withconsumer 95 usingsecure containers 152. It may generate and provide a control set 188 b withcertificate 504. This control set 188 b may control some aspect of usage of the certificate 504 (e.g., it may not be redistributed and/or modified) and/or to define a chain of handling and control for the issuance of further dependent certificates (e.g., parents give authority to issue certificates about their offspring). - One
certificate authority 500 may be “proxied” to issue certificates on behalf of another—such as for example in a chain of handling and control defined by one or more electronic control sets 188. Distributing the certifyingauthority 500 across a number of different electronic appliances has certain advantages in terms of efficiency for example.FIG. 50 shows one useful example of this distributed certificate issuance scenario. -
FIG. 50 shows that a rightsholder 164 (and/or a rights and permissions clearinghouse 400) may request (e.g., by issuingelectronic controls 188 a within asecure container 152 a) a certifyingauthority 500 to issue digital certificates 504(1) to accredited institutions of higher learning such asinstitution 1060. Control set 188 a may establish the policies and procedures necessary to ascertain whether in fact a particular institution is duly accredited. Based onelectronic controls 188 a andevidence 502 submitted by theinstitution 1060, the certifyingauthority 500 may issue adigital certificate 504A attesting to the fact of accreditation. - In order to take advantage of
certificate 504A, a student, faculty member and/or staff member ofinstitution 1060 may need to provide a further certificate attesting to the fact that he or she is affiliated withinstitution 1060. Instead of having certifyingauthority 500 issue afurther certificate 504 to each student, faculty member and staff member ofinstitution 1060, it may be efficient and/or desirable for eachinstitution 1060 holding acertificate 504A to issue dependent certificates 504(2) to its own faculty, staff and students. For example,institution 1060 may maintain a current list of all students, faculty and employees. Rather than requesting certifyingauthority 500 to issue a separate certificate 504(1) to each student, faculty member and employee ofinstitution 1060, the institution may undertake this responsibility itself. - For example,
institution 1060 may elect to operate its own, distributed certifyingauthority 500A. In one example, certifyingauthority 500 may issueelectronic controls 188 b (subject tocontrols 188 a issued byrights holder 164, for example) that delegate, to the institution's certifyingauthority 500A, the authority and responsibility to issue dependent certificates 504(2) within certain limits (e.g., attesting to a limited universe of facts such as for example “This person is officially associated with theinstitution 1060”). Such dependent certificates 504(2) could, for example, be copies of certificate 504(1) with an addendum stating that a particular person is associated with theinstitution 1060 and stating a particular expiration date (e.g., the end of the current academic term). The institution's certifyingauthority 500A may then issue such dependent certificates 504(2) to each faculty member, student and staff member on its current roster. - Recipients of certificates 504(2) may need a still further certificate 504(1) attesting to their identity. This is because certifying
authority 500A issues certificates 504(2) attesting to the fact that a certain named person is affiliated withinstitution 1060—not to the fact that a particular recipient of such a certificate is that person. The recipient may need to obtain this further “identity” certificate 504(1) from a governmentally operated certifyingauthority 500 such as a state or federal government. - Rightsholder 164 (and/or a rights and
permissions clearinghouse 400 not shown) may issue control sets 188 c fordigital properties 166 that grant discounts or that provide other benefits to those who can provide a combination of validdigital certificates 504 attesting to their membership in the class “accredited higher education institution.” Each student, faculty member and staff member of theinstitution 1060 who has received a certificate 504(2) may take advantage of these discounts or other benefits.FIG. 50A illustrates how such different digital certificates can be used to support certificate-conditional controls 188—that is, control sets whose elements are dependent on the presence or absence ofcertificates 504 that attest to certain facts. - In this
FIG. 50A example, one or more control sets 188 c include a number of discrete controls 188(1) . . . 188(N) applying to the samedigital property 166 or group of properties, for example. Control 188(3) may provide additional and/or different rights to all students, faculty and staff members of Stanford University. In theFIG. 50A example, multiple certificates can be used together to provide the requested certifications. For example, the certificates 504(1), 504(2), 504A shown in theFIG. 50 example can be used together to allow a particular person to take advantage of a discount offered to students, faculty and staff members of accredited institutions of higher learning. For example: -
- a certificate 504(1) may attest to the fact that a certain person John Alexander is who he says he is.
- another
certificate 504A may attest to the fact that Stanford University is an accredited institute of higher learning, - another certificate 504(2) may attest to the fact that John Alexander is a student at Stanford University for the current academic semester.
- Each of these
various certificates 504 can be issued by different certifyingauthorities 500. For example, one certifying authority 500 (e.g., operated by a governmental entity) might issue a certificate 504(1) certifying the consumer's identity, while another certifying authority may issue certificate 504(2) attesting as to student status, and a third certifying authority may issue the certificate attesting to the fact that Stanford is an accredited University (seeFIG. 50 ). - As an additional example, a control set element 188(1) shown in
FIG. 50A may provide a certain benefit for California residents. Its condition may be satisfied by the consumer presenting a digital certificate 504(3) certifying residency (e.g., in combination with the “identity” certificate 504(1)). A still further permission 180(N) shown inFIG. 50A might be satisfied by presenting a certificate 504(5) indicating U.S. citizenship. Such certificates 504(3), 504(5) that warrant that a given person is subject to one or more jurisdictions (for example, a resident of, or doing business in a particular city, state, nation, or other political unit—and therefore, subject to that unit's sales, income, or other taxes, or subject to certain administrative fees) are particularly useful for interstate and/or international commerce transactions. For example, a certifyingauthority 500 might issue acertificate 504 to afinancial clearinghouse 200 in the United Kingdom. Thiscertificate 504 could be used in conjunction with control sets 188 distributed by rightsholders and/or a rights andpermissions clearinghouse 400 specifying that only United Kingdomfinancial clearinghouses 200 are authorized to accept payment in pounds sterling. A customer wishing to pay in pounds sterling will only be able to complete the payment transaction if the financial clearinghouse being used has the appropriate UK certificate. This UK clearinghouse might then pay appropriate UK taxes—relieving the provider from the burden of having to determine which of his or her transactions were subject to UK tax payments and which were not. -
FIG. 50A also shows a further certificate 504(4) certifying that a certain person is married to a certain other person. To use certificate 504(4), it may also be necessary to present the first certificate 504(1) certifying identity. Such certificates attesting to relationship between individual people or between people and organizations are useful in allowing, for example, family members to use the certificates of other family members (e.g., a person can obtain a benefit based on his or her spouse's or parents' certified credential(s)). -
FIGS. 51-51D show example detailed formats of variousdigital certificates 504. TheFIG. 51A digital certificate 504(1) may certify that a person is who he says he is. This certificate 504(1) might include, for example: -
- a field 560(1) stating the person's name,
- a field 560(2) specifying the person's date of birth,
- an expiration field 560(3) specifying when the digital certificate expires,
- a public key 560(4) corresponding to the person's public key, an ID code 560(5) (which in this example could be a hash of the public key field 560(4)), and
- a check sum field 560(6) providing an error checking ability.
- Digital certificate 504(1) is encrypted in this example by the certifying
authority 500 using the certifying authority's private key of a public key-private key cryptosystem pair, such as RSA or El Gamal. The certifyingauthority 500's corresponding public key can be made public (e.g., by publishing it in several publicly accessible sites on the World Wide Web or in another widely distributed context), or it could remain secret and never be exposed outside of protectedprocessing environments 154. In either case, successful decryption of the digital certificate 504(1) to reveal the original clear text information provides a high degree of assurance that the digital certificate was issued by certifying authority 500 (presuming that the certifying authority's private key has not been compromised). - Expiration field 560(3) is useful because people who skip checks of revocation lists have at least some assurance that a certificate is good if it must be renewed periodically. Expiration date field 560(3) provides an additional safeguard by insuring that certificates do not last forever—allowing certifying
authorities 500 to use different cryptographic key pairs for example to provide overall integrity and trustedness of the certification process. Changing the certifyingauthority 500's key pair reduces the incentives for an adversary to break a given key, because the amount of information protected by that key is limited, and the fraudulent use of a compromised key will only have a limited time of effectiveness. Furthermore, (currently) unexpected advances in mathematics may render some cryptographic algorithms useless, since they rely on (currently) theoretically intractable computations. A built in mechanism for changing the certifyingauthority 500's keys allows the impact of such breakdowns to be limited in duration if new algorithms are used for reissued certificates (alternatively, this risk can also be addressed by using multiple asymmetric key pairs generated in accordance with different algorithms to sign and validate keys, at the cost of additional decryption time). -
FIGS. 51B, 51C and 51D show additional digital certificate examples containing different sorts of information (e.g., professional credential field 560(7) in the case of certificate 504(5), address field information 560(8) in the case of certificate 504(3), and student credentials field 504(9) in the case of student certificate 504(2)). These certificates 504(2), 504(3), 504(5) are tied to identity certificate 504(1) via the common ID field 560(5), and both the identity certificate and the independent certificate would generally need to be presented together. -
FIG. 51E shows how an example digital certificate issued by one certifying authority can—in conjunction with a trusted database—be the basis for another certifying authority to grant another certificate. One certifyingauthority 500A can, for example, validate user identity and create the identity certificate 504(1) shown inFIG. 51A . The user can submit this identity certificate 504(1) to another certifyingauthority 500B that has adata base 554 a of people and/or organizations who have a particular attribute. For example, certifyingauthority 500B may be operated by a professional organization that maintains aninternal database 554 a. Certifyingauthority 500B will trust the contents of thisinternal database 554 a because the certifyingauthority 500B maintains it and keeps it accurate. - By comparing the identity information in the
FIG. 51A certificate with the contents of the trusteddatabase 554 a, certifyingauthority 500B can issue theFIG. 51B certificate without requiring any physical evidence from the owner of theFIG. 51A certificate. This solves an important problem of requiring the user to “show up” each time he needs a highly trusted certificate—and also allows the second certificate-generating the process to be automated. -
FIG. 51E also shows that the certificate 504(2) issued by certifyingauthority 500B may be (along with identity certificate 504(1)) a sufficient basis for a further certifyingauthority 500C to issue a further certificate 504(3) based on its own lookup in a trusteddatabase 554 b. - Another example would be a corporation that has proven its identity to the Secretary of State in the jurisdiction in which it is organized. If this corporation has passed muster to handle hazardous material it could submit its certificate of identity 504(1) from the Secretary of State (which in this case would comprise certifying
authority 500A) to the agency (certifyingauthority 500B responsible for maintaining thedatabase 554 a of which companies are currently qualified and authorized to handle hazardous materials. The certifyingauthority 500B could then issue a certificate 504(2) attesting to this fact in an entirely automated way if desired. - Insert before heading on p 219 Secure Directory Services (
FIG. 52 shows) - Certification to Allow Participants to Act as Agents of an Entity
- Sometimes, one or more participants in a particular value chain, or having a particular relationship with other participants, need to be authorized to act on behalf of the collection of participants. For example, several parties may wish to act based on authorization from the partnership or joint venture of which they are a member—or all participants within a particular value chain may need to act for the value chain as a whole. Each of the participants receiving such authority from the entity may need authorization from the entity to act.
- The present invention provides a mechanism in which
digital certificates 504 may be used to create a “virtual entity” that can grant any combination of participants any combination of the same or different powers to exercise defined powers under controlled conditions of use. More particularly, a digital certificate grants each participant in a virtual entity the power to act on behalf of the entity—within the constraints of the conditions of use and further with any consequences defined in the conditions of use specified by electronic controls associated with the container. -
FIG. 51F shows an exampleelectronic container 152 that encases the following information: -
- a
value 564 that identifies the “virtual entity,” - signatures 566(1)-566(N)—one for each member of the entity,
-
other information 568 pertaining to the entity, - digital certificates 504(1)-504(N)—one for each member of the entity, and
-
control information 188 that specifies powers (e.g., rights or permissions) and “conditions of use.”
- a
-
Value 564 provides an identifier that uniquely identifies the entity. The “other information”field 568 may provide further information concerning the entity (e.g., the name of the entity, the name and address of each participant, the expiration date on which the entity ceases to exist, and other information). Signatures 566(1)-566(N) are like signatures on a partnership agreement—each member of the virtual entity affixes his or her “signature” to indicate assent to be a member of the entity and assent to the conditions being granted to each participant. -
Container 152 in this example further includes an electronic control set 188 describing conditions under which the power may be exercised.Controls 188 define the power(s) granted to each of the participants—including (in this example) conditions or limitations for exercising these powers.Controls 188 may provide the same powers and/or conditions of use for each participant, or they may provide different powers and/or conditions of use for each participant. -
FIG. 51G shows one example process for creating theFIG. 51F container 152. In this example, the parties to the virtual entity may negotiate control information governing collective action based on, for example, the electronic negotiation techniques shown inFIGS. 75A-76B of the Ginter et al. patent specification (FIG. 51G , block 570). The resultingcontrol information 188 specifies “conditions of use” such as the rights that may be exercised by each participant in the entity, and limitations on each of those rights (which may be defined on a participant-by-participant basis). - The participant initiating issuance of digital container 152 (actually, the participant's protected processing environment 154) may select a random value for use as entity identifier value 564 (
FIG. 51G , block 572). The participant'sPPE 154 may next create the certificate information for the virtual entity by associating theentity identifier value 564 with other information 568 (FIG. 51G , block 574). The participant'sPPE 154 may next sign the virtual entity certificate information to indicate the participant's assent to be a member of the virtual entity and assents to the conditions of use control information 188 (FIG. 51G , block 576). - The participant's
PPE 154 may then makeelectronic container 152, and place into it thecontrol information 188, the virtualentity certificate information own certificate 504 specifying a cryptographic key the participant may use to exercise rights (FIG. 51G , block 578). The participant may then determine whether any more participants need to be added to the entity certificate (FIG. 51G , decision block 580). If yes, thecontainer 152 may be transmitted (FIG. 51G , block 582) to another participant member of the virtual entity and accessed and validated by that next participant (FIG. 51G , blocks 584, 586). The next participant may similarly sign the virtual entity certificate information by adding his signature 566(2) to the list—indicating the she also agrees with thecontrols 188 and agrees to join the virtual entity (FIG. 51G , block 588). This new information is used to add to and/or replace theentity certificate information FIG. 51G , block 590). This next participant also adds their own certificate 504(2) to the container 152 (FIG. 51G , block 592). - Steps 580-592 may be repeated until
container 152 has been signed by each participant within the virtual entity (“no” exit to decision block 580). The completedcontainer 152 may then be transmitted to all participants (FIG. 51G , block 594). -
FIG. 51H shows an example process a virtual entity participant may use to exercise powers on behalf the virtual entity based on thecontrols 188 shown inFIG. 51F . TheFIG. 51H example process is performed by the participant's protectedprocessing environment 154 based on a request. The participant's protectedprocessing environment 154 writes an audit record (FIG. 51H , block 594 a) and then evaluates the request using the conditions of use specified by controls 188 (FIG. 51H , block 594 b). If the request is permitted by the controls 188 (“yes” exit to decision block 594 c,FIG. 51H ), the participant's protectedprocessing environment 154 accesses thevirtual entity value 564 from container 152 (FIG. 51H , block 594 d) and uses thecontrol information 188 associated with conditions of use to fulfill the request and perform appropriate consequences (FIG. 51H , block 594 e). In one example, the participant's protectedprocessing environment 154 may act as a certifyingauthority 500 on behalf of the virtual entity by issuing adigital certificate 504 in accordance with the conditions of use—digitally signing the digital certificate by encrypting theentity identifier value 564 with a cryptographic key corresponding to the participant'sown certificate 504 withincontainer 152, and making the digital certificate part of the newly issued certificate. The example may then writeadditional audit information 594H reporting on the action it has taken. - If the requested action is not permitted by controls 188 (
FIG. 51H , “no” exit to decision block 594 c), the exampleFIG. 51H process determines whether the error is critical (decision block 594 f). If the error is critical (“yes” exit to decision block 594 f), the process may disable further use of the information within container 152 (block 594 g), writes additional audit information (block 594 h), and then stops (FIG. 51H , block 594 i). If the error is not critical (“no” exit to decision block 594 f), the protectedprocessing environment 154 writes additional audit information (block 594 h) and may then end this task (FIG. 51H , block 594 i). - The processes and techniques shown in
FIGS. 51F-51H have a variety of different uses. As one example, suppose that a first publisher publishes a derivative work including his own content and content provided by a second publisher. The two publishers may form a virtual entity that allows the first publisher to act on behalf of the entity—but only in accordance with the conditions of use negotiated and agreed upon by both partners. For example, the second publisher may be willing to allow the first publisher to republish the second publisher's content and to allow excerpting and anthologizing of that content byconsumers 95—but only if the consumers present anappropriate certificate 504 issued by the virtual entity attesting to the fact that the consumer is permitted to exercise that right. For example, only special subscribers having certain characteristics may be entitled to receive acertificate 504. The techniques above allow the first publisher to issuecertificates 504 to subscribers on behalf of the virtual entity comprising both the first and second publishers. The second publisher can be confidant that the first publisher will only issue certificates in accordance with the conditions of use negotiated and agreed by both publishers. - Another example is a manufacturing process comprising multiple participants. The conditions of use provided by
controls 188 may allow any of the value chain participants in the manufacturing process value chain to perform certain actions on behalf of the value chain as a whole. For example, a materials manufacturer, a finished goods supplier and the shipping company that transports materials between them may for a virtual entity. This virtual entity may then submit a control set to a transaction authority that describes a process that describes all three participants acting in concert. For example, the control set created in accordance with the conditions of use applicable to their virtual entity might permit a unified presentation of materials requirements, finished appearance and delivery schedule, as one simple example. - In another example, a semiconductor company, a systems integrator, and three different suppliers of software may form a virtual entity supporting the semiconductor company's chip design, simulation, and design testing applications. In this example, certificates may be issued to each company comprising this example entity and to particular individuals within each of the companies. Rules and controls negotiated among the companies may specify who has access to which parts of the software applications and associated databases and who may make modifications to the software and/or data. In this way, the semiconductor company can authorize access to outside contractors and/or suppliers and to specific individuals representing those outside companies. These individuals may be authorized just enough access to solve typical problems and perform system maintenance tasks. Also, they may be granted additional rights (authorizations) for a limited period of time in order to resolve specific problems requiring for resolution access to certain executables and/or data not included in their default permissions.
- The virtual entity feature of the present invention represents, in part, an extension that builds upon the chain of handling and control techniques disclosed in Ginter et al. For example, certificates produced in accordance with this aspect of the present invention can use capabilities of a VDE chain of handling and control to manage a chain of certificates.
- Secure Directory Services
-
FIG. 52 shows an example of a secure directory servicesCommerce Utility System 600. Secure directory services may securely provide electronic and/or other directory information such as names, addresses, public keys, certificates and the like. Transmittal of such information securely (e.g., through the use of, in the preferred embodiment, the Virtual Distribution Environment) helps prevent eavesdropping, helps ensures confidentiality, and provides significant infrastructure support by enabling important participant interaction efficiencies. - In more detail, secure directory services provided in accordance with these inventions may provide the following example advantageous features and functions:
-
- Securely and reliably providing directory information based on a variety of different parameters, including various classification information.
- May securely provide consumer's, content provider's, clearinghouse's and/or other party's electronic address(es) and/or other communication pathway(s) based on name, function, physical location, and/or other attributes.
- May provide consumer's, content provider's, clearinghouse's and/or other party's public key(s) and/or certificate(s) based on, for example, name, function, physical location, and/or other attributes.
- Protects, and where appropriate may conceal, identity related information while efficiently managing and/or automating the confidential communicating of requests and responses in secure containers.
- Using secure containers and rules and controls to guarantee integrity and non-reputability of content.
- Receiving authority from secure chain of handling and control embodied in electronic control sets.
- Distributing secure directory services functions across a network or other system (for example, every consumer and/or other value chain participant node is potentially a distributed secure directory service initiating its own, secure directory service transactions directly with one or more other participants using VDE as described in the Ginter, et al. patent specification).
- Granting authority and/or providing services to, or in conjunction with, one or more distributed secure directory services sub-clearinghouses whose operations may be located logically and/or physically elsewhere, such as within a company or government agency and/or within one or more jurisdictions and/or serving subsets of the overall business focus area of a senior directory service authority distributing and/or otherwise authorizing secure directly service functions across a system or network.
- Every consumer and/or certain or all other value chain participant nodes can potentially support a secure directory services authority providing naming and related services and function in the context of the overall naming services network, including interoperation with one or more other participants interoperable nodes, and as elsewhere in this list, all activities employing VDE techniques as appropriate.
- May be organized hierarchically to delegate responsibility for, and operation of secure directory services for a subset of the overall directory based on name, function, physical location, and/or other attributes.
- May be organized hierarchically to provide a directory of directories, for example.
- May be organized hierarchically, peer-to-peer, or in a combined mode where responsibility for directory services may be distributed in differing fashions for differing commerce models and/or activities and/or value chains and where certain one or more parties may be, for example, hierarchically more senior to other parties in one or more instances and hierarchically a peer or less senior in one or more other instances, that is the relationship among participants is programmable and may be set (and later modified) to one or more desired specific directory service arrangements for given commerce activities, value chains, and/or models.
-
FIG. 52 shows an examplesecure directory services 600 from a process point of view. In this example,secure directory services 600 is an archive that securely keeps track of directory information relating to consumers, value chain participants and/or electronic appliances, and securely provides this information upon qualified demands. In this example,secure directory services 600 may provide the following functions: -
-
Database management 606, - Database search/
retrieval 608, -
Database replication 610, - Database propagation 612,
-
Authentication 614, and -
Authorization 616.
-
-
Database 606 may be accessed by search andretrieval engine 608 which takes consumer-provided input information as a source and uses it to retrieve records that are relevant. For example,secure directory services 600 may receiveidentities 618 of individuals, organizations, services and/or devices;electronic addresses 620;certificate 622; and/orkeys 624. This information may be stored indatabase 606. - In response to
requests 602, secure directory services search andretrieval engine 608 may accessdatabase 606 to retrieve additional information (for example, the electronic mail address of a certain individual or organization, the public key of a certain individual, the identity of a person having a certain electronic mail address, the identity and address of a person having a certain public key, etc.). - Additionally,
secure directory services 600 may return access controls, audit requirements and the like. For example, a user may be required to present valid credentials (e.g., a certificate 504) to access the internal email addresses of a corporation. Certain fields of information known to thedatabase 606 may not be available to all corners (e.g., the office location or a particular employee, their home directory(ies) on the company's servers, etc.; or a consumer's physical address may be available to people that present acertificate 504 issued by the consumer acting as hisown certificate authority 500, but no one else. These controls can be specified in secure containers that carry the information to thesecure directory service 600. - When the information is provided to requesters, they may be required to use the information only in authorized ways. For example, they may be allowed to use the information to formulate email messages, but not excerpt a physical address for a mailing list. These restrictions can be enforced by
controls 188 b thesecure directory services 600 associates with the information it provides. - As shown in
FIG. 53 ,secure directory services 600 may provide adatabase 606 and search andretrieval engine 608 in addition to asecure communications facility 626. The architecture ofsecure directory services 600 may be based onFIGS. 12 and 13 of the Ginter et al. patent disclosure. -
FIG. 54 shows an example secure directory service process performed bysecure directory services 600. In this example, a sender 95(1) wants to send a message to a receiver 95(2). The senders and receivers could beelectronic appliances 100 owned by consumers, clearinghouses, or the like. Sender 95(1) may send anaddress request 602 to securedirectory services 600 providing certain information and requesting other information. In response,secure directory services 600 provide the requested information to sender 95(1) —who may use the information to send a message to receiver 95(2). In this example, both theaddress request 602 and theresponsive information 604 are contained within secureelectronic containers 152 in order to maintain the confidentiality and integrity of the requests and responses. In this way, for example, outside eavesdroppers cannot tell who sender 95(1) wants to communicate with or what information he or she needs to perform the communications—and the directory responses cannot be “spoofed” to direct the requested messages to another location. In addition, as discussed above,directory services 600 can includecontrols 188 along with its responses and/or request or requirecontrols 188 as part of its input. -
Transaction Authority 700 -
FIG. 55 shows an example Transaction AuthorityCommerce Utility System 700. These inventions also enable secure “transaction authority” capabilities providing the following overall functions: -
- Securely validating, certifying, and/or auditing events (including, for example, authenticating, and, for example, for non-repudiation purposes) in an overall multi-event transaction or chain of handling and control process;
- Securely storing, validating, certifying, and/or distributing control sets (including, for example, authenticating, and, for example, for non-repudiation purposes) for multi-event transaction or chain of handling and control processes;
- Issuing requirements for any or all of the transaction and/or process steps; and
- If desired, actively participating in the transaction or process (e.g., through managing, directing, intermediating, arbitrating, initiating, etc., including participating in models employing reciprocal control methods and distributed, automated events for, for example, distributed computing, process management, EDI, reference to currency, etc.)
- Can certify steps and/or pathways, including certifying proper routing for electronic information through transaction authority telecommunication switches adapted to certify certain information and wherein certificates certify that a required route was followed and/or the sending of such electronic information was pursuant to certain stipulated rules and controls, for example acquiring certain archiving information and/or not exceeding budget and/or other limits and/or restrictions for, for example: numbers of “shipped” information containers in a given period of time, value of electronic currency contained within (represented by) a current container and/or by containers over a certain period of time, financial amount committed in purchase order, proper ordering authority, etc.
- The transaction authority may simply be a secure, watchful bystander to, and certifier of, the electronic transaction and/or transaction step (in a sequence of overall transaction steps), it may be a secure facilitator of a secure plural-party electronic transaction, and/or it may actively and directly participate in the electronic transaction.
- In more detail, a transaction authority in accordance with these inventions may provide the following advantageous features and/or functions:
-
- Securely maintaining and validating event notification information pertaining to a multi-stage transaction and/or chain of handling and control process(es).
- May enforce, through requirements for its certification or authentication, a sequence of required transaction and/or chain of handling and control processes steps based on component representation of elements of a business process, where, for example, one or more transaction authorities respectively certify and/or authenticate one or more specific events at one or more step “locations” in a transaction sequence.
- May form an overall transaction control set from a number of discrete sub-control sets contributed, for example, by a number of different participants.
- Using reciprocal methods to coordinate required transaction events, including for example, sequence of events, between value chain participants.
- Receiving authority from secure chain of handling and control embodied in electronic control sets.
- May intervene to actively manage transactions and/or chain of handling and control processes.
- Can coordinate workflow and/or chain of handling and control processes and/or other business processes.
- Can provide automatic and efficient management based on a trusted, secure distributed electronic commerce environment, including certifying and/or authenticating steps in distributed proprietary information, EDI, financial transaction, and/or trading system value chain activities that very substantially improves security for distributed rights management, wherein such security can meet or exceed the security available with centralized, online commerce models.
- May manage at least a portion of the transactions within and/or between value chain participants (e.g., organizations, individual consumers, virtual groupings).
- May specify and/or monitor, at least in part through the use of rules and controls, conditions of satisfaction for, and/or consequences of, atomic transactions.
- May direct what happens based on error conditions and/or transaction profile analysis (e.g., through use of an inference engine and/or expert system).
- Can provide confidential coordination of security, routing, prioritizing, and negotiating processes allowing different, distributed parties to work efficiently together through a confidential, trusted interface.
- Providing notarization, validation, certification, and/or delivery, as appropriate, for secure document and/or process control.
- Can certify steps and/or pathways, including certifying proper routing for electronic information through transaction authority telecommunication switches adapted to certify certain information and wherein certificates certify that a proper route was followed and the sending of such electronic information was pursuant to certain stipulated rules and controls, for example not exceeding budget or other limits for: numbers of “shipped” information containers in a given period of time, value of electronic currency represented by current container and/or by containers over a certain period of time, financial amount committed in purchase order, proper ordering authority, etc., are issued to satisfy requirements regarding receiving a proper such certification or authentication at a node receiving such routed information.
- Distributing transaction authority functions across a network or other system (for example, every consumer and/or other value chain participant node is potentially a distributed usage clearing service at least in part initiating its own, transaction authority functions, and wherein said participant node may communicate usage information directly to one or more other participants) and in accordance with rules and controls and other VDE techniques as described in the Ginter, et al patent specification.
- May provide arbitration, mediation and negotiation services, electronic or otherwise.
-
FIG. 55 shows a particularexample transaction authority 700 from an overall function viewpoint.Transaction authority 700 provides, among other things, a secure auditing facility for maintaining the current state of an overall transaction or process based upon event notifications it receives from the participants in the transaction. - In this specific example,
transaction authority 700 performs the following functions: -
-
Event notification collection 730, - Validated
event database management 732, -
Requirement generation 734, - Secure authenticated
auditing 736, - Reporting 738,
- Notifying 740,
-
Replication 742, and - Propagation 744.
-
- In this example,
transaction authority 700 receives notifications that events have occurred in the form ofevent notifications 748 which may be carried in one or more secureelectronic containers 152. Eventnotification collection process 730 collects theseevent notifications 748 and may store them in a validatedevent database 732.Transaction authority 700 may generateadditional notifications 748 based on its validatedevent database 732, and may also issueresponses 750 indicating the current status of a transaction or process in response torequests 752 and/or based on other requirements. In addition,transaction authority 700 may generate andoutput audit records 754 indicating the progress and status of transactions or processes based upon the contents of its validatedevents database 732 as analyzed by auditingfunction 736.Transaction authority 700 may also issuereports 756 based on itsreporting function 738. Validatedevent database 732 may be a distributed event notification database, in whichcase replication process 742 and propagation process 744 are used to maintain and update the database in a distributed manner. - Another major function of
transaction authority 700 in this example is to issue new or modifiedevent requirements 758 that can be used to control or influence an overall process or transaction.Transaction authority 700 may receive control set 188, prices andpermissions 188 ,event flow requirements 760 and/orprocess routing requirements 762. Bothevent flow requirements 760 andprocess routing requirements 762 can be specified in one or more control sets. In response to this information and the validatedevent database 732 contents,transaction authority 700 may use itsrequirement generation process 734 to create new or modifiedevent requirements 758.Transaction authority 700 may also create new or modified control sets 188″ and new or modified prices and/orpermissions 188′″.Transaction authority 700 may usefinancial statements 764 as an input to itssecure auditing function 736. -
FIG. 56 shows an example architecture fortransaction authority 700. In this example, transaction authority 700 (which may be based on the VDE rights operating system (“ROS”) architecture shown in Ginter et al.FIGS. 12 and 13 ) includes asecure communications facility 770, a database andtransaction processor 772,process control logic 774, routing tables 776, and an adaptive control set database 778 (these functions could be performed by methods at one or more control sites). In addition,transaction authority 700 may also include adocument notarizer 780 including aseal generator 782, a digitaltime stamp generator 784, and a fingerprint/watermark generator 786. -
Secure communications facility 770permits transaction authority 700 to communicate in a secure manner over electronic network 150 (for example, via secure electronic containers 152). Database andtransaction processor 772 performs most of the processes shown inFIG. 55 . Adaptive control setdatabase 778 may perform the validated event database function. Routing tables 776 may be used as part ofrequirement generation function 734 to route appropriate messages to appropriate entities. -
Process control logic 774 may include an inference engine or expert system for use in handling error conditions not fully anticipated or specified by theevent flow requirements 760 and/orprocess routing requirements 762.Process control logic 774 might operate based on rule based principles, fuzzy logic, neural networks, or a combination of some or all of these—or any other method of process control logic.Process control logic 774 determines the next event that is to occur within the overall transaction or process. -
Document notarizer 780 may be used to provide authenticated document generation, for example, to affix digital seals and/or stenographic information to written and/or digital documents. -
FIG. 57 shows an example transaction authority process. In this simplified example,transaction authority 700 may be an entity internal to a corporation used to securely audit and direct an overall goods delivery process. In this example, acustomer 95 issues anorder 788 for goods. Thisorder 788 is received by anorder receiving department 704 which issues anorder event 710 totransaction authority 700. In response to thisorder event 710,transaction authority 700 may issue rules and/or requirements in the form of one or more electronic control sets 188 specifying how theorder receiving department 704 is to handle the order. Theserules 188 may specify, for example, a sequence of chain and handling that also directs the activities of afulfillment department 709A, awarehouse 709B, atransportation company 726, and a payment collection department 709C. Therules 188?which may be passed from one department to the other within secureelectronic containers 152—thus specifies the requirements and overall process flow of the transaction that is to occur. Each department may then pass thesecure controls 188 along to the next department, with routing being directed by the rules themselves and/or bytransaction authority 700. Each department may also issueevent notifications 748 alertingtransaction authority 700 of the current status of the overall process.Transaction authority 700 may store this status information within its secure validatedevent database 732 for auditing purposes and/or to permit the transaction authority to direct the next step in the process. -
Transaction authority 700 can, for example, use the interaction models shown inFIGS. 17E-1 through 17E-4 to interaction with an ongoing transaction or process. One particularly useful scenario fortransaction authority 700 is to manage a process performed by multiple parties, such as corporations working on a joint venture or other common objective. In this type of business scenario, multiple corporations may be working toward a common overall goal but may themselves have their own objectives internally such as, for example, protecting their own confidential trade secret information.Transaction authority 700 can be used as an independent third party mediator/arbitrator to coordinate activities between the multiple corporations without requiring any of the corporations to expose detailed process information to anyone other thantransaction authority 700. - For example,
transaction authority 700 can generate control sets specifying event flow and/orprocess routing requirements 758 and/or control sets 188 that mean different things in different contexts. As an example, a control set thattransaction authority 700 issues might cause one corporation to perform one step and another corporation to perform another step—with each corporation never learning the particular step or sequence of steps being performed by the other corporation. Thus,transaction authority 700 can develop control sets 188 that can be used to provide only partial disclosure between different individual or corporate actors. -
FIGS. 58A and 58B show example steps and processes performed bytransaction authority 700 to perform an “atomic transaction”. In this example,transaction authority 700 performs a role that is somewhat analogous to the coach of a football team. By accepting the skill set and requirements of each individual “player” and linking them together into an overall “game plan,” thetransaction authority 700 can involve any number of value chain participants in an overall “atomic” transaction. - In this example, each value chain participant 164(1), . . . 164(N) in a process administered by
transaction authority 700 could contribute a control set 188(1), . . . 188(N) specifying or governing the participant's own business requirements, limitations and processes for the transaction (FIGS. 58A and 58B , block 750). These individual control sets 188(1), 188(N) specify how each individual participant performs its own role. Each participant 164(1) . . . 164(N) knows its own role in the overall transaction, but may have no idea what roles others may play or have any clear idea how to form a “team” of other participants—and so these individual control sets 188(1), 188(N) typically describe only sub-transactions and may not take overall transaction considerations into account. -
Transaction authority 700 also receives another control set 188X specifying how to link the various participants' control sets together into overall transaction processes with requirements and limitations (FIGS. 58A and 58B , block 752). This overall transaction control set 188Y specifies how to resolve conflicts between the sub-transaction control sets 188(1), 188(N) provided by the individual participants (this could involve, for example, anelectronic negotiation process 798 as shown inFIGS. 75A-76A of the Ginter et al. patent disclosure). Thetransaction authority 700 combines the participant's individual control sets—tying them together with additional logic to create an overall transaction control superset 188Y (FIGS. 58A and 58B , block 752). Transaction authority stores the resulting control superset 188Y in local storage (FIG. 58B , block 754). This overall control superset controls howtransaction authority 700 processes events to perform an “atomic” transaction. - Upon receipt of an incoming event requiring processing (
FIG. 58B , block 756),transaction authority 700 may activate the overall transaction control superset 188Y (FIG. 58B , block 758). Thetransaction authority 700 may then deliver corresponding reciprocal control sets corresponding to portions of the overall transaction control superset 188Y to each participant in the transaction—thereby enabling each participant to communicate with the superset (FIG. 58B , block 760). Alternatively, each participant in this example may—at the time it contributes its control set 188(1), 188(N) totransaction authority 700—maintain a reciprocal control set that can communicate with the control set the participant sent totransaction authority 700. -
Transaction authority 700 may then begin monitoring events received using the activated control superset (FIG. 58B , block 762). If the incoming event is not an error condition (“N” exit toFIG. 58B decision block 764), thentransaction authority 700 determines whether the event indicates that the atomic transaction is complete (FIG. 58B , block 765). If the atomic transaction is not complete (“N” exit toFIG. 58B , decision block 765), control returns to block 762 to monitor events. If the atomic transaction is complete (“Y”) exit to decision block 765), thetransaction authority 700 determines that the transaction is finished (FIG. 58B , block 774). - If the incoming event is an error condition (“Y” exit to
FIG. 58B decision block 764),transaction authority 700 processes the error event in the control superset 188Y (FIG. 58B , block 766). If the error is not critical (FIG. 58B ,decision block 767, “N” exit), then control returns to block 762 to wait for the next event notification to arrive. - If the error is critical (
FIG. 58B ,decision block 767, “Y” exit),transaction authority 700 may call a critical error handing routine (FIG. 58B , block 768). Critical error handling routine 768 may attempt to resolve the error based on the rules within the control superset 188Y and/or on aninference engine 774 or other process control logic. Such an inference engine or otherprocess control logic 774 may be programmed concerning the business model of the overall transaction so it has enough information to select appropriate actions based on error conditions. - The process shown in
FIG. 58B can be nested. For example, the sub-transaction defined by one “participant” may itself be an atomic transaction based on the contributions of a number of participants—all of which are managed by the same ordifferent transaction authority 700. - Security Checkpoint Commerce Utility System
- A
Commerce Utility System 90 can include service functions that enable it to perform as a “Security Checkpoint System 6000” (seeFIG. 58C ) that provides security, archiving, and non-repudiation services that can certify and/or authenticate communicated information in certain ways.Security Checkpoint Systems 6000 can: -
- provide a distributed, highly efficient, and automated auditing and archiving layer for electronic commerce interactions, and
- enhance the depth of security of a distributed security environment such as VDE and the Distributed Commerce Utility layer.
- Thus,
Security Checkpoint System 6000 may perform security and/or administrative functions. This Commerce Utility System capability takes the positive benefits of centralized security models (e.g., ability to have a central authority physically control the processing node) and deploys these capabilities into a distributed “user space” model that can achieve maximum efficiency and flexibility, support secure and manageable scalability (a principal weakness of centralized systems), and provide the enhanced security benefits of multiple, independent, secure environment layers. The latter capability is particularly adapted for highly sensitive communications desiring extra security assurance. These security layers are enabled by the required participation and security processing of one or more independent security checkpoint protected processing environments that reinforces the foundation distributed security environment. - Information that passes through one or more
Security Checkpoint Systems 6000 can be certified and/or authenticated to assure an information recipient (e.g., a party receiving information in a container) that certain communications functions and/or security steps (processes) occurred prior to receiving the information. This certification and/or authentication can include, for example, certifying or authenticating proper communication routing through required and/or authorized protected processingSecurity Checkpoint Systems 6000. Such checkpoints may be, for example, distributed throughout a telecommunications network, and “local” to the physical and/or logical location of end-user VDE nodes (seeFIG. 58C ). -
Security Checkpoint Systems 6000 may employ telecommunication switches adapted to certify and/or authenticate certain information and processes. For example, certificates issued by aSecurity Checkpoint System 6000 may certify that a required route was followed and that a required checkpoint examined a communicated secure electronic container, and/or that the sending of such a container or other electronic information was performed pursuant to certain stipulated rules and controls. For example, such a service can help ensure and/or certify and/or authenticate, that certain budgets, other limits, and/or restrictions are not exceeded, and/or certain other requirements are met. - For example, a
Security Checkpoint System 6000 may help ensure requirements (including that limits or other restrictions are not exceeded) for: the number of “shipped” information containers in a given period of time; the value of electronic currency contained within (or represented by) a given container and/or by containers over a certain period of time (very important to reduce improper electronic currency activities); the financial amount committed in a purchase order, including that proper ordering authority is present; and so on. Such requirement assessment may be in reference to, for example, container (or other digital information communication) activity communicated from a certain logical and/or physical area, node, node group, user or user organization, and/or other user grouping, wherein said reference is determined through referencing secure node and/or individual user and/or organization and/or area identification information as, for example, a VDE secure container travels through said adapted one or more telecommunication switches. - These Commerce Utility System “communications checkpoint” capabilities can provide useful security features by, for example, providing one or more “independent” distributed security “check points” along a telecommunication route that substantially increases security reliability by requiring the presence of a proper certificate and/or authentication securely provided by such checkpoint and securely associated with and/or inserted within said container by a process managed by said checkpoint (or a group of checkpoints). This presence can be tested by a receiving node—and a proper certificate or authentication can be required to be present, for example according to rules and controls, before such receiving node will process at least a portion of the content of one or more classes of received containers. Such container classes may include, for example, containers from specific individuals and/or groups and/or containers and/or container contents that have certain one or more specific attributes.
