会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明授权
    • Application identification
    • 申请鉴定
    • US08219805B1
    • 2012-07-10
    • US12001497
    • 2007-12-11
    • William IeSunil C. Agrawal
    • William IeSunil C. Agrawal
    • H04L29/06
    • H04L9/3265G06F21/44
    • Methods, systems, and apparatus, including medium-encoded computer program products, for identifying applications. In general, in one aspect, a method includes: obtaining a first certificate chain from certificates corresponding to a digitally signed application, and a second certificate chain from a successful validation of the digital signature using the certificates; and generating an identifier for the application based on one or more certificate owner names found in both the first certificate chain and the second certificate chain. Generating the identifier for the application can include finding a location in one of the first and second certificate chains that corresponds to a root of the other of the first and second certificate chains, and comparing the one or more certificate owner names found in both the first certificate chain and the second certificate chain, starting or ending with the root and the location.
    • 用于识别应用的方法,系统和装置,包括中等编码的计算机程序产品。 通常,一方面,一种方法包括:从使用证书的数字签名的成功验证获得与数字签名的应用相对应的证书的第一证书链和第二证书链; 以及基于在所述第一证书链和所述第二证书链中找到的一个或多个证书所有者名称来生成所述应用的标识符。 生成应用程序的标识符可以包括在第一和第二证书链之一中找到与第一和第二证书链中的另一个的根对应的位置,并且比较在第一和第二证书链中找到的一个或多个证书所有者名称 证书链和第二个证书链,以根和位置开始或结束。
    • 3. 发明申请
    • System And Method For Digital Rights Management With System Individualization
    • 系统个性化数字权限管理系统与方法
    • US20130132733A1
    • 2013-05-23
    • US12472155
    • 2009-05-26
    • Sunil C. AgrawalKatherine K. NadellKunal D. Shah
    • Sunil C. AgrawalKatherine K. NadellKunal D. Shah
    • G06F21/00
    • G06F21/10
    • Various embodiments of a system and method for digital rights management with system individualization are described. In various embodiments, a DRM component may generate a request for machine-specific credentials specific to the system on which the DRM component is implemented. This request may include device information of component(s) of such system. The DRM component may also receive an encrypted response that includes the machine-specific credentials. This encrypted response may be encrypted with a machine-specific encryption key generated from the device information. In various embodiments the response may be generated by an individualization server that verified the request for machine-specific credentials. The DRM component may also, based on the device information of the system on which the DRM component is implemented, generate an encryption key equivalent to the machine-specific encryption key with which the received response is encrypted. The DRM component may decrypt the encrypted response with the generated encryption key.
    • 描述了具有系统个性化的用于数字版权管理的系统和方法的各种实施例。 在各种实施例中,DRM组件可以生成对实现DRM组件的系统特有的机器特定凭证的请求。 该请求可以包括这种系统的组件的设备信息。 DRM组件还可以接收包括机器特定凭证的加密响应。 可以使用从设备信息生成的机器特定的加密密钥来加密该加密的响应。 在各种实施例中,响应可以由验证机器特定证书的请求的个性化服务器生成。 DRM组件还可以基于其上实现DRM组件的系统的设备信息,生成与所接收的响应被加密的机器专用加密密钥相等的加密密钥。 DRM组件可以利用生成的加密密钥对加密的响应进行解密。
    • 4. 发明授权
    • Converting transport level transactional security into a persistent document signature
    • 将传输级别的事务安全性转换为持久性文档签名
    • US08185741B1
    • 2012-05-22
    • US11344293
    • 2006-01-30
    • Sunil C. AgrawalJagriti UppalJoseph Steele
    • Sunil C. AgrawalJagriti UppalJoseph Steele
    • H04L9/32
    • H04L9/3247H04L51/066H04L51/08H04L63/126
    • Briefly, in accordance with one or more embodiments, a transport level transactional security may be converted into a persistent document signature. In one embodiment, a digital signature of an electronic mail message may be saved in a file attached to the electronic mail message. The file with the added digital signature may be saved, transmitted, received, and/or otherwise utilized independent of the original electronic mail message. A receiving node may verify the identity of an originating node based at least in part on the digital signature contained in the file. In alternative embodiment, the signature for the file may be generated at least in part on a message to be transmitted according to a secure transmission and/or file download protocol from a server to a client.
