Managing Rights Management

Two Intertrust Technologies DRM Patents

Both of this week's Spotlight Patents concern aspects of digital rights management and both are assigned to Intertrust Technologies. The first patent addresses software self-checking mechanisms for improving software tamper resistance and/or reliability. The second patent addresses techniques for managing and protecting electronic content and applications.

Madisetti et al and Ripple Blockchain and DRM Patents

New patents are are issued by the USPTO on Tuesdays. This week we continue the theme of blockchain (distributed ledger, smart contracts) and digital rights management broadly construed. The first of this week's Spotlight Patents is apparently assigned to the inventors (there seems to be a strong Georgia Tech connection) and addresses techniques for operating secure digital management aware applications. Assigned to Ripple (Luxembourg), the second patent addresses techniques for determining that results produced from executions of software have not been altered or falsified.

Verance Watermarking and Siemans Fingerprinting Patents

New patents are issued by the USPTO on Tuesdays. Today's Spotlight Patents concern aspects of digital watermarking and digital fingerprinting. Assigned to Verance, the first patent addresses techniques for watermark detection and metadata delivery associated with a primary content. Assigned to Siemens Healthcare Diagnostics, the second patent addresses using a certificate for a target device that includes encrypted system attributes that are then verified against attributes of the target device prior to software usage.

Dolby Watermarking and Terbium Labs Fingerprinting Patent Applications

New pending patent applications are published on Thursdays by the USPTO. Today's Spotlight Applications concern aspects of digital watermarking and digital fingerprinting. Assigned to Dolby, the first application discloses techniques for increasing the sensitivity of a watermark detector. Assigned to Terbium Labs, the second application discloses techniques for detecting copied computer code using fingerprints.

Thomson Watermarking and John Hopkins Fingerprinting Patent Applications

New pending patent applications are published by the USPTO on Thursdays. Today's Spotlight Applications address digital watermarking of 3D objects (as in 3D printing) and fingerprinting as a method of determining software binary code similarities. Assigned to Thomson (FR), the first application discloses techniques for watermarking a three-dimensional object represented by a mesh. Assigned to The John Hopkins University, the second application discloses techniques for identifying similarity between query samples and stored samples in an efficiently maintained reference library.

Terbium Labs and Gracenote Digital Fingerprinting Patents

New patents are issued by the PTO on Tuesdays. Both of today's Spotlight Patents concern aspects of digital fingerprinting. Assigned to Terbium Labs, the first patent addresses techniques for detecting copied computer code using fingerprints. Assigned to Gracenote, the second patent addresses techniques for authorizing devices based on identifying content distributor.

Two Intertrust Digital Watermarking Patent Applications

New pending patent applications are published by the PTO on Thursdays. Both of today's Spotlight Applications concern aspects of digital watermarking and both are assigned to Intertrust Technologies. The first application discloses ways of encoding and protecting data using digital signature and watermarking techniques. The second application discloses software self-checking systems and methods.

Stegosystems and HBO Digital Watermarking Patents

New patents are issued by the PTO on Tuesdays. Both of today's Spotlight Patents concern aspects of digital watermarking. Assigned to Stegosystems, Inc., the first patent addresses techniques for a steganographic messaging system using code invariants. Assigned to HBO, the second patent addresses techniques for watermarking content for tracking media consumption.

Intertrust and IBM Watermarking Patents

Tuesdays the PTO issues new patents.  Both of today's Spotlight Patents concern aspects of digital watermarking. Assigned to Intertrust, the first patent addresses techniques for watermarking software and other media. Assigned to IBM, the second patent addresses techniques for metadata embedding in streaming medical data.

Amazon and Microsoft DRM Patents

The PTO issues new patents on Tuesdays. Both of today's Spotlight Patents concern aspects of digital rights management. Assigned to Amazon, the first patent addresses digital rights management techniques for applications. Assigned to Microsoft, the second patent addresses techniques for issuing a publisher use license off-line in a digital rights management (DRM) system.

Netflix and Condel DRM Patent Applications

Thursdays the PTO publishes new pending patent applications. Both of today's Spotlight Applications concern aspects of digital rights management. Assigned to Netflix, the first application discloses techniques for the speculative pre-authorization of encrypted data streams. Assigned to Condel International, the second application discloses techniques for protecting program file content using digital rights management (DRM).