-
Security Checkpoint Systems 6000 may be “independent” of end-user Virtual Distribution Environment nodes from a security perspective. Such nodes may, for example, be independent from a security perspective because they use key management to maintain multiple secure execution compartments within their protected processing environments for checkpoint management, such that a security breach in end-user nodes shall not directly comprise the security of checkpoint operation, and to help ensure that a breach related to a secure execution compartment will not comprise other such compartments. -
Security Checkpoint Systems 6000 may also gather audit information including, for example, retrieving identity information of intended container recipient(s), class(es) of container information, checksum and/or other information employed for future validation (e.g., non-repudiation), and/or archiving of some or all portions of said container's content. Some of this information may be at least in part in encrypted such that one or more portions of such information may not be decrypted without the cooperation of one or more of the container sender, the intended and/or actual container recipient(s), and/or a government body having authority to access such information. -
FIGS. 58C and 58D show an example of a “checkpoint security”Commerce Utility System 6000 arrangement that provides communication checkpoint security, non-repudiation, and archiving services within the context of a telecommunications network connecting users 95(1), 95(2), 95(3). In this example, thesecurity checkpoint systems 6000 may be part of the telecommunications infrastructure. For examplesecurity checkpoint systems 6000 may be part of one or more telecommunications switches or other equipment that has been designed to detect secureelectronic containers 152 based, for example, on the header information they contain. -
Security checkpoint systems 6000 in this example have the secure ability to control whether or not asecure container 152 transmitted through the communications infrastructure will be permitted to pass—and the consequences of routing the container through the communications infrastructure. In one example, controls operating with a user 95(1)'s protected processing environment may require certain kinds of containers 152 (e.g., containers that carry electronic currency) to includecontrols 404 that require them to be routed through a security checkpoint systems 6000 (or a certain class of security checkpoint systems).Such controls 404 can prevent thecontainer 152 or its content (e.g., currency it contains) from being used unless it is routed through the appropriatesecurity checkpoint system 6000. - For example, suppose that user 95(1) wishes to send a
secure container 152 to user 95(2). In this example, the user 95(1) transmits thecontainer 152 to user 95(2) through the telecommunications infrastructure. That infrastructure may detect that the information being sent is a container, and may route the container for interception by the a security checkpoint system (system 6000(5), for example). - Security checkpoint system 6000(5) may, after intercepting the
container 152, examine the control information within the container to determine whether requirements for further communicating the container to user 95(2) have been satisfied. Security checkpoint system 6000(5) may forward the container to user 95(2) only if those requirements have been met—or it may modify the container to permit user 95(2) to open and use the container subject to the container's controls 404 (which may limit use, for example). Thesecurity checkpoint system 6000 may be authorized to modify at least a portion of the container'scontrols 404—for example to add further use limitations. - This
FIG. 58C example shows two “webs” ofsecurity checkpoint systems 6000. In this example, these “webs” represent collections ofsecurity checkpoint systems 6000 that have each been certified (by a CertifyingAuthority 500 for example) as being: -
- (1) a security checkpoint system, and
- (2) a member of the particular class.
- Hence, in this example “
web 1” represents the class of certified security checkpoint systems 6000(1)-6000(5), 6000(7); andWeb 2 represents the class of security checkpoint systems 6000(4)-6000(6). As one example, “web 1”security checkpoint systems 6000 may be certified as being capable of handling containers containingelectronic currency 6004. - One of the requirements specified within the control information associated with the
container 152 may be that it must pass through a “web 2” security checkpoint system (e.g., system 6000(5))—for example, to enable certain secure auditing functions such as trusted electronic currency tracking. A “web 1” security checkpoint system (e.g., system 6000(3)) may refuse to pass thecontainer 152 to user 95(2) based on thesecontrols 404—or it may refuse to modify thecontainer 152 to make it usable by user 95(2). - By way of further example, suppose user 95(2) wishes to pass the
container 152 along to another user 95(3). Thecontrols 404 associated with thecontainer 152 may require, in this particular example, that further communication of thecontainer 152 must be through a “web 1” security checkpoint system 6000(7). This routing requirement may be been present in thecontrols 404 provided by user 95(1), or it may be added by security checkpoint system 6000(5) or the user 95(2)'s protected processing environment. - In the particular example shown, the
controls 404 may enable the “web 1” security checkpoint system 6000(7) to pass thecontainer 152 along to user 95(3) via a further routing that does not include a security checkpoint system 6000 (e.g., via another type of commerce utility system and/or a non-secure telecommunications switch). -
FIG. 58D shows an example process performed by an example security checkpoint system. In this example process, thesecurity checkpoint system 6000 receives a container 152 (FIG. 58D , block 6002) and determines whether the requirements specified by its associatedcontrols 404 have been satisfied (FIG. 58D , decision block 6004). If the requirements have been satisfied, thesecurity checkpoint system 6000 may perform “requirements satisified” consequences, e.g., modifyingcontrols 404 to satisfy the routing requirement mentioned above (FIG. 58D , block 6006). If the requirements are not satisfied (FIG. 58D , “N” exit to decision block 6004), the security checkpoint system may perform “requirements not satisfied” consequences (FIG. 58D , block 6008). - Each set of consequences may involve some form of secure auditing, for example. If the
security checkpoint 6000 passes acontainer 152 containing electronic currency for example, thesecurity checkpoint 6000 may record one or more of the following auditing information: -
- sender identity,
- sender node identity,
- receiver identity,
- receiver node identity,
- certificate(s) on which the currency is based,
-
other security checkpoints 6000 the currency has passed through, - the identity of prior handlers of the currency,
- date, time, and location of transmission,
- date, time, and location of receipt,
- how long the currency has been in transit, and
- other secure auditing information.
- If the
security checkpoint system 6000 refuses to pass and/or modify acontainer 152, it may produce an audit report including available tracking information, for example: -
- sender name,
- nature of deficiency,
- intended receiver, and
- other tracking information.
- It may also notify the sender, the intended receiver, a government agency, or other authority. It may further charge a “failed communication” overhead fee to the sender, for example.
- The
security checkpoint system 6000 may then determine whether additional communications are required (FIG. 58D , decision block 6010). If not, the process may complete. If additional communications are required (“Y” exit to decision block 6010), thesecurity checkpoint system 6000 may transmit thecontainer 152 to the next system (FIG. 58D , block 6012). The next system may be an additionalsecurity checkpoint system 6000 that performs additional processing (FIG. 58D , blocks 6016, 6004, 6006, 6008). -
FIG. 59 shows how example DistributedCommerce Utility 75 can be used to support an example electronic contentdistribution value chain 162. In theFIG. 59 example, anauthor 164 may create a valuable work, such as a novel, television program, musical composition, or the like. The author provides this work 166 (for example, in electronic digital form) to apublisher 168. - The publisher may use his own branding, name recognition and marketing efforts to distribute the work to a
consumer 95. Thepublisher 168 may also provide thework 166 to a content “aggregator” 170—someone who provides customers access to a wide range of content from multiple sources. Examples of aggregators include, for example, traditional on-line information database services and World Wide Web sites that host content from many diverse sources. Typically, consumers use an aggregator's services by searching for information relevant to one or more consumer-defined topics. Anaggregator 170 may provide the search tools to theconsumer 95 who will make their own selections. - The
aggregator 170 might distribute thework 172 containing some or all of theoriginal work 166 directly toconsumer 95.Aggregator 170 may also distribute thework 172 to a “repackager” 174.Repackager 174 may, for example, take content from several sources on related matters and combine them into mixed source products, such as multimedia combinations, newsletter publications, or “current awareness” packages. In these services, the repackager makes the selection of content and organizes based on audience-indicated interest. Aconsumer 95 may subscribe to an electronic newsletter on a particular topic or the consumer may give the repackager 174 a short list of topics they are interested in. Therepackager 174 will select relevant information and communicate the information to the customer. Here the repackager is doing the selecting for the consumer. - For example,
repackager 174 might be the publisher of a newsletter and might republish some or all of the author'swork 166 in thisnewsletter 176.Repackager 174 could directly distributenewsletter 176 toconsumer 95, or the newsletter could pass through still additional channels.Repackager 174 could use a search engine provided byaggregator 170 to find articles of interest toconsumer 95 and combine those articles into an electronic newsletter that has both theaggregator 170's brand and therepackagers 174's brand, and then send the newsletter to theconsumer 95. - Distributed
Commerce Utility 75 may support theFIG. 59 value chain in a number of ways. For example: - 1. Certifying
authority 500 can issue certificates that allow each of the value chain participants to identify who they are and to demonstrate that they are members of one or more particular classes. For example,author 164 and/orpublisher 168 might specify that any certified aggregator or repackager is entitled to excerpt oranthologize work 166 so long as appropriate payment is made. Certifyingauthority 500 could issuedigital certificates 504 supporting this desired business objective, the certificates certifying thataggregator 170 is in fact a reputable aggregator and thatrepackager 174 in fact a reputable repackager. So long asauthor 164 and/orpublisher 168 trust the security of the overall system 50 and thecertificates 504 issued by certifyingauthority 500, they will have no fear that thework 166 will be excerpted or anthologized by anyone other than the appropriate types of people they specify. - In another example, certifying
authority 500 could issue acertificate 504 toaggregator 170 or other user. Certifyingauthority 500 could issue thiscertificate 504 at the direction ofauthor 164 orpublisher 168. Thecertificate 504 may attest to the fact thatauthor 164 orpublisher 168 agree thataggregator 170 or other user is authorized to modifycertain permissions 404.Author 164 orpublisher 168 may have specifiedpermissions 404 so that that will allow themselves to be modified only on the condition that an “authorized aggregator” certificate is present. - In another example, certifying
authority 500 could issue a certificate to one or more classes of users, enabling, for example, utilization of content and/or specific portions of content and/or modification of permissions, which such enabling may be limited to specific utilization and/or modification by employing certain VDE rules and controls put in place by the author or publisher or certificate authority (as allowed by in place rules and controls). - 2. Rights and
permissions clearinghouse 400 in this particular example may be used to registerwork 166 and issueappropriate permissions 404 consistent with authorizations and instructions provided by each value chain participant. For example, theauthor 164 could registerwork 166 with rights andpermissions clearinghouse 400, and specify an electronic control set 404 defining the rights of every other value chain participant. - For example:
-
- This control set 404 could specify, as one example, that
publisher 168 can distribute an unlimited number of copies of thework 166 so long as the publisher pays the author 164 a certain dollar amount for each copy distributed. - The control set 404 might permit
publisher 168 to add his own additional controls that allowconsumer 95 to read thework 166 an unlimited number of times but prevents the consumer from copying or redistributing the work. - Although the electronic control set may travel in an
electronic container 152 with thework 166, it may also be provided separately. For example, rights andpermissions clearinghouse 400 might, upon request, supply a control set associated withwork 166 to anyone who requests a control set.
- This control set 404 could specify, as one example, that
- Rights and
permissions clearinghouse 400 might maintain different versions of the control set 404 for different user classes so that, for example,consumers 95 might receive one control set 404 a,aggregators 170 might receive another control set 404 b, andrepackagers 174 might receive a still further, different control set 404 c. Each of these control sets can be provided in advance byauthor 164 or other rights holders, providing a “pre-approved permissioning” system that makes widespread usage ofwork 166 extremely efficient and yet highly secure, and further, such control sets may interact with VDE distributed template applications in a seamless manner—one or more template applications may be distributed with a control set by such distributors of such control sets (or may be otherwise made available) to such control set recipients. In one particular “superdistribution” business model,work 166 is allowed to be distributed as widely as possible, and rights andpermissions clearinghouse 400 does the work of providing current control sets 404 authorizing particular value chain participants to use the work in particular ways under particular conditions. - 3.
Usage clearinghouse 300 in this particular example may support the value chain by collecting usage information from each value chain participant. Theusage clearinghouse 300 may thus provide a secure auditing function, generating, for example, reports that track how many times thework 166 has been used and how it has been used. - As one example,
usage clearinghouse 300 might analyze usage information to determine howmany consumers 95 have read the work.Usage clearinghouse 300 can, for example, report consumption information in varying amounts of detail and/or specific kinds of information, to various value chain participants consistent with privacy concerns and the accepted business rights of each party. As one example, theusage clearinghouse 300 might give consumer 95 a very detailed report about his or her own particular usage ofwork 166, while providingauthor 164 orpublisher 168 with only summary report information that may, for example, not include the consumer name, address, or other direct, identifying information. - As another example, reports could also flow directly from the
repackager 174 to theaggregator 170,publisher 168 andauthor 164. Reports may be directed along any logical pathway, directly, or through any sequence of parties, and containing whatever mix of information for each party as is acceptable to the value chain and as may be enforced, for example, at least in part by VDE rules and controls - 4.
Financial clearinghouse 200, in this example, may provide secure clearing of financial details of the transaction—ensuring that appropriate value chain participants compensate other appropriate value chain participants. As one example,financial clearinghouse 200 may receive payments fromconsumer 95 based on the consumer's use ofwork 166, and distribute parts of the payments appropriately toauthor 164,publisher 168, and other appropriate value chain participants in an automated, efficient process managed at least in part by VDE rules and controls. For example,financial clearinghouse 200 might interface with other banks or financial institutions to accomplish an automation of payment transfers, and/or it might assist in managing electronic money maintained within the overall value chain shown.Financial clearinghouse 200 may also assist in ensuring that itself and the otherCommerce Utility Systems 90 are appropriately compensated for the administrative and support services they provide, that is, for example, secure VDE processes operating withinCommerce Utility Systems 90 may automatically ensure the payment to such administrative and support service providers. - 5.
Secure directory services 600, in this example, may support the example value chain by facilitating electronic communications between value chain participants and/or betweenCommerce Utility Systems 90. For example,secure directory services 600 can, upon request, provide electronic address and/or routing information allowing one value chain participant to electronically contact another. As one example, suppose aconsumer 95 wants to obtain the latest addition ofwork 166 but discovers that the electronic address ofpublisher 168 has changed.Consumer 95 can electronically contactsecure directory services 600, which can provide current address information. Of course, in commercial trading system applications, for example, secure directory services may provide much more elaborate services for the identification of desired parties, such as multi-dimensional searching of directory resources for identifying parties based on class attributes.Secure directory services 600 may also provide services that enable the identification of content, for example based upon content type and/or rules and controls associated with such content (pricing, allowed usage parameters such as redistribution rights, etc.). - 6.
Transaction authority 700 in this example might be used to assistrepackager 174 in developingnewsletter 176. For example,transaction authority 700 might help in automating a process in which a number of different works created by a number of different authors were all aggregated and excerpted for publication in the newsletter.Transaction authority 700 can securely maintain the current status of an overall multi-step process, specifying which steps have already been performed and which steps have yet to be performed.Transaction authority 700 can also, for example, help arbitrate and mediate between different participants in such a multi-step process, and can in some cases actively influence or control the process (for example, by issuing new instructions or requirements based upon error or other conditions). -
FIG. 60 shows an example manufacturing value chain supported by DistributedCommerce Utility 75. In this particular example, acustomer 95 places an order with amanufacturer 180 and receives an order confirmation. The manufacturer may order parts and supplies from a number of different suppliers 182(1)-182(N). Suppliers 181(1)-182(N) may, in turn, order additional parts or sub-assemblies from additional suppliers 182(a 1), . . . . Abank 184 may supply funds tosuppliers 182 based on proofs of order and assurances that the manufacturer will pay back the advances. A transportation/warehousing company 186 may provide transportation and warehousing for supplies and/or final products. - In this value chain, certifying
authority 500 andtransaction authority 700 can assist with secure flow of electronic orders, confirmations, terms and conditions, and contracts, and can also help to ensure that each value chain participant can maintain the desired degree of confidentiality while exchanging necessary information with other value chain participants.Usage clearinghouse 300 may assist in secure auditing of the overall process, tracking of physical and electronic parcels between the value chain participants, and other usage related operations.Financial clearinghouse 200 may handle the financial arrangements between the value chain participants, for example, assisting in coordinating between the world ofelectronic network 150 and a paper-oriented or other world ofbank 184. Rights andpermissions clearinghouse 400 may provide a secure archive forelectronic controls 404 defining parts or all of the transaction.Transaction authority 700 may securely monitor the overall progress of transactions occurring among value chain participants, and provide periodic status reports as appropriate to each value chain participant. In addition,transaction authority 700 can assist in directing or arbitrating the overall transactions to ensure that all steps and requirements are fulfilled.Secure directory services 600 can assist in routing information electronically between the different value chain participants. Of course, as previously stated for the present inventions and as applicable throughout this specification, VDE chain of handling and control and other capabilities, including rules and controls and secure communication techniques, would preferably be used as a foundation for the above activities. - Examples of how Commerce Utility Systems can Support One Another
-
FIGS. 16A-16E described above show how differentCommerce Utility Systems 90 can support one another. In more detail,FIG. 16A shows that afinancial clearinghouse 200 may provide services to one or more otherCommerce Utility Systems 90, including, for example, theusage clearinghouse 300, the rights andpermissions clearinghouse 400, the certifyingauthority 500, thesecure directory services 600, thetransaction authority 700 and anotherfinancial clearinghouse 200′. Under such circumstances, the plural Commerce Utility Systems constitute both a virtual clearinghouse and a higher order Commerce Utility System. - In each instance, the
financial clearinghouse 200 may collect funds due the support services and deposit these funds to at least one provider account employing at least one payment method. Thefinancial clearinghouse 200 may also provide VDE audit records confirming the source and amount of the funds and the provider account in which the funds were deposited by thefinancial clearinghouse 200. Thefinancial clearinghouse 200 may provide assistance to one or more other support services in establishing provider accounts and communicating to such one or more support services the account number and/or numbers and terms and conditions that may apply. Both the support service request to thefinancial clearinghouse 200 and its responses to the requesting support service can be communicated in VDE secure containers (as mentioned earlier) to take advantage of their substantial security, confidentiality, flexible control architecture, and trustedness, and can be processed at each location by one or more VDE Protected Processing Environments. Financial and account information may be provided in the form of VDE control sets and/or be incorporated in VDE control sets by thefinancial clearinghouse 200 and/or by one or more other support services.Financial clearinghouses 200 may also provide services to each other to promote further operating and administrative efficiencies. For example, onefinancial clearinghouse 200 may provide services to its counterparts in other countries or in other geographic regions. In another example, onefinancial clearinghouse 200 may provide anotherfinancial clearinghouse 200 access to one or more payment methods not directly supported by the secondfinancial clearinghouse 200. -
FIG. 16B shows that theusage clearinghouse 300 may also provide services to otherCommerce Utility Systems 90. In one example, theusage clearinghouse 300 may provide raw data, aggregated data, at least in part derived information, and/or reports to other electronic commerce support services such asfinancial clearinghouses 200, rights andpermissions clearinghouses 400, certifyingauthorities 500,secure directory services 600,transaction authorities 700, andother usage clearinghouses 300′. These other infrastructure services may use this information as independent third party verification of certain transactions and their details, for market research on behalf of their own services, and/or to resell this information, perhaps in conjunction with their own usage information. In one example, a rights andpermissions clearinghouse 400 might sell reports to a publisher containing a combination of their own information, and that from thefinancial clearinghouse 200 andusage clearinghouse 300 plussecure directory service 600 and certifyingauthority 500. More specifically, a report might contain a list of objects registered at the rights andpermissions clearinghouse 400 by a particular publisher, the number of requests to the rights and permissions clearinghouse for updated or additional rights and permissions,financial clearinghouse 200 summary revenue numbers for each digital property, the number of certificates by the certifyingauthority 500 on behalf of the publisher indicating that the user had been certified and had a valid subscription to the publisher's digital works, and the number of requests to thesecure directory service 600 seeking information about the network addresses of the publisher's online web servers. In each case, a support service provided the information to the rights and permissions clearinghouse for incorporation in this report to the publisher. - Distributed
Commerce Utility 75 provides significant trustedness, security, convenience, and efficiencies for instances in which customers pay for digital information. Moreover, information creators and distributors can price this information—indeed, any digital property in any digital format—in various ways and in different ways in different markets. -
FIG. 61 shows an example of an informationdelivery service arrangement 1000 in which aninformation provider 168 provides electronic content for purchase, rental and/or licensing. In this example, aninformation services company 168 distributesinformation 166 to several global markets, including individuals, Their market areas include professionals, home office users, and the small office marketplace, as well as medium and large companies and consumers at home. For example,provider 168 may delivercontent 166 in electronic form to a home consumer 95(1), a professional such as a lawyer 95(2), and to a corporation or other organization 95(3). In one example: -
- an individual consumer 95(1) buys under subscription pricing three articles 166(1) from an online encyclopedia;
- a lawyer 95(2) buys three chapters 166(2) from a treatise on patent law; and
- two product marketing managers in a large company 95(3) receive a proprietary market research report 166(3).
- Prior to information delivery transactions, the consumer 95(1), professional 95(2) and company 95(3) may use a
secure directory service 600 to locate the network address of theinformation provider 168 as well as assist in identifying the content they wish to work with. Subsequently, theseparties 95 may send an electronic message toprovider 168 requesting the specific information they want to receive.Provider 168 may deliver thisinformation 166 within VDE secureelectronic containers 152 along with associated rules and controls 188 that control pricing and permissions. Each ofparties 95 has anelectronic appliance 100 including a protectedprocessing environment 154 that enforces thesecontrols 188. - The
provider 168 can price information differently for different markets. For example: -
- professionals 95(2) and SOHO (small office/home office) pay transaction fees;
- large companies 95(3) pay a mixture of subscription and transaction fees (e.g., company 95(3) may pay $10 per page printed or excerpted from a larger report, and may also pay a subscription fee); and
- Individual consumers 95(1) pay a flat subscription rate.
- In each of these cases, local, state, and/or federal sales taxes, as appropriate, are included in the retail price. Payment methods may be provided within electronic control sets 188 delivered in
electronic containers 152 with, and/or independently of, the associated content 166 (for example, as provided in Ginter, et al). - A
financial clearinghouse 200 ensures thatprovider 168 receives payment through any authorized payment method. Theinformation delivery service 168 accepts a broad range of payment methods. Some forms of payment are more popular in certain markets than in others. For example: -
- In the professional, SOHO, and consumer markets, credit (MasterCard and Visa) and charge (American Express) are popular.
- Consumers 95(1) also like credit cards, and are making increasing use of bank debit cards.
- Large companies 95(3) also use credit and charge cards, payment through Automated Clearinghouses (ACHs), and billing and payment through traditional and VDE secure Electronic Data Interchange (EDI) transactions based, for example, on X.12 protocols.
- A
financial clearinghouse 200 makes payment more efficient in several ways. For example,financial clearinghouse 200 furnishesprovider 168 with a convenient, “one stop shopping” interface to the several payment methods, and keeps track of the at least one account number associated with a given provider. - In this particular example, a certifying
authority 500 may deliver digital certificates to each ofconsumers 95 specifying a consumer's one or more classes. For example, certifyingauthority 500 may deliver: -
- one or more certificates 504(1) attesting to the fact that consumer 95(1) is an individual consumer subscriber to
information service 1000 and further attesting to the fact that the consumer is a registered college student and is a resident (for the taxation purposes related to the transaction) of California, - a certificate 504(2) attesting to the fact that professional 95(2) is a lawyer admitted before the bar of the State of California, and
- one or more certificates 504(3) attesting to the fact that corporation 95(3) is a legally incorporated entity and has a certain credit worthiness.
- one or more certificates 504(1) attesting to the fact that consumer 95(1) is an individual consumer subscriber to
- Control sets 188 may activate the different payment methods based on the presence of an appropriate
digital certificate 504. For example, control set 188(1) delivered to consumer electronic appliance 100(1) authorizes consumer 95(1) to use each of the three articles 166(1). Control set 188(1) may, for example, contain a requirement that the consumer 95(1) must have a certificate 504(1) from an independent certifying authority 500 (or from the information distributor or other party acting in a certifying authority capacity under authorization from a more senior certifying authority) attesting to the fact that the consumer 95(1) has a subscription that has not yet expired to the online encyclopedia. This certificate 504(1) may, for example, be used in conjunction with other certificates issued by the certifying authority 500 (e.g., perhaps run by, or authorized by, the US government or other governing body) attesting to the fact that the consumer 95(1) is a US citizen, resides within the US, and is a legal resident of the State of California. - The Individual Consumer
- The consumer 95(1) pays the
information provider 168 for the subscription through a transaction transmitted to thefinancial clearinghouse 200 in a VDEelectronic container 152. The payment transaction may involve, for example, theconsumer appliance 100 sending tofinancial clearinghouse 200 an electronic container 152(7) including rules and controls 188(4) and audit records 302(1). The audit records 302(1) may indicate, for example: -
- who should be paid,
- the amount of the transaction,
- the particular payment method (a VISA card, for example),
- the subscriber's VISA card number and expiration date,
- an identifier of the information subscription, and
- the number of the provider's account to which the payment should be credited.
- The secure container 152(7) may also contain rules and controls 188(4) indicating that municipal, California and US federal sales taxes should also be collected. The
financial clearinghouse 200 collects the appropriate sales taxes and deposits the funds in the appropriate accounts, for example certain funds would be deposited in the account belonging to the appropriate State of Californiatax collection agency 1002. - In exchange for the payment, the subscribing customer 95(1) may receive from certifying
authority 500 a certificate 504(1) indicating she is in fact a subscriber and the expiration date of the current subscription. - The Professional
- The lawyer 95(2) in this example may be located in the United Kingdom. He purchases the three chapters 166(2) from a treatise on patents using a MasterCard, but pays in pounds sterling rather than in dollars. To perform the purchase transaction, the lawyer 95(2) may first be preauthorized by the
financial clearinghouse 200 for purchases each month of up to $500 US (or the equivalent in pounds). The pre-authorization may be sent from thefinancial clearinghouse 200 to the lawyer's appliance 100(2) in the form of a budget control 188(5) in a secure container 152(8). The protected processing environment 154(2) within the lawyer's appliance 100(3) may open the container 152(8), authenticate the budget record 188(5), and store the control within an associated secure database maintained by PPE 154(2). - Upon receiving opening each of the three chapters 166(1), the lawyer's protected processing environment 154(2) may create an associated audit record, and may decrement available credit in the budget record by the amount of the purchase. At month end, or when the $500 preauthorized credit has been exhausted, the lawyer's PPE 154(2) may send to the
financial clearinghouse 200, a secure container 152(9) with audit records 302(2) indicating all the purchases, their amounts, and the provider account or accounts to be credited, this supporting efficient automation of clearing processes. Thefinancial clearinghouse 200 may open the secure container 152(9), debit the lawyer's credit card account, and pay the appropriate provider accounts their due. - The Company
- Preliminary to content transactions, a distributed corporate
financial clearinghouse 200A within the company 95(3), while operating under the authority of thefinancial clearinghouse 200, sends to each of managers 95(3)A, 95(3)B asecure container 152 abudget record 188 indicating their currently approved monthly information and market research budget. A corporate distributed certifyingauthority 500A (in the same trust hierarchy as the certifyingauthority 500, in this example) may also issue digital certificates 504 (not shown) to employees of the company. - In this example, each product manager 95(3)A, 95(3)B prints selected portions of the report and the budget on his or her
local appliance 100, which is decremented by $10 for each page printed. The protected processing environment 154(3) within the local electronic appliance 100(3) securely performs this process, conditioning it on controls 188(3) that may require appropriate digital certificates 504(3) issued by certifyingauthority 500 and/or the distributed corporate certifyingauthority 500A. - According to controls 188(3) supplied by the information provider, for example, at the end of the month, or when the budget for that month is exhausted, the corporation's appliance 100(3) sends to the corporate internal
financial clearinghouse 200A audit records (not shown) indicating any purchases that might have been made during the reporting interval and the amounts and provider account numbers for those purchases. The distributed, local corporatefinancial clearinghouse 200A aggregates the sums in the audit records and sends in a secure container 152(12) at least one audit record 302(3) to the externalfinancial clearinghouse 200 to authorize payment of the total amount owed the provider of the market research reports through an Automated Clearinghouse (ACH). Also in the secure container 152(11) (e.g., as part of audit record 302(3)) are the account number of the company 95(3) from which the funds should be debited and the account number of the market research company that issued the report into which the funds should be credited. Thefinancial clearinghouse 200 completes the payment process through the ACH and sends a VDE secure container (providing at least one audit record) back to the internal, corporatefinancial clearinghouse 200A as confirmation. Distributedclearinghouse 200A may, in turn, send, using a secure container (not shown), at least one confirming audit record to each of the product managers 95(3)A, 95(3)B. - A significant portion of electronic commerce will entail the sale, purchase, distribution management, and/or payment for intangibles of all kinds. Commerce in tangibles has many of the same security, trustedness, and efficiency requirements as commerce in intangibles (e.g., digital information). For the computer to become a true commerce appliance, a distributed, secure, trusted rights/event management software layer (e.g., rights operating system or middleware) such as the Virtual Distribution Environment described in the Ginter et al. specification is a necessity. Thus, even when tangibles rather than digital properties are the object of secure electronic commerce, Distributed
Commerce Utility 75 can play an important role. -
FIG. 62 shows an example tangible goods purchasing and payment system 1010. In theFIG. 62 example, imagine a well-known provider of clothing and certain related household items, for example, L.L. Bean or Lands' End, offers their wares over a digital network such as the Internet/World Wide Web. In this example, the company creates: -
- a
Web catalog server 1012 to offer a line of clothing toconsumers 95, - a
web fulfillment server 1014 that is an interface to the fulfillment function, and - a
third web server 1016 that acts as a securefinancial clearinghouse 200 and as an interface to several payment methods (e.g., MasterCard (“MC”), VISA, and American Express (“AMEX”).
- a
- The company also in this one example
-
- registers the service with the secure
directory service provider 600, and - through the
financial clearinghouse 200, establishes a provider account with at least one payment method, such as a credit card, debit card, and/or bank, and - registers several transactions with a
transaction authority 700.
- registers the service with the secure
- In this example, the company registers with the
transaction authority 700, which may be a distributed transaction authority within the company selling the goods, an atomic transaction comprising at least one electronic control set that describes, for example: -
- sending the order to the fulfillment processing one or more organizations such as a
warehouse 1018 and logistics 1020 (which may or may not be the same company), - receiving confirmation that the desired merchandise is in fact in stock,
- receiving confirmation of the order,
- receiving payment pre-authorization from a payment method for the particular customer placing the order,
- shipping instructions for the merchandise,
- confirmation that the merchandise was actually shipped, and
- controls for completing the payment transaction.
- sending the order to the fulfillment processing one or more organizations such as a
- In this one example, the company also obtains at least one
digital certificate 504 from a certifyingauthority 500 attesting to at least one fact, for example, that -
- the company is a legitimate corporation registered in the State of Delaware;
- the company is not in bankruptcy and/or the company has a certain degree of creditworthiness,
- the company has been assigned a particular Federal tax Identification Number, and
- that the company has State tax Identification Numbers in each of several states, the specific states and their corresponding Identification Numbers,
- A
customer 95 uses his or herelectronic appliance 100 with Web browsing capabilities to access thecatalog server 1012 over the Internet's World Wide Web. Thecatalog server 1012 sends the customer 95 aweb page 1022 providing a page from an electronic catalog.Web page 1022 may be sent in one or more secure electronic containers 152(1). Thecustomer 95 displays the web page 1022A using his or herelectronic appliance 100, and clicks on the part of the web page showing a men's short sleeve Oxford button down shirt selling for $15.95. The current Web page is replace by a web page 1022B from thefulfillment server 1014. This second web page 1022B may be sent in a secure container 152(2). - The customer's
electronic appliance 100 has a protectedprocessing environment 154.PPE 154 opens thesecure container 152, and displays the page 1022B on the screen. The page 1022B being displayed is a form that has several fields including the catalog number and description of the shirt and retail price. Thecustomer 95 fills in fields for color, neck size, normal or tall person, normal or trim fit, and quantity. Thecustomer 95 also indicates where the shirt(s) are to be delivered, the class of delivery service desired, and the customer's address. - Upon the
customer 95 completing the required information, theelectronic appliance 100 puts theform field information 1024 in a secure container 152(3) and sends the container back to thefulfillment service 1014.Fulfillment server 1014 opens the container 152(3) and reads thefield information 1024.Fulfillment server 1014 creates a VDE audit record indicating receipt ofinformation 1024.Fulfillment server 1014 may also create acontrol set 188 and/or an event notification that initiates a purchase transaction. -
Fulfillment server 1014 may communicate withwarehouse 1018 directly or throughtransaction authority 700. Thefulfillment server 1014 then determines whether the required items are in stock and available to be shipped. Iffulfillment server 1014 determines that the required items are in stock and available to be shipped, and if theinformation 1024 provided by the consumer is sufficient to proceed, the fulfillment service sends back to the consumer another Web page 1022C indicating: -
- that the purchase can be fulfilled,
- what are the various sales taxes and delivery charges,
- the address provided and class of delivery service chosen,
- new fields for payment related information, and
- a query asking whether the consumer wishes to proceed.
- The
fulfillment service 1014 also sends audit records 302(1) to the consumer'sPPE 154 and to thetransaction authority 700 indicating which parts of the larger, atomic transaction have been fulfilled. - If the
customer 95 determines he or she does not wish to continue with the transaction after viewing fulfillment details, his or herappliance 100 can send a secure VDE container 152(5) to thefulfillment service 1014 and to thetransaction authority 700 indicating that the transaction is canceled. If thecustomer 95 says yes, please continue with the transaction, the customer is prompted to pick a payment method from among the list provided. In this example, the list corresponds to payment methods supported by both the merchandise provider and by thefinancial clearinghouse 200. Thecustomer 95 fills in credit or charge card number, for example, expiration date, and billing address. - Upon completion of the required information, the customer's
appliance 100 can send the information, using his or her secure PPE, in a secure VDE container 152(5) to thefinancial clearinghouse 200, and may send a separate VDE container (not shown) with an audit record to thetransaction authority 700. - The
financial clearinghouse 200 gets pre-authorization from the credit card processing company, and, for example, using a secure VDE container 152(6) returns thepre-authorization approval information 1026 to thefulfillment server 1014.Financial clearinghouse 200 may send another VDE container 152(7) to thetransaction authority 700 with an audit record 302(2) indicating completion of the pre-authorization step. - The
fulfillment server 1014 may send a further VDE secure container 152(8) to thecustomer 95 with a new Web page 1022D and audit record information 302(3) indicating that: -
- the order process is complete,
- the sale has been approved by payment method,
- when the goods are shipped, the customer's credit card will be charged the total amount, and
- a transaction confirmation number for further reference in order to be able to make inquiries with the
fulfillment service 1014 and/or with thetransaction authority 700
- The fulfillment service 1014 (e.g., in cooperation with warehouse 1018) packages the goods, hands them off to an
express delivery service 1020, and, for example, sends VDE secure containers 152(9), 152(10) with audit records 302(4), 302(5) indicating shipment to thefinancial clearinghouse 200 and thetransaction authority 700, respectively. In this example, the express delivery service (“logistics”) 1020 also sends a VDE secure container 152(11) to thetransaction authority 700 and to the fulfillment service (and also, if desired, to the customer 95) indicating that theexpress service 1020 has taken possession of the package. - Upon delivery of the package with the merchandise, in this example, the
express delivery service 1020 sends a VDE secure container 152(12) containing an audit record 302(7) indicating that delivery of the package has been completed to thetransaction authority 700 which then marks the transaction completed and then may send additional VDEsecure containers 152 indicating completion to thefinancial clearinghouse 200, to theexpress delivery service 1020, to thefulfillment service 1014, and in some examples to thecustomer 95. - A hallmark of advanced Western economies, especially the economy of the United States at the end of the present century, has been the transition from a largely manufacturing, “smoke stack” economy to not only an “information economy” but to a “service economy” as well. Distributed
Commerce Utility 75 can support transactions in which customers pay for, and in many examples, consume or otherwise make use of services. -
FIG. 63 shows an exampleonline service system 1030. In one example, anonline service 1032 registers with thesecure directory service 600 and obtains a digital certificate 504(1) from a certifyingauthority 500 attesting to identity of the online service. The online service also agrees to trustcertificates 504 issued by the certifyingauthority 500 and by parties certified by the certifyingauthority 500 to issue certificates for specified facts. - For example, the
online service 1032 agrees to accept certificates 504(3) issued by a distributed certifyingauthority 500A from parents certified by the certifying authority 500 (through certificate 504(2)) to issue certificates attesting to the facts that they have children and that these children are currently minor children. In turn, theonline service 1032 will not allow children so certified to access certain subject matter materials distributed by the online service nor to accept digital signatures based on those certificates for purchase transactions, unless the adult person responsible for the child has issued another certificate attesting to their willingness to be financially responsible (e.g., unconditionally or for purchases up to some specified limit per transaction or some aggregate level of spending in a specified time period, in one example, so much per month). These certificates 504(2), 504(3) may be sent from the certifyingauthority 500 to the parent and/or to at least one child in a VDEsecure container 152. - Now suppose the child 95(2) subscribes to an online game called “chat.”
Online service 1032 has a Web interface specifically designed for school aged children. Thisservice 1032 offers a subscription that must be renewed quarterly. Using anelectronic appliance 100 such as a personal computer or TV and settop box with bi-directional communications and a protectedprocessing environment 154, the child 95(2) usessecure directory services 600 to locate theonline service 1032, and sends a message requesting a subscription. In response, theonline service 1032 sends to the parent 95(1) or guardian in a VDE secure container 152(4), arequest 1034 for payment, membership, and member information. The parent or guardian and/or other paying individual 95(1) provides his or her (or their) credit card number(s), expiration date(s), andbilling address information 1036 in one or more other secure containers 152(5) to theonline service 1032. - In this example, the
online service 1032 communicates the customer's service account, credit card and/orother payment information 1036 to the financial clearinghouse using a VDE secure container 152(6) (in a variation on this example, the parent 95(1) may have provided this financial and related information directly to thefinancial clearinghouse 200 in a VDE secure container 152(5)). Theonline service provider 1032 also provides to thefinancial clearinghouse 200 the clearinghouse network address and provider account number. Within a protected processing environment (which may, for example, comprise a general purpose computer locked in a physically secure vault or other secure installation), thefinancial clearinghouse 200 opens the secure container 152(6), extracts thepayment information 1036, and completes the payment transaction with the credit card company. - For this example, the
financial clearinghouse 200, in turn, communicates the following information 1038 (this list is for illustrative purposes only and does not detract from the general case in which any available set of information might have been communicated) to theonline service 1032 in at least one secure VDE container 152(7): -
- VDE audit record for this transaction,
- transaction authorization number,
- provider account number,
- account number of the customer at the service, and
- amount of the payment.
- In turn, the
online service 1032 sends a secure container 152(8) to the customer 95(1) indicating that payment has been accepted. In one example,online service 1032 may instruct certifyingauthority 500 to issue acertificate 504 attesting to the validity of the subscription until a specified date.Online service 1032 may also provide audit records 302(1) derived from theinformation 1038 provided by thefinancial clearinghouse 200. - Each time the child 95(2) logs on to the
online information service 1032, the child'sPPE 154 checks to determine if anycertificates 504 are present or known and if so, whether: -
- these digital certificates attest to an current, unexpired subscription to the online service, and
- any minor child certificates are present and valid (for example, have not expired because the child has not yet reached their 18th birthday).