    • 简而言之,根据一个或多个实施例,传输级别事务安全性可被转换为持久性文档签名。 在一个实施例中,电子邮件消息的数字签名可以保存在附加到电子邮件消息的文件中。 具有附加数字签名的文件可以独立于原始电子邮件消息被保存,发送,接收和/或以其它方式使用。 接收节点可以至少部分地基于文件中包含的数字签名来验证始发节点的身份。 在替代实施例中,文件的签名可以至少部分地基于要从服务器到客户端的安全传输和/或文件下载协议来发送的消息来生成。
    • 5. 发明申请
    • System And Method For Digital Rights Management With A Lightweight Digital Watermarking Component
    • 使用轻量级数字水印部件进行数字版权管理的系统和方法
    • US20110185179A1
    • 2011-07-28
    • US12548228
    • 2009-08-26
    • Viswanathan SwaminathanSunil C. Agrawal
    • Viswanathan SwaminathanSunil C. Agrawal
    • H04L9/32H04N7/167
    • G06F21/10
    • Various embodiments of a system and method for digital rights management with a lightweight digital watermarking component are described. Embodiments may include methods as well as elements for performing such methods. Such a method may include receiving content onto a computer system; the computer system may include a runtime component configured to consume the content. The method may include receiving a digital watermarking component on the computer system. The digital watermarking component may specify information for generating a digital watermark on the content. The method may include applying a digital watermark to the content with the runtime component in order to generate watermarked content. The digital watermark may be applied by the runtime component in accordance with the digital watermarking component. In various embodiments, the received runtime component may be configured to prevent the received content from being consumed without the digital watermark applied to the received content.
    • 描述了使用轻量级数字水印部件进行数字版权管理的系统和方法的各种实施例。 实施例可以包括用于执行这种方法的方法以及元件。 这种方法可以包括将内容接收到计算机系统上; 计算机系统可以包括被配置为消费内容的运行时组件。 该方法可以包括在计算机系统上接收数字水印分量。 数字水印分量可以指定用于在内容上生成数字水印的信息。 该方法可以包括将数字水印应用于具有运行时组件的内容,以便生成带水印的内容。 数字水印可以由运行时分量根据数字水印分量来应用。 在各种实施例中,所接收的运行时间组件可以被配置为防止在没有将数字水印应用于所接收的内容的情况下被消费。
    • 6. 发明授权
    • Using digital certificates to facilitate enforcement of product licenses
    • 使用数字证书来促进产品许可证的执行
    • US07581106B1
    • 2009-08-25
    • US11111088
    • 2005-04-20
    • Sujata DasSunil C. AgrawalCharles R. Myers, IV
    • Sujata DasSunil C. AgrawalCharles R. Myers, IV
    • H04L21/00
    • G06F21/10
    • One embodiment of the present invention provides a system that uses digital certificates to facilitate enforcing licensing terms for applications that manipulate documents. During operation, the system obtains a credential, wherein the credential includes a private key and a digital certificate containing a corresponding public key. This digital certificate also contains a profile specifying allowed operations which can be performed on documents signed with the credential. Next, the system digitally signs a document using the credential, so that the resulting signed document is signed with the private key and includes a copy of the digital certificate with the profile specifying the allowed operations. The certificate issuer can subsequently revoke the digital certificate (which effectively revokes the license) if terms of a license agreement associated with the digital certificate are violated.
    • 本发明的一个实施例提供一种使用数字证书来促进对操纵文档的应用程序执行许可条款的系统。 在操作期间,系统获得证书,其中凭证包括私钥和包含相应公钥的数字证书。 该数字证书还包含一个配置文件,指定允许的操作,这些操作可以在凭证上签名的文档上执行。 接下来,系统使用凭证对文档进行数字签名,以便所得到的签名文档用私钥签名,并且包括具有指定允许操作的简档的数字证书的副本。 如果违反与数字证书相关的许可协议的条款,证书颁发者可随后撤销数字证书(有效地撤销许可证)。
    • 7. 发明授权
    • System and method for deterministic generation of a common content encryption key on distinct encryption units
    • 用于在不同加密单元上确定性地生成公共内容加密密钥的系统和方法
    • US09225520B2
    • 2015-12-29
    • US12790512
    • 2010-05-28
    • Noam LorberbaumSunil C. AgrawalKatherine K. Nadell
    • Noam LorberbaumSunil C. AgrawalKatherine K. Nadell
    • H04L9/08H04N21/254H04N21/4405H04N21/4627H04N21/2347
    • H04L9/0861H04L2209/60H04N21/23476H04N21/2541H04N21/4405H04N21/4627
    • Various embodiments of a system and method for deterministic generation of a common content encryption key on distinct encryption units are described. Embodiments may include, for each given content item of multiple content items that represent one or more portions of a common media object, controlling a different encryption unit of multiple distinct encryption units to i) generate a content encryption key for the given content item based on: a common base secret shared by the multiple distinct encryption units, and an identifier specific to the media object, and ii) encrypt the given content item with the respective content encryption key generated for that content item in order to generate a respective encrypted content item. Each content encryption key generated for a given content item may be equivalent to each other content encryption key such that decryption of each encrypted content item requires a common decryption key.
    • 描述用于在不同的加密单元上确定性地生成公共内容加密密钥的系统和方法的各种实施例。 对于表示公共媒体对象的一个​​或多个部分的多个内容项目的每个给定内容项目,实施例可以包括控制多个不同加密单元的不同加密单元,以便i)基于以下内容生成给定内容项目的内容加密密钥: :由多个不同的加密单元共享的公共基本秘密,以及媒体对象特有的标识符,以及ii)使用针对该内容项目生成的相应内容加密密钥对给定内容项进行加密,以便生成相应的加密内容项 。 为给定内容项生成的每个内容加密密钥可以等同于彼此的内容加密密钥,使得每个加密的内容项的解密需要公用解密密钥。
    • 8. 发明授权
    • System and method for multipronged authentication
    • 用于多重身份验证的系统和方法
    • US09027143B1
    • 2015-05-05
    • US12548310
    • 2009-08-26
    • Sunil C. AgrawalJoseph D. Steele
    • Sunil C. AgrawalJoseph D. Steele
    • G06F7/04G06F17/30H04N7/16G06F21/44G06F21/10H04N21/25
    • G06F21/6218G06F21/10G06F21/105G06F21/44G06F21/51H04L63/08H04L2463/101H04N21/25H04N21/4405H04N21/4627
    • Various embodiments of a system and method for multipronged authentication are described. Embodiments may include a client system that implements a runtime component configured to consume content. The client system may be configured to implement a digital rights management component configured to perform one or more cryptographic operations and also authenticate the runtime component. The client system may receive encrypted content from a remote computer system and receive a given authentication component from a remote computer system; that authentication component may be configured to authenticate the runtime component. The client system may, based on authentication of the runtime component by both the digital rights management component and the given authentication component, decrypt at least a portion of the encrypted content. In this way, the client system may ensure that decryption of the encrypted content may occur only if multiple components authenticate the runtime component, according to some embodiments.
    • 描述用于多重认证的系统和方法的各种实施例。 实施例可以包括实现被配置为消费内容的运行时组件的客户端系统。 客户端系统可以被配置为实现被配置为执行一个或多个密码操作并且还验证运行时组件的数字版权管理组件。 客户端系统可以从远程计算机系统接收加密的内容并从远程计算机系统接收给定的认证组件; 该认证组件可以被配置为认证运行时组件。 客户端系统可以基于数字版权管理组件和给定认证组件的运行时组件的认证来解密加密内容的至少一部分。 以这种方式,根据一些实施例,客户端系统可以确保只有在多个组件认证运行时组件时才可能发生加密内容的解密。
    • 9. 发明授权
    • Using digital certificates in document distribution
    • 在文件分发中使用数字证书
    • US08688997B2
    • 2014-04-01
    • US13229463
    • 2011-09-09
    • Sujata DasSunil C. AgrawalCharles R. Myers, IV
    • Sujata DasSunil C. AgrawalCharles R. Myers, IV
    • H04L9/32
    • G06F21/10
    • One embodiment of the present invention provides a system that uses digital certificates to facilitate enforcing licensing terms for applications that manipulate documents. During operation, the system obtains a credential, wherein the credential includes a private key and a digital certificate containing a corresponding public key. This digital certificate also contains a profile specifying allowed operations which can be performed on documents signed with the credential. Next, the system digitally signs a document using the credential, so that the resulting signed document is signed with the private key and includes a copy of the digital certificate with the profile specifying the allowed operations. The certificate issuer can subsequently revoke the digital certificate (which effectively revokes the license) if teens of a license agreement associated with the digital certificate are violated.
    • 本发明的一个实施例提供一种使用数字证书来促进对操纵文档的应用程序执行许可条款的系统。 在操作期间,系统获得证书,其中凭证包括私钥和包含相应公钥的数字证书。 该数字证书还包含一个配置文件,指定允许的操作,这些操作可以在凭证上签名的文档上执行。 接下来,系统使用凭证对文档进行数字签名,以便所得到的签名文档用私钥签名,并且包括具有指定允许操作的简档的数字证书的副本。 如果违反与数字证书相关的许可协议的条款,证书颁发者可随后撤销数字证书(有效地撤销许可证)。