SRI and Microsoft Digital Fingerprinting Patents

The PTO issues new patents on Tuedays. This week's Spotlight Patents concern aspects of digital fingerprinting. Assigned to SRI International, the first patent addresses techniques for content-based matching of videos using local spatio-temporal fingerprints. Assigned to Microsoft, the second patent addresses techniques for security mechanism for developmental operating systems.

Apple and Microsoft DRM Patents

Tuesdays the PTO issues new patents. Both of these week's Spotlight Patents concern aspects of digital rights management. Assigned to Apple, the first patent addresses techniques for digital rights management for computer program code. Assigned to Microsoft, the second patent addresses techniques for secure time source operations for digital rights management.

Intertrust and Verance Watermarking Patent Applications

Thursdays the Patent Office publishes new pending patent applications. Both of today's Spotlight Applications concern aspects of digital watermarking. Assigned to Intertrust, the first application discloses techniques for software self-checking. Assigned to Verance, the second application discloses techniques for the extraction of embedded watermarks from a host content based on extrapolation techniques.

DigitalQuick

I've started using DigitalQuick from Fasoo (a spinout from Samsung). Very smart guys. App addresses a problem that's kept me off the cloud.

Purdue and IBM Digital Watermarking Patents

On Tuesdays the USPTO issues new patents. Both of today's Spotlight Patents concern aspects of digital watermarking.  Assigned to Purdue Research Foundation, the first patent addresses techniques for the synchronization of digital watermarks. Assigned to IBM, the second patent addresses techniques for watermark hiding in designated applications.

Adobe and Microsoft Software Fingerprinting Patents

On Tuesdays the USPTO issues new patents. Both of today's Spotlight Patents concern aspects of digital fingerprinting. Assigned to Adobe, the first patent addresses techniques for identifying and tracking potential property rights in software products. Assigned to Microsoft,the second patent addresses techniques for dynamic software fingerprinting.

Dolby Fingerprinting and Intertrust Watermarking Patent Applications

On Thursdays the USPTO publishes new patent applications. Today's Spotlight Applications concern aspects of digital fingerprinting and digital watermarking.  Assigned to Dolby Labs, the first application discloses techniques for projection based hashing that balances robustness and sensitivity of media fingerprints. Assigned to Intertrust, the second aplication discloses techniques for software self-checking and tamper resistance.

Amazon and HP DRM Patents

On Tuesdays the UPSTO issues new patents. Both of today's Spotlight Patents concern aspects of digital rights management.  Assigned to Amazon, the first patent addresses techniques for controlling use of computing-related resources by multiple independent parties. Assigned to HP, the second patent addresses techniques for secure loading, integrity checking of the runtime image and control over the runtime execution of applications.

Auckland Uniservices Watermarking and Dolby Fingerprinting Patent Applications

On Thursdays the USPTO publishes new pending patent applications. Today's Spotlight Applications concern digital watermarking and digital fingerprinting. Assigned to Dolby Laboratories, the first application discloses media fingerprints that reliably correspond to media content with projection of moment invariants. Assigned to Auckland Uniservices (AZ), the second application discloses software watermarking techniques.

Apple and McAfee Software Obfuscation-related Patent Applications

On Thursdays the USPTO publishes new pending patent applications. Both of todays Spotlight Applications concern aspects of software obsfucation as a security technique. Assigned to Apple, the first application discloses techniques for software data reference obfuscation. Assigned to McAfee, the second application discloses techniques for obfuscated malware detection.

TVU Networks and Uniloc Digital Fingerprint Patent Applications

On Thursdays the USPTO publshes new patent applications. Both of today's Spotlight Applications concern aspects of digital fingerprinting. Assigned to TVU Networks, the first application discloses techniques for fingerprint-based copyright protection of real-time content. Assigned to Uniloc, the second application discloses techniques for determining authorization to operate licensed software based on a client device fingerprint.

How To DRM? Byteshield's FTC Submission

ByteShield, the San Francisco-based software and game DRM company, submitted comments in advance of the FTC's hearing on DRM and the consumer. Submitted  by CEO Jan Samzelius, the document provides a terrific list of DRM features, functions, and capabilities that would probably delight game and software publishers and provide a user-friendly experience for gamers and software users.

Samzelius provides a list of what I would call "best practices" at each stage of the relationship between a gamer, the publisher, and the underly DRM system. Here are a couple of excerpts:

Adobe Opens Up RTMP But Keeps DRM Under Wraps

Ars Technica reports that Adobe is opening up its Real-Time Messaging Protocol (RTMP), its widely used streaming media protocol. At the same time, Adobe is taking legal steps to protect the DRM components used in conjunction with RTMP.