- Having ascertained through these
certificates 504 that the child 95(2) is authorized to use theonline service 1032 and is prohibited from accessing certain “adult” content, the online service grants selective access, that is to authorized portions. - Among the features of this online service are distributed, multiperson interactive games. The child 95(2) in this example plays the game with at least one other authorized and certified minor child—adults are precluded by underlying VDE rules and controls from playing this game in this particular example. At least one portion of the software (e.g., executable code and/or interpretable code, such as Java) that implements at least one
portion 1040 of the at least one game can be download from theonline service 1032 to the child's information appliance 100(2) using at least one VDE secure container 152(9). - Using methods described in the Ginter et al. disclosure, these programs and/or portions of
programs 1040 are determined to be authentic and unmodified. At least one of the keys used to calculate the one way hash function that produces the digital signature used for determining the integrity of the at least oneprogram 1040 or at least one part of a program is bound to the identity of theonline service 1032 by acertificate 504 issued by certifyingauthority 500. - As the child 95(2) in this example plays the game, at least a portion of his or her activities are metered according to methods disclosed in the co-pending Ginter et al. application and audit records 302(2) are created that indicate this child's usage. At certain times, these audit records 302(2) are transmitted to the
online service 1032 which may, in this example, include ausage clearinghouse 300.Usage clearinghouse 300 analyzes these usage records 302(2), and may use them to determine how much to charge child 95(2). - Distributed
Commerce Utility 75 can be used to facilitate a purchase or other type of transaction relating to tangible goods.FIG. 64 shows an example tangiblegoods delivery system 1040. For example, acompany 1042 places an order for office supplies using anelectronic appliance 100 including aPPE 154. The order is for a box of paper clips, a stapler, staples, a case of 8.5×11 inch copy paper, and a dozen yellow legal size note pads. The items are manufactured by a manufacturer 1050, distributed by adistributor 1048, and sold to the company by aretailer 1046. - In this example, a
financial clearinghouse 200 receives apayment 1052 from thecompany 1042, and disaggregates the payment by dividing it up into disaggregatedpayments retailer 1046,distributor 1048 and manufacturer 1050. - For example, the
company 1042 sends itsorder 1044 within a VDE electronic container 152(1) to aretailer 1046. In this example,retailer 1046 provides a fulfillment service that receives theorder 1044 and, in response, provides a control set 188 indicating the provider account number of thedistributor 1048 and/or manufacturer 1050 of each item and the percent of the retail price to be received by each. If desired,retailer 1046 may provide a different control set 188 for each item ordered (regardless of quantity)—allowing different payment disaggregation to be performed on an item-by-item basis.Retailer 1046 may provide this control set 188 a tocompany 1042. - Control set 188 a may be conditioned on the presence of one or more
digital certificates 504 issued by certifyingauthority 500. For example, control set 188 a may requirecompany 1042 to provide a digital certificate 504(1) issued by the certifyingauthority 500. Certificate 504(1) attests to the identity of the orderingcompany 1042. The company 504(1) may provide another certificate 504(2) in the same chain of trust hierarchy as the certifyingauthority 500 warranting that the person placing the order is authorized to place orders up to a specified spending limit per order.Company 1042 may provide the same or different certificate 504(2) also indicating that the purchaser employee within the company is authorized to make use of a corporate charge card. - In this example, the
company 1042 pays with a corporate charge card. Thefinancial clearinghouse 200 first gets payment authorization from the credit card company prior to theretailer 1046 shipping the merchandise. Upon receiving notification of preauthorization,retailer 1046 may ship thegoods 1047 to thecompany 1042. Following delivery of themerchandise 1047, theretailer 1046 creates at least one VDE audit and/orbilling record 1052 in at least one VDE secure container 152(2), and transmits the container to the financial clearinghouse 200 (audit information may also or alternatively be sent to retailer 1046). - The
financial clearinghouse 200 then completes the charge card transaction by allocating the total payment amount to each of the value chain participants represented by control set 188 a (which it may have received, for example, directly fromretailer 1046 and/or through company 1042). In this way, thedistributors 1048 and/or manufacturers 1050 receive their payments at the same time theretail seller 1046 receives its payment. Control setinformation 188 a may also indicate shares of the total payment and provider account numbers for local, state, and federal taxes, if any, and, for example, for delivery charges, such as to an overnight express company, if any. - This
FIG. 64 example shows that value chain disaggregation can apply for both tangibles and for intangibles. Similar techniques can also be used much further back through the manufacturer's 1050 supply chains if so desired (e.g., to the providers of the metal from which the paper clips were fabricated). - Distributed
Commerce Utility 75 can assist the electronic community in efficiently distributing electronic or digital properties or content. For example, using anelectronic appliance 100 equipped with a protectedprocessing unit 154, a creator orother rights holder 400 sends a digital object in a secure container to a rights andpermissions clearinghouse 400 to be registered. - The rights and
permissions clearinghouse 400 opens the container using, for example, its own VDE protecting processing unit, and assigns a uniform object identifier indicating the identity of the creator, the type of object being registered—software, video, sound, text, multimedia, etc., and the digital signature for the object. The uniform object identifier may be globally unique or may be unique only in the namespace domain of the creator or some other entity, such as an online service, digital library, or specific jurisdiction, such as a specific country. - In this example, using its protected processing environment, the rights and
permissions clearinghouse 400 digitally signs the uniform object identifier with the rights and permissions clearinghouse private key and returns the object and identifier to the person or organization registering it in a VDE secure container. The rights andpermissions clearinghouse 400 may retain a copy of the object or may retain only the uniform object identifier for the object, and the signatures for the object and its uniform object identifier. In another example, the rights andpermissions clearinghouse 400 digitally signs a new object comprised of the original object and its uniform file identifier, and stores both the new object and/or its signature in the rights andpermissions clearinghouse 400 archive. - The creator may have also sent in a VDE secure container a permissions and pricing template 450 (see
FIGS. 45A-45C ) indicating which permissions are granted, the prices to be charged upon exercising those permissions, and if applicable, the individual, class and/or jurisdiction to which those prices and permissions apply. More than one permission andpricing template 450 may be sent in a single VDEsecure container 152, or separate VDEsecure containers 152 may be used for each permission and pricing template. - In this example, using a VDE
secure container 152, the object is then transmitted from the creator to a distributor 168 (seeFIG. 16 ). Using acertificate 504, thedistributor 168 can prove to the VDE instance (PPE 154) interpreting the creator's control set that the distributor is indeed authorized to selectively alter permissions and prices of the object and creates a new permissions and pricing template. Thedistributor 168 then sends a VDE secure container to the rights andpermissions clearinghouse 400 containing the uniform object identifier together with the new controls. In the preferred embodiment, if the object remains unmodified, thedistributor 168 has the option of leaving the uniform object identifier unmodified; however, if the distributor has modified the object, perhaps to add its own brand, then the uniform object identifier must be modified to reflect the distributor's version. The digital signature is recomputed using the private key of the distributor. As before, the object registry has the option of storing only the digital signature or both the signature and the actual object. - As a value added service, the rights and
permissions clearinghouse 400 can provide a copyright registration service (seeFIG. 43 ). The rights andpermissions clearinghouse 400 can send a copy of the object to the appropriate online copyright registration service of theappropriate government agency 440, for example, the US Copyright Office. The object and uniform object identifier may be sent in a VDE secure container together with controls indicating the mode of payment, if a registration or processing is being charged. - In this example, the copyright registration service can send at least one VDE secure container to the
financial clearinghouse 200 with at least one audit record indicating the amount to be paid, the payment method and account of the registering party, and the account of the government to receive the funds, and receives in return in a VDE secure container an audit record indicting that the transaction has been pre-authorized (or that for whatever reason, the proposed transaction has not been authorized). - If the transaction has been pre-authorized by the
financial clearinghouse 200, a VDE enabled computer located, in this one example, in US Copyright office opens the secure container and adds the uniform object identifier and the object to the registration database. Under a chain of trust emanating from the certifyingauthority 500—which in this example may be operated by, or on behalf of the US government—the copyright registration service issues at least onedigital certificate 504 attesting to the facts that an object with a specified uniform object identifier and with a specified digital signature has been in fact registered with the registration authority and that the at least one person is in fact the owner of the copyright at the time the object was registered. Thiscertificate 504 is sent in a VDE secure container to the person who registered the object (and/or who was named as the person to be notified) and to the rights andpermissions clearinghouse 400 who, in turn, may provide copyright registration information upon request in a secure VDE container. - The copyright registration service sends at least one VDE secure container to the
financial clearinghouse 200 with at least one audit record instructing theclearinghouse 200 to proceed with fulfillment of the pre-authorized transaction (if all necessary information was part of the pre-authorization process) and/or providing information to theclearinghouse 200 regarding, for example, the amount to be paid, the payment method and account of the registering party, the account of the US government to receive the funds, and that the payment transaction should be completed, and receives in return from the financial clearinghouse in a VDE secure container an audit record indicting that the transaction has been completed and funds deposited in the appropriate account or accounts, or that the payment transaction fail and the reason why it failed to be completed. - Distributed
Commerce Utility 75 can further facilitate the distribution of electronic and digital properties by providing a mechanism for renewing rights and permissions that have expired. SeeFIG. 42A . - In one example, suppose an employee of a
Fortune 1000 company has a control set for a digital property, perhaps a piece of software or a Java applet, that has expired. The VDE protected processing environment on the employee's computer can send a VDE secure container to the rights andpermissions clearinghouse 400. - Distributed
Commerce Utility 75 can also facilitate the distribution of electronic and digital properties by providing a mechanism for distributing rights, permissions and prices that have been changed by one or more participants in a distribution chain. In one example, suppose a customer has a digital object on her hard disk and its VDE control set as distributed by the publisher. The permissions and prices originally indicated a pay per use model in which the user pays 10 cents for each operation on the object, such as printing or viewing. - To determine if new rights and prices are now available, the protected processing environment on the customer's PC can send a VDE secure container to the Rights and
Permissions clearinghouse 400 using its network address obtained from the control set together with MIME-compliant electronic mail. The customer obtained the address of the rights and permissions clearinghouse from thesecure directory service 600, having, for example, sent a query in a VDE secure container and having received a response in a VDE secure container. - The VDE secure container sent to the rights and
permissions clearinghouse 400 contains the object identifier plus a request for the current controls including prices. The protected processing environment at the rights andpermission clearinghouse 400 server opens the VDE secure container, retrieves the most recent control set from the database of controls, and sends via return electronic mail another VDE secure container with the desired controls. The customer's protected processing environment opens this container, and replaces and/or augments the expired controls with the new ones. The customer is now able to use the content according to the rules and controls specified in the control set just received from the rights and permissions clearinghouse and processed by the instance of VDE on the local computer or other appliance. In this example, these new rules and controls have reduced the pay per use price from ten cents per operation to five cents per operation. - Distributed
Commerce Utility 75 can also support transactions in which some or all rights are not initially distributed to the ultimate consumer with the content, but must be requested instead. In one example, suppose a lawyer decides to go into the publishing business by combining her/his own articles with other materials obtained from legal information distributors. The legal information distributors have chosen a rights andpermissions clearinghouse 400 to be their distributor of control set information for their many properties. With each object they register at the rights andpermissions clearinghouse 400 they also register two control sets in the formats described in the Ginter et al. disclosure: -
- one control set specifies default controls including prices for retail customer, and
- a second control set conveys rights and prices seldom of interest to the retail customer, for example, the anthologizing right.
- The attorney newsletter publisher obtains a chapter from a treatise on patent law and wants to include a 1000 word excerpt in the newsletter in addition to other articles. Having already obtained the treatise chapter and its retail control set, the newsletter publisher sends an inquiry in a VDE secure container using Internet MIME-compliant e-mail to the rights and
permissions clearinghouse 400 asking for the excerpting right and the anthologizing right for the chapter identified by the enclosed uniform object identifier. The lawyer found the rights andpermissions clearinghouse 400 using a secure directory service 600 (alternatively the rights andpermissions clearinghouse 400 address may be contained in the original retail version received by the lawyer). - The
rights clearinghouse 400 checks the object database, locates the control set information for the object named in the universal object identifier, and determines that both the excerpting and anthologizing rights are available along with the prices for each. The excerpting right does not convey the right to modify the excerpted portion. The anthologizing right is conveyed along with controls that set the price to a 30% discount from retail prorated for the length of an excerpt if the whole chapter is not anthologized. - Using a VDE aware page composition application, the newsletter publisher combines several works, including the 1000 word excerpt into a new work, and registers the new object with the rights and permissions clearinghouse together with its control set(s). The newsletter publisher also registers the new object with a copyright registration function, for example, the US Patent and Copyright Office. The newsletter publisher distributes the new work in a VDE secure container, which also contains control sets for each of the separate anthologized works, and for the whole, complete newsletter as well. The local VDE protected processing environment on the appliance of the user keeps track of usage according to the controls that apply to the composite object and to the controls of each of its parts for which there are separate rules. At some time, the VDE instance sends audit records to the
usage clearinghouse 300 and to thefinancial clearinghouse 200. - Distributed
Commerce Utility 75 can support electronic rights negotiations. In one example, suppose a professor is creating a “course pack”: a compilation of many different works to be used by students in a particular course that in this example, lasts only one semester. In this example, the professor sends a VDE secure container with a query to the appropriate rights andpermissions clearinghouse 400 and gets back control sets for the digital properties listed in the query. Upon reviewing the permissions and prices, the professor notes that a chapter from a book carries a price large enough to make the overall price of the course pack higher than the maximum s/he desires. - Using the negotiation mechanisms disclosed in Ginter et al. (see, for example,
FIGS. 75A-76B ), the professor attempts a negotiation with the rights andpermission clearinghouse 400. The rights andpermissions clearinghouse 400, in turn, automatically determines it lacks the authority to negotiate and redirects the negotiation to the publisher. - Having obtained an
appropriate certificate 504 from acertificate authority 500 by providing credentials indicating membership in the class “higher education”, the protected processing environment of the publisher's Web server makes an offer of a new, modified control set for the property targeted for this professor. The controls have a discounted price, require that the copies be printed on a VDE enabled authorized printer that will keep track of the number of copies printed, and report back to the various parties to the transaction using VDE techniques. Still unhappy with the price, the professor sends a VDE negotiation counter-offer in a secure container to the publisher. The publisher's VDE instance negotiates with the professor's negotiation counter-offer control set and an agreement is reached that and provides a new control set with the new, agreed-upon prices and terms and conditions to the professor, who then goes ahead to produce the course pack. The rights andpermissions clearinghouse 400 is willing to grant the reduced price in part because the professor in this example is able to provide a digital certificate attesting to the fact that she has a full-time appointment at the University of California, Los Angeles and has a certain, minimum number of students who will employ the materials. This authentication meets requirements stated by the publisher to the rights andpermissions clearinghouse 400. - One valuable use of certifying
authorities 500 is for the issuance of digital certificates on behalf of the government. In addition to issuing certificates attesting to identity, legal status, etc.,government certifying authorities 500 might issue certificates certifying executables, for example load modules. For example,government certifying authorities 500 at all levels might certify the set of executables that represents the laws and trade practices of their administrative districts. For example, Saudi Arabia might insist that all appliances in their administrative control have load modules certified by the government that examine attributes of containers to insure that only appropriate content is released. The State of California might certify a load module that calculates state tax, etc. - Distributed
Commerce Utility 75 can be used to efficiently and flexibly support models for film distribution to the consumer market. For example, suppose that a film and entertainment company such as Disney wants to provide electronic DistributedCommerce Utility 75 to support distribution of its films toconsumers 95. Disney could open aCommerce Utility System 90 itself, or it might contract with a neutral third party to provideCommerce Utility Systems 90 on its behalf. The purpose of theCommerce Utility Systems 90 in this example is to support secure pay-per-view/pay-per-use, rental, lease and other film distribution transactions to consumers. - The films themselves could be distributed in digitized linear form—for example, on Digital Versatile Disk (DVDs) or other high capacity media. Such media would store, in addition to the films themselves, one or more secure containers including control sets for controlling use of the films.
Consumers 95 could play the films using a media player 104 (seeFIG. 1 ) having anetwork 150 connection or other “back channel” (e.g., the ability to read from and write to a smart card or the like). -
Media player 104 has a protectedprocessing environment 154 such as a secure processing unit for use in managing rights and manipulating the electronic containers. The storage media might also be played by apersonal computer 124 equipped with a protected processing environment and a network connection. - Set
top box 104 may be controlled by electronic controls distributed on the media and/or via the back channel. The controls require the settop box 104 to record customer usage and payment information for each property the consumer decides to view. For example, aconsumer 95 might place a media such as an optical DVD disk intomedia player 104 and hit the “play” button. The consumer'smedia player 104 might next display (e.g., on television set 102) a message telling the consumer how much it will cost to view that particular film (e.g., $2.95), and ask the consumer if she wants to proceed. If the consumer answers “yes”,media player 104 will play the film on the consumer'stelevision set 102—recording usage and payment information for reporting toCommerce Utility Systems 90. The protectedprocessing environment 154 withinmedia player 104 may, under secure control of one or more associated electronic control sets delivered to it—monitor and collect information that can ultimately be used to ensure the consumer pays for watching the film and to provide a secure usage audit. The secure usage audit may be used, for example, to allow Disney, the film's actors and director, and others involved in making the film to securely verify how many consumers watched the film (and also potentially to provide demographic information for targeting advertising or the like). For example, themedia player 104's protected processing environment may securely collect and record, for example, the following information within meter, billing and/or budget audit trails associated with particular controls: -
- name of film
- digital identifier of film
- time and date property played
- number of times property played
- who played the property.
- In one example,
consumers 95 would have to possess a digital certificate 122 issued by an appropriate certifying authority that attests to certain facts. Such a digital certificate 122 can be used to provide a context for the electronic control set(s) delivered tomedia player 104. Such a certificate might need to be present before the consumer would be permitted to play the film and/or to prevent the film from playing under certain conditions and/or to effect the controls that apply when the film is played. - For example, the parents could obtain a digital certificate 122 indicating that the household has children. This “child present” digital certificate 122 could be used to prevent
media player 104 from playing any films other than those that have “G”, “PG” ratings. Such certificates 122 could be issued by the same organization that provides the other administrative and support services in connection with this example if desired. - The electronic controls provided with a particular film on a media such as an optical disk may also specify a particular value chain disaggregation to be applied in connection with payment arrangements. For example, the
media player 104 would “know” from the electronic rules and controls delivered to it that the film distributor, studio and the Distributed Commerce Utility 75 are to receive particular percentages of the $2.95 usage fee, and that a state government authority must receive a certain tax payment in the form of a sales tax or VAT. Because this information is maintained within the protectedprocessing environment 154 withinmedia player 104, theconsumers 95 may never be exposed to the payment disaggregation scheme and/or its details. (Typically, consumers do not care what the distributor “cut” is as opposed to the studio revenue. The protected processing environment withinmedia player 104 may provide this payment disaggregation locally or through a distributed or centralizedfinancial clearing function 200 as described above.) -
Media player 104 can report the usage containment information it has collected on a real time (online) and/or periodic event-driven basis. In one example, media player may report at the end of each month the information it has collected over the preceding month. It may report collected payment information (including disaggregation data provided by the control set) to afinancial clearinghouse 200 run by Disney (or, for example, such information may be reported directly to clearinghouse 200).Financial clearinghouse 200 ensures that the consumer's account is appropriately debited and that the various payees (e.g., Disney, the film's distributor, and others in the value chain) receive appropriate “splits” of the consumer's payment. Thefinancial clearinghouse 200 may also provide consumer credit checks and authorizations, helping to ensure that the consumer doesn't run up a big bill she can't pay. -
Media player 104 may report the usage information it has collected to ausage clearinghouse 300 operated by an independent auditor (the film's producer and actors may insist that an independent third party auditor—not Disney—performs this function) or, for example, may report such information to Disney and/or clearinghouse 200—certain of such information may be concealed from Disney if required by rules and controls to ensure other value chain party rights and Disney may not be able to identify, alter, and/or remove such information due, for example, to VDE protection mechanisms. Theusage clearinghouse 300 may analyze the usage data and issue reports indicating total number of views, market share, etc.Usage clearinghouse 300 may also further analyze the information to provide demographic and/or other marketing research information. This type of information can be very useful to advertisers and marketers. - Disney may also operate a rights and
permissions clearinghouse 400. Even though permissions are distributed on the optical media in this example, the rights and permissions clearinghouse can provide supplemental control sets for various reasons. For example, the control sets distributed on the media may expire on a certain date. Rights andpermissions clearinghouse 400 may issue new control sets in lieu of the expired ones. Rights andpermissions clearinghouse 400 may also issue permissions to provide “sales” and/or to otherwise change prices (e.g., to reduce the price of an older film). Rights andpermissions clearinghouse 400 can also issue special permissions (e.g., an extracting or anthologizing right that multi-media developers or advertisers might be able to request, and/or, for example, redistribution rights to certain frames such as an approved image of Mickey Mouse for printing purposes). Disney could “pre-approve” some of these special permissions so that the rights and permissions clearinghouse could automatically provide them on demand. Digital certificates 122 might be used to interact with the permissions—thereby assuring that the user receiving the control set is entitled to take advantage of it. - Prior to the inventions disclosed in the Ginter et al. specification, the electronic community lacked general purpose, reusable, distributed, peer-to-peer technologies that could, among other things, efficiently and effectively monitor and measure usage on the local computer or protected processing environment. Collecting, analyzing, and reporting usage data provides significant value to rightsholders and to other distribution chain participants, to infrastructure Distributed Commerce Utility 75, to customers, and to other interested parties. Understanding what has happened can often be a fundamental determinant or contributor to what might or should happen. In addition, usage information can be repurposed to support a wide range of other commercial activities, including advertising and merchandising models.
- Suppose one or more customers in each of several companies have
information appliances 100, in this one example such as personal computers, with VDE protected processing environments (PPEs) 154 as described in Ginter et al. Suppose further that over some time period, perhaps a month in this example, that VDE has been keeping track of detailed usage information and storing this information in the encrypted database on each hard drive on each computer that is a logical extension and under the control of each consumer PPE. These consumers have each been purchasing different combinations of information and entertainment from generally different sources. Each instance of VDE keeps track of usage information according to the controls associated with the content and/or service being purchased or otherwise used. - On or shortly after the first of each month, and/or any other required (or, if supported, allowed) reporting intervals, each instance of VDE communicates the usage records to the
usage clearinghouse 300 according to the controls associated with each of the digital properties they have used during the previous month. In turn, theusage clearinghouse 300 provides reports to each of the rightsholders regarding any use of a property during the previous month or other reporting interval (e.g., daily, weekly, quarterly, annually, etc.). - In one example these reports contain information identifying both the individual customer and the company that employees them. In another example, the reports contain detailed usage information, but the identities of the individual customers has been removed by the
usage clearinghouse 300. Alternatively, both the individual and corporate identities may be removed. Instead, the usage information may be aggregated by any one or more certain classes, such as by industry, geography, and/or by country, and/or any other useful classes. - In another useful example, a particular company or individual customer may have not permitted VDE (subject, of course, to this right being available through in place rules and controls) to communicate identity information to the
usage clearinghouse 300 from their information appliances in the first place. The user may have established VDE controls prohibiting disclosure of such identifying information. In another example, the user may have used the negotiation mechanisms disclosed in the Ginter et al. application to negotiate additional levels of privacy and confidentiality other than those required in the various control sets associated with the information being purchased or otherwise used by each customer, that is, the electronic negotiation process generates a modified or new rules and controls set reflecting the additional levels of privacy and confidentiality. In yet another example, a rightsholder, rights and permissions clearinghouse 400 orusage clearinghouse 300 or other party, may have used the same negotiation mechanisms to negotiate, through the use of VDE rules and controls sets alternative levels of privacy and confidentiality. - As illustrated in
FIGS. 11 and 33 -39, the usage clearinghouse functions that may remove identifying information, aggregate data, analyze data, generate reports, and/or transmit those reports to rightsholders and other interested parties may exist in one or more logical and physical locations. For example, adistributed usage clearinghouse 300 executing on the local computer (or other information appliance) may perform any or all of these usage clearinghouse functions. One or more usage clearinghouses may exist within a given company or within a given collection of companies comprising a vertical industry, healthcare, for example, trading group, or family of companies (“keiretsu”). Similarly these usage clearinghouse functions may be performed by usage clearinghouses within each country or other jurisdiction or defined by any other class and/or geographic variable. -
Usage clearinghouse 300 may also provide raw data, aggregated data, and/or customized reports to rightsholders, distribution chain participants, and/or other interested parties. These parties include: for example, content creators, publishers, repackagers, repurposers, advertising agencies and their clients, trade associations, market research and consulting companies, circulation audit and audience measurement bureaus, the sales, marketing, and advertising functions of companies with an interest in one or more markets, and government agencies. - In another example the
usage clearinghouse 300 may also sell information to advertisers indicating exposure to particular ads and/or classes of ads by individuals, customers within a company and/or group of companies, markets, and/or other analysis groupings and categories. - Personal and business confidentiality and privacy are often essential aspects of the modern experience. Individuals may not want others to know with whom they are associating. In many aspects of business, firms may not wish to reveal their interest in communicating or interacting or conducting business with other parties. In today's Internet, for example, it is possible for those with certain kinds of access to determine the nature of queries between a given person and a directory service. Such information may provide important clues regarding existing or pending business arrangements that have not yet been publicly announced, a merger or acquisition, for instance.
- VDE secure containers provide one basis for
secure directory services 600 in which confidentiality and privacy are preserved. In one example, the Corporation Counsel in aFortune 100 company wishes to obtain the email address of the investment banker in the firm handling a proposed acquisition—but without revealing her interest to anyone else. The attorney sends a query in a VDE secure container to thesecure directory service 600 with the name and company of the person she wishes to contact. The secure directory service then sends the response in another VDE secure container back to the attorney. Both the query and the response can make use of certificates issued by the certifyingauthority 500 authenticating both the attorney and thesecure directory service 600. Payment for the query can be handled by thefinancial clearinghouse 200 who deposits payment in the provider account of thesecure directory service 600 while debiting the account of the company that employs the attorney. - Because these transactions are conducted using VDE and VDE secure containers, those observing the communications learn no more than the fact that these parties are communicating. Security analysts have developed techniques for “traffic analysis”, in which the frequency of communications among two or more parties is observed and changes in the frequency of communications are correlated with other information to make inferences regarding the content and/or purpose of these communications.
- Using VDE and VDE secure containers, it is possible to defeat traffic analysis, however at some added expense. In this one example, the company could send a VDE container to the
secure directory service 600 with an empty or “null” query that would generate in the average amount of elapsed time a return message in a VDE container with a null response. The instance of VDE on the attorney's computer would generate a payment transaction destined for the financial clearinghouse, but would aggregate these payment records with others to eliminate correlations between the pattern of queries and payments. While inefficient from a commerce standpoint, this method of using VDE and VDE secure containers to defeat traffic analysis attacks can in principle be used among plural parties wishing to hide the pattern of communications among them while taking advantages of the secure, trusted, efficient distributed transaction capabilities disclosed in the Ginter et al. application. - The various
Commerce Utility Systems 90 may be distributed to varying degrees and in varying combinations as illustrated inFIGS. 2A-2E and 3A-3C). In one example shown inFIG. 65 , anAmerican Fortune 100 company 1070 with operations in several countries (e.g., the United States, Japan and Europe) and within many of those, in multiple locations within each country, has found it desirable to internationally distribute VDE DistributedCommerce Utility 75. To increase the efficiency of purchasing external information, and to maximize its leverage with information providers, the company 1070 has chosen to negotiate with several providers, agreements that treat all purchases as having been made from within the US and being in US dollar currency. In this example, the company 1070 maintains its ownglobal Intranet 1072.Intranet 1072 connects company headquarters 1074HQ (shown here as being located within the United States) with company US employee electronic appliances 1074US(1), . . . , 1074US(N), company Japanese employee electronic appliances 1074JP(1), . . . , 1074JP(N), and company European employee electronic appliances 1074EU(1), . . . , 1074EU(N).Intranet 1072 also permits each of these employees 1074 to communicate with one another. VDE-based transactions between the company 1070 and its information suppliers are also routed through one or another of the company's US gateways to the Internet. - To provide efficient administrative and support services, the company 1070 has deployed in each country at least one distributed
financial clearinghouse 200 and at least one distributedusage clearinghouse 300. For example, company 1070 may operate afinancial clearinghouse 200A and ausage clearinghouse 300A in the United States, afinancial clearinghouse 200B and ausage clearinghouse 300B in Japan, and a financial clearinghouse 200C andusage clearinghouse 300C in western Europe. In countries with multiple sites and within the United States, several of these distributed clearinghouses may exist. In addition to negotiating agreements with information providers, the company 1070 may also have negotiated agreements with a largecommercial usage clearinghouse 300 and with a majorfinancial clearinghouse 200. These centralized clearinghouses could be located anywhere, and may communicate with company 1070 via the Internet and thecorporate Intranet 1072. Neither of theseclearinghouses - In this one example, a product marketing manager 1074JP(1) employed by this company 1070 in Japan acquires a
market research report 166 from anAmerican distributor 1076. The report and associated controls are sent from theAmerican distributor 1076 to this employee 1074JP(1) in a VDEsecure container 152 a. The instance of VDE on the manager's appliance 1074JP(1) keeps track of usage and the payment due the information provider. Periodically, these audit records 302(1), 302(2) are transmitted in VDE secure containers 1052 b, 1052 c to distributed usage clearinghouse (private usage clearinghouse) 300B and to the internalfinancial clearinghouse 200B—both of which are located in Japan on the company's internal, private corporate network (or Intranet) 1072. From time to time and in accordance with VDE controls associated with the content purchased, theprivate usage clearinghouse 300B removes, in this example, individual identifying information in accordance with VDE rules and controls managing protected processing environment processes and sends in a VDE secure container the audit records 302(3) to the external,commercial usage clearinghouse 300. All of the company's internal, distributedusage clearinghouses secure containers 152 to thecommercial usage clearinghouse 300. In turn, themaster usage clearinghouse 300 creates and sells, licenses, and/or otherwise distributes reports to rightsholders and other parties (e.g., third parties having a commercial interest in obtaining the information) in which the identities of individuals are removed, and which in many circumstances company names, in accordance with VDE rules and control, have also been removed. - From time to time and in accordance with VDE controls 188 a associated with the
content 166 purchased, copies of the complete usage records (with employee identification information) are also sent to the company's master usage clearinghouse 300HQ (which may be located at corporate headquarters), as are audit records from all the company's distributedusage clearinghouses - The internal, distributed
financial clearinghouses audit records 302 in VDEsecure containers 152 in accordance with VDE controls sets for the purchased information from each of the VDE protected processing environments 1074 reporting to them. Each internalfinancial clearinghouse secure container 152 withaudit records 302 indicating the aggregate sums to be transferred to the information providers as a result of transactions. The company may also provide update information regarding the accounts from which the company's funds are to be transferred and/or the provider accounts that are to receive such funds. In turn, the external masterfinancial clearinghouse 200 completes these payment transactions and sends audit records back to the company 1070 and to the information providers confirming the payment transactions. In the preferred embodiment, these activities occur securely under the control of distributed VDE nodes, and are automated at least in part through the use of VDE containers and chain of handling and control managing multi-nodal, multi-party, sequence of processes. As an alternative example, the calculation for the amount of payment and the completion of the payment transactions is performed at the external masterfinancial clearinghouse 200 from usage information received from the usage clearinghouse 300 (of course, ifusage clearinghouse 300 andfinancial clearinghouse 200 are the same party, the financial clearinghouse already has received such information). The external and internal financial might then, in this example, compare payment information. - This example does not depend on the extent to which administrative and support services are distributed. In a related example, the usage and financial clearinghouse functions could have been distributed to each VDE-aware protected processing environment 1074 as illustrated in
FIGS. 2A-2E and 3A-3C. In this example, each protected processing environment 1074 could report directly to the masterexternal clearinghouses - In one further example, the corporate headquarters 1074HQ and its associated headquarters-based clearinghouses 200HQ, 300HQ provide a centralized clearinghouse system through which all usage and financial information must flow. In this particular, more centralized example, all user appliances 1074 report their usage and financial transactions to headquarters-based clearinghouses 200HQ, 300HQ in
secure containers 152 overIntranet 1072. Company headquarters financial clearinghouse 200HQ may interface directly into VDE compliant general purpose payment systems that directly support the use of VDE chain of handling and control for ensuring the enforcement of automated, secure, financial transaction fulfillment in accordance with rules and controls governing payment related variables such as payment amounts, parties, locations, timing and/or other conditions. These headquarters-based clearinghouses 200HQ, 300HQ, (which may function as a single, integrated Commerce Utility System) in turn, may communicate appropriate aggregated and/or other audit trail and/or payment information to theindividual clearinghouses -
FIG. 66 shows an example use oftransaction authority 700 for inter and intra organizational communications.FIG. 66 shows an organization A (left-hand side of the drawing) as having an “Intranet” (a private data network within a particular organization) 5100(A). Intranet 5100(A) may be a local and/or wide area network for example. User electronic appliances 100(A)(1), . . . , 100(A)(N) (for example, employees of organization A) may communicate with one another over Intranet 5100(A). -
FIG. 66 also shows another organization B that may have its own Intranet 5100(B), user electronic appliances 100(B)(1), . . . , 100(B)(N), and private transaction authority 700(B). In addition,FIG. 66 shows a public data network 5104 (such as the Internet for example) and a public transaction authority 700(C).FIG. 66 shows that in this example, organizations A and B communicate with the outside world through trusted transaction authority 700(A), 700(B) (which may, if desired, also include “gateways”, “firewalls” and other associated secure communications components). In other examples, trusted transaction authority 700(A), 700(B) need not be the actual “gateway” and “firewall” to/fromInternet 5104, but could instead operate wholly internally to the respective organizations A, B while potentially generatingelectronic containers 302 for transmission overInternet 5104. - In this example, organization A user protected processing environments 100(A)(1), . . . , 100(A)(N) each have an instance of a virtual distribution environment protected processing environment, and can communicate with one another over Intranet 5100(A) via secure
electronic containers 302. Similarly, organization A user electronic appliances 100(B)(1), . . . , 100(B)(N) each have an instance of a virtual distribution environment protected processing environment, and can communicate with one another over Intranet 5100(B) via secureelectronic containers 302. In addition, organization A and organization B can communicate with one another overInternet 5104 via secureelectronic containers 302. - Organization A's private trusted transaction authority 700(A) may be used for facilitating organization A's internal communications and processes. Private trusted transaction authority 700(A) might be used, for example, to carefully track items sent from one user to another within organization A. The public transaction authority 700(C), meanwhile, can be used to coordinate between organization A and organization B without, for example, revealing confidential information of either organization to the other organization. Below are more detailed examples of how the
FIG. 66 arrangement might be advantageously used to conduct business transactions. - Suppose a confidential memo needs to be approved by users 100(A)(1), 100(A)(3) and 100(A)(5) (who can each revise the memo) before being distributed to each of users 100(A)(2), 100(A)(7)-100(A)(10) and 100(A)(12) (none of whom can change the memo), with copies to users 100(A)(1), 100(A)(3) and 100(A)(5) (who also can't change the memo after all three of them have signed off on it) and to no one else. Private transaction authority 700(A) can maintain a rule set that specifies these requirements. Transaction authority 700(A) can:
-
- send the memo (in secure containers) in “round robin” fashion to each of users 100(A)(1), 100(A)(3) and 100(A)(5) for approval.
- If any one of these users changes the memo, then transaction authority 700(A) can circulate the revised memo to the other two for additional comments and revisions.
- Once all three of users 100(A)(1), 100(A)(3) and 100(A)(5) approve the memo, transaction authority 700(A) may be empowered to place each of their digital and/or handwritten signatures or initials on the memo, place it into one or more secure containers with a control set specifying it is read only and can only be read by users 100(A)(1)-100(A)(3), 100(A)(5), 100(A)(7)-100(A)(10) and 100(A)(12).
- Transaction authority 700(A) may then send a copy of the memo in a container to each of these users, or could require the same container to circulate from one to another.
- The
transaction authority 700 may require the electronic controls to maintain a secure audit trail indicating where the container has been, who has opened it, who has accessed the memo it contains, and when. Transaction authority 700(A) might thus increase personal accountability by evidencing whether a particular person had seen a particular document, when, and for how long.
- Organization A's
Intranet 5104 might also be used to exchange and/or distribute highly confidential design specifications. Transaction authority 700(A) can, for example, maintain, in digital form, a detailed record of who has “signed off” on the design specifications—thus ensuring personal accountability and providing a high degree of efficiency. - As mentioned above, private transaction authorities 700(A), 700(B) can also provide a “firewall” function to protect confidential information from escaping to outside of the respective organizations A, B. Suppose for example that organization A is an integrated circuit design house and organization B is an integrated circuit foundry. Organization A designs and specifies the circuit layout of a chip, producing a “tape out” that it sends to organization B. Organization B manufactures an integrated circuit based on the “tape out”, and delivers chips to organization A.
-
Transaction authority 700 can be used to facilitate the above business transaction while protecting confidentiality within each of organizations A and B. For example: -
- organization A's private transaction authority 700(A) can supervise an overall design and specification development effort within organization A. All communications take place in
secure containers 302 over organization A's Intranet 5100(A) to maintain confidentiality. Transaction authority 700(A) can maintain a secure archive of historical design documents, works in progress, and specification versions as the design process progresses. - Organization A's private transaction authority 700(A) can manage the final design specification development—ensuring that all conditions required to finalize the design specifications are followed.
- Once the design specification has been finalized, transaction authority 700(A) can circulate it within
secure containers 152 to those individuals within organization A that need to “sign off” on it. Their respective appliances 100(A)(1), . . . 100(A)(k) can affix and/or embed digital signatures, handwritten signatures, seals and/or fingerprints as described above to indicate specification approval. - Upon being satisfied that the specification has been “signed off” by the appropriate people, transaction authority 700(A) can send it over Internet 1104 within a
secure container 302 to public transaction authority 700(C). Public transaction authority 700(C) may be a commercial transaction authority retained by organizations A and B to act as a liaison between them. Organization A's private transaction authority 700(A) can filter (or protect) all information it sends to public transaction authority 700(C) to ensure that organization B can access only that information intended for it. For example, private transaction authority 700(A) might provide additional electronic controls within the container to prevent organization B from seeing any detailed audit information showing where the specification has been within organization A. - The public transaction authority 700(C) might act as an independent trusted third party, notarizing and/or certifying the design specification to later evidence that organization A delivered it on a particular date and time in accordance with a contract.
- Public transaction authority 700(C) could then forward the design specification (still within a secure container) over
Internet 5104 to organization B's private transaction authority 700(B). - Organization B's private transaction authority 700(B) could automatically send a copy of the design specification over organization B's Intranet 5100(B) to the appropriate users 100(B)(1), 100(B),(N) within organization B. No one outside of organization B would need to know who received a copy of the specification. On the other hand, organization A's transaction authority 700(A) could, if desired, include electronic controls restricting access to only certain engineers within organization B—and these secure controls would be carried along into organization B and securely enforced by electronic appliances 100(B)(1), . . . , 100(B)(N).
- organization A's private transaction authority 700(A) can supervise an overall design and specification development effort within organization A. All communications take place in
- Organization B's transaction authority 700(B) could manage the chip manufacturing process, ensuring that all steps and conditions required to manufacture chips in accordance with organization A's design specification are followed.
-
FIG. 67 shows an example of howtransaction authority 700 can be used to conduct international commerce. In this particular example, atransaction authority 700 coordinates a complex multi-national transaction betweencompanies Company 1106A has itsown bank 1108A andlawyers 1110A. Similarly,company 1106B has itsown bank 1108B andlawyers 1110B, andcompany 1106C has itsown bank 1108C and lawyers 1110C. - The
transaction authority 700 may assist in forming agreements between the international parties, by for example passing offers and counteroffers back and forth in secure containers and using the contract forming techniques described above to establish some or all of the terms and provide non-repudiation. Once a contract is formed,transaction authority 700 may maintain a master set of rules and controls specifying all the conditions that must be satisfied to complete the transaction—and may thus provide consequences for different events. Alternatively, once the contract is executed, the transaction authority role may be virtual, particularly in simpler models, that is the value chain rules and controls can be carried by VDE containers whose rules and controls may, as a whole, specify all processes and conditions that must fulfilled, including their sequence of operation. Rules and controls provided by atransaction authority 700 may take international law into account—with differing rules applying to different countries. The rules could take into account various import and export requirements and restrictions, international tax treaties between nations, contain upfront and/or ongoing customs related routing and filing requirements, identify reputable currency transaction authorities, assist in filing contracts or certain contract terms with relevant national and international authorities, manage any shipping or other transportation requirements, assist in establishing conclusive translation services for contract terms (particularly standard terms and conditions), manage differences in international certifying authority requirements and formats, impose societal regulations required by applicable governing bodies, and collect applicable governing body taxes, such as taxes for both national and regional governing entities, etc.Transaction authority 700 may communicate between the various international parties using secure electronic containers, and may securely validate and authentic various event notifications provided by the international parties. - Complex business interactions under the control of a
transaction authority 700 may also be distributed within and among, for example, organizations and/or jurisdictions. Suppose a complex international real estate transaction requires participation of several functions within the purchasing and selling companies, several financial institutions, insurance companies, and law firms, and perhaps government agencies in a few countries. Suppose further that each of the organizational and individual parties to the transaction has computers that are VDE-aware, and that within each organization or agency there is at least one distributed transaction authority that performs services for this real estate transaction under an authority granted by amaster transaction authority 700. - In this one example, each of the parties to the real estate transaction has contributed commerce rules and parameters representing their business relationships in the form of VDE rules and controls that define each parties role in the overall transaction. For instance, the insurance company must insure the property at a value and cost that the purchaser finds acceptable and that is also approved by the mortgage lender(s). Also, suppose that these transaction VDE rules and controls have already been mutually agreed upon using negotiation mechanisms described in the Ginter et al. application, and that the negotiated rules and controls together with the history of negotiating these rules and controls have all been stored at the master transaction authority for this real estate transaction. The most senior transaction authority may be a
master transaction authority 700 or might be any mutually agreed upon distributed transaction authority. In this one example we assume the former. In short, in short, all parties have agreed to the rules and controls that govern the transaction. The negotiation process may have been simplified because thetransaction authority 700 may have distributed a distributed template application for international real estate sales, the template being based on thetransaction authority 700's past experience or that were created by thetransaction authority 700 especially for this transaction as a value added service to its important customers. - Each of the parties to the transaction is, according to the VDE control sets that define this atomic transaction, responsible for seeing that certain pieces of the transaction are completed prior to the closing and consummation of the overall transaction. In some cases, plural parties are jointly responsible for completing part of the over all transaction. For example, the buyer and seller must have agreed on a purchase price. In this example, they contribute their business requirements, including, for example, their price and other variables, and they use the VDE negotiation mechanisms to arrive at an agreement that represents a fair balance of interests. If the electronic negotiation is unsuccessful, the parties may directly negotiate, or VDE secure containers with audit records indicating failure are sent to the transaction authority who, in turn, notifies each of the other parties authorized to participate in the overall transaction.
- If the buying and selling parties do agree, in this one example, notification is sent by the VDE protected processing environment that completes the negotiation (or receives negotiation completion instructions digitally signed by both parties through the use of VDE techniques) to a distributed transaction authority, which in turn, notifies other parties, including other participating transaction authorities, that price has been agreed upon. Based on VDE controls for subtransactions, VDE may securely notify a party or parties that certain other subtransactions are now to be completed. In this example, the title search company may now perform their task; an insurance company may now begin negotiations with the buyer for coverage using the VDE negotiation mechanisms. An attorney in the Counsel's office for the purchaser may begin negotiations with his counterpart in the seller's company; both in-house attorneys may interact with their outside counsel using VDE and VDE secure containers in creating and negotiating the various documents whose execution completes parts or the overall transaction.
- In this example, each of the parties may have one or more digital certificates issued by the certifying
authority 500 to authenticate each of the parties to this transaction and its subtransactions. Thefinancial clearinghouse 200 provides a payment vehicle for various value added services, in one example, those provided by thetransaction authority 700. Theusage clearinghouse 300 collects audit records sent from time to time in VDE secure containers from each of the participating VDE protected processing environments and provides an independent third party audit of these transactions. Thesecure directory services 600 helps participants locate each other's electronic addresses while maintaining confidentiality and privacy. - As each of the subtransactions is completed, a distributed transaction authority within the organization within which the subtransaction is completed notifies the master authority for this
transaction 700 of completion of that subtask. According to the previously agreed upon VDE rules and controls sets, some or all of the persons participating in the transaction may also be notified by audit records and/or messages that are securely sent from, and authenticated by, at least one participating VDE protected processing environment, including, for example, PPEs at nodes for individuals, distributed Commerce Utility Systems, a distributed transaction authority, and/or the master authority for this transaction. - When all the component elements of the overall transaction have completed, a transaction authority, in this example, the master transaction authority for this real estate sale, notifies each of the participants and each of the participating distributed transaction authorities, that the preconditions have all been met and settles the overall transaction. Optionally, the transaction authority may give seller and purchase a last opportunity to proceed to completion or to hold up the transaction.
- This one example shows that
Commerce Utility Systems 90, includingtransaction authority 700, may be distributed to intermediate VDE protected processing environments that support one or moreCommerce Utility Systems 90. - Amortizing infrastructure and other resources across many users, building critical mass more rapidly than competitors, supporting specialization to tailor and deliver the most appealing products and services to customers, maximizing negotiating leverage power for purchasing, and building the most comprehensive infrastructure to serve as the best “one-stop” resource for a given business activity—these are all central concepts in building successful, modern businesses. VDE and Distributed Commerce Utility provide a foundation for creating highly competitive and successful cyberspace businesses that demonstrate these attributes. Many of these businesses will reflect the character of the Internet and the World Wide Web. Like VDE and Distributed Commerce Utility, they will comprise a distributed community that realizes maximum advantage by supporting electronic commerce partnerships. They will provide different layers of services and complementary products and services, and will realize great advantage in coordinating their activities to their mutual benefit.
- The Digital Broadcasting Network (“DBN”) will be just such an innovative commercial enterprise. Comprised of many different World Wide Web (“WEB”) based sites and services, DBN participants will gain greater leverage and operating efficiency by sharing resources, experiencing maximum buying power, generating marketing and customer information, and supporting a rational administrative overlay that ties together their many, frequently complementary, activities. Much like the consistent rules that enable and underlie both the World Wide Web and the design of VDE and Distributed Commerce Utility, and layered upon the capabilities of both these architectures, the Digital Broadcasting Network employs their inventions to support a highly efficient, largely automated and distributed community that maximizes business efficiencies. In a similar manner, other examples would include other groupings of entities that function together as Virtual Enterprises (e.g. corporations or other organizations). The distributed nature of VDE and the Commerce Utility Systems are particularly important in providing an effective infrastructure for these modern, potentially large scale, cyberspace business activities.
