Several embodiments include a policy-bound token distribution system. The system can include a back-office server that issues policy-bound tokens to local main distribution servers. A local main distribution server can distribute a policy-bound token to a digital environment to authorize an operator to take advantage of a protected resource. The system can rely on a backup server to distribute the policy-bound tokens whenever the distribution service of the local main distribution server is unavailable. To prevent run-time leakage from the backup server, the backup server can synchronize its distribution state with the local main distribution server and the back-office server. The distribution state can include distribution transaction records between the backup server and client devices. Throughout the system, each distribution transaction record can be assigned unique transaction ID to prevent multiple accounting of the same distribution transaction record from different servers.

A first network device may measure one or more values of one or more parameters corresponding to a plurality of links and/or devices of the network. The first network device may compare the measured one or more values of the one or more parameters to an expected one or more values of the one or more parameters. The first network device may determine whether to transmit data onto a network path between the first device and one of the plurality of devices based on a result of the comparison, wherein at least one of the plurality of links and/or devices are not part of the network path. The first network device may be operable to utilize the discovered parameter values to generate a security key which may be utilized to encrypt and/or scramble content prior to transmitting the content onto the network.

Encrypted content from a content provider is received at a central location of a multichannel video programming distributor (MVPD). The content provider is distinct from the MVPD. The content is decrypted and processed in a virtual set-top application associated with a set-top of a customer of the MVPD. The set-top of the customer is located in a customer premises remote from the central location. The processed content is provided over a secure data link to a conditional-access encoder at the central location. The conditional-access encoder encrypts the processed content, which is then transmitted to the set-top of the customer.

A system and method for monitoring third party access to a restricted item is provided. Key data is embedded in the restricted item, the key data being associated with a store of value and usable to conduct a transaction against the store of value. A record of the transaction becomes visible in a transaction ledger. The transaction ledger is monitored to determine whether a transaction against the store of value has occurred, and the restricted item is designated as accessed by a third party in the event that a transaction against the store of value has occurred.

Systems, methods and media for managing digital rights and pre-verification of structural integrity in three-dimensional (3D) printing are provided. In one example, a system comprises at least one module, executing on one or more computer processors, to receive a request from a user to print a 3D object by a 3D printer or printing service and receive a conditional authorization from an owner of digital rights in the 3D object to print the 3D object. The conditional authorization can include a printing specification or limitation. The at least one module pre-verifies, for structural integrity once printed by the 3D printer or printing service, a digital model on which the 3D object is based. In response to a received conditional authorization, the at least one module transmits instructions to the 3D printer or printing service to print the 3D object.

A Method for supplying protected multimedia content during which a terminal a) acquires a service date from a date server and b) evaluates a temporal criterion of a licence with respect to the last acquired service date. A headend associates with each segment of the multimedia content, its transmission date, and transmits it in a stream together with the segment. The terminal extracts from the stream the date of transmission of the segment, then it compares the extracted transmission date to the last acquired service date. And, only if the extracted transmission date is later than the last acquired service date, acquires it as service date, and uses it as last acquired service date on an execution of the step b) between two successive executions of the step a).

A method for detecting against unauthorized transmission of digital works comprises the steps of maintaining a registry of information permitting identification of digital copyrighted works, monitoring a network for transmission of at least one packet-based digital signal, extracting at least one feature from the at least one digital signal, comparing the extracted at least one feature with registry information and applying business rules based on the comparison result.

The invention relates to a method for a first communication device to perform authenticated distance measurement between the first communication device and a second communication device, wherein the first and the second communication device share a common secret and the common secret is used for performing the distance measurement between the first and the second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.

A method and apparatus for controlling document access and application usage using centrally managed rules. The rules are stored and manipulated in a central rule database via a rule server. Policy enforcers are installed on client systems and/or on servers and perform document access and application usage control for both direct user document accesses and application usage, and application program document accesses by evaluating the rules sent to the policy enforcer. The rule server decides which rules are required by each policy enforcer. A policy enforcer can also perform obligation and remediation operations as a part of rule evaluation. Policy enforcers on client systems and servers can operate autonomously, evaluating policies that have been received, when communications have been discontinued with the rule server.

The invention relates to a method for a first communication device to perform authenticated distance measurement between the first communication device and a second communication device, wherein the first and the second communication device share a common secret and the common secret is used for performing the distance measurement between the first and the second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.