Adobe has declined publish details about RTMP's DRM mechanism and will expressly forbid implementation of DRM circumvention measures in the license that governs the official RTMP specification.

"To benefit customers who want to protect their content, the open RTMP specification will not include Adobe's unique secure RTMP measures, nor will the license that accompanies the specification allow developers to circumvent such measures," the company revealed in a statement.

Nate Lawson on Designing and Breaking DRM

Nate Lawson is a co-creator of the BD+ security layer on Blu-ray. He gave a talk at the recent RSA conference.that covers techniques for attacking DRM. His slides are posted here and are worth reviewing. Lawson writes:

Of course, people in glass houses should not throw rocks. As someone who had a part in developing BD+, I am biased toward thinking a different approach than mere broadcast encryption [e.g. AACS] is the only thing that has a chance of success in this rough world. The first BD+ discs were cracked in mid-March, and it remains to be seen how effective future updates will be. Unfortunately, I can’t comment on any details here. We’ll just have to watch and see how things work out the rest of this year.

2008 will prove whether a widely deployed scheme based on software protection is ultimately better or equivalent to the AACS approach. I have a high degree of confidence it will survive in the long run....

Why is Adobe Adding DRM to Flash?

EFF staff technologist Seth Schoen writes that Adobe is adding DRM to the latest version of Flash. Why they are doing this is, of course, an interesting question. Schoen suggests that the major motivation seems to be Adobe's business model:

Users may also have to upgrade their Flash Player software (and open source alternatives like Gnash, which has been making rapid progress, may be unable to play the encrypted streams at all). Third-party software that can download Flash Video, like the most recent RealPlayer, will also break. But Adobe now has an incentive to push the use of DRM: it's only available to sites that use Flash Media Server 3 software, which starts at over $4,000 (with extra fees depending on the number of simultaneous streams).

Symantec NIS Ad Blocking Poll - Vote Here

The issue of ad blocking has generated a few comments to a previously blogical on the topic. I've posted a quick poll on the subject which should appear at the top of the right column. In a few days I'll let Symantec know of the poll and the results.

Macrovision Selling Flexnet and InstallShield Software Unit

Macrovision has announced the pending sale of its Business Software Unit to private equity firm Thoma Cressey Bravo. Included in the transaction are Flexnet copy protection solutions and InstallShield.

The transaction will result in a stand-alone company focused on providing solutions that help simplify the business relationship between software producers and enterprises. All products and associated support and services from within the Software Business Unit are part of the transaction. Mark Bishof, currently Macrovision’s Executive Vice President and General Manager of the Software Business Unit, will assume the role of CEO for the stand-alone software company following the close of the transaction.

It would appear that Macrovision is spinning this out to focus on higher margin and/or higher growth opportunities, such as the SPDC/BD+ technologies it acquired from Cryptography Research, Inc. at the end of last year. Macrovision will also be "digesting" the acquisition of Gemstar / TV Guide.

Intertrust and NEC Watermarking Patent Applications

On Thursdays the USPTO publishes a new batch of patent applications. Both of today's Spotlight Applications address the use of watermarking. Assigned to Intertrust, the first applications discloses techniques for watermarking software and other media. Assigned to NEC (China) the second application discloses techniques for media program identification based on audio watermarking.

Software Freedom Law Center Sues Verizon Over Open Source Software

The Software Freedom Law Center (SFLC) has filed a copyright infringement lawsuit against Verizon  on behalf of the two principal developers of BusyBox, alleging violation of the GPL V2. BusyBox is a lightweight set of standard Unix utilities commonly used in embedded systems and is open source software licensed under GPL version 2.

An Information Week article says that:

The case against Verizon, however, marks the first time SFLC has sought to defend the GPL in court against a multibillion dollar industry giant. As such, it could provide a key test of the legal validity of the GPL -- a license that's used by thousands of open source developers. Some companies, includingMicrosoft (NSDQ: MSFT), have said they believe parts of the GPL are not legally enforceable.

Anti-Copying Programs May Slow Piracy Says MSFT and BSA

The Associated Press' Brian Bergstein reports that anti-copying technologies may be reducing software piracy.

The technology has provoked some hostility, because it enables Microsoft to remotely examine user computers. After analyzing such information as the computer's manufacturer, hard drive serial number and Windows product identification, Microsoft can block access to certain software functions if it suspects the product was illegally copied.