- The Digital Broadcasting Network may function as a cooperative of WEB sites and, for example, service providers, with a central and perhaps regional and logical (e.g. market based) headquarters groups, or it may function as a for profit, shareholder corporation in a business model reminiscent of television broadcast companies (e.g., NBC), or it may function as a cooperative or virtual corporation that has some mix or combination of mixes of the above attributes and employ distributed peer to peer, hierarchical, and centralized administrative business relationships and activities. In one example, a plurality of corporations may join together to provide the advantages of size and coordination with individual participants providing some degree of specialty expertise and the body of entities coordinating together in some fashion in a “higher” level cooperative or corporation.
- In one example, the Digital Broadcasting Network may be a single corporation that has many licensed franchisees. The licensed franchisees may comprise WEB sites that serve geographically and/or logically specialized market areas and/or serve other WEB sites in a hierarchy and/or peer-to-peer context of Distributed Commerce Utility services as described above. On behalf of itself and its franchisees, this corporation may, for example:
-
- negotiate optimal rates for exposure time with advertisers and their agents,
- obtain the lowest costs for content provided by third parties,
- resell market analysis and user profiling information,
- share its revenue with its franchisees which themselves may share revenue with DBN and/or other franchisees,
- provide advertising to franchisees in response to franchisee and/or franchisee user base profiles,
- a guarantee a certain number of “eyes” (exposures and/or other interactions) with respect to advertiser materials,
- provide a secure virtual network employing VDE and Distributed Commerce Utility capabilities so that the overall organization can operate in a secure and highly efficient manner, including using common user application tools, interfaces, and administration operations,
- do advertising for the network to the benefit of the network and the franchisees,
- purchase and/or otherwise supply content to franchisees in response to franchisee needs as demonstrated by their requests and/or usage profiles,
- collect and analyze content (including advertising) usage, cyberspace purchasing, and other data as allowed under its agreement with franchisees,
- allow franchisees to perform many of the network functions on a local basis—that is acquire and make available geographically and/or logically local (consistent with there focus) content (and/or other content of particular interest to its user base),
- negotiate agreements regarding advertising materials that are of commercial value given the franchisees physical and/or logical market focus,
- control at least a portion of its WEB “broadcasting” space—that is exercise local control over at least some portion of the content—with the remainder of the control, by agreement, and, for example, enforced by rules and controls, being under the control of DBN and/or some one or more other network participants, and
- perform other administrative, support and/or service functions on behalf and/or for the network.
- In one example, DBN may employ many of the security and administrative capabilities of VDE and many of the service functions provided by the present inventions to manage and automate the distributed relationships and activities that are central to the DBN business model. For example:
-
-
Transaction Authority 700 can provide the overall administrative context for managing the network community. For example, thetransaction authority 700 may manage (through the use of VDE rules and controls in the preferred embodiment) the routing of content to appropriate franchisees. It may also manage the chains of handling and control related to reporting usage information. Thetransaction authority 700 may obtain and/or derive its electronic control sets from the agreement relationships between DBN and its franchisees. Electronic negotiations may be used to create these agreement relationships. Thetransaction authority 700 may also receive controls reflecting bilateral or other networked relationships directly among franchisees and other participants. - Rights and
Permissions Clearinghouse 400 can extend commercial rights related to content to network franchisees. It acts as a repository of rights related to content that is supplied by network entities to customers—including content rights held by network entities themselves, and made available to other network entities. Such content rights may include, for example, displaying, vending, redistributing, repurposing, and for advertising. It can provide additional rights (e.g., redistribution rights or specialized repurposing rights) upon request and/or automated profiling based, for example, upon usage. -
Usage Clearinghouse 300 can collect usage data in support of market analysis, user profiling, and advertising. It may also analyze that information and derive reports. It may distribute those reports internally to the DBN as appropriate, and sell reports and/or other usage based information externally based upon commercial opportunity. -
Financial Clearinghouse 200 can ensure proper compensation fulfillment throughout the network. It may collect payments due to DBN from franchisees for content. It may distribute to franchisees payments due them as a result of advertising and reselling of usage information. It can collect payments from franchisees for support of generally DBN infrastructure and services such as, for example, network advertising. It connects to general purpose financial clearinghouse infrastructure to transmit and receive payment related information. - The
secure directory services 600 may maintain directory services based upon unique identity and/or class attribute(s). There may be a very large number of franchisees globally.Directory services 600 could also maintain directory information on customers, including unique identifier and profiling information.Secure directory services 600 may maintain directory infrastructure for content owned, managed and/or available to the network. - A certifying
authority 500 may certify the roles of all participants in the network. It would issue a certificate to each franchisee, for example. It may also issue certificates certifying commercial relationships of groupings of network entities to facilitate efficient, secure relationships with third parties. They may also issue certificates to customers to represent certain specialized customer rights regarding customer commercial activities with outside parties (for example, discounts, or being a member of the greater “DBN” community).
-
- Portions or all of specific service functions (e.g., as described above) may be highly distributed and may operate significantly, primarily or even exclusively on franchise and service network web servers.
- While the inventions have been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the inventions are not to be limited to the disclosed embodiment, but on the contrary, are intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
Claims (96)
1. A clearinghouse comprising:
means for registering digital objects and associated permissions, the means for registering including means for assigning at least one identifying number and/or name to the digital objects;
means for providing one or more permissions to one or more users determined to be authorized to use a digital object associated with such one or more permissions, the means for providing being operable to provide at least some of the one or more permissions independently of the digital object associated therewith; and
means for receiving permission information from a remote location and automatically associating the permission information with one or more registered digital objects.
2. The clearinghouse of claim 1 , in which the means for providing comprises means for providing different permissions relating to use of a given digital object to different classes of users.
3. The clearinghouse of claim 1 , further comprising:
means for updating previously issued permissions.
4. The clearinghouse of claim 1 , further comprising:
means for assisting rightsholders in specifying permission information using one or more templates.
5. The clearinghouse of claim 1 , further comprising:
means for automatically providing one or more permissions to a user based upon at least one aspect of the user's previous usage of a piece of content.
6. The clearinghouse of claim 1 , in which the means for registering comprises database management means for storing permissions in one or more databases.
7. The clearinghouse of claim 1 , further comprising:
means for issuing reports pertaining to permissions the clearinghouse has distributed.
8. The clearinghouse of claim 1 , in which the means for providing comprises means for determining if a user is qualified to receive one or more permissions, the means for determining comprising means for evaluating one or more certificates associated with the user.
9. The clearinghouse of claim 1 , in which the means for providing comprises means for determining if a user is qualified to receive one or more permissions, the means for determining comprising means for verifying the user's knowledge of a shared secret.
10. The clearinghouse of claim 1 , further comprising:
means for negotiating permissions with users.
11. A system comprising:
a secure communications handler operable to facilitating communication with one or more electronic appliances over a telecommunications network;
a database and transaction processor operable to store digital objects and associated permissions in a database, to facilitate the specification of new permissions, to provide permissions to one or more users over the telecommunications network, and to create and distribute reporting information;
an authorization checker; and
a registration processor for registering digital objects and associated permissions.
12. A method comprising:
receiving two or more control sets associated with an electronic work;
receiving one or more distribution controls specifying circumstances under which individual ones of the two or more control sets may be used;
receiving a request from a user of the electronic work for one or more of the control sets;
determining, based at least in part on the one or more distribution controls, whether the user is authorized to receive the requested one or more of the control sets; and
selectively providing the requested one or more of the control sets based on a result of the determining step.
13. The method of claim 12 , in which the determining step includes qualifying one or more credentials.
14. The method of claim 12 , in which the determining step includes checking a frequency of reissue.
15. The method of claim 12 , in which the determining step includes evaluating a measure of a number of controls for the user.
16. The method of claim 12 , further comprising:
receiving a modified control set, the modified control set providing a different set of rights than a previously distributed control set; and
automatically distributing the modified control set to one or more users who had received the previously distributed control set.
17. The method of claim 16 , in which the one or more users have one or more electronic appliances comprising one or more protected processing environments for securely replacing the previously distributed control set with the modified control set.
18. A method comprising:
receiving a control set associated with an electronic work, the control set specifying one or more permissions relating to usage of the electronic work;
receiving a request from a user of the electronic work for the control set; and
providing the control set to the user.
19. The method of claim 18 , further comprising:
determining whether the user is authorized to receive the control set.
20. The method of claim 19 , in which the determining step includes evaluating one or more credentials associated with the user.
21. The method of claim 18 , in which the one or more permissions include at least one permission selected from the group consisting of: copying at least part of the electronic work; modifying at least part of the electronic work; viewing at least part of the electronic work; and printing at least part of the electronic work.
22. The method of claim 18 , further comprising:
receiving a modified control set; and
automatically distributing the modified control set to the user.
23. The method of claim 22 , in which the user has an electronic appliance comprising a protected processing environment operable to securely replace the control set with the modified control set.
24. A method comprising:
receiving a digital object containing protected content;
registering a first control set with a clearinghouse, the first control set comprising one or more controls pertaining to the digital object; and
automatically receiving a second control set from the clearinghouse, the second control set comprising a modified one or more controls pertaining to the digital object.
25. The method of claim 24 , further comprising securely replacing the first control set with the second control set.
26. The method of claim 24 , in which the protected content comprises a file or software program.
27. The method of claim 24 , in which at least one of the modified one or more controls includes at least one permission selected from the group consisting of: copying at least part of the protected content; modifying at least part of the protected content; viewing at least part of the protected content; and printing at least part of the protected content.
28. The method of claim 27 , further comprising:
using tamper-resistant software and/or hardware to make at least one use of the protected content in accordance with the modified one or more controls.
29. The method of claim 28 , in which at least one of the modified one or more controls requires possession of a certificate before allowing the at least one use of the protected content, the method further comprising:
requesting the certificate from a certification authority; and
receiving the certificate.
30. The method of claim 29 , in which the certificate is configured to expire.
31. The method of claim 29 , further comprising:
securely providing identification information to the certification authority.
32. A method comprising:
receiving a digital object containing protected content;
receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the protected content;
using the protected content in accordance with the first control set;
receiving a second control set, the second control set specifying a second one or more permissions with respect to usage of the protected content, the second control set being an updated version of the first control set; and
using the protected content in accordance with the second control set.
33. The method of claim 32 , in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.
34. The method of claim 32 , in which the first one or more permissions includes at least one permission selected from the group consisting of: copying at least part of the protected content; modifying at least part of the protected content; viewing at least part of the protected content; and printing at least part of the protected content.
35. The method of claim 32 , in which the second control set is received automatically from a clearinghouse.
36. The method of claim 32 , in which the second control set is received from a clearinghouse in response to a request.
37. The method of claim 36 , in which the request includes one or more certificates.
38. The method of claim 37 , in which the step of receiving a second control set is selectively performed based on validity of the one or more certificates.
39. The method of claim 36 , in which the request includes one or more shared secret values.
40. The method of claim 32 , in which the first control set is configured to expire, and in which the second control set replaces the first control set.
41. The method of claim 32 , in which audit information is generated as a result of using the protected content in accordance with the first control set.
42. The method of claim 32 , in which audit information is generated as a result of using the protected content in accordance with the second control set.
43. The method of claim 32 , in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the method further comprising:
requesting the digital certificate from a certification authority; and
receiving the digital certificate.
44. The method of claim 43 , in which the digital certificate is configured to expire.
45. The method of claim 43 , further comprising:
securely providing identification information to the certification authority.
46. A method comprising:
receiving a digital property;
receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the digital property;
determining that an additional one or more permissions are needed to make a desired use of the digital property;
receiving a second control set, the second control set specifying at least the additional one or more permissions; and
making the desired use of the digital property in accordance with the second control set.
47. The method of claim 46 , in which the digital property and the first control set are received from a first entity, and in which the second control set is received from a second entity.
48. The method of claim 47 , in which the first entity comprises a content publisher, and in which the second entity comprises a clearinghouse.
49. The method of claim 46 , in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the digital property, the protected processing environment being resistant to tampering by the user.
50. The method of claim 46 , in which the first one or more permissions includes at least one permission selected from the group consisting of: copying at least part of the digital property; modifying at least part of the digital property; viewing at least part of the digital property; and printing at least part of the digital property.
51. The method of claim 46 , in which the second control set is received automatically from a clearinghouse.
52. The method of claim 46 , in which the second control set is received from a clearinghouse in response to a request.
53. The method of claim 52 , in which the request includes one or more certificates.
54. The method of claim 53 , in which the step of receiving a second control set is selectively performed based on validity of the one or more certificates.
55. The method of claim 52 , in which the request includes one or more shared secret values.
56. The method of claim 46 , in which the first control set is configured to expire, and in which the second control set replaces the first control set.
57. The method of claim 46 , in which audit information is generated as a result of using the digital property in accordance with at least one of the first control set and the second control set.
58. The method of claim 46 , in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the method further comprising:
requesting the digital certificate from a remote entity; and
receiving the digital certificate.
59. The method of claim 58 , in which the digital certificate is configured to expire.
60. The method of claim 58 , further comprising:
securely providing identification information to the remote entity.
61. A method comprising:
receiving a digital object containing protected content;
receiving a control set, the control set specifying a first one or more permissions with respect to usage of the protected content;
contacting a clearinghouse to obtain an additional one or more permissions pertaining to usage of the protected content;
receiving the additional one or more permissions; and
using the protected content in accordance with the additional one or more permissions.
62. The method of claim 61 , in which the first one or more permissions and the additional one or more permissions are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.
63. The method of claim 61 , in which the first one or more permissions include a permission to view a limited portion of the protected content.
64. The method of claim 63 , in which the additional one or more permissions include a permission to view a larger portion of the protected content than is permitted by the first one or more permissions.
65. The method of claim 63 , in which the control set comprises information identifying the clearinghouse.
66. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
obtaining two or more control sets associated with an electronic work;
obtaining one or more distribution controls specifying circumstances under which individual ones of the two or more control sets may be used;
receiving a request from a user of the electronic work for one or more of the control sets;
determining, based at least in part on the one or more distribution controls, whether the user is authorized to receive the requested one or more of the control sets; and
selectively providing the requested one or more of the control sets.
67. The computer-readable medium of claim 66 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of qualifying one or more credentials.
68. The computer-readable medium of claim 66 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
obtaining a modified control set, the modified control set providing a different set of rights than a previously distributed control set; and
automatically distributing the modified control set to one or more users who had received the previously distributed control set.
69. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
obtaining a control set associated with an electronic work, the control set specifying one or more permissions relating to usage of the electronic work;
receiving a request from a user of the electronic work for the control set; and
providing the control set to the user.
70. The computer-readable medium of claim 69 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
determining whether the user is authorized to receive the control set.
71. The computer-readable medium of claim 70 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of evaluating one or more credentials associated with the user.
72. The computer-readable medium of claim 69 , in which the one or more permissions include at least one permission selected from the group consisting of: copying at least part of the electronic work; modifying at least part of the electronic work; viewing at least part of the electronic work; and printing at least part of the electronic work.
73. The computer-readable medium of claim 69 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:
obtaining a modified control set; and
automatically distributing the modified control set to the user.
74. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
obtaining a digital object containing protected content;
registering a first control set with a clearinghouse, the first control set comprising one or more controls pertaining to the digital object; and
automatically obtaining a second control set from the clearinghouse, the second control set comprising a modified one or more controls pertaining to the digital object.
75. The computer-readable medium of claim 74 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of securely replacing the first control set with the second control set.
76. The computer-readable medium of claim 74 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
using protected content in accordance with the modified one or more controls.
77. The computer-readable medium of claim 74 , in which at least one of the modified one or more controls requires possession of a certificate before allowing at least one use of the protected content, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:
requesting the certificate from a remote entity; and
obtaining the certificate.
78. The computer-readable medium of claim 77 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
securely providing identification information to the remote entity.
79. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
obtaining a digital object containing protected content;
obtaining a first control set, the first control set specifying a first one or more permissions with respect to usage of the protected content;
using the protected content in accordance with the first control set;
obtaining a second control set, the second control set specifying a second one or more permissions with respect to usage of the protected content; and
using the protected content in accordance with the second control set.
80. The computer-readable medium of claim 79 , in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.
81. The computer-readable medium of claim 79 , in which the first one or more permissions includes at least one permission selected from the group consisting of: copying at least part of the protected content; modifying at least part of the protected content; viewing at least part of the protected content; and printing at least part of the protected content.
82. The computer-readable medium of claim 79 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of generating audit information as a result of using the protected content.
83. The computer-readable medium of claim 79 , in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:
requesting the digital certificate from a certification authority; and
obtaining the digital certificate.
84. The computer-readable medium of claim 83 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
securely providing identification information to the certification authority.
85. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
receiving a digital property;
receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the digital property;
determining that an additional one or more permissions are needed to make a desired use of the digital property;
receiving a second control set, the second control set specifying at least the additional one or more permissions; and
making the desired use of the digital property in accordance with the second control set.
86. The computer-readable medium of claim 85 , in which the first control set and the second control set are configured to be enforced by a protected processing environment associated with a user of the digital property, the protected processing environment being resistant to tampering by the user.
87. The computer-readable medium of claim 85 , in which the first one or more permissions includes at least one permission selected from the group consisting of: copying at least part of the digital property; modifying at least part of the digital property; viewing at least part of the digital property; and printing at least part of the digital property.
88. The computer-readable medium of claim 85 , in which the first control set is configured to expire, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of replacing the first control set with the second control set.
89. The computer-readable medium of claim 85 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of generating audit information as a result of using the digital property in accordance with at least one of the first control set and the second control set.
90. The computer-readable medium of claim 85 , in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform steps comprising:
requesting the digital certificate from a remote entity; and
receiving the digital certificate.
91. The computer-readable medium of claim 90 , further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:
securely providing identification information to the remote entity.
92. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:
receiving a digital object containing protected content;
receiving a control set, the control set specifying a first one or more permissions with respect to usage of the protected content;
contacting a clearinghouse to obtain an additional one or more permissions pertaining to usage of the protected content;
receiving the additional one or more permissions; and
using the protected content in accordance with the additional one or more permissions.
93. The computer-readable medium of claim 92 , in which the first one or more permissions and the additional one or more permissions are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.
94. The computer-readable medium of claim 92 , in which the first one or more permissions include a permission to view a limited portion of the protected content.
95. The computer-readable medium of claim 94 , in which the additional one or more permissions include a permission to view a larger portion of the protected content than is permitted by the first one or more permissions.
96. The computer-readable medium of claim 94 , in which the control set comprises information identifying the clearinghouse.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/834,784 US20070276759A1 (en) | 1995-02-13 | 2007-08-07 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transaction and rights management |
US14/120,356 US20140380408A1 (en) | 1995-02-13 | 2014-05-14 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions and rights management |
Applications Claiming Priority (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US38810795A | 1995-02-13 | 1995-02-13 | |
US69971296A | 1996-08-12 | 1996-08-12 | |
US09/398,665 US7133846B1 (en) | 1995-02-13 | 1999-09-17 | Digital certificate support system, methods and techniques for secure electronic commerce transaction and rights management |
US09/426,764 US6658568B1 (en) | 1995-02-13 | 1999-10-26 | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
US10/727,324 US8751793B2 (en) | 1995-02-13 | 2003-12-02 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
US11/834,784 US20070276759A1 (en) | 1995-02-13 | 2007-08-07 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transaction and rights management |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/727,324 Continuation US8751793B2 (en) | 1995-02-13 | 2003-12-02 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/120,356 Continuation US20140380408A1 (en) | 1995-02-13 | 2014-05-14 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions and rights management |
Publications (1)
Publication Number | Publication Date |
---|---|
US20070276759A1 true US20070276759A1 (en) | 2007-11-29 |
Family
ID=32601076
Family Applications (4)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/426,764 Expired - Fee Related US6658568B1 (en) | 1995-02-13 | 1999-10-26 | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
US10/727,324 Expired - Fee Related US8751793B2 (en) | 1995-02-13 | 2003-12-02 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
US11/834,784 Abandoned US20070276759A1 (en) | 1995-02-13 | 2007-08-07 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce electronic transaction and rights management |
US14/120,356 Abandoned US20140380408A1 (en) | 1995-02-13 | 2014-05-14 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions and rights management |
Family Applications Before (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/426,764 Expired - Fee Related US6658568B1 (en) | 1995-02-13 | 1999-10-26 | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
US10/727,324 Expired - Fee Related US8751793B2 (en) | 1995-02-13 | 2003-12-02 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US14/120,356 Abandoned US20140380408A1 (en) | 1995-02-13 | 2014-05-14 | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions and rights management |
Country Status (1)
Country | Link |
---|---|
US (4) | US6658568B1 (en) |
Cited By (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040103011A1 (en) * | 2001-05-29 | 2004-05-27 | Kouji Hatano | Insurance system |
US20080195544A1 (en) * | 2007-02-09 | 2008-08-14 | International Business Machines Corporation | System and method for generating an authorization role associated with a set of access rights and assigning the authorization role to a class of one or more computer users for accessing secured resources |
WO2011146343A1 (en) * | 2010-05-19 | 2011-11-24 | News Applications, Inc. | Methods and apparatus for the acquisition and exchange of media content in communications network |
US8725645B1 (en) | 2013-01-04 | 2014-05-13 | Cetrus LLC | Non-invasive metering system for software licenses |
US20140189743A1 (en) * | 2012-12-31 | 2014-07-03 | Echostar Technologies L.L.C. | Automatic learning channel customized to a particular viewer and method of creating same |
AU2016201533B2 (en) * | 2008-05-29 | 2017-09-14 | Visa U.S.A. Inc. | Serial number and payment data based payment card processing |
US9805347B2 (en) | 2007-11-29 | 2017-10-31 | Visa Usa, Inc. | Serial number and payment data based payment card processing |
US20200344232A1 (en) * | 2016-03-15 | 2020-10-29 | Global Tel*Link Corporation | Controlled environment secure media streaming system |
US20200394682A1 (en) * | 2014-05-15 | 2020-12-17 | Alan Rodriguez | Systems and methods for communicating privacy and marketing preferences |
US10943030B2 (en) | 2008-12-15 | 2021-03-09 | Ibailbonding.Com | Securable independent electronic document |
US11048779B2 (en) * | 2015-08-17 | 2021-06-29 | Adobe Inc. | Content creation, fingerprints, and watermarks |
US20210295290A1 (en) * | 2020-03-20 | 2021-09-23 | Mastercard International Incorporated | Method and system for supporting micro-transactions in a digital asset network via digital tokens |
US11288727B2 (en) | 2015-08-17 | 2022-03-29 | Adobe Inc. | Content creation suggestions using failed searches and uploads |
US20220237565A1 (en) * | 2021-01-25 | 2022-07-28 | James M. Dzierzanowski | Systems and methods for project accountability services |
US11510046B2 (en) * | 2019-01-21 | 2022-11-22 | Shanghai Hongyan Returnable Transit Packagings Co., Ltd. | Data reporting method for logistics device and system therefor |
US20230135598A1 (en) * | 2011-02-23 | 2023-05-04 | Catch Media, Inc. | E-used digital assets and post-acquisition revenue |
Families Citing this family (598)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8094949B1 (en) | 1994-10-21 | 2012-01-10 | Digimarc Corporation | Music methods and systems |
US7165174B1 (en) * | 1995-02-13 | 2007-01-16 | Intertrust Technologies Corp. | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
US6948070B1 (en) | 1995-02-13 | 2005-09-20 | Intertrust Technologies Corporation | Systems and methods for secure transaction management and electronic rights protection |
US5943422A (en) | 1996-08-12 | 1999-08-24 | Intertrust Technologies Corp. | Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels |
US6157721A (en) | 1996-08-12 | 2000-12-05 | Intertrust Technologies Corp. | Systems and methods using cryptography to protect secure computing environments |
US7133846B1 (en) | 1995-02-13 | 2006-11-07 | Intertrust Technologies Corp. | Digital certificate support system, methods and techniques for secure electronic commerce transaction and rights management |
US6658568B1 (en) | 1995-02-13 | 2003-12-02 | Intertrust Technologies Corporation | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
ATE441897T1 (en) | 1995-02-13 | 2009-09-15 | Intertrust Tech Corp | SYSTEMS AND METHODS FOR MANAGING SECURED TRANSACTIONS AND PROTECTING ELECTRONIC RIGHTS |
US5892900A (en) | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US7289643B2 (en) | 2000-12-21 | 2007-10-30 | Digimarc Corporation | Method, apparatus and programs for generating and utilizing content signatures |
US6965682B1 (en) | 1999-05-19 | 2005-11-15 | Digimarc Corp | Data transmission by watermark proxy |
US7716486B2 (en) * | 1995-10-02 | 2010-05-11 | Corestreet, Ltd. | Controlling group access to doors |
US8732457B2 (en) | 1995-10-02 | 2014-05-20 | Assa Abloy Ab | Scalable certificate validation and simplified PKI management |
US7353396B2 (en) * | 1995-10-02 | 2008-04-01 | Corestreet, Ltd. | Physical access control |
US7660994B2 (en) | 1995-10-24 | 2010-02-09 | Corestreet, Ltd. | Access control |
US7337315B2 (en) * | 1995-10-02 | 2008-02-26 | Corestreet, Ltd. | Efficient certificate revocation |
US8015597B2 (en) * | 1995-10-02 | 2011-09-06 | Corestreet, Ltd. | Disseminating additional data used for controlling access |
US7822989B2 (en) | 1995-10-02 | 2010-10-26 | Corestreet, Ltd. | Controlling access to an area |
US7600129B2 (en) * | 1995-10-02 | 2009-10-06 | Corestreet, Ltd. | Controlling access using additional data |
US8261319B2 (en) * | 1995-10-24 | 2012-09-04 | Corestreet, Ltd. | Logging access attempts to an area |
US8117298B1 (en) | 1996-02-26 | 2012-02-14 | Graphon Corporation | Multi-homed web server |
US20010011253A1 (en) | 1998-08-04 | 2001-08-02 | Christopher D. Coley | Automated system for management of licensed software |
ES2286833T3 (en) | 1996-05-15 | 2007-12-01 | Intertrust Technologies Corp | METHOD AND APPLIANCE TO ACCESS STORED CONTENTS ON A DVD. |
US20040185830A1 (en) * | 1996-08-08 | 2004-09-23 | Joao Raymond Anthony | Apparatus and method for providing account security |
US7096003B2 (en) * | 1996-08-08 | 2006-08-22 | Raymond Anthony Joao | Transaction security apparatus |
US20070055582A1 (en) | 1996-11-12 | 2007-03-08 | Hahn-Carlson Dean W | Transaction processing with core and distributor processor implementations |
US20080172314A1 (en) | 1996-11-12 | 2008-07-17 | Hahn-Carlson Dean W | Financial institution-based transaction processing system and approach |
US8396811B1 (en) | 1999-02-26 | 2013-03-12 | Syncada Llc | Validation approach for auditing a vendor-based transaction |
US20050165699A1 (en) * | 1996-11-12 | 2005-07-28 | Hahn-Carlson Dean W. | Processing and management of transaction timing characteristics |
US8392285B2 (en) | 1996-11-12 | 2013-03-05 | Syncada Llc | Multi-supplier transaction and payment programmed processing approach with at least one supplier |
US20030064807A1 (en) * | 2001-09-25 | 2003-04-03 | Walker Jay S. | Method and apparatus for linked play gaming |
US6338049B1 (en) * | 1997-03-05 | 2002-01-08 | Walker Digital, Llc | User-generated traveler's checks |
MXPA00008584A (en) * | 1998-03-04 | 2002-05-08 | United Video Properties Inc | Program guide system with targeted advertising. |
AU748164B2 (en) * | 1998-03-04 | 2002-05-30 | Rovi Guides, Inc. | Program guide system with monitoring of advertisement usage and user activities |
US7809138B2 (en) * | 1999-03-16 | 2010-10-05 | Intertrust Technologies Corporation | Methods and apparatus for persistent control and protection of content |
US7689532B1 (en) | 2000-07-20 | 2010-03-30 | Digimarc Corporation | Using embedded data with file sharing |
US7756892B2 (en) * | 2000-05-02 | 2010-07-13 | Digimarc Corporation | Using embedded data with file sharing |
US6233389B1 (en) | 1998-07-30 | 2001-05-15 | Tivo, Inc. | Multimedia time warping system |
US7558472B2 (en) | 2000-08-22 | 2009-07-07 | Tivo Inc. | Multimedia signal processing system |
US6983371B1 (en) * | 1998-10-22 | 2006-01-03 | International Business Machines Corporation | Super-distribution of protected digital content |
US8332478B2 (en) | 1998-10-01 | 2012-12-11 | Digimarc Corporation | Context sensitive connected content |
AU1916400A (en) * | 1998-11-17 | 2000-06-05 | Prenet Corporation | Electronic payment system utilizing intermediary account |
US6266774B1 (en) | 1998-12-08 | 2001-07-24 | Mcafee.Com Corporation | Method and system for securing, managing or optimizing a personal computer |
JP2002536706A (en) * | 1999-02-12 | 2002-10-29 | マック ヒックス | System and method for providing certificate-related and other services |
US6728713B1 (en) | 1999-03-30 | 2004-04-27 | Tivo, Inc. | Distributed database management system |
US8131648B2 (en) * | 1999-10-20 | 2012-03-06 | Tivo Inc. | Electronic content distribution and exchange system |
US7769681B2 (en) * | 1999-05-08 | 2010-08-03 | Jack Misraje | Computer system and method for networkd interchange of data and information for members of the real estate financial and related transactional services industry |
US6959384B1 (en) | 1999-12-14 | 2005-10-25 | Intertrust Technologies Corporation | Systems and methods for authenticating and protecting the integrity of data streams and other data |
CA2377706A1 (en) * | 1999-06-18 | 2000-12-28 | Echarge Corporation | Method and apparatus for ordering goods, services and content over an internetwork using a virtual payment account |
US7444407B2 (en) * | 2000-06-29 | 2008-10-28 | Transnexus, Inc. | Intelligent end user devices for clearinghouse services in an internet telephony system |
US7296001B1 (en) * | 1999-07-12 | 2007-11-13 | Ariba, Inc. | Electronic multilateral negotiation system |
AU6097000A (en) * | 1999-07-15 | 2001-02-05 | Frank W Sudia | Certificate revocation notification systems |
US7430670B1 (en) * | 1999-07-29 | 2008-09-30 | Intertrust Technologies Corp. | Software self-defense systems and methods |
WO2001011843A1 (en) * | 1999-08-06 | 2001-02-15 | Sudia Frank W | Blocked tree authorization and status systems |
CA2384436C (en) * | 1999-09-10 | 2010-06-29 | Portogo, Inc. | Systems and method for insuring correct data transmission over the internet |
US20020029200A1 (en) | 1999-09-10 | 2002-03-07 | Charles Dulin | System and method for providing certificate validation and other services |
US7711646B2 (en) | 1999-09-10 | 2010-05-04 | Transurety, Llc | Methods and apparatus for providing coverage for receiver of transmission data |
AU7706500A (en) | 1999-09-20 | 2001-04-24 | Tivo, Inc. | Closed caption tagging system |
CA2384242A1 (en) | 1999-09-24 | 2001-04-05 | Mary Mckenney | System and method for providing payment services in electronic commerce |
US7742967B1 (en) * | 1999-10-01 | 2010-06-22 | Cardinalcommerce Corporation | Secure and efficient payment processing system |
US9430769B2 (en) | 1999-10-01 | 2016-08-30 | Cardinalcommerce Corporation | Secure and efficient payment processing system |
GB9925227D0 (en) | 1999-10-25 | 1999-12-22 | Internet Limited | Data storage retrieval and access system |
CN1340185A (en) * | 1999-11-05 | 2002-03-13 | 索尼株式会社 | Data decoding device and method, charging information processing device and method, data reproducing device and method, electronic money, electronic right of use, and terminal |
US6876991B1 (en) | 1999-11-08 | 2005-04-05 | Collaborative Decision Platforms, Llc. | System, method and computer program product for a collaborative decision platform |
US6449719B1 (en) * | 1999-11-09 | 2002-09-10 | Widevine Technologies, Inc. | Process and streaming server for encrypting a data stream |
US8055894B2 (en) | 1999-11-09 | 2011-11-08 | Google Inc. | Process and streaming server for encrypting a data stream with bandwidth based variation |
JP4434465B2 (en) * | 1999-11-16 | 2010-03-17 | キヤノン株式会社 | Communication apparatus and method, and storage medium |
US8601373B1 (en) | 1999-11-16 | 2013-12-03 | Ebay Inc. | Network-based sales system with customizable user interface |
US7143144B2 (en) * | 1999-11-30 | 2006-11-28 | Ricoh Company, Ltd. | System, method and computer readable medium for certifying release of electronic information on an internet |
US6912514B2 (en) * | 1999-12-03 | 2005-06-28 | Matsushita Electric Industrial Co., Ltd. | Content distribution system and a reference server |
GB2357225B (en) * | 1999-12-08 | 2003-07-16 | Hewlett Packard Co | Electronic certificate |
GB2357228B (en) * | 1999-12-08 | 2003-07-09 | Hewlett Packard Co | Method and apparatus for discovering a trust chain imparting a required attribute to a subject |
US6854009B1 (en) * | 1999-12-22 | 2005-02-08 | Tacit Networks, Inc. | Networked computer system |
US6832316B1 (en) * | 1999-12-22 | 2004-12-14 | Intertrust Technologies, Corp. | Systems and methods for protecting data secrecy and integrity |
AU2911901A (en) | 1999-12-22 | 2001-07-03 | Transnexus, Inc. | System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications |
CN1182479C (en) * | 2000-01-07 | 2004-12-29 | 国际商业机器公司 | System and method for effectively collecting aranging and access to withdrew table of certificate |
JP4491893B2 (en) * | 2000-02-03 | 2010-06-30 | ソニー株式会社 | Information sending device, information terminal device, and information providing method |
US20010034758A1 (en) * | 2000-02-24 | 2001-10-25 | Dan Kikinis | Virtual private network (VPN) for servicing home gateway system through external disk management |
US8171520B2 (en) | 2000-03-02 | 2012-05-01 | Tivo Inc. | Method of sharing personal media using a digital recorder |
JP2001256318A (en) * | 2000-03-14 | 2001-09-21 | Sony Corp | System and method for contents transaction and program providing medium |
US7085839B1 (en) | 2000-04-07 | 2006-08-01 | Intertrust Technologies Corporation | Network content management |
US7266681B1 (en) | 2000-04-07 | 2007-09-04 | Intertrust Technologies Corp. | Network communications security agent |
JP3583054B2 (en) * | 2000-04-19 | 2004-10-27 | Necインフロンティア株式会社 | Design business system and design method using network |
GB0009634D0 (en) * | 2000-04-19 | 2000-06-07 | Infoclear Nv | The info2clear system for on-line copyright management |
US7343348B2 (en) * | 2000-05-19 | 2008-03-11 | First American Residential Group, Inc. | System for performing real-estate transactions over a computer network using participant templates |
US7490107B2 (en) * | 2000-05-19 | 2009-02-10 | Nippon Telegraph & Telephone Corporation | Information search method and apparatus of time-series data using multi-dimensional time-series feature vector and program storage medium |
US7313692B2 (en) * | 2000-05-19 | 2007-12-25 | Intertrust Technologies Corp. | Trust management systems and methods |
US7099856B2 (en) * | 2000-05-22 | 2006-08-29 | The Procter & Gamble Company | Methods and apparatuses for selling, distributing and dispensing fabric care products |
AU2001265047A1 (en) * | 2000-05-27 | 2001-12-11 | Dana Howard Jones | Method and system for payment of intellectual property royalties by interposed sponsor on behalf of consumer over telecommunications network |
US20020059620A1 (en) * | 2000-05-31 | 2002-05-16 | Hoang Khoi Nhu | Selective inactivation and copy-protection |
US20060112002A1 (en) * | 2000-06-01 | 2006-05-25 | Atlas Commerce, Inc. | Method and apparatus for managing data in a business to business environment |
AU2001266692A1 (en) * | 2000-06-02 | 2001-12-11 | John Denton Biddle | System and method for licensing management |
US7107448B1 (en) | 2000-06-04 | 2006-09-12 | Intertrust Technologies Corporation | Systems and methods for governing content rendering, protection, and management applications |
US7213266B1 (en) | 2000-06-09 | 2007-05-01 | Intertrust Technologies Corp. | Systems and methods for managing and protecting electronic content and applications |
US7050586B1 (en) | 2000-06-19 | 2006-05-23 | Intertrust Technologies Corporation | Systems and methods for retrofitting electronic appliances to accept different content formats |
US20040073617A1 (en) | 2000-06-19 | 2004-04-15 | Milliken Walter Clark | Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail |
US6748400B2 (en) * | 2000-06-22 | 2004-06-08 | David F. Quick | Data access system and method |
US9038108B2 (en) * | 2000-06-28 | 2015-05-19 | Verizon Patent And Licensing Inc. | Method and system for providing end user community functionality for publication and delivery of digital media content |
US7111163B1 (en) | 2000-07-10 | 2006-09-19 | Alterwan, Inc. | Wide area network using internet with quality of service |
US7359880B2 (en) * | 2000-07-11 | 2008-04-15 | Abel Luther C | System and method for consumer control over card-based transactions |
JP2002032596A (en) * | 2000-07-19 | 2002-01-31 | Fujitsu Ltd | Method for electronic commerce and profile converter to be used in electronic commerce |
US6505123B1 (en) * | 2000-07-24 | 2003-01-07 | Weatherbank, Inc. | Interactive weather advisory system |
JP2002041695A (en) * | 2000-07-27 | 2002-02-08 | Hitachi Ltd | Method for issuing certificate, method for confiring certificate and certificate issuing center system |
US7302467B2 (en) * | 2000-08-07 | 2007-11-27 | Sony Corporation | Information processing device and information processing method, service providing system, and computer-executable program for the same |
JP2002358216A (en) * | 2000-08-08 | 2002-12-13 | System Support:Kk | Computer monitoring system |
WO2002015098A2 (en) * | 2000-08-11 | 2002-02-21 | Loy John J | Trade receivable processing method and apparatus |
AU2001284881A1 (en) * | 2000-08-14 | 2002-02-25 | Peter H. Gien | System and method for providing warranties in electronic commerce |
US20020143987A1 (en) * | 2000-08-22 | 2002-10-03 | Sadler Andrew Paul | Message management systems and method |
US20020069370A1 (en) * | 2000-08-31 | 2002-06-06 | Infoseer, Inc. | System and method for tracking and preventing illegal distribution of proprietary material over computer networks |
US20020065832A1 (en) * | 2000-08-31 | 2002-05-30 | Infoseer, Inc. | System and method for controlling file distribution and transfer on a computer |
JP2003150497A (en) * | 2000-08-31 | 2003-05-23 | Seiko Epson Corp | Information posting support method, system, computer program and recording medium |
US7275155B1 (en) * | 2000-09-01 | 2007-09-25 | Northrop Grumman Corporation | Chain of trust processing |
US7165175B1 (en) * | 2000-09-06 | 2007-01-16 | Widevine Technologies, Inc. | Apparatus, system and method for selectively encrypting different portions of data sent over a network |
WO2002021409A1 (en) | 2000-09-08 | 2002-03-14 | Tallent Guy S | System and method for transparently providing certificate validation and other services within an electronic transaction |
US7072870B2 (en) | 2000-09-08 | 2006-07-04 | Identrus, Llc | System and method for providing authorization and other services |
US7222089B2 (en) * | 2000-09-11 | 2007-05-22 | Mahesh Harpale | Intermediary driven electronic marketplace for cross-market trading |
AU2001291007A1 (en) | 2000-09-11 | 2002-03-26 | Transnexus, Inc. | Clearinghouse server for internet telephony and multimedia communications |
JP2002109103A (en) * | 2000-09-29 | 2002-04-12 | Toshiba Corp | System and method for distributing contents |
US7860776B1 (en) | 2000-10-11 | 2010-12-28 | Ebay Inc. | Sales system with buyer price selection |
JP2002123757A (en) * | 2000-10-13 | 2002-04-26 | Fujitsu Ltd | Information selling and buying method |
JP2002203180A (en) * | 2000-10-23 | 2002-07-19 | Matsushita Electric Ind Co Ltd | Device and method for outputting control information |
EP1360659A1 (en) * | 2000-10-23 | 2003-11-12 | Koninklijke Philips Electronics N.V. | Method of automatic payment of a software license fee |
DE10055243A1 (en) * | 2000-11-08 | 2002-05-23 | Siemens Ag | User-related charging for transmitted TV, video, radio or games programs in restricted access system involves exchanging payment, identification, decoding data by telecommunications |
WO2002045316A2 (en) * | 2000-11-10 | 2002-06-06 | Full Audio Corporation | Digital content distribution and subscription system |
US7281010B2 (en) * | 2000-11-15 | 2007-10-09 | Lenovo (Singapore) Pte. Ltd. | Trusted computing platform with dual key trees to support multiple public/private key systems |
US7043473B1 (en) | 2000-11-22 | 2006-05-09 | Widevine Technologies, Inc. | Media tracking system and method |
US7082409B1 (en) * | 2000-11-22 | 2006-07-25 | Richard Sutton Cherry | Fully integrated on-line interactive purchasing club incorporating extremely rapid fulfillment |
US20020073344A1 (en) * | 2000-12-08 | 2002-06-13 | Maritzen L. Michael | Method and apparatus for preventing an unauthorized transaction |
US20020073315A1 (en) * | 2000-12-08 | 2002-06-13 | Brant Candelore | Placing a cryptogram on the magnetic stripe of a personal transaction card |
US7150045B2 (en) | 2000-12-14 | 2006-12-12 | Widevine Technologies, Inc. | Method and apparatus for protection of electronic media |
US7017041B2 (en) * | 2000-12-19 | 2006-03-21 | Tricipher, Inc. | Secure communications network with user control of authenticated personal information provided to network entities |
GB2371636A (en) * | 2000-12-21 | 2002-07-31 | Nokia Oyj | Content Distribution System |
US7099849B1 (en) | 2000-12-28 | 2006-08-29 | Rightsline, Inc. | Integrated media management and rights distribution apparatus |
US7092953B1 (en) * | 2000-12-28 | 2006-08-15 | Rightlsline, Inc. | Apparatus and methods for intellectual property database navigation |
US7525956B2 (en) | 2001-01-11 | 2009-04-28 | Transnexus, Inc. | Architectures for clearing and settlement services between internet telephony clearinghouses |
US20020138396A1 (en) * | 2001-03-21 | 2002-09-26 | Brown A. Demetrius | Methods and apparatus for exchanging ferrous, non-ferrous and platinum group metals |
GB2373605B (en) * | 2001-03-23 | 2005-04-27 | Ibm | A method of metering use of digitally encoded products |
US7270267B2 (en) * | 2001-03-29 | 2007-09-18 | 3M Innovative Properties Company | System for third party management of product manufacture ordering by a franchisee upon approved products of franchisor |
US7580988B2 (en) * | 2001-04-05 | 2009-08-25 | Intertrust Technologies Corporation | System and methods for managing the distribution of electronic content |
US7136840B2 (en) * | 2001-04-20 | 2006-11-14 | Intertrust Technologies Corp. | Systems and methods for conducting transactions and communications using a trusted third party |
US7046819B2 (en) | 2001-04-25 | 2006-05-16 | Digimarc Corporation | Encoded reference signal for digital watermarks |
US7185050B2 (en) * | 2001-04-30 | 2007-02-27 | Hewlett-Packard Development Company, L.P. | Document management system and method using content grouping system |
US20040197761A1 (en) * | 2001-05-01 | 2004-10-07 | Boehmer Daniel R. | Method for communicating confidential educational information |
AUPR486301A0 (en) * | 2001-05-09 | 2001-05-31 | Flurosolutions Pty Ltd | A payment system |
US20020169738A1 (en) * | 2001-05-10 | 2002-11-14 | Giel Peter Van | Method and system for auditing an enterprise configuration |
US7581103B2 (en) | 2001-06-13 | 2009-08-25 | Intertrust Technologies Corporation | Software self-checking systems and methods |
US8972862B2 (en) | 2001-06-27 | 2015-03-03 | Verizon Patent And Licensing Inc. | Method and system for providing remote digital media ingest with centralized editorial control |
US8990214B2 (en) | 2001-06-27 | 2015-03-24 | Verizon Patent And Licensing Inc. | Method and system for providing distributed editing and storage of digital media over a network |
US20070089151A1 (en) * | 2001-06-27 | 2007-04-19 | Mci, Llc. | Method and system for delivery of digital media experience via common instant communication clients |
US7970260B2 (en) | 2001-06-27 | 2011-06-28 | Verizon Business Global Llc | Digital media asset management system and method for supporting multiple users |
TWI234723B (en) * | 2001-07-10 | 2005-06-21 | Hon Hai Prec Ind Co Ltd | Logistics management method |
WO2003009105A2 (en) | 2001-07-20 | 2003-01-30 | Fairmarket, Inc. | Automated listing management |
CN1537388A (en) * | 2001-07-31 | 2004-10-13 | ���µ�����ҵ��ʽ���� | System, apparatus and method of contents distribution, and program and program recording medium directed to the same |
US7353281B2 (en) * | 2001-08-06 | 2008-04-01 | Micron Technology, Inc. | Method and system for providing access to computer resources |
US6807542B2 (en) * | 2001-08-14 | 2004-10-19 | International Business Machines Corporation | Method and apparatus for selective and quantitative rights management |
JP2003069559A (en) * | 2001-08-23 | 2003-03-07 | Sony Corp | Content protection system |
US8090617B1 (en) | 2001-08-27 | 2012-01-03 | Renesas Electronics America Inc. | Determining if a potential customer is a desirable customer |
US20030046248A1 (en) * | 2001-08-28 | 2003-03-06 | Edward Federowicz | "SHIFT" (secure home interactive financial transactor) internet credit card security system and non-internet electronic banking system |
US7243227B1 (en) * | 2001-09-07 | 2007-07-10 | Xilinx, Inc. | Method and apparatus to copy protect software programs |
US7493363B2 (en) * | 2001-09-19 | 2009-02-17 | Microsoft Corporation | Peer-to-peer group management and method for maintaining peer-to-peer graphs |
TWI235315B (en) * | 2001-09-20 | 2005-07-01 | Hon Hai Prec Ind Co Ltd | On-line goods application and registration system and method thereof |
US8868467B2 (en) | 2002-10-23 | 2014-10-21 | Oleg Serebrennikov | Method for performing transactional communication using a universal transaction account identifier assigned to a customer |
US11341497B2 (en) | 2001-10-24 | 2022-05-24 | Oleg Serebrennikov | Method for performing transactional communication using a universal transaction account identifier assigned to a customer |
US20030084060A1 (en) * | 2001-11-01 | 2003-05-01 | Arun Ramachandran | Process in a usage based licensing server to convert metric data in data structure to CSU data |
JP2003156358A (en) * | 2001-11-20 | 2003-05-30 | Pioneer Electronic Corp | System, method, server apparatus, and program for providing information and information recording medium |
US20030101113A1 (en) * | 2001-11-26 | 2003-05-29 | Dang Hong M. | Intelligent system infrastructure for financial data computation, report remittance and funds transfer over an interactive communications network |
US8001052B2 (en) * | 2001-12-10 | 2011-08-16 | Dunkeld Bryan C | System and method for unique digital asset identification and transaction management |
US8046238B2 (en) * | 2001-12-20 | 2011-10-25 | Accenture Global Services Limited | Business transaction management |
US7225161B2 (en) * | 2001-12-21 | 2007-05-29 | Schlumberger Omnes, Inc. | Method and system for initializing a key management system |
US20030158816A1 (en) * | 2002-01-09 | 2003-08-21 | Emediapartners, Inc. | Internet-based content billing and protection system |
US6775518B2 (en) * | 2002-01-25 | 2004-08-10 | Svi Systems, Inc. | Interactive education system |
US20030144958A1 (en) * | 2002-01-28 | 2003-07-31 | Liang Eli Entze | Computer network based secure peer-to-peer file distribution system |
US7328345B2 (en) | 2002-01-29 | 2008-02-05 | Widevine Technologies, Inc. | Method and system for end to end securing of content for video on demand |
CA2371985C (en) * | 2002-02-15 | 2015-12-29 | Teranet Enterprises Inc. | Method and system for constructing price structures of complex products and services |
US7698230B1 (en) * | 2002-02-15 | 2010-04-13 | ContractPal, Inc. | Transaction architecture utilizing transaction policy statements |
US7251635B2 (en) * | 2002-02-25 | 2007-07-31 | Schlumberger Omnes, Inc. | Method and apparatus for managing a key management system |
US7725404B2 (en) * | 2002-02-27 | 2010-05-25 | Imagineer Software, Inc. | Secure electronic commerce using mutating identifiers |
US8965998B1 (en) | 2002-03-19 | 2015-02-24 | Amazon Technologies, Inc. | Adaptive learning methods for selecting web page components for inclusion in web pages |
US20040102987A1 (en) * | 2002-03-29 | 2004-05-27 | Eiji Takahashi | Content reproduction apparatus and content reproduction control method |
US7299292B2 (en) * | 2002-03-29 | 2007-11-20 | Widevine Technologies, Inc. | Process and streaming server for encrypting a data stream to a virtual smart card client system |
US6931405B2 (en) * | 2002-04-15 | 2005-08-16 | Microsoft Corporation | Flexible subscription-based event notification |
WO2003089078A1 (en) | 2002-04-19 | 2003-10-30 | Walker Digital, Llc | Method and apparatus for linked play gaming with combined outcomes and shared indicia |
US7149899B2 (en) * | 2002-04-25 | 2006-12-12 | Intertrust Technologies Corp. | Establishing a secure channel with a human user |
US7383570B2 (en) | 2002-04-25 | 2008-06-03 | Intertrust Technologies, Corp. | Secure authentication systems and methods |
US7162524B2 (en) * | 2002-06-21 | 2007-01-09 | International Business Machines Corporation | Gapless delivery and durable subscriptions in a content-based publish/subscribe system |
US7822724B2 (en) * | 2002-07-03 | 2010-10-26 | Tripwire, Inc. | Change audit method, apparatus and system |
US8140635B2 (en) | 2005-03-31 | 2012-03-20 | Tripwire, Inc. | Data processing environment change management methods and apparatuses |
US20040006541A1 (en) * | 2002-07-08 | 2004-01-08 | International Business Corporation | Method and system for purchasing broadcast content |
US20040054555A1 (en) * | 2002-09-12 | 2004-03-18 | Piccionelli Gregory A. | E-commerce multilevel marketing and fraud prevention |
US7594271B2 (en) * | 2002-09-20 | 2009-09-22 | Widevine Technologies, Inc. | Method and system for real-time tamper evidence gathering for software |
US20040064330A1 (en) * | 2002-09-30 | 2004-04-01 | Keelan Matthew Bruce | Method and apparatus for screening applicants for employer incentives/tax credits |
US8577795B2 (en) | 2002-10-10 | 2013-11-05 | Convergys Information Management Group, Inc. | System and method for revenue and authorization management |
US8489742B2 (en) * | 2002-10-10 | 2013-07-16 | Convergys Information Management Group, Inc. | System and method for work management |
US20040088199A1 (en) * | 2002-10-31 | 2004-05-06 | Childress Allen B. | Method of forming a business rule |
US7676387B2 (en) * | 2002-10-31 | 2010-03-09 | Computer Sciences Corporation | Graphical display of business rules |
US7451148B2 (en) * | 2002-10-31 | 2008-11-11 | Computer Sciences Corporation | Method of modifying a business rule while tracking the modifications |
US20040085357A1 (en) * | 2002-10-31 | 2004-05-06 | Childress Allen B. | Method of generating a graphical display of a business rule and associated business rule elements |
US20040088195A1 (en) * | 2002-10-31 | 2004-05-06 | Childress Allen B. | Method of modifying a business rule |
US7689442B2 (en) * | 2002-10-31 | 2010-03-30 | Computer Science Corporation | Method of generating a graphical display of a business rule with a translation |
US7107445B2 (en) * | 2002-11-20 | 2006-09-12 | International Business Machines Corporation | Method and apparatus for secure processing of sensitive data |
US7613812B2 (en) | 2002-12-04 | 2009-11-03 | Microsoft Corporation | Peer-to-peer identity management interfaces and methods |
US7797064B2 (en) | 2002-12-13 | 2010-09-14 | Stephen Loomis | Apparatus and method for skipping songs without delay |
US7912920B2 (en) | 2002-12-13 | 2011-03-22 | Stephen Loomis | Stream sourcing content delivery system |
US7412532B2 (en) | 2002-12-13 | 2008-08-12 | Aol Llc, A Deleware Limited Liability Company | Multimedia scheduler |
US6859793B1 (en) * | 2002-12-19 | 2005-02-22 | Networks Associates Technology, Inc. | Software license reporting and control system and method |
US8266005B2 (en) | 2003-01-17 | 2012-09-11 | Uniloc Luxembourg | Automated pricing system |
US7596625B2 (en) | 2003-01-27 | 2009-09-29 | Microsoft Corporation | Peer-to-peer grouping interfaces and methods |
US7526347B2 (en) * | 2003-02-18 | 2009-04-28 | Fisher-Rosemount Systems, Inc. | Security for objects in a process plant configuration system |
US7280819B2 (en) * | 2003-02-19 | 2007-10-09 | Cingular Wireless Ii Llc | Interrogate-response communication system with privacy indication |
US20060167804A1 (en) * | 2003-02-25 | 2006-07-27 | Ali Aydar | Track listening and playing service for digital media files |
US20060167882A1 (en) * | 2003-02-25 | 2006-07-27 | Ali Aydar | Digital rights management system architecture |
US20060167881A1 (en) * | 2003-02-25 | 2006-07-27 | Ali Aydar | Digital media file identification |
US20060167807A1 (en) * | 2003-02-25 | 2006-07-27 | Ali Aydar | Dispute resolution in an open copyright database |
US8117130B2 (en) | 2003-02-25 | 2012-02-14 | Stragent, Llc | Batch loading and self-registration of digital media files |
US20060167813A1 (en) * | 2003-02-25 | 2006-07-27 | Ali Aydar | Managing digital media rights through missing masters lists |
WO2004077265A2 (en) * | 2003-02-25 | 2004-09-10 | Snocap, Inc. | Content regulation |
US7356143B2 (en) | 2003-03-18 | 2008-04-08 | Widevine Technologies, Inc | System, method, and apparatus for securely providing content viewable on a secure device |
US7007170B2 (en) | 2003-03-18 | 2006-02-28 | Widevine Technologies, Inc. | System, method, and apparatus for securely providing content viewable on a secure device |
US8261062B2 (en) | 2003-03-27 | 2012-09-04 | Microsoft Corporation | Non-cryptographic addressing |
US20040199771A1 (en) * | 2003-04-04 | 2004-10-07 | Widevine Technologies, Inc. | Method for tracing a security breach in highly distributed content |
US7822685B1 (en) * | 2003-04-09 | 2010-10-26 | Cisco Technology, Inc. | Method and system for digital rights management brokering and digital asset security transcoding |
US20040215494A1 (en) * | 2003-04-24 | 2004-10-28 | Wahlbin Stefan L. | Method and system for determining monetary amounts in an insurance processing system |
US20050108176A1 (en) * | 2003-04-30 | 2005-05-19 | Jarol Scott B. | Configurable rules based content item consumption |
US7788489B2 (en) * | 2003-05-06 | 2010-08-31 | Oracle International Corporation | System and method for permission administration using meta-permissions |
CA2525398C (en) * | 2003-05-13 | 2014-03-11 | Corestreet, Ltd. | Efficient and secure data currentness systems |
US8234387B2 (en) | 2003-06-05 | 2012-07-31 | Intertrust Technologies Corp. | Interoperable systems and methods for peer-to-peer service orchestration |
DE10328383A1 (en) * | 2003-06-24 | 2005-01-20 | Siemens Ag | A method for authorizing an information provider to a method for communicating information and switching information and switching equipment |
JP4504099B2 (en) * | 2003-06-25 | 2010-07-14 | 株式会社リコー | Digital certificate management system, digital certificate management apparatus, digital certificate management method, update procedure determination method and program |
US7949877B2 (en) * | 2003-06-30 | 2011-05-24 | Realnetworks, Inc. | Rights enforcement and usage reporting on a client device |
US20050010531A1 (en) * | 2003-07-09 | 2005-01-13 | Kushalnagar Nandakishore R. | System and method for distributing digital rights management digital content in a controlled network ensuring digital rights |
US7895064B2 (en) * | 2003-09-02 | 2011-02-22 | Computer Sciences Corporation | Graphical input display in an insurance processing system |
US7681035B1 (en) | 2003-09-10 | 2010-03-16 | Realnetworks, Inc. | Digital rights management handler and related methods |
US20080228651A1 (en) * | 2003-09-29 | 2008-09-18 | Zan Tapsell | Public Key Crytography Method and System |
US7668093B1 (en) | 2004-08-05 | 2010-02-23 | Convergys Information Management Group, Inc. | Architecture for balancing workload |
US7281274B2 (en) | 2003-10-16 | 2007-10-09 | Lmp Media Llc | Electronic media distribution system |
US7949996B2 (en) | 2003-10-23 | 2011-05-24 | Microsoft Corporation | Peer-to-peer identity management managed interfaces and methods |
US7496648B2 (en) | 2003-10-23 | 2009-02-24 | Microsoft Corporation | Managed peer name resolution protocol (PNRP) interfaces for peer to peer networking |
US7310807B2 (en) | 2003-10-29 | 2007-12-18 | Sbc Knowledge Ventures, L.P. | System and method for local video distribution |
US8707030B2 (en) | 2003-11-19 | 2014-04-22 | Corestreet, Ltd. | Distributed delegated path discovery and validation |
US8185475B2 (en) * | 2003-11-21 | 2012-05-22 | Hug Joshua D | System and method for obtaining and sharing media content |
US20050111756A1 (en) * | 2003-11-25 | 2005-05-26 | Turner Robert W. | System and method for generating coherent data sets of images from various sources |
US6929507B2 (en) * | 2003-12-30 | 2005-08-16 | Huang Liang Precision Enterprise Co., Ltd. | Coaxial connector structure |
US7711605B1 (en) * | 2004-01-06 | 2010-05-04 | Santeufemia Michael N | Adult digital content management, playback and delivery |
US20070150414A1 (en) * | 2004-01-07 | 2007-06-28 | Precash, Inc. | System and method for facilitating payment transactions |
US8234214B2 (en) * | 2004-01-07 | 2012-07-31 | Precash, Inc. | System and method for facilitating large scale payment transactions |
CA2872032A1 (en) | 2004-01-09 | 2005-08-04 | Corestreet, Ltd. | Signature-efficient real time credentials for ocsp and distributed ocsp |
US20050154878A1 (en) * | 2004-01-09 | 2005-07-14 | David Engberg | Signature-efficient real time credentials for OCSP and distributed OCSP |
US7657124B2 (en) * | 2004-02-27 | 2010-02-02 | The Boeing Company | Multiple image data source information processing systems and methods |
US20050204405A1 (en) * | 2004-03-04 | 2005-09-15 | Brian Wormington | Method and system for digital rights management |
WO2005089147A2 (en) * | 2004-03-11 | 2005-09-29 | Transnexus, Inc. | Method and system for routing calls over a packet switched computer network |
US8688803B2 (en) | 2004-03-26 | 2014-04-01 | Microsoft Corporation | Method for efficient content distribution using a peer-to-peer networking infrastructure |
US7702718B2 (en) * | 2004-03-30 | 2010-04-20 | Cisco Technology, Inc. | Providing enterprise information |
US9219729B2 (en) | 2004-05-19 | 2015-12-22 | Philip Drope | Multimedia network system with content importation, content exportation, and integrated content management |
US20050267861A1 (en) * | 2004-05-25 | 2005-12-01 | Jassin Raymond M | Virtual library management system |
US8762238B2 (en) | 2004-06-09 | 2014-06-24 | Syncada Llc | Recurring transaction processing system and approach |
AU2005255453B2 (en) | 2004-06-09 | 2007-11-08 | Syncada Llc | Financial institution-based transaction processing system and approach |
AU2005255456B2 (en) | 2004-06-09 | 2007-09-13 | Syncada Llc | Order-resource fulfillment and management system and approach |
US7735143B2 (en) * | 2004-06-12 | 2010-06-08 | Toshiba Corporation | System and method for secure document processing |
US7590980B1 (en) | 2004-06-14 | 2009-09-15 | Convergys Cmg Utah, Inc. | System and method for a functional extensibility framework |
US20050289037A1 (en) * | 2004-06-15 | 2005-12-29 | Smith Joseph B | Financial asset product and method for implementing same |
US7694121B2 (en) * | 2004-06-30 | 2010-04-06 | Microsoft Corporation | System and method for protected operating system boot using state validation |
US7929689B2 (en) | 2004-06-30 | 2011-04-19 | Microsoft Corporation | Call signs |
US7499899B2 (en) * | 2004-07-02 | 2009-03-03 | Northrop Grumman Corporation | Dynamic software integration architecture |
US7996471B2 (en) * | 2004-07-13 | 2011-08-09 | At&T Intellectual Property I, L.P. | Electronic message distribution system |
US8266429B2 (en) * | 2004-07-20 | 2012-09-11 | Time Warner Cable, Inc. | Technique for securely communicating and storing programming material in a trusted domain |
US8312267B2 (en) | 2004-07-20 | 2012-11-13 | Time Warner Cable Inc. | Technique for securely communicating programming content |
US8904458B2 (en) | 2004-07-29 | 2014-12-02 | At&T Intellectual Property I, L.P. | System and method for pre-caching a first portion of a video file on a set-top box |
US8396782B2 (en) * | 2004-07-30 | 2013-03-12 | International Business Machines Corporation | Client-oriented, on-demand trading system |
US8584257B2 (en) | 2004-08-10 | 2013-11-12 | At&T Intellectual Property I, L.P. | Method and interface for video content acquisition security on a set-top box |
US20080086410A1 (en) * | 2004-08-13 | 2008-04-10 | Sean Macguire | System And Method For Providing A Cash Advance |
KR20070043007A (en) * | 2004-08-18 | 2007-04-24 | 소니 가부시끼 가이샤 | Backlight device and color liquid crystal display device |
CN101069204A (en) * | 2004-08-19 | 2007-11-07 | 托马斯·梅雷迪思 | Method of providing cash and cash equivalent for electronic transactions |
MX2007002075A (en) * | 2004-08-25 | 2007-04-24 | Mastercard International Inc | Method and system for automated payment authorization and settlement. |
US7739146B2 (en) * | 2004-09-14 | 2010-06-15 | Sap Aktiengesellschaft | Handling taxes in computer-based sales transactions |
US7475051B1 (en) | 2004-09-22 | 2009-01-06 | International Business Machines Corporation | System and method for the cascading definition and enforcement of EDI rules |
US9609279B2 (en) | 2004-09-24 | 2017-03-28 | Google Inc. | Method and system for providing secure CODECS |
JP4843208B2 (en) * | 2004-09-30 | 2011-12-21 | 株式会社東芝 | Digital content editing apparatus, digital content editing method, digital content editing program, and recording medium recording digital content editing program |
US8086261B2 (en) | 2004-10-07 | 2011-12-27 | At&T Intellectual Property I, L.P. | System and method for providing digital network access and digital broadcast services using combined channels on a single physical medium to the customer premises |
JP4516399B2 (en) * | 2004-10-08 | 2010-08-04 | フェリカネットワークス株式会社 | Information processing apparatus and method, and program |
US7015823B1 (en) | 2004-10-15 | 2006-03-21 | Systran Federal Corporation | Tamper resistant circuit boards |
US20060101028A1 (en) * | 2004-10-21 | 2006-05-11 | Banks Lanette E | Method and apparatus for efficient electronic document management |
DE102004053597B4 (en) * | 2004-11-05 | 2008-05-29 | Infineon Technologies Ag | A method for automatically generating and / or controlling a telecommunications conference with a plurality of subscribers, telecommunication conference terminal and telecommunication conference server |
EP1657672A1 (en) * | 2004-11-10 | 2006-05-17 | Sony Deutschland GmbH | Method for providing digital payload data |
US20060104600A1 (en) | 2004-11-12 | 2006-05-18 | Sfx Entertainment, Inc. | Live concert/event video system and method |
GB0425355D0 (en) * | 2004-11-18 | 2004-12-22 | Ibm | Publishing documents in a publish subscribe data processing system |
DK2408202T3 (en) * | 2004-11-19 | 2017-08-28 | Tivo Solutions Inc | Method and device for secure transfer and playback of multimedia content |
US7716714B2 (en) | 2004-12-01 | 2010-05-11 | At&T Intellectual Property I, L.P. | System and method for recording television content at a set top box |
US8434116B2 (en) | 2004-12-01 | 2013-04-30 | At&T Intellectual Property I, L.P. | Device, system, and method for managing television tuners |
US7474359B2 (en) | 2004-12-06 | 2009-01-06 | At&T Intellectual Properties I, L.P. | System and method of displaying a video stream |
US7457283B2 (en) * | 2004-12-13 | 2008-11-25 | Transnexus, Inc. | Method and system for securely authorized VoIP interconnections between anonymous peers of VoIP networks |
US8238329B2 (en) | 2005-12-13 | 2012-08-07 | Transnexus, Inc. | Method and system for securely authorizing VoIP interconnections between anonymous peers of VoIP networks |
US7831978B2 (en) * | 2004-12-16 | 2010-11-09 | Sap Ag | Review mechanism for controlling the delegation of tasks in a workflow system |
US8412779B1 (en) | 2004-12-21 | 2013-04-02 | Trend Micro Incorporated | Blocking of unsolicited messages in text messaging networks |
US20060161469A1 (en) | 2005-01-14 | 2006-07-20 | Weatherbank, Inc. | Interactive advisory system |
US7307574B2 (en) | 2005-02-02 | 2007-12-11 | Sbc Knowledge Ventures, Lp | Remote control, apparatus, system and methods of using the same |
US20080015999A1 (en) * | 2005-02-04 | 2008-01-17 | Widevine Technologies, Inc. | Securely ingesting encrypted content into content servers |
US8214859B2 (en) | 2005-02-14 | 2012-07-03 | At&T Intellectual Property I, L.P. | Automatic switching between high definition and standard definition IP television signals |
US20080040124A1 (en) * | 2005-02-14 | 2008-02-14 | Sony Chemicals & Information Device Corporation | Business Process System, Business Process Method, and Information Processing Apparatus |
GB0503970D0 (en) * | 2005-02-25 | 2005-04-06 | Firstondemand Ltd | Method and apparatus for authentication of invoices |
US7370190B2 (en) * | 2005-03-03 | 2008-05-06 | Digimarc Corporation | Data processing systems and methods with enhanced bios functionality |
US8291224B2 (en) | 2005-03-30 | 2012-10-16 | Wells Fargo Bank, N.A. | Distributed cryptographic management for computer systems |
US20060242277A1 (en) | 2005-03-31 | 2006-10-26 | Tripwire, Inc. | Automated change approval |
US9069436B1 (en) * | 2005-04-01 | 2015-06-30 | Intralinks, Inc. | System and method for information delivery based on at least one self-declared user attribute |
US8230042B2 (en) | 2005-04-19 | 2012-07-24 | International Business Machines Corporation | Policy based auditing of workflows |
US7620902B2 (en) * | 2005-04-20 | 2009-11-17 | Microsoft Corporation | Collaboration spaces |
US7571228B2 (en) | 2005-04-22 | 2009-08-04 | Microsoft Corporation | Contact management in a serverless peer-to-peer system |
US8036140B2 (en) | 2005-04-22 | 2011-10-11 | Microsoft Corporation | Application programming interface for inviting participants in a serverless peer to peer network |
US20060242236A1 (en) * | 2005-04-22 | 2006-10-26 | Microsoft Corporation | System and method for extensible computer assisted collaboration |
US7617281B2 (en) * | 2005-04-25 | 2009-11-10 | Microsoft Corporation | System and method for collaboration with serverless presence |
US7752253B2 (en) * | 2005-04-25 | 2010-07-06 | Microsoft Corporation | Collaborative invitation system and method |
KR101034127B1 (en) | 2005-04-29 | 2011-05-13 | 콘텐트가드 홀딩즈 인코포레이티드 | Systems and methods for integrity certification and verification |
US20060265262A1 (en) * | 2005-05-18 | 2006-11-23 | Microsoft Corporation | Distributed conference scheduling |
US11362897B2 (en) | 2005-05-19 | 2022-06-14 | International Business Machines Corporation | Site policy administrative agent |
US8054849B2 (en) | 2005-05-27 | 2011-11-08 | At&T Intellectual Property I, L.P. | System and method of managing video content streams |
US20060282287A1 (en) * | 2005-06-10 | 2006-12-14 | Mckinley Laurence M | System for providing integrated healthcare management services |
US8893199B2 (en) | 2005-06-22 | 2014-11-18 | At&T Intellectual Property I, L.P. | System and method of managing video content delivery |
US7908627B2 (en) | 2005-06-22 | 2011-03-15 | At&T Intellectual Property I, L.P. | System and method to provide a unified video signal for diverse receiving platforms |
US8282476B2 (en) | 2005-06-24 | 2012-10-09 | At&T Intellectual Property I, L.P. | Multimedia-based video game distribution |
US8635659B2 (en) | 2005-06-24 | 2014-01-21 | At&T Intellectual Property I, L.P. | Audio receiver modular card and method thereof |
US8365218B2 (en) | 2005-06-24 | 2013-01-29 | At&T Intellectual Property I, L.P. | Networked television and method thereof |
US20070011232A1 (en) * | 2005-07-06 | 2007-01-11 | Microsoft Corporation | User interface for starting presentations in a meeting |
US7660851B2 (en) | 2005-07-06 | 2010-02-09 | Microsoft Corporation | Meetings near me |
US9418040B2 (en) * | 2005-07-07 | 2016-08-16 | Sciencelogic, Inc. | Dynamically deployable self configuring distributed network management system |
US8190688B2 (en) | 2005-07-11 | 2012-05-29 | At&T Intellectual Property I, Lp | System and method of transmitting photographs from a set top box |
US8620713B2 (en) * | 2005-07-15 | 2013-12-31 | Sap Ag | Mechanism to control delegation and revocation of tasks in workflow system |
US9245270B2 (en) | 2005-07-22 | 2016-01-26 | Gtj Ventures, Llc | Transaction security apparatus and method |
US9911124B2 (en) | 2005-07-22 | 2018-03-06 | Gtj Ventures, Llc | Transaction security apparatus and method |
US9235841B2 (en) | 2005-07-22 | 2016-01-12 | Gtj Ventures, Llc | Transaction security apparatus and method |
US8706082B2 (en) | 2005-07-26 | 2014-04-22 | At&T Intellectual Property I, L.P. | Media services with access control |
US7873102B2 (en) | 2005-07-27 | 2011-01-18 | At&T Intellectual Property I, Lp | Video quality testing by encoding aggregated clips |
WO2007019510A2 (en) | 2005-08-05 | 2007-02-15 | Realnetworks, Inc. | Personal media device |
US20070088958A1 (en) * | 2005-08-05 | 2007-04-19 | Lehman Brothers Inc. | Method and system for workflow management of electronic documents |
US8176158B2 (en) | 2005-08-09 | 2012-05-08 | Tripwire, Inc. | Information technology governance and controls methods and apparatuses |
US20070043756A1 (en) * | 2005-08-16 | 2007-02-22 | Polycarpe Songfack | Thinking machines |
US10318894B2 (en) | 2005-08-16 | 2019-06-11 | Tripwire, Inc. | Conformance authority reconciliation |
US9401080B2 (en) | 2005-09-07 | 2016-07-26 | Verizon Patent And Licensing Inc. | Method and apparatus for synchronizing video frames |
US20070107012A1 (en) * | 2005-09-07 | 2007-05-10 | Verizon Business Network Services Inc. | Method and apparatus for providing on-demand resource allocation |
US8631226B2 (en) | 2005-09-07 | 2014-01-14 | Verizon Patent And Licensing Inc. | Method and system for video monitoring |
US9076311B2 (en) | 2005-09-07 | 2015-07-07 | Verizon Patent And Licensing Inc. | Method and apparatus for providing remote workflow management |
US8065733B2 (en) | 2005-09-23 | 2011-11-22 | Google, Inc. | Method for evolving detectors to detect malign behavior in an artificial immune system |
WO2007038245A2 (en) | 2005-09-23 | 2007-04-05 | Widevine Technologies, Inc. | Method for evolving detectors to detect malign behavior in an artificial immune system |
US7817608B2 (en) * | 2005-09-23 | 2010-10-19 | Widevine Technologies, Inc. | Transitioning to secure IP communications for encoding, encapsulating, and encrypting data |
US8874477B2 (en) | 2005-10-04 | 2014-10-28 | Steven Mark Hoffberg | Multifactorial optimization system and method |
US7661111B2 (en) * | 2005-10-13 | 2010-02-09 | Inernational Business Machines Corporation | Method for assuring event record integrity |
US8776216B2 (en) * | 2005-10-18 | 2014-07-08 | Intertrust Technologies Corporation | Digital rights management engine systems and methods |
US9626667B2 (en) * | 2005-10-18 | 2017-04-18 | Intertrust Technologies Corporation | Digital rights management engine systems and methods |
US20070124385A1 (en) * | 2005-11-18 | 2007-05-31 | Denny Michael S | Preference-based content distribution service |
US20070124255A1 (en) * | 2005-11-28 | 2007-05-31 | Tripwire, Inc. | Pluggable heterogeneous reconciliation |
US8689016B2 (en) | 2005-12-02 | 2014-04-01 | Google Inc. | Tamper prevention and detection for video provided over a network to a client |
US8181220B2 (en) | 2005-12-19 | 2012-05-15 | Adobe Systems Incorporated | Method and apparatus for digital rights management policies |
ES2303422B1 (en) * | 2005-12-19 | 2009-06-23 | Universidad De Zaragoza | SYSTEM AND PROCEDURE FOR REGISTRATION AND CERTIFICATION OF ACTIVITY AND / OR COMMUNICATION BETWEEN TERMINALS. |
EP1801720A1 (en) * | 2005-12-22 | 2007-06-27 | Microsoft Corporation | Authorisation and authentication |
EP1826695A1 (en) * | 2006-02-28 | 2007-08-29 | Microsoft Corporation | Secure content descriptions |
US7788181B2 (en) * | 2005-12-27 | 2010-08-31 | Microsoft Corporation | Software licensing using certificate issued by authorized authority |
JP4564464B2 (en) | 2006-01-05 | 2010-10-20 | 株式会社東芝 | Digital content playback apparatus, method and program |
US8526612B2 (en) * | 2006-01-06 | 2013-09-03 | Google Inc. | Selective and persistent application level encryption for video provided to a client |
US20070162369A1 (en) * | 2006-01-09 | 2007-07-12 | Hardison Joseph H Iii | Internet-based method of and system for transfering and exercising monetary rights within a financial marketplace |
US8626626B2 (en) | 2006-01-09 | 2014-01-07 | Interest Capturing Systems, Llc | Method of and system for capturing interest earned on the monetary value of transferred monetary rights managed on an internet-based monetary rights transfer (MRT) network supported by a real-time gross settlement (RTGS) system |
US8229467B2 (en) | 2006-01-19 | 2012-07-24 | Locator IP, L.P. | Interactive advisory system |
US20070180231A1 (en) * | 2006-01-31 | 2007-08-02 | Widevine Technologies, Inc. | Preventing entitlement management message (EMM) filter attacks |
US20070192824A1 (en) * | 2006-02-14 | 2007-08-16 | Microsoft Corporation | Computer hosting multiple secure execution environments |
KR100714124B1 (en) * | 2006-02-21 | 2007-05-02 | 한국전자통신연구원 | Method and apparatus for issuing certificate with user consent |
US20070219919A1 (en) * | 2006-03-16 | 2007-09-20 | Dandekar Shree A | Process of accessing licensed digital content on MediaDirect enabled systems in a multiple operating system environment |
US9026677B2 (en) * | 2006-03-17 | 2015-05-05 | Cisco Technology, Inc. | Method and apparatus for providing video on demand |
US8622837B2 (en) | 2006-03-20 | 2014-01-07 | Sony Computer Entertainment America Llc | Managing game metrics and authorizations |
US7480656B2 (en) | 2006-03-20 | 2009-01-20 | Sony Computer Entertainment America Inc. | Active validation of network devices |
US8771061B2 (en) * | 2006-03-20 | 2014-07-08 | Sony Computer Entertainment America Llc | Invalidating network devices with illicit peripherals |
US7753795B2 (en) * | 2006-03-20 | 2010-07-13 | Sony Computer Entertainment America Llc | Maintaining community integrity |
US7987514B2 (en) * | 2006-04-04 | 2011-07-26 | Intertrust Technologies Corp. | Systems and methods for retrofitting electronic appliances to accept different content formats |
US8086842B2 (en) | 2006-04-21 | 2011-12-27 | Microsoft Corporation | Peer-to-peer contact exchange |
US8069208B2 (en) | 2006-04-21 | 2011-11-29 | Microsoft Corporation | Peer-to-peer buddy request and response |
US20080040261A1 (en) * | 2006-04-24 | 2008-02-14 | Robert Nix | Systems and methods for implementing financial transactions |
WO2007131132A2 (en) * | 2006-05-03 | 2007-11-15 | Voxant, Inc. | System and method for collecting and distributing content |
US20070271271A1 (en) * | 2006-05-18 | 2007-11-22 | Chalasani Nanchariah R | Method, system, and program product for conducting a cross-organizational transaction audit |
US20080052165A1 (en) * | 2006-05-24 | 2008-02-28 | Searete Llc, A Limited Liability Corporation Of The State Of Delaware | Peer to peer distribution system and method |
US20080005034A1 (en) * | 2006-06-09 | 2008-01-03 | General Instrument Corporation | Method and Apparatus for Efficient Use of Trusted Third Parties for Additional Content-Sharing Security |
US8346872B2 (en) * | 2006-06-30 | 2013-01-01 | The Invention Science Fund I, Llc | Context parameters and identifiers for communication |
US9152928B2 (en) * | 2006-06-30 | 2015-10-06 | Triplay, Inc. | Context parameters and identifiers for communication |
US8949337B2 (en) * | 2006-06-30 | 2015-02-03 | The Invention Science Fund I, Llc | Generation and establishment of identifiers for communication |
US20080005241A1 (en) * | 2006-06-30 | 2008-01-03 | Searete Llc, A Limited Liability Corporation Of The State Of Delaware | Usage parameters for communication content |
US8549077B2 (en) * | 2006-06-30 | 2013-10-01 | The Invention Science Fund I, Llc | Usage parameters for communication content |
US8869066B2 (en) | 2006-07-06 | 2014-10-21 | Addthis, Llc | Generic content collection systems |
US20080010091A1 (en) * | 2006-07-10 | 2008-01-10 | Kim Seungyeon | Method and System for Sharing a User-Medical-Record |
US10019708B2 (en) | 2006-08-25 | 2018-07-10 | Amazon Technologies, Inc. | Utilizing phrase tokens in transactions |
US9860274B2 (en) * | 2006-09-13 | 2018-01-02 | Sophos Limited | Policy management |
US8056092B2 (en) * | 2006-09-29 | 2011-11-08 | Clearspring Technologies, Inc. | Method and apparatus for widget-container hosting and generation |
US20080082627A1 (en) * | 2006-09-29 | 2008-04-03 | Allen Stewart O | Method and Apparatus for Widget Container/Widget Tracking and Metadata Manipulation |
US8712884B2 (en) | 2006-10-06 | 2014-04-29 | Syncada Llc | Transaction finance processing system and approach |
US20080247629A1 (en) * | 2006-10-10 | 2008-10-09 | Gilder Clark S | Systems and methods for check 21 image replacement document enhancements |
US8626661B2 (en) * | 2006-10-10 | 2014-01-07 | Global Standard Financial, Inc. | Electronic lockbox using digitally originated checks |
US8520850B2 (en) | 2006-10-20 | 2013-08-27 | Time Warner Cable Enterprises Llc | Downloadable security and protection methods and apparatus |
US8732854B2 (en) | 2006-11-01 | 2014-05-20 | Time Warner Cable Enterprises Llc | Methods and apparatus for premises content distribution |
IL179351A0 (en) * | 2006-11-16 | 2008-01-20 | Nds Ltd | System for embedding data |
US20080133419A1 (en) * | 2006-12-05 | 2008-06-05 | Brian Wormington | Secure financial transaction system and method |
US8281389B2 (en) * | 2006-12-21 | 2012-10-02 | Seagate Technology Llc | System and method for tamper evident certification |
US20080177647A1 (en) * | 2007-01-19 | 2008-07-24 | Veenstra John W | Online Compliance Engine |
US8621540B2 (en) | 2007-01-24 | 2013-12-31 | Time Warner Cable Enterprises Llc | Apparatus and methods for provisioning in a download-enabled system |
US8682800B2 (en) * | 2007-01-30 | 2014-03-25 | Microsoft Corporation | Controlling access to technology based upon authorization |
US7693833B2 (en) * | 2007-02-01 | 2010-04-06 | John Nagle | System and method for improving integrity of internet search |
US20080195437A1 (en) * | 2007-02-09 | 2008-08-14 | Shareholder Representative Services, Llc | System and Method for Independently Representating Multiple Shareholders in the Sale of a Business |
US20080201260A1 (en) * | 2007-02-16 | 2008-08-21 | Toby Unwin | Internet micro payments system |
US8634814B2 (en) | 2007-02-23 | 2014-01-21 | Locator IP, L.P. | Interactive advisory system for prioritizing content |
US20080222044A1 (en) * | 2007-03-05 | 2008-09-11 | Microsoft Corporation | Protected content renewal |
WO2008109761A2 (en) | 2007-03-06 | 2008-09-12 | Clearspring Technologies, Inc. | Method and apparatus for data processing |
US9009728B2 (en) | 2007-03-06 | 2015-04-14 | Addthis, Inc. | Method and apparatus for widget and widget-container distribution control based on content rules |
US9185123B2 (en) | 2008-02-12 | 2015-11-10 | Finsphere Corporation | System and method for mobile identity protection for online user authentication |
US8280348B2 (en) | 2007-03-16 | 2012-10-02 | Finsphere Corporation | System and method for identity protection using mobile device signaling network derived location pattern recognition |
US20120164613A1 (en) * | 2007-11-07 | 2012-06-28 | Jung Edward K Y | Determining a demographic characteristic based on computational user-health testing of a user interaction with advertiser-specified content |
US20090132275A1 (en) * | 2007-11-19 | 2009-05-21 | Searete Llc, A Limited Liability Corporation Of The State Of Delaware | Determining a demographic characteristic of a user based on computational user-health testing |
US20080270246A1 (en) * | 2007-04-26 | 2008-10-30 | Grace Chen | Global electronic payment system |
US8621093B2 (en) | 2007-05-21 | 2013-12-31 | Google Inc. | Non-blocking of head end initiated revocation and delivery of entitlements non-addressable digital media network |
US8301623B2 (en) | 2007-05-22 | 2012-10-30 | Amazon Technologies, Inc. | Probabilistic recommendation system |
US8010389B2 (en) | 2007-06-04 | 2011-08-30 | Computer Sciences Corporation | Multiple policy claims processing |
US8010390B2 (en) | 2007-06-04 | 2011-08-30 | Computer Sciences Corporation | Claims processing of information requirements |
US8000986B2 (en) | 2007-06-04 | 2011-08-16 | Computer Sciences Corporation | Claims processing hierarchy for designee |
US8010391B2 (en) | 2007-06-29 | 2011-08-30 | Computer Sciences Corporation | Claims processing hierarchy for insured |
US8219447B1 (en) | 2007-06-06 | 2012-07-10 | Amazon Technologies, Inc. | Real-time adaptive probabilistic selection of messages |
US8147322B2 (en) | 2007-06-12 | 2012-04-03 | Walker Digital, Llc | Multiplayer gaming device and methods |
US8073828B2 (en) * | 2007-06-14 | 2011-12-06 | Curbis Corporation | Licensed rights clearance and tracking for digital assets |
KR20130069838A (en) * | 2007-06-19 | 2013-06-26 | 퀄컴 인코포레이티드 | Methods, systems, and apparatus for content licensing |
US8243924B2 (en) | 2007-06-29 | 2012-08-14 | Google Inc. | Progressive download or streaming of digital media securely through a localized container and communication protocol proxy |
US20090012934A1 (en) * | 2007-07-03 | 2009-01-08 | Corbis Corporation | Searching for rights limited media |
BRPI0705569A2 (en) * | 2007-09-11 | 2009-05-05 | Univ Minas Gerais | method for measurement and monitoring |
US8738733B1 (en) | 2007-09-25 | 2014-05-27 | Amazon Technologies, Inc. | Dynamic control system for managing redirection of requests for content |
US8209378B2 (en) | 2007-10-04 | 2012-06-26 | Clearspring Technologies, Inc. | Methods and apparatus for widget sharing between content aggregation points |
US8533256B2 (en) * | 2007-10-09 | 2013-09-10 | Cleversafe, Inc. | Object interface to a dispersed data storage network |
US8341716B2 (en) * | 2007-11-07 | 2012-12-25 | Fuji Xerox Co., Ltd. | Information processing device, information processing method, and storage media storing user certification program |
US7941371B1 (en) * | 2007-11-07 | 2011-05-10 | Wells Fargo Bank, N.A. | System and method for an automated depository account pledged as security |
US8458099B2 (en) * | 2007-11-21 | 2013-06-04 | Licensestream, Inc. | System and method for online content licensing and distribution |
US7454478B1 (en) | 2007-11-30 | 2008-11-18 | International Business Machines Corporation | Business message tracking system using message queues and tracking queue for tracking transaction messages communicated between computers |
CA2712242C (en) | 2008-01-18 | 2017-03-28 | Identrust, Inc. | Binding a digital certificate to multiple trust domains |
WO2009092114A1 (en) * | 2008-01-18 | 2009-07-23 | Cashedge Inc. | Real-time settlement of financial transactions using electronic fund transfer networks |
US20090187431A1 (en) | 2008-01-18 | 2009-07-23 | Frank Scalet | Adjusting general damages values using equalization values |
US20090187583A1 (en) * | 2008-01-18 | 2009-07-23 | Aginfolink Holdings, Inc., A Bvi Corporation | Enhanced label claim validation |
US20090198541A1 (en) * | 2008-01-18 | 2009-08-06 | Aginfolink Holdings Inc., A Bvi Corporation | Enhanced Brand Label Validation |
US8751337B2 (en) | 2008-01-25 | 2014-06-10 | Syncada Llc | Inventory-based payment processing system and approach |
WO2009098706A2 (en) * | 2008-02-04 | 2009-08-13 | Tharakan Lalan P A | Electronically implemented method and system for authentication and sharing of documents via a communication network |
US8868464B2 (en) | 2008-02-07 | 2014-10-21 | Google Inc. | Preventing unauthorized modification or skipping of viewing of advertisements within content |
US20090210933A1 (en) * | 2008-02-15 | 2009-08-20 | Shear Jeffrey A | System and Method for Online Content Production |
US8799814B1 (en) | 2008-02-22 | 2014-08-05 | Amazon Technologies, Inc. | Automated targeting of content components |
US8191766B2 (en) | 2008-03-04 | 2012-06-05 | Mastercard International Incorporated | Methods and systems for managing merchant identifiers |
US20090276359A1 (en) * | 2008-04-24 | 2009-11-05 | Cashedge, Inc. | Multi-Product-Multi-Channel Payment Platform System and Method |
US9704161B1 (en) | 2008-06-27 | 2017-07-11 | Amazon Technologies, Inc. | Providing information without authentication |
US9449319B1 (en) | 2008-06-30 | 2016-09-20 | Amazon Technologies, Inc. | Conducting transactions with dynamic passwords |
US8788945B1 (en) * | 2008-06-30 | 2014-07-22 | Amazon Technologies, Inc. | Automatic approval |
US8914341B2 (en) | 2008-07-03 | 2014-12-16 | Tripwire, Inc. | Method and apparatus for continuous compliance assessment |
US8839116B2 (en) * | 2008-08-22 | 2014-09-16 | Siemens Aktiengesellschaft | User interface in an information technology (IT) system |
US9189629B1 (en) * | 2008-08-28 | 2015-11-17 | Symantec Corporation | Systems and methods for discouraging polymorphic malware |
KR101062184B1 (en) * | 2008-09-26 | 2011-09-05 | 삼성전자주식회사 | License renewal method and device for broadcasting channel |
US20100115609A1 (en) * | 2008-11-03 | 2010-05-06 | At&T Mobility Ii Llc | Device for accessing medical information |
US8260711B1 (en) * | 2008-12-03 | 2012-09-04 | Symantec Corporation | Systems and methods for managing rights of data via dynamic taint analysis |
US8341141B2 (en) | 2008-12-16 | 2012-12-25 | Krislov Clinton A | Method and system for automated document registration |
US8914351B2 (en) | 2008-12-16 | 2014-12-16 | Clinton A. Krislov | Method and system for secure automated document registration from social media networks |
US8589372B2 (en) | 2008-12-16 | 2013-11-19 | Clinton A. Krislov | Method and system for automated document registration with cloud computing |
US9569770B1 (en) | 2009-01-13 | 2017-02-14 | Amazon Technologies, Inc. | Generating constructed phrases |
US20130054402A1 (en) * | 2009-02-11 | 2013-02-28 | Content Galaxy Inc. | System for digital commerce and method of secure, automated crediting of publishers, editors, content providers, and affiliates |
US8914903B1 (en) * | 2009-06-03 | 2014-12-16 | Amdocs Software System Limited | System, method, and computer program for validating receipt of digital content by a client device |
US9866609B2 (en) | 2009-06-08 | 2018-01-09 | Time Warner Cable Enterprises Llc | Methods and apparatus for premises content distribution |
US9602864B2 (en) | 2009-06-08 | 2017-03-21 | Time Warner Cable Enterprises Llc | Media bridge apparatus and methods |
US8255296B2 (en) | 2009-06-11 | 2012-08-28 | Interest Capturing Systems, Llc | System for implementing a security issuer rights management process over a distributed communications network, deployed in a financial marketplace |
EP2452303A4 (en) * | 2009-07-07 | 2016-07-06 | Finsphere Corp | Mobile directory number and email verification of financial transactions |
US11797997B2 (en) | 2009-07-07 | 2023-10-24 | Visa International Service Association | Data verification in transactions in distributed network |
US9298700B1 (en) | 2009-07-28 | 2016-03-29 | Amazon Technologies, Inc. | Determining similar phrases |
US8468580B1 (en) * | 2009-08-20 | 2013-06-18 | Apple Inc. | Secure communication between trusted parties |
US10007712B1 (en) | 2009-08-20 | 2018-06-26 | Amazon Technologies, Inc. | Enforcing user-specified rules |
DE112010004426B4 (en) * | 2010-01-22 | 2015-11-12 | International Business Machines Corporation | Non-linkable transmission without memory with pricing and rechargeable purses |
US8799658B1 (en) | 2010-03-02 | 2014-08-05 | Amazon Technologies, Inc. | Sharing media items with pass phrases |
US8544103B2 (en) | 2010-05-04 | 2013-09-24 | Intertrust Technologies Corporation | Policy determined accuracy of transmitted information |
US8874896B2 (en) | 2010-06-18 | 2014-10-28 | Intertrust Technologies Corporation | Secure processing systems and methods |
US9906838B2 (en) | 2010-07-12 | 2018-02-27 | Time Warner Cable Enterprises Llc | Apparatus and methods for content delivery and message exchange across multiple content delivery networks |
WO2012044247A1 (en) * | 2010-09-27 | 2012-04-05 | Kingnetic Pte Ltd | Method and apparatus for streaming rights-managed content directly to a target device over a network |
US9636589B2 (en) | 2010-11-02 | 2017-05-02 | Sony Interactive Entertainment America Llc | Detecting lag switch cheating in game |
US20120123913A1 (en) * | 2010-11-15 | 2012-05-17 | Sreesha M | Automated payroll reconciliation |
US8762284B2 (en) * | 2010-12-16 | 2014-06-24 | Democracyontheweb, Llc | Systems and methods for facilitating secure transactions |
US20110145041A1 (en) * | 2011-02-15 | 2011-06-16 | InnovatioNet | System for communication between users and global media-communication network |
EP2506519A1 (en) * | 2011-03-25 | 2012-10-03 | EADS Deutschland GmbH | Method for determining integrity in an evolutionary collabroative information system |
GB201105765D0 (en) | 2011-04-05 | 2011-05-18 | Visa Europe Ltd | Payment system |
CN103597488B (en) | 2011-04-11 | 2016-08-24 | 英特托拉斯技术公司 | Information safety system and method |
US9767195B2 (en) | 2011-04-21 | 2017-09-19 | Touchstream Technologies, Inc. | Virtualized hosting and displaying of content using a swappable media player |
US20120272278A1 (en) | 2011-04-21 | 2012-10-25 | Winnol Llc | Toolbar for displaying video content |
US8904289B2 (en) * | 2011-04-21 | 2014-12-02 | Touchstream Technologies, Inc. | Play control of content on a display device |
US20120310684A1 (en) * | 2011-06-06 | 2012-12-06 | Carter Michael M | System and method of providing cloud-based business valuation services via a mobile app |
US20120323786A1 (en) * | 2011-06-16 | 2012-12-20 | OneID Inc. | Method and system for delayed authorization of online transactions |
US9367833B2 (en) * | 2011-07-14 | 2016-06-14 | Invention Science Fund I, Llc | Data services outsourcing verification |
WO2013012953A1 (en) * | 2011-07-18 | 2013-01-24 | Visa International Service Association | Mobile device with secure element |
WO2013022988A2 (en) * | 2011-08-08 | 2013-02-14 | Visa International Service Association | Payment device with integrated chip |
AU2011213908A1 (en) * | 2011-08-26 | 2013-03-14 | The Carapace Limited | Improvements in or related to purchasing and/or performing financial transactions using a mobile phone |
US8776043B1 (en) | 2011-09-29 | 2014-07-08 | Amazon Technologies, Inc. | Service image notifications |
US20140207680A1 (en) * | 2011-10-17 | 2014-07-24 | Capital One Financial Corporation | System and method for providing a mobile wallet shopping companion application |
US9870597B2 (en) * | 2011-11-18 | 2018-01-16 | Conservice, Llc | Systems and methods allowing multi-family property owners to consolidate retail electric provider charges with landlord provided utilities and services |
US8751800B1 (en) | 2011-12-12 | 2014-06-10 | Google Inc. | DRM provider interoperability |
US20130204731A1 (en) * | 2011-12-30 | 2013-08-08 | Todd Smith | Digital media distribution system |
US9251360B2 (en) | 2012-04-27 | 2016-02-02 | Intralinks, Inc. | Computerized method and system for managing secure mobile device content viewing in a networked secure collaborative exchange environment |
US9148417B2 (en) | 2012-04-27 | 2015-09-29 | Intralinks, Inc. | Computerized method and system for managing amendment voting in a networked secure collaborative exchange environment |
US9253176B2 (en) | 2012-04-27 | 2016-02-02 | Intralinks, Inc. | Computerized method and system for managing secure content sharing in a networked secure collaborative exchange environment |
US20130241805A1 (en) * | 2012-03-15 | 2013-09-19 | Google Inc. | Using Convergence Angle to Select Among Different UI Elements |
US9553860B2 (en) | 2012-04-27 | 2017-01-24 | Intralinks, Inc. | Email effectivity facility in a networked secure collaborative exchange environment |
US10423952B2 (en) * | 2013-05-06 | 2019-09-24 | Institutional Cash Distributors Technology, Llc | Encapsulated security tokens for electronic transactions |
US11250423B2 (en) * | 2012-05-04 | 2022-02-15 | Institutional Cash Distributors Technology, Llc | Encapsulated security tokens for electronic transactions |
EP2850772A4 (en) * | 2012-05-04 | 2016-02-17 | Institutional Cash Distributors Technology Llc | Secure transaction object creation, propagation and invocation |
US20190147450A1 (en) * | 2012-06-19 | 2019-05-16 | Ondot System | Real-time enrichment of raw merchant data from iso transactions on data communication networks for preventing false declines in fraud prevention systems |
US11636489B2 (en) | 2013-10-19 | 2023-04-25 | Ondot Systems Inc. | System and method for authorizing a transaction based on dynamic location updates from a user device |
US11899711B2 (en) | 2012-06-19 | 2024-02-13 | Ondot Systems Inc. | Merchant logo detection artificial intelligence (AI) for injecting user control to ISO back-end transaction approvals between acquirer processors and issuer processors over data communication networks |
US11132657B2 (en) * | 2012-08-27 | 2021-09-28 | Ncr Corporation | Transaction flow |
US20140067661A1 (en) * | 2012-08-30 | 2014-03-06 | Strategic Engineering Group, LLC | Virtual check system and method |
US8626659B1 (en) | 2012-09-28 | 2014-01-07 | Fiserv, Inc. | Facilitating presentation of content relating to a financial transaction |
US9633363B2 (en) | 2012-11-08 | 2017-04-25 | Thnx, Llc | System and method of incentivized advertising |
US10099115B2 (en) | 2012-12-06 | 2018-10-16 | Sony Interactive Entertainment America Llc | System and method for user creation of digital objects |
CN104008486B (en) * | 2012-12-06 | 2017-05-03 | 索尼电脑娱乐美国有限责任公司 | System and method for sharing digital objects |
US11113773B2 (en) * | 2012-12-06 | 2021-09-07 | Sony Interactive Entertainment LLC | System and method for sharing digital objects |
US9565472B2 (en) | 2012-12-10 | 2017-02-07 | Time Warner Cable Enterprises Llc | Apparatus and methods for content transfer protection |
US20140188728A1 (en) | 2012-12-31 | 2014-07-03 | Fiserv, Inc. | Systems and methods for performing financial transactions |
US20140228976A1 (en) * | 2013-02-12 | 2014-08-14 | Nagaraja K. S. | Method for user management and a power plant control system thereof for a power plant system |
US20140282786A1 (en) | 2013-03-12 | 2014-09-18 | Time Warner Cable Enterprises Llc | Methods and apparatus for providing and uploading content to personalized network storage |
US9626489B2 (en) | 2013-03-13 | 2017-04-18 | Intertrust Technologies Corporation | Object rendering systems and methods |
US10368255B2 (en) | 2017-07-25 | 2019-07-30 | Time Warner Cable Enterprises Llc | Methods and apparatus for client-based dynamic control of connections to co-existing radio access networks |
US9066153B2 (en) | 2013-03-15 | 2015-06-23 | Time Warner Cable Enterprises Llc | Apparatus and methods for multicast delivery of content in a content delivery network |
US9548957B2 (en) * | 2013-05-24 | 2017-01-17 | Instaply, Inc. | System and method for facilitating transactions as conversations between participants |
US10878422B2 (en) * | 2013-06-17 | 2020-12-29 | Visa International Service Association | System and method using merchant token |
US9824522B2 (en) * | 2013-07-10 | 2017-11-21 | Cubic Corporation | Shared video vendor |
US20150026042A1 (en) * | 2013-07-21 | 2015-01-22 | Luiz M Franca-Neto | System and method for electronic cash-like transactions |
US9313568B2 (en) | 2013-07-23 | 2016-04-12 | Chicago Custom Acoustics, Inc. | Custom earphone with dome in the canal |
US10116697B2 (en) | 2013-09-20 | 2018-10-30 | Open Text Sa Ulc | System and method for geofencing |
US10824756B2 (en) | 2013-09-20 | 2020-11-03 | Open Text Sa Ulc | Hosted application gateway architecture with multi-level security policy and rule promulgations |
EP2851833B1 (en) | 2013-09-20 | 2017-07-12 | Open Text S.A. | Application Gateway Architecture with Multi-Level Security Policy and Rule Promulgations |
US20150095225A1 (en) * | 2013-10-02 | 2015-04-02 | Mastercard International Incorporated | Enabling synchronization between disparate payment account systems |
EP3069462A4 (en) | 2013-11-14 | 2017-05-03 | Intralinks, Inc. | Litigation support in cloud-hosted file sharing and collaboration |
US11823190B2 (en) * | 2013-12-09 | 2023-11-21 | Mastercard International Incorporated | Systems, apparatus and methods for improved authentication |
US9922322B2 (en) | 2013-12-19 | 2018-03-20 | Visa International Service Association | Cloud-based transactions with magnetic secure transmission |
RU2019111186A (en) | 2013-12-19 | 2019-05-07 | Виза Интернэшнл Сервис Ассосиэйшн | METHODS AND SYSTEMS OF CLOUD TRANSACTIONS |
US9954848B1 (en) | 2014-04-04 | 2018-04-24 | Wells Fargo Bank, N.A. | Central cryptographic management for computer systems |
WO2015164521A1 (en) | 2014-04-23 | 2015-10-29 | Intralinks, Inc. | Systems and methods of secure data exchange |
US11574300B1 (en) * | 2014-04-30 | 2023-02-07 | Wells Fargo Bank, N.A. | Mobile wallet systems and methods using trace identifier using card networks |
US11164164B2 (en) | 2014-05-15 | 2021-11-02 | Uphold Global Foundation | System and method for converting cryptocurrency to virtual assets whose value is substantiated by a reserve of assets |
EP3146747B1 (en) | 2014-05-21 | 2020-07-01 | Visa International Service Association | Offline authentication |
US9621940B2 (en) | 2014-05-29 | 2017-04-11 | Time Warner Cable Enterprises Llc | Apparatus and methods for recording, accessing, and delivering packetized content |
US11540148B2 (en) | 2014-06-11 | 2022-12-27 | Time Warner Cable Enterprises Llc | Methods and apparatus for access point location |
US10380575B2 (en) * | 2014-06-26 | 2019-08-13 | Capital One Services, Llc | Systems and methods for transaction pre authentication |
US9419799B1 (en) * | 2014-08-22 | 2016-08-16 | Emc Corporation | System and method to provide secure credential |
US9775029B2 (en) | 2014-08-22 | 2017-09-26 | Visa International Service Association | Embedding cloud-based functionalities in a communication device |
US9710672B2 (en) * | 2014-09-08 | 2017-07-18 | Uri Jacob Braun | System for and method of controllably disclosing sensitive data |
US9935833B2 (en) | 2014-11-05 | 2018-04-03 | Time Warner Cable Enterprises Llc | Methods and apparatus for determining an optimized wireless interface installation configuration |
US10185946B2 (en) | 2014-12-31 | 2019-01-22 | Fiserv, Inc. | Facilitating presentation of content relating to a financial transaction |
EP3251066A4 (en) * | 2015-01-30 | 2018-07-04 | Leblanc, Gina | System and method for assuring commercial regulatory compliance |
US10333908B2 (en) * | 2015-02-03 | 2019-06-25 | SecuritiNet Inc. | Transaction-based secure information delivery and assessment |
US20160342984A1 (en) * | 2015-05-20 | 2016-11-24 | 402 Technologies S.A. | Loop transfer in a resource transfer system |
US11386415B2 (en) * | 2015-05-20 | 2022-07-12 | Ripple Luxembourg S.A. | Hold condition in a resource transfer system |
US11392944B2 (en) * | 2015-05-20 | 2022-07-19 | Ripple Luxembourg S.A. | Transfer costs in a resource transfer system |
US10740732B2 (en) | 2015-05-20 | 2020-08-11 | Ripple Luxembourg S.A. | Resource transfer system |
US11367072B2 (en) * | 2015-05-20 | 2022-06-21 | Ripple Luxembourg S.A. | Private networks and content requests in a resource transfer system |
US11481771B2 (en) * | 2015-05-20 | 2022-10-25 | Ripple Luxembourg S.A. | One way functions in a resource transfer system |
US11392955B2 (en) * | 2015-05-20 | 2022-07-19 | Ripple Luxembourg S.A. | Temporary consensus networks in a resource transfer system |
CN106254405A (en) * | 2015-06-10 | 2016-12-21 | 阿里巴巴集团控股有限公司 | Data transfering method based on tool of communications and system |
US10096007B2 (en) * | 2015-06-26 | 2018-10-09 | Worldpay, Llc | System and method for payment platform self-certification for processing financial transactions with payment networks |
US10033702B2 (en) | 2015-08-05 | 2018-07-24 | Intralinks, Inc. | Systems and methods of secure data exchange |
US9912601B2 (en) * | 2015-10-22 | 2018-03-06 | Neighbor Marketing, Inc. | Systems and methods for establishing communication interfaces in an information technology infrastructure |
US11593075B2 (en) | 2015-11-03 | 2023-02-28 | Open Text Sa Ulc | Streamlined fast and efficient application building and customization systems and methods |
US9929970B1 (en) | 2015-12-03 | 2018-03-27 | Innovium, Inc. | Efficient resource tracking |
US9986578B2 (en) | 2015-12-04 | 2018-05-29 | Time Warner Cable Enterprises Llc | Apparatus and methods for selective data network access |
US10218589B1 (en) * | 2015-12-17 | 2019-02-26 | Innovium, Inc. | Efficient resource status reporting apparatuses |
US10778435B1 (en) * | 2015-12-30 | 2020-09-15 | Jpmorgan Chase Bank, N.A. | Systems and methods for enhanced mobile device authentication |
US9918345B2 (en) | 2016-01-20 | 2018-03-13 | Time Warner Cable Enterprises Llc | Apparatus and method for wireless network services in moving vehicles |
US10432429B1 (en) | 2016-02-16 | 2019-10-01 | Innovium, Inc. | Efficient traffic management |
US11388037B2 (en) | 2016-02-25 | 2022-07-12 | Open Text Sa Ulc | Systems and methods for providing managed services |
US10492034B2 (en) | 2016-03-07 | 2019-11-26 | Time Warner Cable Enterprises Llc | Apparatus and methods for dynamic open-access networks |
US9747758B1 (en) | 2016-04-15 | 2017-08-29 | Bank Of America Corporation | Banking systems controlled by data bearing records |
US9715793B1 (en) | 2016-04-15 | 2017-07-25 | Bank Of America Corporation | Banking systems controlled by data bearing records |
US9792752B1 (en) | 2016-04-15 | 2017-10-17 | Bank Of America Corporation | Banking systems controlled by data bearing records |
US10331416B2 (en) * | 2016-04-28 | 2019-06-25 | Microsoft Technology Licensing, Llc | Application with embedded workflow designer |
CN109313755A (en) * | 2016-06-15 | 2019-02-05 | 万事达卡国际公司 | System and method for bridging the transaction between EFT payment network and Payment Card network |
US10164858B2 (en) | 2016-06-15 | 2018-12-25 | Time Warner Cable Enterprises Llc | Apparatus and methods for monitoring and diagnosing a wireless network |
CN116471105A (en) | 2016-07-11 | 2023-07-21 | 维萨国际服务协会 | Encryption key exchange procedure using access means |
US10650621B1 (en) | 2016-09-13 | 2020-05-12 | Iocurrents, Inc. | Interfacing with a vehicular controller area network |
WO2018136494A1 (en) * | 2017-01-17 | 2018-07-26 | Visa International Service Association | Binding cryptogram with protocol characteristics |
US10645547B2 (en) | 2017-06-02 | 2020-05-05 | Charter Communications Operating, Llc | Apparatus and methods for providing wireless service in a venue |
US10638361B2 (en) | 2017-06-06 | 2020-04-28 | Charter Communications Operating, Llc | Methods and apparatus for dynamic control of connections to co-existing radio access networks |
US10885213B2 (en) | 2017-09-12 | 2021-01-05 | Sophos Limited | Secure firewall configurations |
CN108364223B (en) * | 2017-12-29 | 2021-01-26 | 创新先进技术有限公司 | Data auditing method and device |
US10825107B2 (en) * | 2018-02-14 | 2020-11-03 | Sap Se | Materiality determination and indication system |
US11195178B2 (en) * | 2018-03-14 | 2021-12-07 | Coupa Software Incorporated | Integrating tracked transaction data into approval chains for digital transactions |
US11323517B2 (en) * | 2018-04-30 | 2022-05-03 | Tracfone Wireless, Inc. | Internet of things connectivity aggregator system and process |
US11379824B2 (en) * | 2018-06-20 | 2022-07-05 | International Business Machines Corporation | Privacy preserving transactions with probabilistic transaction fees |
US11276059B2 (en) * | 2018-07-31 | 2022-03-15 | Molten Inc. | System and method for autonomous sustenance of digital assets |
US11368446B2 (en) * | 2018-10-02 | 2022-06-21 | International Business Machines Corporation | Trusted account revocation in federated identity management |
US11108674B2 (en) | 2018-10-30 | 2021-08-31 | Bank Of America Corporation | Data management system and method |
US10992513B1 (en) * | 2018-10-31 | 2021-04-27 | United Services Automobile Association (Usaa) | Systems and methods for reestablishing communication to resume a process based on inferred intent |
US11334881B2 (en) * | 2019-01-28 | 2022-05-17 | Bank Of America Corporation | Security tool |
US11032071B2 (en) * | 2019-03-29 | 2021-06-08 | Microsoft Technology Licensing, Llc | Secure and verifiable data access logging system |
US10992460B2 (en) | 2019-04-23 | 2021-04-27 | Advanced New Technologies Co., Ltd. | Blockchain-based advertisement monitoring method and apparatus, and electronic device |
TR201907799A2 (en) * | 2019-05-22 | 2019-07-22 | Aslan Memduh | ELECTRONIC CERTIFICATE TRAMP METHOD AND SYSTEM |
US10977268B2 (en) | 2019-05-31 | 2021-04-13 | Snowflake Inc. | Data exchange |
CN110949983B (en) * | 2019-12-25 | 2021-05-28 | 杜泽臣 | Dynamic production device and working method thereof |
PH12019050295A1 (en) * | 2019-12-26 | 2021-06-28 | Samsung Electronics Ltd | System and method of collecting anonymous user data for analytics using recursive internetwork architecture (rina) |
EP4081972A4 (en) * | 2020-02-26 | 2023-06-14 | JPMorgan Chase Bank, N.A. | Method and system for user account initiation and reconciliation |
WO2021231638A1 (en) * | 2020-05-12 | 2021-11-18 | Inve-Share, LLC | Systems and methods for electronic payment and order processing for drop shipment systems |
US20220150241A1 (en) * | 2020-11-11 | 2022-05-12 | Hewlett Packard Enterprise Development Lp | Permissions for backup-related operations |
US20230015789A1 (en) * | 2021-07-08 | 2023-01-19 | Vmware, Inc. | Aggregation of user authorizations from different providers in a hybrid cloud environment |
US11954007B2 (en) * | 2022-04-20 | 2024-04-09 | International Business Machines Corporation | Tracking usage of common libraries by means of digitally signed digests thereof |
Citations (92)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4658093A (en) * | 1983-07-11 | 1987-04-14 | Hellman Martin E | Software distribution system |
US4668877A (en) * | 1984-06-13 | 1987-05-26 | Kunen Scott M | Touch controlled switch for a lamp or the like |
US4685131A (en) * | 1985-03-11 | 1987-08-04 | General Instrument Corp. | Program blocking method for use in direct broadcast satellite system |
US4759060A (en) * | 1984-10-31 | 1988-07-19 | Sony Corporation | Decoder for a pay television system |
US4809220A (en) * | 1984-03-30 | 1989-02-28 | Wang Laboratories, Inc. | Electronic processing system using printer and microprocessor to create forms template with pre-printed forms |
US4827508A (en) * | 1986-10-14 | 1989-05-02 | Personal Library Software, Inc. | Database usage metering and protection system and method |
US4858121A (en) * | 1986-12-12 | 1989-08-15 | Medical Payment Systems, Incorporated | Medical payment system |
US4868877A (en) * | 1988-02-12 | 1989-09-19 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
US4975951A (en) * | 1988-10-07 | 1990-12-04 | General Instrument Corporation | IPPV programming distribution control system |
US4999806A (en) * | 1987-09-04 | 1991-03-12 | Fred Chernow | Software distribution system |
US5010571A (en) * | 1986-09-10 | 1991-04-23 | Titan Linkabit Corporation | Metering retrieval of encrypted data stored in customer data retrieval terminal |
US5058162A (en) * | 1990-08-09 | 1991-10-15 | Hewlett-Packard Company | Method of distributing computer data files |
US5060219A (en) * | 1988-05-18 | 1991-10-22 | U.S. Philips Corporation | Recording system for recording only those types of information which are specified by the record carrier |
US5070400A (en) * | 1987-06-30 | 1991-12-03 | Comsat | Pay-tv time purchase scheme |
US5138712A (en) * | 1989-10-02 | 1992-08-11 | Sun Microsystems, Inc. | Apparatus and method for licensing software on a network of computers |
US5235642A (en) * | 1992-07-21 | 1993-08-10 | Digital Equipment Corporation | Access control subsystem and method for distributed computer system using locally cached authentication credentials |
US5237614A (en) * | 1991-06-07 | 1993-08-17 | Security Dynamics Technologies, Inc. | Integrated network security system |
US5247575A (en) * | 1988-08-16 | 1993-09-21 | Sprague Peter J | Information distribution system |
US5260999A (en) * | 1991-06-28 | 1993-11-09 | Digital Equipment Corporation | Filters in license management system |
US5276735A (en) * | 1992-04-17 | 1994-01-04 | Secure Computing Corporation | Data enclave and trusted path system |
US5335265A (en) * | 1991-11-08 | 1994-08-02 | Electronic Data Systems Corporation | Apparatus for detecting and preventing subscriber number cloning in a cellular mobile telephone system |
US5351237A (en) * | 1992-06-05 | 1994-09-27 | Nec Corporation | Network system comprising a plurality of lans connected to an ISDN via a plurality of routers, each capable of automatically creating a table for storing router information |
US5373561A (en) * | 1992-12-21 | 1994-12-13 | Bell Communications Research, Inc. | Method of extending the validity of a cryptographic certificate |
US5375240A (en) * | 1992-04-07 | 1994-12-20 | Grundy; Gregory | Information distribution system |
US5388211A (en) * | 1989-04-28 | 1995-02-07 | Softel, Inc. | Method and apparatus for remotely controlling and monitoring the use of computer software |
US5412717A (en) * | 1992-05-15 | 1995-05-02 | Fischer; Addison M. | Computer system security method and apparatus having program authorization information data structures |
US5457746A (en) * | 1993-09-14 | 1995-10-10 | Spyrus, Inc. | System and method for access control for portable data storage media |
US5481613A (en) * | 1994-04-15 | 1996-01-02 | Northern Telecom Limited | Computer network cryptographic key distribution system |
US5505461A (en) * | 1994-04-19 | 1996-04-09 | Caesars World, Inc. | Method for meeting IRS reporting requirements related to an electronic gaming machine |
US5509074A (en) * | 1994-01-27 | 1996-04-16 | At&T Corp. | Method of protecting electronically published materials using cryptographic protocols |
US5513117A (en) * | 1993-04-30 | 1996-04-30 | Small; Maynard E. | Apparatus and method for electronically dispensing personalized greeting cards and gifts |
US5521815A (en) * | 1992-01-31 | 1996-05-28 | K.L.E. Irrevocable Trust | Uniform system for verifying and tracking articles of value |
US5532920A (en) * | 1992-04-29 | 1996-07-02 | International Business Machines Corporation | Data processing system and method to enforce payment of royalties when copying softcopy books |
US5534855A (en) * | 1992-07-20 | 1996-07-09 | Digital Equipment Corporation | Method and system for certificate based alias detection |
US5537618A (en) * | 1993-12-23 | 1996-07-16 | Diacom Technologies, Inc. | Method and apparatus for implementing user feedback |
US5544322A (en) * | 1994-05-09 | 1996-08-06 | International Business Machines Corporation | System and method for policy-based inter-realm authentication within a distributed processing system |
US5563946A (en) * | 1994-04-25 | 1996-10-08 | International Business Machines Corporation | Method and apparatus for enabling trial period use of software products: method and apparatus for passing encrypted files between data processing systems |
US5569082A (en) * | 1995-04-06 | 1996-10-29 | Kaye; Perry | Personal computer lottery game |
US5625818A (en) * | 1994-09-30 | 1997-04-29 | Apple Computer, Inc. | System for managing local database updates published to different online information services in different formats from a central platform |
US5630131A (en) * | 1994-11-14 | 1997-05-13 | Object Technology Licensing Corp. | Method and apparatus for importing and exporting archive files for a graphical user interface |
US5629980A (en) * | 1994-11-23 | 1997-05-13 | Xerox Corporation | System for controlling the distribution and use of digital works |
US5659616A (en) * | 1994-07-19 | 1997-08-19 | Certco, Llc | Method for securely using digital signatures in a commercial cryptographic system |
US5659350A (en) * | 1992-12-09 | 1997-08-19 | Discovery Communications, Inc. | Operations center for a television program packaging and delivery system |
US5677955A (en) * | 1995-04-07 | 1997-10-14 | Financial Services Technology Consortium | Electronic funds transfer instruments |
US5677953A (en) * | 1993-09-14 | 1997-10-14 | Spyrus, Inc. | System and method for access control for portable data storage media |
US5679075A (en) * | 1995-11-06 | 1997-10-21 | Beanstalk Entertainment Enterprises | Interactive multi-media game system and method |
US5684984A (en) * | 1994-09-29 | 1997-11-04 | Apple Computer, Inc. | Synchronization and replication of object databases |
US5708780A (en) * | 1995-06-07 | 1998-01-13 | Open Market, Inc. | Internet server access control and monitoring systems |
US5715403A (en) * | 1994-11-23 | 1998-02-03 | Xerox Corporation | System for controlling the distribution and use of digital works having attached usage rights where the usage rights are defined by a usage rights grammar |
US5717923A (en) * | 1994-11-03 | 1998-02-10 | Intel Corporation | Method and apparatus for dynamically customizing electronic information to individual end users |
US5724424A (en) * | 1993-12-16 | 1998-03-03 | Open Market, Inc. | Digital active advertising |
US5727920A (en) * | 1996-07-19 | 1998-03-17 | Hull, Deceased; Harold Lawrence | Vertical lift towing dolly including variable, attachable platforms |
US5732400A (en) * | 1995-01-04 | 1998-03-24 | Citibank N.A. | System and method for a risk-based purchase of goods |
US5757920A (en) * | 1994-07-18 | 1998-05-26 | Microsoft Corporation | Logon certification |
US5757908A (en) * | 1994-04-25 | 1998-05-26 | International Business Machines Corporation | Method and apparatus for enabling trial period use of software products: method and apparatus for utilizing an encryption header |
US5758068A (en) * | 1995-09-19 | 1998-05-26 | International Business Machines Corporation | Method and apparatus for software license management |
US5764774A (en) * | 1995-09-25 | 1998-06-09 | Intermec Corporation | Source data compression and decompression in code symbol printing and decoding |
US5774870A (en) * | 1995-12-14 | 1998-06-30 | Netcentives, Inc. | Fully integrated, on-line interactive frequency and award redemption program |
US5794115A (en) * | 1992-10-27 | 1998-08-11 | Mitsubishi Corporation | Pay broadcasting system having a broadcasting station and a charging center |
US5812661A (en) * | 1994-08-10 | 1998-09-22 | Fujitsu Limited | Software reproduction apparatus |
US5815665A (en) * | 1996-04-03 | 1998-09-29 | Microsoft Corporation | System and method for providing trusted brokering services over a distributed network |
US5870543A (en) * | 1995-06-07 | 1999-02-09 | Digital River, Inc. | System for preventing unauthorized copying of active software |
US5883955A (en) * | 1995-06-07 | 1999-03-16 | Digital River, Inc. | On-line try before you buy software distribution system |
US5883954A (en) * | 1995-06-07 | 1999-03-16 | Digital River, Inc. | Self-launching encrypted try before you buy software distribution system |
US5887060A (en) * | 1995-06-07 | 1999-03-23 | Digital River, Inc. | Central database system for automatic software program sales |
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US5903647A (en) * | 1995-06-07 | 1999-05-11 | Digital River, Inc. | Self-launching encrypted digital information distribution system |
US5907617A (en) * | 1995-06-07 | 1999-05-25 | Digital River, Inc. | Try before you buy software distribution and marketing system |
US5910987A (en) * | 1995-02-13 | 1999-06-08 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US5912974A (en) * | 1994-04-05 | 1999-06-15 | International Business Machines Corporation | Apparatus and method for authentication of printed documents |
US5920861A (en) * | 1997-02-25 | 1999-07-06 | Intertrust Technologies Corp. | Techniques for defining using and manipulating rights management data structures |
US5933497A (en) * | 1990-12-14 | 1999-08-03 | International Business Machines Corporation | Apparatus and method for controlling access to software |
US5933498A (en) * | 1996-01-11 | 1999-08-03 | Mrj, Inc. | System for controlling access and distribution of digital property |
US5943422A (en) * | 1996-08-12 | 1999-08-24 | Intertrust Technologies Corp. | Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels |
US5953419A (en) * | 1996-05-06 | 1999-09-14 | Symantec Corporation | Cryptographic file labeling system for supporting secured access by multiple users |
US5956408A (en) * | 1994-09-15 | 1999-09-21 | International Business Machines Corporation | Apparatus and method for secure distribution of data |
US5978567A (en) * | 1994-07-27 | 1999-11-02 | Instant Video Technologies Inc. | System for distribution of interactive multimedia and linear programs by enabling program webs which include control scripts to define presentation by client transceiver |
US6023506A (en) * | 1995-10-26 | 2000-02-08 | Hitachi, Ltd. | Data encryption control apparatus and method |
US6052780A (en) * | 1996-09-12 | 2000-04-18 | Open Security Solutions, Llc | Computer system and process for accessing an encrypted and self-decrypting digital information product while restricting access to decrypted digital information |
US6112181A (en) * | 1997-11-06 | 2000-08-29 | Intertrust Technologies Corporation | Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information |
US6141698A (en) * | 1997-01-29 | 2000-10-31 | Network Commerce Inc. | Method and system for injecting new code into existing application code |
US6205436B1 (en) * | 1994-04-28 | 2001-03-20 | Citibank, N.A. | Trusted agents for open electronic commerce where the transfer of electronic merchandise or electronic money is provisional until the transaction is finalized |
US20010002485A1 (en) * | 1995-01-17 | 2001-05-31 | Bisbee Stephen F. | System and method for electronic transmission, storage, and retrieval of authenticated electronic original documents |
US6367013B1 (en) * | 1995-01-17 | 2002-04-02 | Eoriginal Inc. | System and method for electronic transmission, storage, and retrieval of authenticated electronic original documents |
US20020144108A1 (en) * | 2001-03-29 | 2002-10-03 | International Business Machines Corporation | Method and system for public-key-based secure authentication to distributed legacy applications |
US20030051134A1 (en) * | 2001-08-28 | 2003-03-13 | International Business Machines Corporation | Secure authentication using digital certificates |
US20030144884A1 (en) * | 1994-10-28 | 2003-07-31 | Christian Mayaud | Computerized prescription system for gathering and presenting information relating to pharmaceuticals |
US6708157B2 (en) * | 1994-11-23 | 2004-03-16 | Contentguard Holdings Inc. | System for controlling the distribution and use of digital works using digital tickets |
US6842863B1 (en) * | 1999-11-23 | 2005-01-11 | Microsoft Corporation | Certificate reissuance for checking the status of a certificate in financial transactions |
US20050144108A1 (en) * | 1998-11-05 | 2005-06-30 | Loeper David B. | Method and system for financial advising |
US7356690B2 (en) * | 2000-12-11 | 2008-04-08 | International Business Machines Corporation | Method and system for managing a distributed trust path locator for public key certificates relating to the trust path of an X.509 attribute certificate |
US20100070345A1 (en) * | 1992-08-06 | 2010-03-18 | Abelow Daniel H | Customer-based product design module |
Family Cites Families (475)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US575910A (en) * | 1897-01-26 | Bicycle | ||
US532851A (en) * | 1895-01-22 | Disk graphophone | ||
US3609697A (en) | 1968-10-21 | 1971-09-28 | Ibm | Program security device |
US3573747A (en) | 1969-02-24 | 1971-04-06 | Institutional Networks Corp | Instinet communication system for effectuating the sale or exchange of fungible properties between subscribers |
US3845391A (en) | 1969-07-08 | 1974-10-29 | Audicom Corp | Communication including submerged identification signal |
US3798605A (en) | 1971-06-30 | 1974-03-19 | Ibm | Centralized verification system |
US3798359A (en) | 1971-06-30 | 1974-03-19 | Ibm | Block cipher cryptographic system |
US3798360A (en) | 1971-06-30 | 1974-03-19 | Ibm | Step code ciphering system |
US3796830A (en) | 1971-11-02 | 1974-03-12 | Ibm | Recirculating block cipher cryptographic system |
GB1414126A (en) | 1971-11-22 | 1975-11-19 | Key Tronic Ltd | Secutity for computer systems |
US3790700A (en) * | 1971-12-17 | 1974-02-05 | Hughes Aircraft Co | Catv program control system |
US3931504A (en) | 1972-02-07 | 1976-01-06 | Basic Computing Arts, Inc. | Electronic data processing security system and method |
US3806874A (en) | 1972-04-11 | 1974-04-23 | Gretag Ag | Identification system for individuals |
US3911397A (en) | 1972-10-24 | 1975-10-07 | Information Identification Inc | Access control assembly |
US3829833A (en) | 1972-10-24 | 1974-08-13 | Information Identification Co | Code element identification method and apparatus |
GB1494736A (en) | 1974-01-21 | 1977-12-14 | Chubb Integrated Syst Ltd | Token-control |
US3924065A (en) | 1974-04-05 | 1975-12-02 | Information Identification Inc | Coherent, fixed BAUD rate FSK communication method and apparatus |
US3946220A (en) | 1974-06-10 | 1976-03-23 | Transactron, Inc. | Point-of-sale system and apparatus |
US3956615A (en) | 1974-06-25 | 1976-05-11 | Ibm Corporation | Transaction execution system with secure data storage and communications |
US3970992A (en) | 1974-06-25 | 1976-07-20 | Ibm Corporation | Transaction terminal with unlimited range of functions |
US3906448A (en) | 1974-08-01 | 1975-09-16 | Rca Corp | Fault detection facilitating means for card reader of identification card reading system |
US4270182A (en) | 1974-12-30 | 1981-05-26 | Asija Satya P | Automated information input, storage, and retrieval system |
US3958081A (en) | 1975-02-24 | 1976-05-18 | International Business Machines Corporation | Block cipher system for data security |
US3946200A (en) * | 1975-02-24 | 1976-03-23 | Gca Corporation | Proportional temperature controller |
US4209787A (en) | 1975-04-16 | 1980-06-24 | Gould Inc. | Method for monitoring the location of monitored objects |
US4217588A (en) | 1975-04-16 | 1980-08-12 | Information Identification Company, Inc. | Object monitoring method and apparatus |
US4112421A (en) | 1975-04-16 | 1978-09-05 | Information Identification Company, Inc. | Method and apparatus for automatically monitoring objects |
US4071911A (en) | 1975-04-22 | 1978-01-31 | Continental Can Co. Inc. | Machine control system with machine serializing and safety circuits |
US3996449A (en) | 1975-08-25 | 1976-12-07 | International Business Machines Corporation | Operating system authenticator |
US4196310A (en) | 1976-04-09 | 1980-04-01 | Digital Data, Inc. | Secure SCA broadcasting system including subscriber actuated portable receiving terminals |
JPS533029A (en) | 1976-06-30 | 1978-01-12 | Toshiba Corp | Electronic computer |
US4048619A (en) | 1976-09-07 | 1977-09-13 | Digital Data Inc. | Secure two channel sca broadcasting system |
US4141005A (en) * | 1976-11-11 | 1979-02-20 | International Business Machines Corporation | Data format converting apparatus for use in a digital data processor |
GB1561482A (en) | 1976-11-18 | 1980-02-20 | Ibm | Protection of data processing system against unauthorised programmes |
US4104721A (en) | 1976-12-30 | 1978-08-01 | International Business Machines Corporation | Hierarchical security mechanism for dynamically assigning security levels to object programs |
US4120030A (en) | 1977-03-11 | 1978-10-10 | Kearney & Trecker Corporation | Computer software security system |
US4162483A (en) | 1977-04-01 | 1979-07-24 | Intech Laboratories, Inc. | Bilateral master station-plural satellite station signalling apparatus |
US4200913A (en) | 1977-04-13 | 1980-04-29 | International Business Machines Corporation | Operator controlled programmable keyboard apparatus |
GB1553027A (en) | 1977-05-12 | 1979-09-19 | Marconi Co Ltd | Message signal scrambling apparatus |
DE2840980C3 (en) | 1977-10-08 | 1982-05-06 | Tokyo Electric Co., Ltd., Tokyo | Electronic cash register and electronic cash register system |
US4168396A (en) | 1977-10-31 | 1979-09-18 | Best Robert M | Microprocessor for executing enciphered programs |
US4278837A (en) | 1977-10-31 | 1981-07-14 | Best Robert M | Crypto microprocessor for executing enciphered programs |
US4405829A (en) | 1977-12-14 | 1983-09-20 | Massachusetts Institute Of Technology | Cryptographic communications system and method |
US4259720A (en) * | 1978-01-09 | 1981-03-31 | Interbank Card Association | Security system for electronic funds transfer system |
US4262329A (en) | 1978-03-27 | 1981-04-14 | Computation Planning, Inc. | Security system for data processing |
US4246638A (en) * | 1978-09-14 | 1981-01-20 | Thomas William J | Method and apparatus for controlling usage of a programmable computing machine |
US4253157A (en) | 1978-09-29 | 1981-02-24 | Alpex Computer Corp. | Data access system wherein subscriber terminals gain access to a data bank by telephone lines |
US4265371A (en) | 1978-10-06 | 1981-05-05 | Trafalgar Industries Inc. | Foodstuff vending apparatus employing improved solid-state type control apparatus |
US4232317A (en) | 1978-11-01 | 1980-11-04 | Freeny Jr Charles C | Quantized hyperbolic and inverse hyperbolic object location system |
US4305131A (en) | 1979-02-05 | 1981-12-08 | Best Robert M | Dialog between TV movies and human viewers |
FR2448825A1 (en) | 1979-02-06 | 1980-09-05 | Telediffusion Fse | SYSTEM FOR TRANSMITTING INFORMATION BETWEEN A TRANSMISSION CENTER AND RECEIVING STATIONS, WHICH IS PROVIDED WITH A MEANS OF CONTROLLING ACCESS TO THE INFORMATION TRANSMITTED |
FR2448824A1 (en) | 1979-02-06 | 1980-09-05 | Telediffusion Fse | VIDEOTEX SYSTEM PROVIDED WITH INFORMATION ACCESS CONTROL MEANS |
US4598288A (en) | 1979-04-16 | 1986-07-01 | Codart, Inc. | Apparatus for controlling the reception of transmitted programs |
US4236217A (en) | 1979-04-20 | 1980-11-25 | Kennedy Stanley P | Energy utilization or consumption recording arrangement |
US4465901A (en) | 1979-06-04 | 1984-08-14 | Best Robert M | Crypto microprocessor that executes enciphered programs |
US4309569A (en) | 1979-09-05 | 1982-01-05 | The Board Of Trustees Of The Leland Stanford Junior University | Method of providing digital signatures |
US4319079A (en) | 1979-09-13 | 1982-03-09 | Best Robert M | Crypto microprocessor using block cipher |
DE2943436A1 (en) | 1979-10-26 | 1981-05-07 | Wolfram Dr.-Ing. 5100 Aachen Szepanski | Security coding system for documents - has cover coding printed on document and optically scanned for comparison with normal text |
FR2469760A1 (en) | 1979-11-09 | 1981-05-22 | Cii Honeywell Bull | METHOD AND SYSTEM FOR IDENTIFYING PEOPLE REQUESTING ACCESS TO CERTAIN MEDIA |
US4321672A (en) * | 1979-11-26 | 1982-03-23 | Braun Edward L | Financial data processing system |
US4328544A (en) | 1980-01-04 | 1982-05-04 | International Business Machines Corporation | Electronic point-of-sale system using direct-access storage |
US4375579A (en) | 1980-01-30 | 1983-03-01 | Wisconsin Alumni Research Foundation | Database encryption and decryption circuit and method using subkeys |
US4306289A (en) | 1980-02-04 | 1981-12-15 | Western Electric Company, Inc. | Digital computer having code conversion apparatus for an encrypted program |
US4361877A (en) | 1980-02-05 | 1982-11-30 | Sangamo Weston, Inc. | Billing recorder with non-volatile solid state memory |
US4529870A (en) | 1980-03-10 | 1985-07-16 | David Chaum | Cryptographic identification, financial transaction, and credential device |
JPS56140452A (en) | 1980-04-01 | 1981-11-02 | Hitachi Ltd | Memory protection system |
AU547877B2 (en) | 1980-09-26 | 1985-11-07 | B. Lofberg | Method for processing an information signal and means for carrying out the method |
US4442484A (en) | 1980-10-14 | 1984-04-10 | Intel Corporation | Microprocessor memory management and protection mechanism |
US4424486A (en) * | 1980-10-14 | 1984-01-03 | Zetec, Inc. | Phase rotation circuit for an eddy current tester |
US4513174A (en) | 1981-03-19 | 1985-04-23 | Standard Microsystems Corporation | Software security method using partial fabrication of proprietary control word decoders and microinstruction memories |
US4446519A (en) | 1981-05-26 | 1984-05-01 | Corban International, Ltd. | Method and apparatus for providing security for computer software |
US4578530A (en) * | 1981-06-26 | 1986-03-25 | Visa U.S.A., Inc. | End-to-end encryption system and method of operation |
US4433207A (en) | 1981-09-10 | 1984-02-21 | Best Robert M | Cryptographic decoder for computer programs |
US4471163A (en) | 1981-10-05 | 1984-09-11 | Donald Thomas C | Software protection system |
US4593353A (en) | 1981-10-26 | 1986-06-03 | Telecommunications Associates, Inc. | Software protection method and apparatus |
US4670857A (en) | 1981-10-26 | 1987-06-02 | Rackman Michael I | Cartridge-controlled system whose use is limited to authorized cartridges |
US4442486A (en) | 1981-11-25 | 1984-04-10 | U.S. Philips Corporation | Protected programmable apparatus |
US4454594A (en) | 1981-11-25 | 1984-06-12 | U.S. Philips Corporation | Method and apparatus to secure proprietary operation of computer equipment |
US4553252A (en) | 1981-12-21 | 1985-11-12 | Egendorf Harris H | Counting computer software cartridge |
HU183765B (en) | 1981-12-23 | 1984-05-28 | Phylaxia Oltoanyagtermeloe | Process for producing lyophilized vaccine against duck hepatitis |
EP0084441A3 (en) | 1982-01-19 | 1984-08-22 | Tabs Limited | Method and apparatus for the protection of proprietary computer software |
US4458315A (en) | 1982-02-25 | 1984-07-03 | Penta, Inc. | Apparatus and method for preventing unauthorized use of computer programs |
AU542447B2 (en) | 1982-02-27 | 1985-02-21 | Fujitsu Limited | System for controlling key storage unit |
FR2523745B1 (en) | 1982-03-18 | 1987-06-26 | Bull Sa | METHOD AND DEVICE FOR PROTECTING SOFTWARE DELIVERED BY A SUPPLIER TO A USER |
US4593183A (en) | 1982-05-06 | 1986-06-03 | Tokyo Shibaura Denki Kabushiki Kaisha | Automatic transaction machine |
US4484217A (en) | 1982-05-11 | 1984-11-20 | Telease, Inc. | Method and system for remote reporting, particularly for pay television billing |
US4494156A (en) | 1982-05-14 | 1985-01-15 | Media Systems Technology | Selectable format computer disk copier machine |
US4525599A (en) | 1982-05-21 | 1985-06-25 | General Computer Corporation | Software protection methods and apparatus |
US4462076A (en) | 1982-06-04 | 1984-07-24 | Smith Engineering | Video game cartridge recognition and security system |
US4523271A (en) | 1982-06-22 | 1985-06-11 | Levien Raphael L | Software protection method and apparatus |
US4590552A (en) | 1982-06-30 | 1986-05-20 | Texas Instruments Incorporated | Security bit for designating the security status of information stored in a nonvolatile memory |
US4462078A (en) | 1982-08-02 | 1984-07-24 | Ron Ross | Computer program protection method |
US4558176A (en) | 1982-09-20 | 1985-12-10 | Arnold Mark G | Computer systems to inhibit unauthorized copying, unauthorized usage, and automated cracking of protected software |
FR2536880B1 (en) | 1982-11-30 | 1987-05-07 | Bull Sa | MICROPROCESSOR DESIGNED IN PARTICULAR FOR EXECUTING THE CALCULATION ALGORITHMS OF A PUBLIC KEY ENCRYPTION SYSTEM |
US4562305A (en) | 1982-12-22 | 1985-12-31 | International Business Machines Corporation | Software cryptographic apparatus and method |
US4609985A (en) | 1982-12-30 | 1986-09-02 | Thomson Components-Mostek Corporation | Microcomputer with severable ROM |
US4528643A (en) | 1983-01-10 | 1985-07-09 | Fpdc, Inc. | System for reproducing information in material objects at a point of sale location |
US4588991A (en) | 1983-03-07 | 1986-05-13 | Atalla Corporation | File access security method and means |
US4680731A (en) | 1983-03-17 | 1987-07-14 | Romox Incorporated | Reprogrammable cartridge memory with built-in identification circuitry and programming method |
US4593376A (en) | 1983-04-21 | 1986-06-03 | Volk Larry N | System for vending program cartridges which have circuitry for inhibiting program usage after preset time interval expires |
US4597058A (en) | 1983-05-09 | 1986-06-24 | Romox, Inc. | Cartridge programming system |
EP0128672A1 (en) | 1983-05-13 | 1984-12-19 | Ira Dennis Gale | Data security device |
US4573119A (en) * | 1983-07-11 | 1986-02-25 | Westheimer Thomas O | Computer software protection system |
FR2550638A1 (en) | 1983-08-11 | 1985-02-15 | Christophe Leveque | DEVICE FOR PROTECTING SOFTWARE USED BY A COMPUTER CONNECTED TO AT LEAST ONE PERIPHERAL TERMINAL |
US4926480A (en) | 1983-08-22 | 1990-05-15 | David Chaum | Card-computer moderated systems |
US4621334A (en) | 1983-08-26 | 1986-11-04 | Electronic Signature Lock Corporation | Personal identification apparatus |
US4584641A (en) | 1983-08-29 | 1986-04-22 | Paul Guglielmino | Copyprotecting system for software protection |
US4562306A (en) | 1983-09-14 | 1985-12-31 | Chou Wayne W | Method and apparatus for protecting computer software utilizing an active coded hardware device |
US5103392A (en) | 1983-10-05 | 1992-04-07 | Fujitsu Limited | System for storing history of use of programs including user credit data and having access by the proprietor |
US4768087A (en) | 1983-10-07 | 1988-08-30 | National Information Utilities Corporation | Education utility |
US4652990A (en) | 1983-10-27 | 1987-03-24 | Remote Systems, Inc. | Protected software access control apparatus and method |
US4558413A (en) | 1983-11-21 | 1985-12-10 | Xerox Corporation | Software version management system |
US4740890A (en) | 1983-12-22 | 1988-04-26 | Software Concepts, Inc. | Software protection system with trial period usage code and unlimited use unlocking code both recorded on program storage media |
US4584639A (en) | 1983-12-23 | 1986-04-22 | Key Logic, Inc. | Computer security system |
US4577289A (en) | 1983-12-30 | 1986-03-18 | International Business Machines Corporation | Hardware key-on-disk system for copy-protecting magnetic storage media |
US4621321A (en) | 1984-02-16 | 1986-11-04 | Honeywell Inc. | Secure data processing system architecture |
US4599489A (en) | 1984-02-22 | 1986-07-08 | Gordian Systems, Inc. | Solid state key for controlling access to computer software |
US4609777A (en) | 1984-02-22 | 1986-09-02 | Gordian Systems, Inc. | Solid state key for controlling access to computer software |
US4646234A (en) | 1984-02-29 | 1987-02-24 | Brigham Young University | Anti-piracy system using separate storage and alternate execution of selected proprietary and public portions of computer programs |
US4672605A (en) | 1984-03-20 | 1987-06-09 | Applied Spectrum Technologies, Inc. | Data and voice communications system |
US4649515A (en) * | 1984-04-30 | 1987-03-10 | Westinghouse Electric Corp. | Methods and apparatus for system fault diagnosis and control |
US4748561A (en) | 1984-05-14 | 1988-05-31 | Mark Brown | Method of protecting computer software |
US4672572A (en) | 1984-05-21 | 1987-06-09 | Gould Inc. | Protector system for computer access and use |
US4712238A (en) | 1984-06-08 | 1987-12-08 | M/A-Com Government Systems, Inc. | Selective-subscription descrambling |
US4791565A (en) | 1984-06-20 | 1988-12-13 | Effective Security Systems, Inc. | Apparatus for controlling the use of computer software |
US4562495A (en) | 1984-07-02 | 1985-12-31 | Verbatim Corporation | Multiple system disk |
GB2163577B (en) | 1984-08-23 | 1988-01-13 | Nat Res Dev | Software protection device |
US4747139A (en) | 1984-08-27 | 1988-05-24 | Taaffe James L | Software security method and systems |
BE900479A (en) | 1984-08-31 | 1984-12-17 | Smets Raph | Magnetic recording disc for computer data - has sector subjected to different treatment to prevent unauthorised copying |
US4644493A (en) | 1984-09-14 | 1987-02-17 | International Business Machines Corporation | Implementing a shared higher level of privilege on personal computers for copy protection of software |
US4677552A (en) | 1984-10-05 | 1987-06-30 | Sibley Jr H C | International commodity trade exchange |
US4696034A (en) | 1984-10-12 | 1987-09-22 | Signal Security Technologies | High security pay television system |
US4677434A (en) | 1984-10-17 | 1987-06-30 | Lotus Information Network Corp. | Access control system for transmitting data from a central station to a plurality of receiving stations and method therefor |
CA1238427A (en) | 1984-12-18 | 1988-06-21 | Jonathan Oseas | Code protection using cryptography |
JPS61166652A (en) | 1985-01-19 | 1986-07-28 | Panafacom Ltd | Interruption generating system using exceptional memory protection |
US4713753A (en) | 1985-02-21 | 1987-12-15 | Honeywell Inc. | Secure data processing system architecture with format control |
US4888798A (en) | 1985-04-19 | 1989-12-19 | Oms, Inc. | Modular software security |
US4700296A (en) | 1985-04-19 | 1987-10-13 | Palmer Jr Roy A | Electronic access control system |
US4688169A (en) | 1985-05-30 | 1987-08-18 | Joshi Bhagirath S | Computer software security system |
US4685056A (en) | 1985-06-11 | 1987-08-04 | Pueblo Technologies, Inc. | Computer security device |
US4685055A (en) | 1985-07-01 | 1987-08-04 | Thomas Richard B | Method and system for controlling use of protected software |
US4683968A (en) | 1985-09-03 | 1987-08-04 | Burroughs Corporation | System for preventing software piracy employing multi-encrypted keys and single decryption circuit modules |
US4757533A (en) | 1985-09-11 | 1988-07-12 | Computer Security Corporation | Security system for microcomputers |
US4727550A (en) * | 1985-09-19 | 1988-02-23 | Chang David B | Radiation source |
GB2182467B (en) | 1985-10-30 | 1989-10-18 | Ncr Co | Security device for stored sensitive data |
US5216603A (en) | 1985-11-18 | 1993-06-01 | Action Technologies, Inc. | Method and apparatus for structuring and managing human communications by explicitly defining the types of communications permitted between participants |
US5208748A (en) | 1985-11-18 | 1993-05-04 | Action Technologies, Inc. | Method and apparatus for structuring and managing human communications by explicitly defining the types of communications permitted between participants |
LU86203A1 (en) * | 1985-12-11 | 1987-07-24 | Cen Centre Energie Nucleaire | METHOD AND APPARATUS FOR VERIFYING THE AUTHENTICITY OF DOCUMENTS LINKED TO A PERSON AND THE IDENTITY OF THEIR CARRIERS |
DE3601983A1 (en) * | 1986-01-23 | 1987-07-30 | Siemens Ag | METHOD AND DEVICE FOR CONTACTLESS DETERMINATION OF TEMPERATURE DISTRIBUTION IN AN EXAMINATION OBJECT |
US5759101A (en) | 1986-03-10 | 1998-06-02 | Response Reward Systems L.C. | Central and remote evaluation of responses of participatory broadcast audience with automatic crediting and couponing |
US4864494A (en) | 1986-03-21 | 1989-09-05 | Computerized Data Ssytems For Mfg., Inc. | Software usage authorization system with key for decrypting/re-encrypting/re-transmitting moving target security codes from protected software |
JPS62225059A (en) | 1986-03-27 | 1987-10-03 | Toshiba Electric Equip Corp | Mulitiple dwelling housing information system |
JPS62241061A (en) | 1986-04-11 | 1987-10-21 | Nec Corp | Information access management system |
US4893332A (en) * | 1986-05-12 | 1990-01-09 | Aquatrol Corporation | Low-powered remote sensor |
US4823264A (en) | 1986-05-27 | 1989-04-18 | Deming Gilbert R | Electronic funds transfer system |
US4780821A (en) | 1986-07-29 | 1988-10-25 | International Business Machines Corp. | Method for multiple programs management within a network having a server computer and a plurality of remote computers |
GB8619989D0 (en) | 1986-08-16 | 1986-09-24 | Modray Ltd | Controlling length of time |
US5014234A (en) | 1986-08-25 | 1991-05-07 | Ncr Corporation | System with software usage timer and counter for allowing limited use but preventing continued unauthorized use of protected software |
US4967403A (en) | 1986-08-25 | 1990-10-30 | Sony Corporation | Multi-format optical disk and reading device |
US4799156A (en) | 1986-10-01 | 1989-01-17 | Strategic Processing Corporation | Interactive market management system |
US5050213A (en) | 1986-10-14 | 1991-09-17 | Electronic Publishing Resources, Inc. | Database usage metering and protection system and method |
US4977594A (en) | 1986-10-14 | 1990-12-11 | Electronic Publishing Resources, Inc. | Database usage metering and protection system and method |
US4796181A (en) | 1986-10-24 | 1989-01-03 | Wiedemer John D | Billing system for computer software |
US5155680A (en) | 1986-10-24 | 1992-10-13 | Signal Security Technologies | Billing system for computing software |
US5047928A (en) | 1986-10-24 | 1991-09-10 | Wiedemer John D | Billing system for computer software |
US5109413A (en) | 1986-11-05 | 1992-04-28 | International Business Machines Corporation | Manipulating rights-to-execute in connection with a software copy protection mechanism |
US5146575A (en) | 1986-11-05 | 1992-09-08 | International Business Machines Corp. | Implementing privilege on microprocessor systems for use in software asset protection |
US4817140A (en) | 1986-11-05 | 1989-03-28 | International Business Machines Corp. | Software protection system using a single-key cryptosystem, a hardware-based authorization system and a secure coprocessor |
US4796220A (en) * | 1986-12-15 | 1989-01-03 | Pride Software Development Corp. | Method of controlling the copying of software |
US4757914A (en) | 1987-01-27 | 1988-07-19 | Continental Can Company, Inc. | Laminated closure for a plastic container |
US4893248A (en) * | 1987-02-06 | 1990-01-09 | Access Corporation | Monitoring and reporting system for remote terminals |
US4881197A (en) | 1987-02-13 | 1989-11-14 | Addison Fischer | Document composition system using named formats and named fonts |
US5224160A (en) | 1987-02-23 | 1993-06-29 | Siemens Nixdorf Informationssysteme Ag | Process for securing and for checking the integrity of the secured programs |
US4975647A (en) | 1987-06-01 | 1990-12-04 | Nova Biomedical Corporation | Controlling machine operation with respect to consumable accessory units |
US4930073A (en) | 1987-06-26 | 1990-05-29 | International Business Machines Corporation | Method to prevent use of incorrect program version in a computer system |
US4866769A (en) | 1987-08-05 | 1989-09-12 | Ibm Corporation | Hardware assist for protecting PC software |
US5206951A (en) | 1987-08-21 | 1993-04-27 | Wang Laboratories, Inc. | Integration of data between typed objects by mutual, direct invocation between object managers corresponding to object types |
JPH01502861A (en) | 1987-09-04 | 1989-09-28 | ディジタル イクイプメント コーポレーション | Session control within circuitry for digital processing systems supporting multiple transfer protocols |
US5005122A (en) | 1987-09-08 | 1991-04-02 | Digital Equipment Corporation | Arrangement with cooperating management server node and network service node |
DE3888068D1 (en) * | 1987-09-30 | 1994-04-07 | Thomson Brandt Gmbh | Method and circuit arrangement for recognizing a signal contained in a video signal. |
US4864616A (en) | 1987-10-15 | 1989-09-05 | Micronyx, Inc. | Cryptographic labeling of electronically stored data |
US5390297A (en) * | 1987-11-10 | 1995-02-14 | Auto-Trol Technology Corporation | System for controlling the number of concurrent copies of a program in a network based on the number of available licenses |
US4975878A (en) | 1988-01-28 | 1990-12-04 | National Semiconductor | Programmable memory data protection scheme |
DE3803982A1 (en) | 1988-02-10 | 1990-01-25 | Igor Groza | Data carrier with duplication prevention |
US5005200A (en) | 1988-02-12 | 1991-04-02 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
US5214702A (en) | 1988-02-12 | 1993-05-25 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
US4937863A (en) | 1988-03-07 | 1990-06-26 | Digital Equipment Corporation | Software licensing management system |
JP2635087B2 (en) | 1988-03-25 | 1997-07-30 | 株式会社日立製作所 | Process control method |
GB8809346D0 (en) * | 1988-04-20 | 1988-05-25 | Emi Plc Thorn | Improvements relating to marked recorded signals |
US5113518A (en) | 1988-06-03 | 1992-05-12 | Durst Jr Robert T | Method and system for preventing unauthorized use of software |
US4924378A (en) | 1988-06-13 | 1990-05-08 | Prime Computer, Inc. | License mangagement system and license storage key |
US5191573A (en) * | 1988-06-13 | 1993-03-02 | Hair Arthur R | Method for transmitting a desired digital video or audio signal |
US5185717A (en) | 1988-08-05 | 1993-02-09 | Ryoichi Mori | Tamper resistant module having logical elements arranged in multiple layers on the outer surface of a substrate to protect stored information |
EP0472521B1 (en) | 1988-08-16 | 1998-06-03 | Cryptologics International Inc. | Information distribution system |
US5111390A (en) | 1988-08-22 | 1992-05-05 | Unisys Corporation | Software security system for maintaining integrity of compiled object code by restricting users ability to define compilers |
US5023907A (en) | 1988-09-30 | 1991-06-11 | Apollo Computer, Inc. | Network license server |
US4953209A (en) | 1988-10-31 | 1990-08-28 | International Business Machines Corp. | Self-verifying receipt and acceptance system for electronically delivered data objects |
US4949187A (en) | 1988-12-16 | 1990-08-14 | Cohen Jason M | Video communications system having a remotely controlled central source of video and audio data |
US4919545A (en) | 1988-12-22 | 1990-04-24 | Gte Laboratories Incorporated | Distributed security procedure for intelligent networks |
US4962533A (en) | 1989-02-17 | 1990-10-09 | Texas Instrument Incorporated | Data protection for computer systems |
US4941175A (en) | 1989-02-24 | 1990-07-10 | International Business Machines Corporation | Tamper-resistant method for authorizing access to data between a host and a predetermined number of attached workstations |
EP0383985A1 (en) * | 1989-02-24 | 1990-08-29 | Claus Peter Prof. Dr. Schnorr | Method for subscriber identification and for generation and verification of electronic signatures in a data exchange system |
US5065429A (en) | 1989-04-03 | 1991-11-12 | Lang Gerald S | Method and apparatus for protecting material on storage media |
US5325524A (en) | 1989-04-06 | 1994-06-28 | Digital Equipment Corporation | Locating mobile objects in a distributed computer system |
US5199066A (en) * | 1989-04-18 | 1993-03-30 | Special Effects Software, Inc. | Method and apparatus for protecting software |
US5227797A (en) | 1989-04-25 | 1993-07-13 | Murphy Quentin M | Radar tomography |
KR920701894A (en) | 1989-04-28 | 1992-08-12 | 브루스 마르쿠스 | Remote control device of computer software and its protection method |
DE69031191T2 (en) | 1989-05-15 | 1998-02-12 | Ibm | System for controlling access privileges |
US5075847A (en) | 1989-05-26 | 1991-12-24 | Hewlett-Packard Company | Method and apparatus for computer program encapsulation |
US5442645A (en) | 1989-06-06 | 1995-08-15 | Bull Cp8 | Method for checking the integrity of a program or data, and apparatus for implementing this method |
US5129084A (en) | 1989-06-29 | 1992-07-07 | Digital Equipment Corporation | Object container transfer system and method in an object based computer operating system |
US5347579A (en) | 1989-07-05 | 1994-09-13 | Blandford Robert R | Personal computer diary |
US5257369A (en) | 1990-10-22 | 1993-10-26 | Skeen Marion D | Apparatus and method for providing decoupling of data exchange details for providing high performance communication between software processes |
US5187787B1 (en) | 1989-07-27 | 1996-05-07 | Teknekron Software Systems Inc | Apparatus and method for providing decoupling of data exchange details for providing high performance communication between software processes |
US5557798A (en) | 1989-07-27 | 1996-09-17 | Tibco, Inc. | Apparatus and method for providing decoupling of data exchange details for providing high performance communication between software processes |
US6044205A (en) | 1996-02-29 | 2000-03-28 | Intermind Corporation | Communications system for transferring information between memories according to processes transferred with the information |
US5126936A (en) | 1989-09-01 | 1992-06-30 | Champion Securities | Goal-directed financial asset management system |
US5027397A (en) | 1989-09-12 | 1991-06-25 | International Business Machines Corporation | Data protection by detection of intrusion into electronic assemblies |
US5048085A (en) | 1989-10-06 | 1991-09-10 | International Business Machines Corporation | Transaction system security method and apparatus |
US5148481A (en) | 1989-10-06 | 1992-09-15 | International Business Machines Corporation | Transaction system security method and apparatus |
US5136643A (en) | 1989-10-13 | 1992-08-04 | Fischer Addison M | Public/key date-time notary facility |
US5001752A (en) | 1989-10-13 | 1991-03-19 | Fischer Addison M | Public/key date-time notary facility |
US5241671C1 (en) | 1989-10-26 | 2002-07-02 | Encyclopaedia Britannica Educa | Multimedia search system using a plurality of entry path means which indicate interrelatedness of information |
US5201047A (en) | 1989-12-21 | 1993-04-06 | International Business Machines Corporation | Attribute-based classification and retrieval system |
US5163091A (en) | 1990-01-29 | 1992-11-10 | Graziano James M | Knowledge based system for document authentication (apparatus) |
US5218605A (en) | 1990-01-31 | 1993-06-08 | Hewlett-Packard Company | Software modules for testing computer hardware and software |
US5251294A (en) | 1990-02-07 | 1993-10-05 | Abelow Daniel H | Accessing, assembling, and using bodies of information |
US5263158A (en) | 1990-02-15 | 1993-11-16 | International Business Machines Corporation | Method and system for variable authority level user access control in a distributed data processing system having multiple resource manager |
US5263165A (en) | 1990-02-15 | 1993-11-16 | International Business Machines Corporation | System for providing user access control within a distributed data processing system having multiple resource managers |
US5263157A (en) | 1990-02-15 | 1993-11-16 | International Business Machines Corporation | Method and system for providing user access control within a distributed data processing system by the exchange of access control profiles |
US5119493A (en) | 1990-02-23 | 1992-06-02 | International Business Machines Corporation | System for recording at least one selected activity from a selected resource object within a distributed data processing system |
DE69031758T2 (en) | 1990-04-13 | 1998-05-28 | Koninkl Philips Electronics Nv | Process for organizing and accessing product descriptive data in connection with a technical process |
US5022080A (en) | 1990-04-16 | 1991-06-04 | Durst Robert T | Electronic notary |
FR2662007B1 (en) | 1990-05-10 | 1992-07-10 | Bull Sa | PROCESS FOR OBTAINING A SECURE CLEAR ATTESTATION IN A DISTRIBUTED COMPUTER SYSTEM ENVIRONMENT. |
EP0456386B1 (en) | 1990-05-11 | 1998-11-11 | International Computers Limited | Access control in a distributed computer system |
EP0459046A1 (en) * | 1990-05-31 | 1991-12-04 | International Business Machines Corporation | Computer software protection |
NL9001368A (en) | 1990-06-15 | 1992-01-02 | Tel Developments B V | SECURITY OF OBJECTS OR DOCUMENTS. |
US5050212A (en) | 1990-06-20 | 1991-09-17 | Apple Computer, Inc. | Method and apparatus for verifying the integrity of a file stored separately from a computer |
US5032979A (en) | 1990-06-22 | 1991-07-16 | International Business Machines Corporation | Distributed security auditing subsystem for an operating system |
US5201046A (en) | 1990-06-22 | 1993-04-06 | Xidak, Inc. | Relational database management system and method for storing, retrieving and modifying directed graph data structures |
US5103459B1 (en) | 1990-06-25 | 1999-07-06 | Qualcomm Inc | System and method for generating signal waveforms in a cdma cellular telephone system |
US5168147A (en) | 1990-07-31 | 1992-12-01 | Xerox Corporation | Binary image processing for decoding self-clocking glyph shape codes |
US5128525A (en) | 1990-07-31 | 1992-07-07 | Xerox Corporation | Convolution filtering for decoding self-clocking glyph shape codes |
CA2044404C (en) | 1990-07-31 | 1998-06-23 | Dan S. Bloomberg | Self-clocking glyph shape codes |
US5091966A (en) | 1990-07-31 | 1992-02-25 | Xerox Corporation | Adaptive scaling for decoding spatially periodic self-clocking glyph shape codes |
US5136647A (en) | 1990-08-02 | 1992-08-04 | Bell Communications Research, Inc. | Method for secure time-stamping of digital documents |
US5136646A (en) | 1991-03-08 | 1992-08-04 | Bell Communications Research, Inc. | Digital document time-stamping with catenate certificate |
US5251304A (en) | 1990-09-28 | 1993-10-05 | Motorola, Inc. | Integrated circuit microcontroller with on-chip memory and external bus interface and programmable mechanism for securing the contents of on-chip memory |
US5224163A (en) | 1990-09-28 | 1993-06-29 | Digital Equipment Corporation | Method for delegating authorization from one entity to another through the use of session encryption keys |
DK0551433T3 (en) | 1990-10-01 | 2001-07-30 | Thomas A Bush | transaction Processing System |
US5222134A (en) | 1990-11-07 | 1993-06-22 | Tau Systems Corporation | Secure system for activating personal computer software at remote locations |
US5103476A (en) | 1990-11-07 | 1992-04-07 | Waite David P | Secure system for activating personal computer software at remote locations |
US5758152A (en) | 1990-12-06 | 1998-05-26 | Prime Arithmetics, Inc. | Method and apparatus for the generation and manipulation of data structures |
US5504818A (en) | 1991-04-19 | 1996-04-02 | Okano; Hirokazu | Information processing system using error-correcting codes and cryptography |
DE69228350T2 (en) | 1991-05-08 | 1999-09-23 | Digital Equipment Corp | ADMINISTRATIVE INTERFACE AND FORMAT FOR LICENSE MANAGEMENT SYSTEM |
SE513182C2 (en) | 1991-06-12 | 2000-07-24 | Icl Systems Ab | Procedure and system for auditing data in a distributed computer system |
FR2678121B1 (en) | 1991-06-18 | 1994-04-29 | Matra Communication | DEVICE FOR INSERTING DIGITAL PACKETS IN A TRANSMISSION CHANNEL. |
US5438508A (en) | 1991-06-28 | 1995-08-01 | Digital Equipment Corporation | License document interchange format for license management system |
US5204897A (en) | 1991-06-28 | 1993-04-20 | Digital Equipment Corporation | Management interface for license management system |
US5319785A (en) | 1991-06-28 | 1994-06-07 | Digital Equipment Corporation | Polling of I/O device status comparison performed in the polled I/O device |
US5940504A (en) | 1991-07-01 | 1999-08-17 | Infologic Software, Inc. | Licensing management system and method in which datagrams including an address of a licensee and indicative of use of a licensed product are sent from the licensee's site |
US5577209A (en) | 1991-07-11 | 1996-11-19 | Itt Corporation | Apparatus and method for providing multi-level security for communication among computers and terminals on a network |
US5383113A (en) * | 1991-07-25 | 1995-01-17 | Checkfree Corporation | System and method for electronically providing customer services including payment of bills, financial analysis and loans |
US5367621A (en) | 1991-09-06 | 1994-11-22 | International Business Machines Corporation | Data processing method to provide a generalized link from a reference point in an on-line book to an arbitrary multimedia object which can be dynamically updated |
US5301326A (en) | 1991-09-24 | 1994-04-05 | Microsoft Corporation | Method and system for controlling the execution of an application program |
US5355474A (en) | 1991-09-27 | 1994-10-11 | Thuraisngham Bhavani M | System for multilevel secure database management using a knowledge base with release-based and other security constraints for query, response and update modification |
FR2681997A1 (en) | 1991-09-30 | 1993-04-02 | Arbitron Cy | METHOD AND DEVICE FOR AUTOMATICALLY IDENTIFYING A PROGRAM COMPRISING A SOUND SIGNAL |
JP3065738B2 (en) | 1991-10-11 | 2000-07-17 | 株式会社東芝 | Computer system |
GB9121995D0 (en) | 1991-10-16 | 1991-11-27 | Jonhig Ltd | Value transfer system |
US5265164A (en) | 1991-10-31 | 1993-11-23 | International Business Machines Corporation | Cryptographic facility environment backup/restore and replication in a public key cryptosystem |
US5164988A (en) | 1991-10-31 | 1992-11-17 | International Business Machines Corporation | Method to establish and enforce a network cryptographic security policy in a public key cryptosystem |
US5453601A (en) | 1991-11-15 | 1995-09-26 | Citibank, N.A. | Electronic-monetary system |
US5455861A (en) | 1991-12-09 | 1995-10-03 | At&T Corp. | Secure telecommunications |
US5150407A (en) | 1991-12-16 | 1992-09-22 | Chan Steve S C | Secured data storage devices |
US5276901A (en) * | 1991-12-16 | 1994-01-04 | International Business Machines Corporation | System for controlling group access to objects using group access control folder and group identification as individual user |
US5319735A (en) | 1991-12-17 | 1994-06-07 | Bolt Beranek And Newman Inc. | Embedded signalling |
GB9126779D0 (en) * | 1991-12-17 | 1992-02-12 | Int Computers Ltd | Security mechanism for a computer system |
US5359721A (en) | 1991-12-18 | 1994-10-25 | Sun Microsystems, Inc. | Non-supervisor mode cross address space dynamic linking |
US5221833A (en) | 1991-12-27 | 1993-06-22 | Xerox Corporation | Methods and means for reducing bit error rates in reading self-clocking glyph codes |
US5245165A (en) | 1991-12-27 | 1993-09-14 | Xerox Corporation | Self-clocking glyph code for encoding dual bit digital values robustly |
US5199074A (en) * | 1992-01-06 | 1993-03-30 | Advanced Micro Devices, Inc. | Encryption system |
US5231568A (en) | 1992-01-16 | 1993-07-27 | Impact Telemedia, Inc. | Promotional game method and apparatus therefor |
US5428685A (en) | 1992-01-22 | 1995-06-27 | Fujitsu Limited | IC memory card and method of protecting data therein |
US5335169A (en) | 1992-01-27 | 1994-08-02 | Dsi Of Hawaii, Inc. | System for tracking multiple rate assessments on transactions |
JP2942837B2 (en) | 1992-01-31 | 1999-08-30 | 株式会社セガ・エンタープライゼス | Security check method, game device, and information storage medium used for them |
US5301231A (en) | 1992-02-12 | 1994-04-05 | International Business Machines Corporation | User defined function facility |
GB2264796A (en) | 1992-03-02 | 1993-09-08 | Ibm | Distributed transaction processing |
AU662805B2 (en) | 1992-04-06 | 1995-09-14 | Addison M. Fischer | A method for processing information among computers which may exchange messages |
US5392390A (en) | 1992-04-10 | 1995-02-21 | Intellilink Corp. | Method for mapping, translating, and dynamically reconciling data between disparate computer platforms |
US5421006A (en) | 1992-05-07 | 1995-05-30 | Compaq Computer Corp. | Method and apparatus for assessing integrity of computer system software |
EP0570123B1 (en) | 1992-05-15 | 1999-03-17 | Addison M. Fischer | Computer system security method and apparatus having program authorization information data structures |
JPH06511611A (en) | 1992-05-29 | 1994-12-22 | エコール ポリテクニーク フェデラル ドゥ ローザンヌ(エーペーエフエル) | How to mark a document |
US5596718A (en) | 1992-07-10 | 1997-01-21 | Secure Computing Corporation | Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor |
WO1994003859A1 (en) | 1992-07-31 | 1994-02-17 | International Standard Electric Corp. | Apparatus and method for providing network security |
US5285494A (en) | 1992-07-31 | 1994-02-08 | Pactel Corporation | Network management system |
US5721788A (en) * | 1992-07-31 | 1998-02-24 | Corbis Corporation | Method and system for digital image signatures |
US5999908A (en) | 1992-08-06 | 1999-12-07 | Abelow; Daniel H. | Customer-based product design module |
US5361359A (en) | 1992-08-31 | 1994-11-01 | Trusted Information Systems, Inc. | System and method for controlling the use of a computer |
US5819226A (en) | 1992-09-08 | 1998-10-06 | Hnc Software Inc. | Fraud detection using predictive modeling |
CA2145068A1 (en) * | 1992-09-21 | 1994-03-31 | Ric Bailier Richardson | System for software registration |
JP3084969B2 (en) | 1992-10-16 | 2000-09-04 | 松下電器産業株式会社 | Playback device, recording device, cased recording medium, and recording medium initialization device |
US5319705A (en) | 1992-10-21 | 1994-06-07 | International Business Machines Corporation | Method and system for multimedia access control enablement |
GB2295947B (en) | 1992-10-27 | 1997-08-13 | Mitsubishi Corp | Pay broadcasting system |
US5535322A (en) | 1992-10-27 | 1996-07-09 | International Business Machines Corporation | Data processing system with improved work flow system and method |
US5343526A (en) | 1992-10-30 | 1994-08-30 | At&T Bell Laboratories | Method for establishing licensor changeable limits on software usage |
US5349642A (en) | 1992-11-03 | 1994-09-20 | Novell, Inc. | Method and apparatus for authentication of client server communication |
US5432928A (en) | 1992-11-10 | 1995-07-11 | Microsoft Corporation | Updating objects stored in a permanent container while preserving logical contiguity |
WO1994014115A2 (en) | 1992-12-01 | 1994-06-23 | Microsoft Corporation | A method and system for in-place interaction with embedded objects |
US5341429A (en) | 1992-12-04 | 1994-08-23 | Testdrive Corporation | Transformation of ephemeral material |
US5509070A (en) | 1992-12-15 | 1996-04-16 | Softlock Services Inc. | Method for encouraging purchase of executable and non-executable software |
US5630069A (en) | 1993-01-15 | 1997-05-13 | Action Technologies, Inc. | Method and apparatus for creating workflow maps of business processes |
US5497491A (en) | 1993-01-26 | 1996-03-05 | International Business Machines Corporation | System and method for importing and exporting data between an object oriented computing environment and an external computing environment |
US5369707A (en) | 1993-01-27 | 1994-11-29 | Tecsec Incorporated | Secure network method and apparatus |
US5351293A (en) | 1993-02-01 | 1994-09-27 | Wave Systems Corp. | System method and apparatus for authenticating an encrypted signal |
WO1994018620A1 (en) | 1993-02-08 | 1994-08-18 | Action Technologies, Inc. | Method and apparatus for managing business processes |
US5390330A (en) | 1993-02-11 | 1995-02-14 | Talati; Kirit K. | Control system and method for direct execution of software application information models without code generation |
US5640546A (en) | 1993-02-23 | 1997-06-17 | Network Programs, Inc. | Composition of systems of objects by interlocking coordination, projection, and distribution |
US5365587A (en) | 1993-03-11 | 1994-11-15 | International Business Machines Corporation | Self modifying access code for altering capabilities |
US5315448A (en) | 1993-03-18 | 1994-05-24 | Macrovision Corporation | Copy protection for hybrid digital video tape recording and unprotected source material |
FR2703800B1 (en) | 1993-04-06 | 1995-05-24 | Bull Cp8 | Method for signing a computer file, and device for implementing it. |
US5408501A (en) | 1993-04-06 | 1995-04-18 | Conner Peripherals, Inc. | Data transfer system |
JP3255754B2 (en) | 1993-04-23 | 2002-02-12 | 富士通株式会社 | Electronic trading system |
US5422953A (en) | 1993-05-05 | 1995-06-06 | Fischer; Addison M. | Personal date/time notary device |
US5504837A (en) | 1993-05-10 | 1996-04-02 | Bell Communications Research, Inc. | Method for resolving conflicts among distributed entities through the generation of counter proposals by transversing a goal hierarchy with acceptable, unacceptable, and indeterminate nodes |
US5583936A (en) | 1993-05-17 | 1996-12-10 | Macrovision Corporation | Video copy protection process enhancement to introduce horizontal and vertical picture distortions |
US5649099A (en) | 1993-06-04 | 1997-07-15 | Xerox Corporation | Method for delegating access rights through executable access control program without delegating access rights not in a specification to any intermediary nor comprising server security |
US5337357A (en) | 1993-06-17 | 1994-08-09 | Software Security, Inc. | Method of software distribution protection |
US5550971A (en) | 1993-06-30 | 1996-08-27 | U S West Technologies, Inc. | Method and system for generating a user interface adaptable to various database management systems |
US5428606A (en) | 1993-06-30 | 1995-06-27 | Moskowitz; Scott A. | Digital information commodities exchange |
US5603031A (en) * | 1993-07-08 | 1997-02-11 | General Magic, Inc. | System and method for distributed computation based upon the movement, execution, and interaction of processes in a network |
US5418713A (en) | 1993-08-05 | 1995-05-23 | Allen; Richard | Apparatus and method for an on demand data delivery system for the preview, selection, retrieval and reproduction at a remote location of previously recorded or programmed materials |
AU683038B2 (en) | 1993-08-10 | 1997-10-30 | Addison M. Fischer | A method for operating computers and for processing information among computers |
US5458494A (en) | 1993-08-23 | 1995-10-17 | Edutech Research Labs, Ltd. | Remotely operable teaching system and method therefor |
JPH07175868A (en) * | 1993-10-15 | 1995-07-14 | Internatl Business Mach Corp <Ibm> | Method and system for output of digital information to medium |
CA2129075C (en) | 1993-10-18 | 1999-04-20 | Joseph J. Daniele | Electronic copyright royalty accounting system using glyphs |
US5369702A (en) | 1993-10-18 | 1994-11-29 | Tecsec Incorporated | Distributed cryptographic object method |
US5432851A (en) | 1993-10-21 | 1995-07-11 | Tecsec Incorporated | Personal computer access control system |
US6135646A (en) | 1993-10-22 | 2000-10-24 | Corporation For National Research Initiatives | System for uniquely and persistently identifying, managing, and tracking digital objects |
US5343527A (en) | 1993-10-27 | 1994-08-30 | International Business Machines Corporation | Hybrid encryption method and system for protecting reusable software components |
JPH07212712A (en) | 1993-10-29 | 1995-08-11 | Eastman Kodak Co | Method and equipment for adding and deleting digital watermark in hierarchical picture memory and fetch system |
US5463565A (en) | 1993-10-29 | 1995-10-31 | Time Warner Entertainment Co., L.P. | Data block format for software carrier and player therefor |
US5455953A (en) | 1993-11-03 | 1995-10-03 | Wang Laboratories, Inc. | Authorization system for obtaining in single step both identification and access rights of client to server directly from encrypted authorization ticket |
US5537526A (en) | 1993-11-12 | 1996-07-16 | Taugent, Inc. | Method and apparatus for processing a display document utilizing a system level document framework |
US5625690A (en) | 1993-11-15 | 1997-04-29 | Lucent Technologies Inc. | Software pay per use system |
US5710834A (en) | 1995-05-08 | 1998-01-20 | Digimarc Corporation | Method and apparatus responsive to a code signal conveyed through a graphic image |
US5636292C1 (en) | 1995-05-08 | 2002-06-18 | Digimarc Corp | Steganography methods employing embedded calibration data |
US5748783A (en) | 1995-05-08 | 1998-05-05 | Digimarc Corporation | Method and apparatus for robust information coding |
EP0959621B1 (en) | 1993-11-18 | 2001-02-28 | Digimarc Corporation | Video copy control with plural embedded signals |
US5768426A (en) | 1993-11-18 | 1998-06-16 | Digimarc Corporation | Graphics processing system employing embedded code signals |
US5832119C1 (en) | 1993-11-18 | 2002-03-05 | Digimarc Corp | Methods for controlling systems using control signals embedded in empirical data |
US5748763A (en) | 1993-11-18 | 1998-05-05 | Digimarc Corporation | Image steganography system featuring perceptually adaptive and globally scalable signal embedding |
US5572673A (en) | 1993-12-01 | 1996-11-05 | Sybase, Inc. | Secure multi-level system for executing stored procedures |
US6086706A (en) | 1993-12-20 | 2000-07-11 | Lucent Technologies Inc. | Document copying deterrent method |
US5491800A (en) | 1993-12-20 | 1996-02-13 | Taligent, Inc. | Object-oriented remote procedure call networking system |
US5449896A (en) | 1993-12-22 | 1995-09-12 | Xerox Corporation | Random access techniques for use with self-clocking glyph codes |
US5453605A (en) | 1993-12-22 | 1995-09-26 | Xerox Corporation | Global addressability for self-clocking glyph codes |
US5449895A (en) | 1993-12-22 | 1995-09-12 | Xerox Corporation | Explicit synchronization for self-clocking glyph codes |
US5513261A (en) | 1993-12-29 | 1996-04-30 | At&T Corp. | Key management scheme for use with electronic cards |
US5450493A (en) | 1993-12-29 | 1995-09-12 | At&T Corp. | Secure communication method and apparatus |
US5473687A (en) | 1993-12-29 | 1995-12-05 | Infosafe Systems, Inc. | Method for retrieving secure information from a database |
US5457747A (en) | 1994-01-14 | 1995-10-10 | Drexler Technology Corporation | Anti-fraud verification system using a data card |
US5420927B1 (en) | 1994-02-01 | 1997-02-04 | Silvio Micali | Method for certifying public keys in a digital signature scheme |
US5422645A (en) | 1994-02-14 | 1995-06-06 | The United States Of America As Represented By The Secretary Of The Army | Delayed laser retroreflector pulse technique and system |
US5394469A (en) | 1994-02-18 | 1995-02-28 | Infosafe Systems, Inc. | Method and apparatus for retrieving secure information from mass storage media |
JP2853727B2 (en) | 1994-02-22 | 1999-02-03 | 日本ビクター株式会社 | Reproduction protection method and protection reproduction device |
US5530752A (en) | 1994-02-22 | 1996-06-25 | Convex Computer Corporation | Systems and methods for protecting software from unlicensed copying and use |
CN100550172C (en) | 1994-02-28 | 2009-10-14 | 索尼公司 | Data record method and equipment, data carrier and data recording method and equipment |
US5499298A (en) | 1994-03-17 | 1996-03-12 | National University Of Singapore | Controlled dissemination of digital information |
CA2185990C (en) | 1994-03-21 | 2002-07-23 | Kirk M. Scott | Document proxy framework |
US5450490A (en) | 1994-03-31 | 1995-09-12 | The Arbitron Company | Apparatus and methods for including codes in audio signals and decoding |
DE4413451A1 (en) | 1994-04-18 | 1995-12-14 | Rolf Brugger | Device for the distribution of music information in digital form |
US5644686A (en) | 1994-04-29 | 1997-07-01 | International Business Machines Corporation | Expert system and method employing hierarchical knowledge base, and interactive multimedia/hypermedia applications |
US5473692A (en) | 1994-09-07 | 1995-12-05 | Intel Corporation | Roving software license for a hardware agent |
US5539828A (en) | 1994-05-31 | 1996-07-23 | Intel Corporation | Apparatus and method for providing secured communications |
US5724425A (en) | 1994-06-10 | 1998-03-03 | Sun Microsystems, Inc. | Method and apparatus for enhancing software security and distributing software |
US5533123A (en) | 1994-06-28 | 1996-07-02 | National Semiconductor Corporation | Programmable distributed personal security |
US5739864A (en) | 1994-08-24 | 1998-04-14 | Macrovision Corporation | Apparatus for inserting blanked formatted fingerprint data (source ID, time/date) in to a video signal |
US5513260A (en) | 1994-06-29 | 1996-04-30 | Macrovision Corporation | Method and apparatus for copy protection for various recording media |
EP0690399A3 (en) | 1994-06-30 | 1997-05-02 | Tandem Computers Inc | Remote financial transaction system |
CA2128587A1 (en) | 1994-07-21 | 1996-01-22 | Ed Morson | Method and arrangement for recognition of a coded transmitted signal |
US5574787A (en) | 1994-07-25 | 1996-11-12 | Ryan; John O. | Apparatus and method for comprehensive copy protection for video platforms and unprotected source material |
JP4095680B2 (en) | 1994-08-01 | 2008-06-04 | 富士通株式会社 | Security management method for card type storage device and card type storage device |
US5590194A (en) | 1994-08-09 | 1996-12-31 | Macrovision Corporation | Method of and apparatus for scrambling a video signal with full network transmission and recording capability |
US5606609A (en) | 1994-09-19 | 1997-02-25 | Scientific-Atlanta | Electronic document verification system and method |
WO1996009585A1 (en) | 1994-09-21 | 1996-03-28 | Wang Laboratories, Inc. | A link manager for managing links integrating data between application programs |
US5504757A (en) | 1994-09-27 | 1996-04-02 | International Business Machines Corporation | Method for selecting transmission speeds for transmitting data packets over a serial bus |
US5678170A (en) | 1994-10-05 | 1997-10-14 | Motorola, Inc. | Method and apparatus for monitoring and limiting distribution of data |
US5842173A (en) | 1994-10-14 | 1998-11-24 | Strum; David P. | Computer-based surgical services management system |
ZA958446B (en) | 1994-10-19 | 1996-05-27 | Intergame | A method and system for cashless gaming machine operation |
US5715314A (en) | 1994-10-24 | 1998-02-03 | Open Market, Inc. | Network sales system |
US5638443A (en) | 1994-11-23 | 1997-06-10 | Xerox Corporation | System for controlling the distribution and use of composite digital works |
US5634012A (en) | 1994-11-23 | 1997-05-27 | Xerox Corporation | System for controlling the distribution and use of digital works having a fee reporting mechanism |
KR100332743B1 (en) | 1994-11-26 | 2002-11-07 | 엘지전자주식회사 | Device and method for preventing illegal copy or unauthorized watching of digital image |
US5553282A (en) | 1994-12-09 | 1996-09-03 | Taligent, Inc. | Software project history database and method of operation |
US5802590A (en) | 1994-12-13 | 1998-09-01 | Microsoft Corporation | Method and system for providing secure access to computer resources |
US5655077A (en) | 1994-12-13 | 1997-08-05 | Microsoft Corporation | Method and system for authenticating access to heterogeneous computing services |
EP0717337B1 (en) | 1994-12-13 | 2001-08-01 | International Business Machines Corporation | Method and system for the secured distribution of programs |
US5646997A (en) | 1994-12-14 | 1997-07-08 | Barton; James M. | Method and apparatus for embedding authentication information within digital data |
US5485577A (en) | 1994-12-16 | 1996-01-16 | General Instrument Corporation Of Delaware | Method and apparatus for incremental delivery of access rights |
US5745569A (en) | 1996-01-17 | 1998-04-28 | The Dice Company | Method for stega-cipher protection of computer code |
US5692180A (en) | 1995-01-31 | 1997-11-25 | International Business Machines Corporation | Object-oriented cell directory database for a distributed computing environment |
SE504085C2 (en) | 1995-02-01 | 1996-11-04 | Greg Benson | Methods and systems for managing data objects in accordance with predetermined conditions for users |
JPH08214281A (en) | 1995-02-06 | 1996-08-20 | Sony Corp | Charging method and system |
US6157721A (en) | 1996-08-12 | 2000-12-05 | Intertrust Technologies Corp. | Systems and methods using cryptography to protect secure computing environments |
US7124302B2 (en) | 1995-02-13 | 2006-10-17 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US7069451B1 (en) | 1995-02-13 | 2006-06-27 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US7095854B1 (en) | 1995-02-13 | 2006-08-22 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US6948070B1 (en) | 1995-02-13 | 2005-09-20 | Intertrust Technologies Corporation | Systems and methods for secure transaction management and electronic rights protection |
US6658568B1 (en) | 1995-02-13 | 2003-12-02 | Intertrust Technologies Corporation | Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management |
US7165174B1 (en) | 1995-02-13 | 2007-01-16 | Intertrust Technologies Corp. | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management |
US5530235A (en) | 1995-02-16 | 1996-06-25 | Xerox Corporation | Interactive contents revealing storage device |
US5774872A (en) | 1995-03-31 | 1998-06-30 | Richard Golden | Automated taxable transaction reporting/collection system |
US5534975A (en) | 1995-05-26 | 1996-07-09 | Xerox Corporation | Document processing system utilizing document service cards to provide document processing services |
US5613004A (en) | 1995-06-07 | 1997-03-18 | The Dice Company | Steganographic method and device |
US5740549A (en) | 1995-06-12 | 1998-04-14 | Pointcast, Inc. | Information and advertising distribution system and method |
US5592549A (en) | 1995-06-15 | 1997-01-07 | Infosafe Systems, Inc. | Method and apparatus for retrieving selected information from a secure information source |
US5699427A (en) | 1995-06-23 | 1997-12-16 | International Business Machines Corporation | Method to deter document and intellectual property piracy through individualization |
US6000030A (en) | 1996-06-20 | 1999-12-07 | Emc Corporation | Software fingerprinting and branding |
US5689565A (en) | 1995-06-29 | 1997-11-18 | Microsoft Corporation | Cryptography system and method for providing cryptographic services for a computer application |
US5625693A (en) | 1995-07-07 | 1997-04-29 | Thomson Consumer Electronics, Inc. | Apparatus and method for authenticating transmitting applications in an interactive TV system |
US5802497A (en) | 1995-07-10 | 1998-09-01 | Digital Equipment Corporation | Method and apparatus for conducting computerized commerce |
US5878421A (en) * | 1995-07-17 | 1999-03-02 | Microsoft Corporation | Information map |
JPH0944993A (en) | 1995-07-31 | 1997-02-14 | Pioneer Electron Corp | Information recording method and device therefor, function recording method and device therefor and information reproducing method and device therefor |
JP4518574B2 (en) | 1995-08-11 | 2010-08-04 | ソニー株式会社 | Recording method and apparatus, recording medium, and reproducing method and apparatus |
US5913040A (en) | 1995-08-22 | 1999-06-15 | Backweb Ltd. | Method and apparatus for transmitting and displaying information between a remote network and a local computer |
US5852812A (en) * | 1995-08-23 | 1998-12-22 | Microsoft Corporation | Billing system for a network |
KR0166923B1 (en) | 1995-09-18 | 1999-03-20 | 구자홍 | Method and apparatus of preventing an illegal watching and copying in a digital broadcasting system |
WO1997014249A1 (en) | 1995-10-09 | 1997-04-17 | Matsushita Electric Industrial Co., Ltd. | Data transmitter, data transmitting method, data receiver, information processor, and information recording medium |
US6807534B1 (en) | 1995-10-13 | 2004-10-19 | Trustees Of Dartmouth College | System and method for managing copyrighted electronic media |
US5765152A (en) | 1995-10-13 | 1998-06-09 | Trustees Of Dartmouth College | System and method for managing copyrighted electronic media |
US5689566A (en) | 1995-10-24 | 1997-11-18 | Nguyen; Minhtam C. | Network with secure communications sessions |
US5757914A (en) | 1995-10-26 | 1998-05-26 | Sun Microsystems, Inc. | System and method for protecting use of dynamically linked executable modules |
US5732398A (en) | 1995-11-09 | 1998-03-24 | Keyosk Corp. | Self-service system for selling travel-related services or products |
US5671279A (en) | 1995-11-13 | 1997-09-23 | Netscape Communications Corporation | Electronic commerce using a secure courier system |
JPH09160899A (en) | 1995-12-06 | 1997-06-20 | Matsushita Electric Ind Co Ltd | Information service processor |
US5692047A (en) | 1995-12-08 | 1997-11-25 | Sun Microsystems, Inc. | System and method for executing verifiable programs with facility for using non-verifiable programs from trusted sources |
US5633932A (en) | 1995-12-19 | 1997-05-27 | Intel Corporation | Apparatus and method for preventing disclosure through user-authentication at a printing node |
EP0882357B1 (en) | 1996-01-03 | 2004-07-21 | Sony Electronics, Inc. | Copy protect recording and playback system |
US5754849A (en) | 1996-01-30 | 1998-05-19 | Wayfarer Communications, Inc. | Self-describing object providing dynamic manipulation of heterogeneous data values and semantic identity between memory and transmission representations |
US5689587A (en) | 1996-02-09 | 1997-11-18 | Massachusetts Institute Of Technology | Method and apparatus for data hiding in images |
US5862325A (en) | 1996-02-29 | 1999-01-19 | Intermind Corporation | Computer-based communication system and method using metadata defining a control structure |
US5896454A (en) | 1996-03-08 | 1999-04-20 | Time Warner Entertainment Co., L.P. | System and method for controlling copying and playing of digital programs |
JP3816571B2 (en) | 1996-03-15 | 2006-08-30 | パイオニア株式会社 | Information recording apparatus, information recording method, information reproducing apparatus, and information reproducing method |
US5991876A (en) | 1996-04-01 | 1999-11-23 | Copyright Clearance Center, Inc. | Electronic rights management and authorization system |
US6085238A (en) | 1996-04-23 | 2000-07-04 | Matsushita Electric Works, Ltd. | Virtual LAN system |
US5978484A (en) | 1996-04-25 | 1999-11-02 | Microsoft Corporation | System and method for safety distributing executable objects |
US5892899A (en) | 1996-06-13 | 1999-04-06 | Intel Corporation | Tamper resistant methods and apparatus |
US5819263A (en) | 1996-07-19 | 1998-10-06 | American Express Financial Corporation | Financial planning system incorporating relationship and group management |
US6102965A (en) | 1996-09-23 | 2000-08-15 | National Instruments Corporation | System and method for providing client/server access to graphical programs |
US5832529A (en) * | 1996-10-11 | 1998-11-03 | Sun Microsystems, Inc. | Methods, apparatus, and product for distributed garbage collection |
US5692980A (en) | 1996-10-24 | 1997-12-02 | Trotman; Stephenson E. | Kick bag game and apparatus kit |
US5995756A (en) | 1997-02-14 | 1999-11-30 | Inprise Corporation | System for internet-based delivery of computer applications |
US7062500B1 (en) | 1997-02-25 | 2006-06-13 | Intertrust Technologies Corp. | Techniques for defining, using and manipulating rights management data structures |
US5999949A (en) | 1997-03-14 | 1999-12-07 | Crandall; Gary E. | Text file compression system utilizing word terminators |
JP4739465B2 (en) | 1997-06-09 | 2011-08-03 | インタートラスト テクノロジーズ コーポレイション | Confusing technology to enhance software security |
US6330549B1 (en) | 1997-10-30 | 2001-12-11 | Xerox Corporation | Protected shareware |
US7092914B1 (en) | 1997-11-06 | 2006-08-15 | Intertrust Technologies Corporation | Methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information |
US7809138B2 (en) | 1999-03-16 | 2010-10-05 | Intertrust Technologies Corporation | Methods and apparatus for persistent control and protection of content |
US6477559B1 (en) | 1998-08-21 | 2002-11-05 | Aspect Communications Corporation | Method and apparatus for remotely accessing an automatic transaction processing system |
US6393484B1 (en) | 1999-04-12 | 2002-05-21 | International Business Machines Corp. | System and method for controlled access to shared-medium public and semi-public internet protocol (IP) networks |
US6785815B1 (en) | 1999-06-08 | 2004-08-31 | Intertrust Technologies Corp. | Methods and systems for encoding and protecting data using digital signature and watermarking techniques |
US6959384B1 (en) | 1999-12-14 | 2005-10-25 | Intertrust Technologies Corporation | Systems and methods for authenticating and protecting the integrity of data streams and other data |
EP1204913B1 (en) | 1999-07-30 | 2005-10-05 | Intertrust Technologies Corp. | Methods and systems for transaction record delivery using thresholds and multi-stage protocol |
US6832316B1 (en) | 1999-12-22 | 2004-12-14 | Intertrust Technologies, Corp. | Systems and methods for protecting data secrecy and integrity |
US6973499B1 (en) | 2000-04-07 | 2005-12-06 | Intertrust Technologies Corp. | Ticketing and keying for orchestrating distribution of network content |
US7085839B1 (en) | 2000-04-07 | 2006-08-01 | Intertrust Technologies Corporation | Network content management |
US7313692B2 (en) | 2000-05-19 | 2007-12-25 | Intertrust Technologies Corp. | Trust management systems and methods |
US7050586B1 (en) | 2000-06-19 | 2006-05-23 | Intertrust Technologies Corporation | Systems and methods for retrofitting electronic appliances to accept different content formats |
US6976164B1 (en) * | 2000-07-19 | 2005-12-13 | International Business Machines Corporation | Technique for handling subsequent user identification and password requests with identity change within a certificate-based host session |
US7580988B2 (en) | 2001-04-05 | 2009-08-25 | Intertrust Technologies Corporation | System and methods for managing the distribution of electronic content |
US7136840B2 (en) | 2001-04-20 | 2006-11-14 | Intertrust Technologies Corp. | Systems and methods for conducting transactions and communications using a trusted third party |
US7581103B2 (en) * | 2001-06-13 | 2009-08-25 | Intertrust Technologies Corporation | Software self-checking systems and methods |
US7383570B2 (en) | 2002-04-25 | 2008-06-03 | Intertrust Technologies, Corp. | Secure authentication systems and methods |
US7149899B2 (en) | 2002-04-25 | 2006-12-12 | Intertrust Technologies Corp. | Establishing a secure channel with a human user |
US8234387B2 (en) * | 2003-06-05 | 2012-07-31 | Intertrust Technologies Corp. | Interoperable systems and methods for peer-to-peer service orchestration |
-
1999
- 1999-10-26 US US09/426,764 patent/US6658568B1/en not_active Expired - Fee Related
-
2003
- 2003-12-02 US US10/727,324 patent/US8751793B2/en not_active Expired - Fee Related
-
2007
- 2007-08-07 US US11/834,784 patent/US20070276759A1/en not_active Abandoned
-
2014
- 2014-05-14 US US14/120,356 patent/US20140380408A1/en not_active Abandoned
Patent Citations (99)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4658093A (en) * | 1983-07-11 | 1987-04-14 | Hellman Martin E | Software distribution system |
US4809220A (en) * | 1984-03-30 | 1989-02-28 | Wang Laboratories, Inc. | Electronic processing system using printer and microprocessor to create forms template with pre-printed forms |
US4668877A (en) * | 1984-06-13 | 1987-05-26 | Kunen Scott M | Touch controlled switch for a lamp or the like |
US4759060A (en) * | 1984-10-31 | 1988-07-19 | Sony Corporation | Decoder for a pay television system |
US4685131A (en) * | 1985-03-11 | 1987-08-04 | General Instrument Corp. | Program blocking method for use in direct broadcast satellite system |
US5010571A (en) * | 1986-09-10 | 1991-04-23 | Titan Linkabit Corporation | Metering retrieval of encrypted data stored in customer data retrieval terminal |
US4827508A (en) * | 1986-10-14 | 1989-05-02 | Personal Library Software, Inc. | Database usage metering and protection system and method |
US4858121A (en) * | 1986-12-12 | 1989-08-15 | Medical Payment Systems, Incorporated | Medical payment system |
US5070400A (en) * | 1987-06-30 | 1991-12-03 | Comsat | Pay-tv time purchase scheme |
US4999806A (en) * | 1987-09-04 | 1991-03-12 | Fred Chernow | Software distribution system |
US4868877A (en) * | 1988-02-12 | 1989-09-19 | Fischer Addison M | Public key/signature cryptosystem with enhanced digital signature certification |
US5060219A (en) * | 1988-05-18 | 1991-10-22 | U.S. Philips Corporation | Recording system for recording only those types of information which are specified by the record carrier |
US5247575A (en) * | 1988-08-16 | 1993-09-21 | Sprague Peter J | Information distribution system |
US4975951A (en) * | 1988-10-07 | 1990-12-04 | General Instrument Corporation | IPPV programming distribution control system |
US5388211A (en) * | 1989-04-28 | 1995-02-07 | Softel, Inc. | Method and apparatus for remotely controlling and monitoring the use of computer software |
US5138712A (en) * | 1989-10-02 | 1992-08-11 | Sun Microsystems, Inc. | Apparatus and method for licensing software on a network of computers |
US5058162A (en) * | 1990-08-09 | 1991-10-15 | Hewlett-Packard Company | Method of distributing computer data files |
US5933497A (en) * | 1990-12-14 | 1999-08-03 | International Business Machines Corporation | Apparatus and method for controlling access to software |
US5237614A (en) * | 1991-06-07 | 1993-08-17 | Security Dynamics Technologies, Inc. | Integrated network security system |
US5260999A (en) * | 1991-06-28 | 1993-11-09 | Digital Equipment Corporation | Filters in license management system |
US5335265A (en) * | 1991-11-08 | 1994-08-02 | Electronic Data Systems Corporation | Apparatus for detecting and preventing subscriber number cloning in a cellular mobile telephone system |
US5521815A (en) * | 1992-01-31 | 1996-05-28 | K.L.E. Irrevocable Trust | Uniform system for verifying and tracking articles of value |
US5375240A (en) * | 1992-04-07 | 1994-12-20 | Grundy; Gregory | Information distribution system |
US5276735A (en) * | 1992-04-17 | 1994-01-04 | Secure Computing Corporation | Data enclave and trusted path system |
US5532920A (en) * | 1992-04-29 | 1996-07-02 | International Business Machines Corporation | Data processing system and method to enforce payment of royalties when copying softcopy books |
US5412717A (en) * | 1992-05-15 | 1995-05-02 | Fischer; Addison M. | Computer system security method and apparatus having program authorization information data structures |
US5351237A (en) * | 1992-06-05 | 1994-09-27 | Nec Corporation | Network system comprising a plurality of lans connected to an ISDN via a plurality of routers, each capable of automatically creating a table for storing router information |
US5534855A (en) * | 1992-07-20 | 1996-07-09 | Digital Equipment Corporation | Method and system for certificate based alias detection |
US5235642A (en) * | 1992-07-21 | 1993-08-10 | Digital Equipment Corporation | Access control subsystem and method for distributed computer system using locally cached authentication credentials |
US20100070345A1 (en) * | 1992-08-06 | 2010-03-18 | Abelow Daniel H | Customer-based product design module |
US5794115A (en) * | 1992-10-27 | 1998-08-11 | Mitsubishi Corporation | Pay broadcasting system having a broadcasting station and a charging center |
US5659350A (en) * | 1992-12-09 | 1997-08-19 | Discovery Communications, Inc. | Operations center for a television program packaging and delivery system |
US5373561A (en) * | 1992-12-21 | 1994-12-13 | Bell Communications Research, Inc. | Method of extending the validity of a cryptographic certificate |
US5513117A (en) * | 1993-04-30 | 1996-04-30 | Small; Maynard E. | Apparatus and method for electronically dispensing personalized greeting cards and gifts |
US5457746A (en) * | 1993-09-14 | 1995-10-10 | Spyrus, Inc. | System and method for access control for portable data storage media |
US5677953A (en) * | 1993-09-14 | 1997-10-14 | Spyrus, Inc. | System and method for access control for portable data storage media |
US5724424A (en) * | 1993-12-16 | 1998-03-03 | Open Market, Inc. | Digital active advertising |
US5537618A (en) * | 1993-12-23 | 1996-07-16 | Diacom Technologies, Inc. | Method and apparatus for implementing user feedback |
US5509074A (en) * | 1994-01-27 | 1996-04-16 | At&T Corp. | Method of protecting electronically published materials using cryptographic protocols |
US5912974A (en) * | 1994-04-05 | 1999-06-15 | International Business Machines Corporation | Apparatus and method for authentication of printed documents |
US5481613A (en) * | 1994-04-15 | 1996-01-02 | Northern Telecom Limited | Computer network cryptographic key distribution system |
US5505461A (en) * | 1994-04-19 | 1996-04-09 | Caesars World, Inc. | Method for meeting IRS reporting requirements related to an electronic gaming machine |
US5563946A (en) * | 1994-04-25 | 1996-10-08 | International Business Machines Corporation | Method and apparatus for enabling trial period use of software products: method and apparatus for passing encrypted files between data processing systems |
US5757908A (en) * | 1994-04-25 | 1998-05-26 | International Business Machines Corporation | Method and apparatus for enabling trial period use of software products: method and apparatus for utilizing an encryption header |
US6205436B1 (en) * | 1994-04-28 | 2001-03-20 | Citibank, N.A. | Trusted agents for open electronic commerce where the transfer of electronic merchandise or electronic money is provisional until the transaction is finalized |
US5544322A (en) * | 1994-05-09 | 1996-08-06 | International Business Machines Corporation | System and method for policy-based inter-realm authentication within a distributed processing system |
US5757920A (en) * | 1994-07-18 | 1998-05-26 | Microsoft Corporation | Logon certification |
US5659616A (en) * | 1994-07-19 | 1997-08-19 | Certco, Llc | Method for securely using digital signatures in a commercial cryptographic system |
US5978567A (en) * | 1994-07-27 | 1999-11-02 | Instant Video Technologies Inc. | System for distribution of interactive multimedia and linear programs by enabling program webs which include control scripts to define presentation by client transceiver |
US5812661A (en) * | 1994-08-10 | 1998-09-22 | Fujitsu Limited | Software reproduction apparatus |
US5956408A (en) * | 1994-09-15 | 1999-09-21 | International Business Machines Corporation | Apparatus and method for secure distribution of data |
US5684984A (en) * | 1994-09-29 | 1997-11-04 | Apple Computer, Inc. | Synchronization and replication of object databases |
US5625818A (en) * | 1994-09-30 | 1997-04-29 | Apple Computer, Inc. | System for managing local database updates published to different online information services in different formats from a central platform |
US20030144884A1 (en) * | 1994-10-28 | 2003-07-31 | Christian Mayaud | Computerized prescription system for gathering and presenting information relating to pharmaceuticals |
US5717923A (en) * | 1994-11-03 | 1998-02-10 | Intel Corporation | Method and apparatus for dynamically customizing electronic information to individual end users |
US5630131A (en) * | 1994-11-14 | 1997-05-13 | Object Technology Licensing Corp. | Method and apparatus for importing and exporting archive files for a graphical user interface |
US5715403A (en) * | 1994-11-23 | 1998-02-03 | Xerox Corporation | System for controlling the distribution and use of digital works having attached usage rights where the usage rights are defined by a usage rights grammar |
US6928419B2 (en) * | 1994-11-23 | 2005-08-09 | Contentguard Holdings, Inc. | Method and apparatus for repackaging portions of digital works as new digital works |
US5629980A (en) * | 1994-11-23 | 1997-05-13 | Xerox Corporation | System for controlling the distribution and use of digital works |
US6708157B2 (en) * | 1994-11-23 | 2004-03-16 | Contentguard Holdings Inc. | System for controlling the distribution and use of digital works using digital tickets |
US5732400A (en) * | 1995-01-04 | 1998-03-24 | Citibank N.A. | System and method for a risk-based purchase of goods |
US6367013B1 (en) * | 1995-01-17 | 2002-04-02 | Eoriginal Inc. | System and method for electronic transmission, storage, and retrieval of authenticated electronic original documents |
US20010002485A1 (en) * | 1995-01-17 | 2001-05-31 | Bisbee Stephen F. | System and method for electronic transmission, storage, and retrieval of authenticated electronic original documents |
US5949876A (en) * | 1995-02-13 | 1999-09-07 | Intertrust Technologies Corporation | Systems and methods for secure transaction management and electronic rights protection |
US6185683B1 (en) * | 1995-02-13 | 2001-02-06 | Intertrust Technologies Corp. | Trusted and secure techniques, systems and methods for item delivery and execution |
US5917912A (en) * | 1995-02-13 | 1999-06-29 | Intertrust Technologies Corporation | System and methods for secure transaction management and electronic rights protection |
US5915019A (en) * | 1995-02-13 | 1999-06-22 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US5910987A (en) * | 1995-02-13 | 1999-06-08 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US5569082A (en) * | 1995-04-06 | 1996-10-29 | Kaye; Perry | Personal computer lottery game |
US5677955A (en) * | 1995-04-07 | 1997-10-14 | Financial Services Technology Consortium | Electronic funds transfer instruments |
US5907617A (en) * | 1995-06-07 | 1999-05-25 | Digital River, Inc. | Try before you buy software distribution and marketing system |
US5903647A (en) * | 1995-06-07 | 1999-05-11 | Digital River, Inc. | Self-launching encrypted digital information distribution system |
US5883955A (en) * | 1995-06-07 | 1999-03-16 | Digital River, Inc. | On-line try before you buy software distribution system |
US5870543A (en) * | 1995-06-07 | 1999-02-09 | Digital River, Inc. | System for preventing unauthorized copying of active software |
US5883954A (en) * | 1995-06-07 | 1999-03-16 | Digital River, Inc. | Self-launching encrypted try before you buy software distribution system |
US5708780A (en) * | 1995-06-07 | 1998-01-13 | Open Market, Inc. | Internet server access control and monitoring systems |
US5887060A (en) * | 1995-06-07 | 1999-03-23 | Digital River, Inc. | Central database system for automatic software program sales |
US5758068A (en) * | 1995-09-19 | 1998-05-26 | International Business Machines Corporation | Method and apparatus for software license management |
US5764774A (en) * | 1995-09-25 | 1998-06-09 | Intermec Corporation | Source data compression and decompression in code symbol printing and decoding |
US6023506A (en) * | 1995-10-26 | 2000-02-08 | Hitachi, Ltd. | Data encryption control apparatus and method |
US5679075A (en) * | 1995-11-06 | 1997-10-21 | Beanstalk Entertainment Enterprises | Interactive multi-media game system and method |
US5774870A (en) * | 1995-12-14 | 1998-06-30 | Netcentives, Inc. | Fully integrated, on-line interactive frequency and award redemption program |
US5933498A (en) * | 1996-01-11 | 1999-08-03 | Mrj, Inc. | System for controlling access and distribution of digital property |
US5815665A (en) * | 1996-04-03 | 1998-09-29 | Microsoft Corporation | System and method for providing trusted brokering services over a distributed network |
US5953419A (en) * | 1996-05-06 | 1999-09-14 | Symantec Corporation | Cryptographic file labeling system for supporting secured access by multiple users |
US5727920A (en) * | 1996-07-19 | 1998-03-17 | Hull, Deceased; Harold Lawrence | Vertical lift towing dolly including variable, attachable platforms |
US6240185B1 (en) * | 1996-08-12 | 2001-05-29 | Intertrust Technologies Corporation | Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels |
US5943422A (en) * | 1996-08-12 | 1999-08-24 | Intertrust Technologies Corp. | Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels |
US5892900A (en) * | 1996-08-30 | 1999-04-06 | Intertrust Technologies Corp. | Systems and methods for secure transaction management and electronic rights protection |
US6052780A (en) * | 1996-09-12 | 2000-04-18 | Open Security Solutions, Llc | Computer system and process for accessing an encrypted and self-decrypting digital information product while restricting access to decrypted digital information |
US6141698A (en) * | 1997-01-29 | 2000-10-31 | Network Commerce Inc. | Method and system for injecting new code into existing application code |
US6138119A (en) * | 1997-02-25 | 2000-10-24 | Intertrust Technologies Corp. | Techniques for defining, using and manipulating rights management data structures |
US5920861A (en) * | 1997-02-25 | 1999-07-06 | Intertrust Technologies Corp. | Techniques for defining using and manipulating rights management data structures |
US6112181A (en) * | 1997-11-06 | 2000-08-29 | Intertrust Technologies Corporation | Systems and methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information |
US20050144108A1 (en) * | 1998-11-05 | 2005-06-30 | Loeper David B. | Method and system for financial advising |
US6842863B1 (en) * | 1999-11-23 | 2005-01-11 | Microsoft Corporation | Certificate reissuance for checking the status of a certificate in financial transactions |
US7356690B2 (en) * | 2000-12-11 | 2008-04-08 | International Business Machines Corporation | Method and system for managing a distributed trust path locator for public key certificates relating to the trust path of an X.509 attribute certificate |
US20020144108A1 (en) * | 2001-03-29 | 2002-10-03 | International Business Machines Corporation | Method and system for public-key-based secure authentication to distributed legacy applications |
US20030051134A1 (en) * | 2001-08-28 | 2003-03-13 | International Business Machines Corporation | Secure authentication using digital certificates |
Cited By (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040103011A1 (en) * | 2001-05-29 | 2004-05-27 | Kouji Hatano | Insurance system |
US20080195544A1 (en) * | 2007-02-09 | 2008-08-14 | International Business Machines Corporation | System and method for generating an authorization role associated with a set of access rights and assigning the authorization role to a class of one or more computer users for accessing secured resources |
US9805347B2 (en) | 2007-11-29 | 2017-10-31 | Visa Usa, Inc. | Serial number and payment data based payment card processing |
AU2016201533B2 (en) * | 2008-05-29 | 2017-09-14 | Visa U.S.A. Inc. | Serial number and payment data based payment card processing |
US10943030B2 (en) | 2008-12-15 | 2021-03-09 | Ibailbonding.Com | Securable independent electronic document |
WO2011146343A1 (en) * | 2010-05-19 | 2011-11-24 | News Applications, Inc. | Methods and apparatus for the acquisition and exchange of media content in communications network |
US20230135598A1 (en) * | 2011-02-23 | 2023-05-04 | Catch Media, Inc. | E-used digital assets and post-acquisition revenue |
US20140189743A1 (en) * | 2012-12-31 | 2014-07-03 | Echostar Technologies L.L.C. | Automatic learning channel customized to a particular viewer and method of creating same |
US9781476B2 (en) * | 2012-12-31 | 2017-10-03 | Echostar Technologies L.L.C. | Automatic learning channel customized to a particular viewer and method of creating same |
US8725645B1 (en) | 2013-01-04 | 2014-05-13 | Cetrus LLC | Non-invasive metering system for software licenses |
US20200394682A1 (en) * | 2014-05-15 | 2020-12-17 | Alan Rodriguez | Systems and methods for communicating privacy and marketing preferences |
US11048779B2 (en) * | 2015-08-17 | 2021-06-29 | Adobe Inc. | Content creation, fingerprints, and watermarks |
US11288727B2 (en) | 2015-08-17 | 2022-03-29 | Adobe Inc. | Content creation suggestions using failed searches and uploads |
US20200344232A1 (en) * | 2016-03-15 | 2020-10-29 | Global Tel*Link Corporation | Controlled environment secure media streaming system |
US11510046B2 (en) * | 2019-01-21 | 2022-11-22 | Shanghai Hongyan Returnable Transit Packagings Co., Ltd. | Data reporting method for logistics device and system therefor |
US20210295290A1 (en) * | 2020-03-20 | 2021-09-23 | Mastercard International Incorporated | Method and system for supporting micro-transactions in a digital asset network via digital tokens |
US20220237565A1 (en) * | 2021-01-25 | 2022-07-28 | James M. Dzierzanowski | Systems and methods for project accountability services |
Also Published As
Publication number | Publication date |
---|---|
US20140380408A1 (en) | 2014-12-25 |
US20040123129A1 (en) | 2004-06-24 |
US8751793B2 (en) | 2014-06-10 |
US6658568B1 (en) | 2003-12-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8190528B2 (en) | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, and rights management | |
US8751793B2 (en) | Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management | |
US7415617B2 (en) | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management | |
EP1679668B1 (en) | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management | |
US20080120240A1 (en) | Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management | |
CN100399227C (en) | Method for releasing using data from user's websites to exterior websites | |
JP2011060296A (en) | Method for managing use of electronic content | |
JP4537470B2 (en) | Credit infrastructure support systems, secure electronic trading, electronic commerce, trading process control and automation methods and techniques, distributed computing and rights management | |
JP2008226246A (en) | Credit infrastructure support system, safe electronic trade, electronic commercial transaction, method and technique for trade process control and automation, distributed computation, and right management | |
JP2004086915A (en) | Credit infrastructure support system, method and technique for controlling/automating safe electronic trade, electronic commerce and trace process, distributed computation and right management | |
JP2004133914A (en) | Credit infrastructure support system, safe electronic trading, electronic commerce, method and technique for controlling and automating trading process, distributed computation and right management | |
JP2012150847A (en) | Credit infrastructure support system, secure electronic trade, e-commerce, method and technology for trade process control and automation, distributed computation, and right management | |
JP2012164355A (en) | Credit infrastructure support system, safety electronic trade, electronic commercial transaction, method and technology for trade process control and automation, distributed computation and right management | |
JP2009295194A (en) | Credit infrastructure support system, safe electronic commerce, electronic commercial transaction, method and technology for controlling and automating commerce process, distribution computation, and right management | |
JP2008217802A (en) | Credit infrastructure support system, secure electronic trade, electronic commerce, method and technique for controlling and automatizing trade process, distributed computation, and right management |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |