Methods and apparatus to identify media based on watermarks across different audio streams and/or different watermarking techniques are disclosed. Example apparatus disclosed herein include a watermark detector to detect a first watermark embedded in a first audio stream, the first watermark including a first source identifier and a first timing identifier, and detect a second watermark embedded in a second audio stream, the second watermark including a second source identifier and a second timing identifier. The disclosed example apparatus also include a controller to associate the first and second watermarks with a media detection event when both (1) the first and second source identifiers match and (2) the first and second timing identifiers are chronologically congruent. The disclosed example apparatus further include a transmitter to transmit the media detection event to a data collection facility.

The present disclosure provides a display device that includes an external input interface including an input port connected to a source device, and a processor configured to detect that a source device is connected through an unselected input port of a plurality of input ports, activate an external input interface corresponding to the unselected input port, perform a connection process between the source device and the external input interface, deactivate error detection operation between the source device and the external input interface, generate fake connection information for maintaining connection between the source device and the external input interface based on information input to the external input interface from the source device, and switch the external input interface to a standby mode.

Example apparatus are to assign a first watermark to a first monitoring track and a second monitoring track, the first watermark detected in an audio stream of media. Example apparatus are also to, in response to at least a first threshold number of watermarks being assigned to the first monitoring track, group the first watermark with one or more other watermarks assigned to the first monitoring track to define a first media detection event. Example apparatus are also to, in response to at least a second threshold number of watermarks being assigned to the second monitoring track, group the first watermark with one or more other watermarks assigned to the second monitoring track to define a second media detection event. Example apparatus are further to cause transmission of the first media detection event and the second media detection event to a data collection facility.

A system and method for managing and monitoring video stream content. The method including: receiving a traffic flow; determining if the traffic flow is a video streaming traffic flow; if the traffic flow is a video streaming traffic flow; determine at least one attribute associated with the video streaming traffic flow; determine a probability that the traffic flow is fraudulent based on a heuristic analysis of the at least one associated attribute; if the probability is above a predetermined threshold, flag the traffic flow as a fraudulent video streaming traffic flow, otherwise allow the traffic flow to proceed to its destination without being flagged; if the traffic flow is not a video streaming traffic flow, allow the traffic flow to proceed to its destination.

A system and method for managing and monitoring video stream content. The method including: receiving a traffic flow; determining if the traffic flow is a video streaming traffic flow; if the traffic flow is a video streaming traffic flow; determine at least one attribute associated with the video streaming traffic flow; determine a probability that the traffic flow is fraudulent based on a heuristic analysis of the at least one associated attribute; if the probability is above a predetermined threshold, flag the traffic flow as a fraudulent video streaming traffic flow, otherwise allow the traffic flow to proceed to its destination without being flagged; if the traffic flow is not a video streaming traffic flow, allow the traffic flow to proceed to its destination.

Anti-piracy techniques described herein are performed on a server that includes one or more processors and a non-transitory memory. The server enters a state to accumulate a portion of a bitstream extracted from parts of a clip obtained from a pirate service. The server then identifies a set of suspected piracy devices for the piracy service based on a confidence score of suspected piracy calculated for each client using the accumulated portion of the bitstream exceeding a threshold set relative to the state. The server additionally determines whether or not the set of suspected piracy devices for the pirate service satisfies a stable collusion state criterion corresponding to the state. The server enters a next state to iteratively perform the accumulating and the identifying upon determining the set of suspected piracy devices for the pirate service not satisfying the stable collusion state criterion corresponding to the state.

Techniques for detection over-the-top piracy are described. In some embodiments, a piracy detection method is performed at a server by a piracy detector. The piracy detector obtains records associated with requests for access from a plurality of client devices. The piracy detector further distributes the records to a plurality of nodes according to distribution keys extracted from the records, where each of the plurality of nodes receives a respective set of records associated with a respective distribution key and generates a set of respective watch session records based on the respective set of records. The piracy detector also generates watch session records associated with the distribution keys by aggregating the respective watch session records from the plurality of nodes. The piracy detector additionally identifies one or more pirated client devices among the plurality of client devices based on clusters established from the watch session records.

Systems and methods for replacing original media bookmarks of at least a portion of a digital media file with replacement bookmarks is described. A media fingerprint engine detects the location of the original fingerprints associated with the portion of the digital media file and a region analysis algorithm characterizes regions of media file spanning the location of the original bookmarks by data class types. The replacement bookmarks are associated with the data class types and are overwritten or otherwise are substituted for the original bookmarks. The replacement bookmarks then are subjected to a fingerprint matching algorithm that incorporates media timeline and media related metadata.

Example apparatus disclosed herein are to detect a first watermark embedded in an audio stream associated with media, the first watermark embedded and detected based on a first watermarking technique; and detect a second watermark embedded in the audio stream, the second watermark embedded and detected based on a second watermarking technique. Disclosed example apparatus are also to assign the first watermark to a first monitoring track and to a second monitoring track, the first monitoring track limited to watermarks embedded in the audio stream based on the first watermarking technique, the second monitoring track limited to watermarks embedded in the audio stream based on any of the first or second watermarking techniques; group the first and second watermarks to form a media detection event when the second watermark is assigned to the second monitoring track; and cause transmission of the media detection event to a data collection facility.

The present disclosure provides a display device that includes an external input interface including an input port connected to a source device, and a processor configured to detect that a source device is connected through an unselected input port of a plurality of input ports, activate an external input interface corresponding to the unselected input port, perform a connection process between the source device and the external input interface, deactivate error detection operation between the source device and the external input interface, generate fake connection information for maintaining connection between the source device and the external input interface based on information input to the external input interface from the source device, and switch the external input interface to a standby mode.