Does possibly antagonizing consumers actually benefit software publishers? At least in MSFT's case, it apparently does:

Microsoft does not offer piracy statistics specific for its software. But the company says it appears its plan is working. As evidence, the company notes that in the last quarter, Windows sales were up 20 percent while worldwide PC sales were up only 14 to 16 percent. Microsoft said the difference reflected the fact that people with counterfeit copies of Windows were having to put the real thing on their existing computers.

First Open Source Law Suit Settled

The Register (UK) reports that the Software Freedom Law Center announced that it has  reached an agreement with Monsoon Multimedia to end the SFLC's copyright infringement suit against the company.

With the actual settlement announced yesterday, the SFLC got what it was holding out for: money. The agreement includes an "undisclosed amount of financial consideration" for the plaintiffs, and also requires Monsoon to publish the source code, appoint an Open Source Compliance Officer and notify previous recipients of the software about their rights under the GPL.

SFLC GPL Enforcement Law Suit Filed Against Monsoon Multimedia

The Software Freedom Law Center has filed a law suit against Monsoon Multimedia seeking to enforce the terms of the General Public License V2 (not the more recent GPLv3).

Stephen Shankland writing on ZDNet says:

Dan Ravicher, SFLC's attorney on the case, said the suit isn't part of a broader effort to give GPL enforcement a stronger legal foundation. But the action has repercussions for a much larger audience than just the single defendant.

"There still appear to be flaming examples of either indifference to or outright disregard for the GPL," said James Harvey, an attorney with Hunton & Williams who is not involved with the suit. "I think those flaming examples will increasingly be called to order by somebody, whether SFLC, a copyright holder or someone else in the open-source ecosystem."

 

Podcast with Jan Samzelius, CEO of ByteShield

I spoke recently with Jan Samzelius, Chairman and CEO of ByteShield, which provides anti-piracy technologies and services to business and game software markets. An earlier blogicle described how the ByteShield solution works.

Here's the Podcast file (7:11 Minutes, MP3):

Download jan_samzelius_ceo_byteshield_podcast_91907.mp3

Index:

0:00 Introductions
0:11 Overview of ByteShield, brief history
0:40 The work factor or effort required to break copy protection
1:19 What's different about the ByteShield technology
2:38 Business model
3:11 Broad range of consumer licensing models supported
3:43 Advantages
4:40 Current customers, partners
5:34 Technology and services provider
6:05 Solving the piracy problem
6:55 Close

ByteShield's Antipriacy Solution for Software and Games

San Franciso startup ByteShield has developed software anti-piracy technologies that may be of interest to software and game publishers. Protected software is distributed to consumers minus a small portion that is required to enable execution. A connection with a server is required to pay for use in accordance with the business model established by the publisher. The small missing piece is then downloaded to the computer and effectively integrated with the much larger portion, thereby enabling execution of the game or other software.

What Does Vista Content Protection Cost?

Peter Gutmann is a researcher in the Computer Science Department, Auckland, NZ. He has published a very long and technically detailed report, A Cost Analysis of Windows Vista Content Protection, that probably will be accessible to only the most technically literate. Nonetheless, the paper is an exemplar of the kind of analysis that many aspire to, but that only few actually produce. It should be required reading for anyone who intends to build a HD video capable system based on a Vista machine and/or who is interested in system security issues.

At the risk of sounding like an apologist for Microsoft, there are real costs to the bleeding edge. I kept Windows XP SP2 rather than upgrading to Vista precisely because MSFT never gets the first release of anything right.

Some nits:

This Just In: RealPlayer Anti-piracy Moves

I've been playing a little bit (so far) with the RealPlayer 11 beta. Some observations:

GPLV3 Launched - Does Anyone Care?

Writing in Linux-Watch / eWeek, Steven J. Vaughan-Nichols wonders if anyone cares about GPLV3:

Free and Open Source Software Violates 235 MSFT Patents

Fortune Magazine has an article in which  Microsoft General Counsel Brad Smith, and licensing chief Horacio Gutierrez assert that free and open source software ("FOSS") such as Linux infringe 235 Microsoft patents. More specifically,

[Gutierrez] says that the Linux kernel - the deepest layer of the free operating system, which interacts most directly with the computer hardware - violates 42 Microsoft patents. The Linux graphical user interfaces - essentially, the way design elements like menus and toolbars are set up - run afoul of another 65, he claims. The Open Office suite of programs, which is analogous to Microsoft Office, infringes 45 more. E-mail programs infringe 15, while other assorted FOSS programs allegedly transgress 68.

Another controversy worth watching.

Rootkit Tech added to MyDoom and Bagle

The Register (UK) reports that virus writers are now using rootkit techniques. Snippet:

Virus writers have begun adding rootkit functionality as a component of commonplace malware such as MyDoom and Bagle. Rootkit technology is designed to hide the presence of malware on infected systems. Originally the technology featured only as a component of more sophisticated and exotic forms of malware. Now the technology has moved into the mainstream, anti-virus firm F-secure reports.

Tales From The Crypt: Rememberances Of Viruses Past

George Smith's article in the Village Voice describes virus writing in the '90s and the relationship of viruses to Sony's use of rootkit technologies for DRM. Snippets:

Rob Enderle: Boycott Sony

Check out Rob Enderle's overview of the Rootkit Rumpus. In addition to a good summary and useful pointers, he calls for a boycott of Sony products this season.  Avoiding those that rely on rootkits certainly makes lots of sense.

Rootkit Rumpus

Lots has happened in the past few days:

Sony announced that it is halting  further use of rootkit-based copy protection. Numerous outlets reported that Sony has thrown in the towel on its current first4internet-based CD copy protection. This article from the Boston Globe is typical of the news coverage.

A number of lawsuits in Europe and the US have been filed. Information Week has an article describing the US class action suit.

The rootkit reportedly is spyware; it reports user's listening habits. So says Computer Associates.

And virus writers are exploiting the Sony DRM for Windows technology, this according to multiple articles including this one from the BBC.

Microsoft offers to remove the Sony rootkit spyware.

SONY DRM Bruhaha

Several media outlets, including this CNET article, are reporting that Sony-BMG is responding to complaints about how their DRM adds hidden files by offering a patch for their CD-based DRM that was the subject of vociferous complaints and negative comments. The patch is being issued to antivirus companies so that the software can't hide. Sony-BMG and their copy protection partner First 4 Internet are taking this approach because many observed that the techniques being used by First 4 Internet could encourage virus writers to do the same.  Snippets from the CNET article:

SONY-BMG DRM Hides Files, Potentially Damaging System Mods

[top o' the to a post on Dave Farber's IP list.]

With much more technical information than most readers will want, Mark Russinovich's blogicle on the SystemInternals blog describes how he discovered that the DRM included on Get Right with the Man  CD by the Van Zant brothers made major and undocumented changes to Windows XP operating system.

It is vital, I believe, for consumers to receive as much notice as possible about DRM technologies being installed on their system(s). Notice should include an obvious way to remove the DRM software with the understanding that if removed, the content may no longer be accessed under the licensed rights.

Especially in a world without widely adopted DRM standards and interoperability among DRM systems, installing multiple DRM systems, each of which modifies key system components and hides files, almost certainly will lead to conflicts among these DRM systems. The likely outcome will be that consumers will be faced with resolving difficult technical problems that they are ill equipped in most cases to fix themselves.

Snippets from Mark's blogicle:

Hollywood, Microsoft align on new Windows

John Borland's CNet article provides a very useful discussion of the DRM in MSFT's Vista operating system. Snippet:

openmediacommons.org

Those interested in more information including technical details  regarding Sun's Open Media Commons DRM initiative should check out the Open Media Commons web site. The site is oriented mostly to developers.

Are MSFT and INTL Greedy?

Writing on HardwareAnalysis.com, Sander Sassen asserts that Microsoft and Intel are acting out of greed in their efforts to secure high definition video and other media content. Greed or smart business? I think the latter.

There is, by the way, nothing inherent in well-implemented rights management that prevents the rules associated with protected content to take into account many if not most "fair use" situations. The question is whether DRM technologies included in and/or layered on top of WinTel's DRM are sufficiently feature rich to enable those with rights in media content to define apparent fair uses, such as backup copies.

Snippets:

More On Sun's Open Media Commons

Stephen Shankland's CNET article on Sun's Open Media Commons is also worth reading. Among the points made is that Sun intends to creat a standard that is royalty-free because it gets around the variou s DRM patents belonging to InterTrust, ContentGuard, and MPEG LA. Designing around patents is not impossible, but given the numerous patent claims granted to a variety of companies--including Microsoft--it may prove difficult to accomplish without introducing serious inefficiencies and/or without omitting important capabilities. Snippets:

DVD Blue Lasers, DRM, Compression, etc

Mike Weston's semi-rant on blue laser DVDs and related issues is worth a read. Snippets: