Claims Analysis
Total Claims: 109
Claim 1
Independent Claim
124 words
A method for using at least one resource processed in a secure operating environment at a first appliance, said method comprising: securely receiving a first entity's control at said first appliance, said first entity being located remotely from said operating environment and said first appliance; securely receiving a second entity's control at said first appliance, said second entity being located remotely from said operating environment and said first appliance, said second entity being different from said first entity; and securely processing a data item at said first appliance, using at least one resource, including securely applying, at said first appliance through use of said at least one resource said first entity's control and said second entity's control to govern use of said data item.
Claim 2
Independent Claim
124 words
A method for using at least one resource processed in a secure operating environment at a first appliance, said method comprising: securely receiving a first entity's control at said first appliance, said first entity being located remotely from said operating environment and said first appliance; securely receiving a second entity's control at said first appliance, said second entity being located remotely from said operating environment and said first appliance, said second entity being different from said first entity; and securely processing a data item at said first appliance, using at least one resource, including securely applying, at said first appliance through use of said at least one resource said first entity's control and said second entity's control to govern use of said data item.
Claim 3
Independent Claim
126 words
A method for securely managing at least one operation on a data item performed at least in part by an electronic arrangement disposed at a first site, said method comprising: (a) securely delivering a first procedure to said electronic arrangement at said first site from a second site different from said first site; (b) securely delivering, to said electronic arrangement at said first site from a third site different from said first and second sites, a second procedure separable or separate from said first procedure; and (c) performing, at least in part with said electronic arrangement at said first site, at least one operation on said data item, including using said first and second procedures in combination to at least in part securely manage said operation.
Claim 4
Independent Claim
126 words
A method for securely managing at least one operation on a data item performed at least in part by an electronic arrangement disposed at a first site, said method comprising: (a) securely delivering a first procedure to said electronic arrangement at said first site from a second site different from said first site; (b) securely delivering, to said electronic arrangement at said first site from a third site different from said first and second sites, a second procedure separable or separate from said first procedure; and (c) performing, at least in part with said electronic arrangement at said first site, at least one operation on said data item, including using said first and second procedures in combination to at least in part securely manage said operation.
Claim 5
Dependent Claim
25 words
A method as in claim 2 including performing said delivering step (b) at a time different from the time said delivering step (a) is performed.
Claim 6
Dependent Claim
37 words
A method as in claim 2 wherein said step (a) includes delivering said first procedure from a first source, and said step (b) includes delivering said second procedure from a second source different from said first source.
Claim 7
Dependent Claim
17 words
A method as in claim 2 further including ensuring the integrity of said first and second procedures.
Claim 8
Dependent Claim
16 words
A method as in claim 2 further including validating each of said first and second procedures.
Claim 9
Dependent Claim
16 words
A method as in claim 2 further including authenticating each of said first and second procedures.
Claim 10
Dependent Claim
26 words
A method as in claim 2 wherein said using step (c) includes executing at least one of said first and second procedures within a tamper-resistant environment.
Claim 11
Dependent Claim
28 words
A method as in claim 2 wherein said step (c) includes the step of controlling said data item with at least one of said first and second procedures.
Claim 12
Dependent Claim
25 words
A method as in claim 2 further including establishing a relationship between at least one of said first and second procedures and said data item.
Claim 13
Dependent Claim
24 words
A method as in claim 2 further including establishing correspondence between said data item and at least one of said first and second procedures.
Claim 14
Dependent Claim
23 words
A method as in claim 2 wherein said delivering step (b) comprises delivering at least one load module encrypted at least in part.
Claim 15
Dependent Claim
24 words
A method as in claim 12 wherein said delivering step (a) comprises delivering at least one further load module encrypted at least in part.
Claim 16
Dependent Claim
26 words
A method as in claim 2 wherein said delivering step (b) comprises delivering at least one content container carrying at least in part encrypted control information.
Claim 17
Dependent Claim
22 words
A method as in claim 2 wherein said delivering step (b) comprises delivering a control method and at least one further method.
Claim 18
Dependent Claim
60 words
A method as in claim 2 wherein said delivering step (a) includes: encrypting at least a portion of said first procedure, communicating said at least in part encrypted first procedure to said electronic arrangement, decrypting at least a portion of said first procedure at least in part using said electronic arrangement, and validating said first procedure with said electronic arrangement.
Claim 19
Dependent Claim
26 words
A method as in claim 2 wherein said delivering step (b) includes delivering at least one of said first and second procedures within an administrative object.
Claim 20
Dependent Claim
27 words
A method as in claim 2 wherein said delivering step (b) includes codelivering said second procedure in at least in part encrypted form with said data item.
Claim 21
Dependent Claim
13 words
A method as in claim 2 wherein said performing step includes metering usage.
Claim 22
Dependent Claim
13 words
A method as in claim 2 wherein said performing step includes auditing usage.
Claim 23
Dependent Claim
13 words
A method as in claim 2 wherein said performing step includes budgeting usage.
Claim 24
Independent Claim
128 words
A method of securely controlling use by a third party of at least one protected operation with respect to a data item comprising: (a) supplying at least a first control from a first party to said third party; (b) supplying, to said third party, at least a second control from a second party different from said first party; (c) securely combining. at said third party's location, said first and second controls to form a control arrangement; (d) securely requiring use of said control arrangement in order to perform at least one protected operation using said data item; and (e) securely performing said at least one protected operation on behalf of said third party with respect to said data item by at least in part employing said control arrangement.
Claim 25
Independent Claim
128 words
A method of securely controlling use by a third party of at least one protected operation with respect to a data item comprising: (a) supplying at least a first control from a first party to said third party; (b) supplying, to said third party, at least a second control from a second party different from said first party; (c) securely combining. at said third party's location, said first and second controls to form a control arrangement; (d) securely requiring use of said control arrangement in order to perform at least one protected operation using said data item; and (e) securely performing said at least one protected operation on behalf of said third party with respect to said data item by at least in part employing said control arrangement.
Claim 26
Dependent Claim
12 words
A method as in claim 22 wherein said data item is protected.
Claim 27
Dependent Claim
31 words
A method as in claim 22 wherein at least one of said plural controls includes a control relating to metering at least one aspect of use of said protected data item.
Claim 28
Dependent Claim
31 words
A method as in claim 22 wherein at least one of said plural controls include a control relating to budgeting at least one aspect of use of said protected data item.
Claim 29
Dependent Claim
117 words
A secure method for combining data items into a composite data item comprising: (a) securely providing, from a first location to a second location, a first data item having at least a first control associated therewith; (b) securely providing, from a third location to said second location, a second data item having at least a second control associated therewith; (c) forming, at said second location, a composite of said first and second data items; (d) securely combining. at said second location, said first and second controls to form a control arrangement; and (e) performing at least one operation on said composite of said first and second data items based at least in part on said control arrangement.
Claim 30
Dependent Claim
117 words
A secure method for combining data items into a composite data item comprising: (a) securely providing, from a first location to a second location, a first data item having at least a first control associated therewith; (b) securely providing, from a third location to said second location, a second data item having at least a second control associated therewith; (c) forming, at said second location, a composite of said first and second data items; (d) securely combining. at said second location, said first and second controls to form a control arrangement; and (e) performing at least one operation on said composite of said first and second data items based at least in part on said control arrangement.
Claim 31
Dependent Claim
23 words
A method as in claim 26 wherein said combining step includes preserving each of said first and second controls in said composite set.
Claim 32
Dependent Claim
34 words
A method as in claim 26 wherein said performing step comprises governing the operation on said composite of said first and second data items in accordance with said first control and said second control.
Claim 33
Dependent Claim
42 words
A method as in claim 26 wherein said providing step includes ensuring the integrity of said association between said first controls and said first data item is maintained during at least one of transmission, storage and processing of said first data item.
Claim 34
Dependent Claim
21 words
A method as in claim 26 wherein said providing step comprises delivering said first data item separately from said first control.
Claim 35
Dependent Claim
20 words
A method as in claim 26 wherein said providing step comprises codelivering said first data item and said first control.
Claim 36
Dependent Claim
117 words
A secure method for controlling a protected operation comprising: (a) securely delivering at least a first control and a second control representing rights of first and second entities, respectively, to an electronic appliance used by a third entity; and (b) controlling at least one protected operation at least in part in response to a request by said third entity based at least in part on a combination of said first and second controls, including at least one of the following steps: resolving at least one conflict between said first and second controls based on a predefined order; providing an interaction with said third entity to form said combination; and dynamically negotiating between said first and second controls.
Claim 37
Dependent Claim
117 words
A secure method for controlling a protected operation comprising: (a) securely delivering at least a first control and a second control representing rights of first and second entities, respectively, to an electronic appliance used by a third entity; and (b) controlling at least one protected operation at least in part in response to a request by said third entity based at least in part on a combination of said first and second controls, including at least one of the following steps: resolving at least one conflict between said first and second controls based on a predefined order; providing an interaction with said third entity to form said combination; and dynamically negotiating between said first and second controls.
Claim 38
Dependent Claim
17 words
A method as in claim 32 wherein said controlling step (b) includes controlling decryption of electronic content.
Claim 39
Dependent Claim
30 words
A method as in claim 32 further including: receiving protected electronic content from a party; and authenticating the identity of said party prior to using said received protected electronic content.
Claim 40
Independent Claim
93 words
A method for using at least one resource processed by a secure operating environment, said method comprising: securely receiving a first load module provided by a first entity external to said operating environment; securely receiving a second load module provided by a second entity external to said operating environment, said second entity being different from said first entity; and securely processing, using at least one resource, a data item associated with said first and second load modules, including securely applying said first and second load modules to manage use of said data item.
Claim 41
Independent Claim
93 words
A method for using at least one resource processed by a secure operating environment, said method comprising: securely receiving a first load module provided by a first entity external to said operating environment; securely receiving a second load module provided by a second entity external to said operating environment, said second entity being different from said first entity; and securely processing, using at least one resource, a data item associated with said first and second load modules, including securely applying said first and second load modules to manage use of said data item.
Claim 42
Dependent Claim
105 words
A secure operating environment system for managing at least one resource comprising: a communications arrangement that securely receives a first control of a first entity external to said operating environment, and securely receives a second control of a second entity external to said operating environment, said second entity being different from said first entity; and a protected processing environment, operatively connected to said communications arrangement, that: (a) securely processes, using at least one resource, a data item logically associated with said first and second controls, and (b) securely applies said first and second controls to manage said resource for controlling use of said data item.
Claim 43
Dependent Claim
105 words
A secure operating environment system for managing at least one resource comprising: a communications arrangement that securely receives a first control of a first entity external to said operating environment, and securely receives a second control of a second entity external to said operating environment, said second entity being different from said first entity; and a protected processing environment, operatively connected to said communications arrangement, that: (a) securely processes, using at least one resource, a data item logically associated with said first and second controls, and (b) securely applies said first and second controls to manage said resource for controlling use of said data item.
Claim 44
Dependent Claim
29 words
A method as in claim 1 further including securely and persistently associating at least one of said first entity's control and said second entity's control with said data item.
Claim 45
Dependent Claim
25 words
A method as in claim 2 further including securely and persistently associating at least one of said first and second procedures with said data item.
Claim 46
Dependent Claim
33 words
A method as in claim 22 further including securely and persistently associating at least one of: (a) said first control, (b) said second control, and (c) said control arrangement, with said data item.
Claim 47
Dependent Claim
45 words
A method as in claim 26 further including the step of securely ensuring that at least one of (a) said first control, (b) said second control, and (c) said control arrangement, is persistently associated with at least one of said first and second data items.
Claim 48
Dependent Claim
28 words
A method as in claim 32 further including the step of persistently and securely associating at least one of said first and second controls with said protected operation.
Claim 49
Dependent Claim
29 words
A method as in claim 35 further including the step of persistently and securely associating at least one of said first and second load modules with said data item.
Claim 50
Dependent Claim
28 words
A system as in claim 36 wherein said protected processing environment securely and persistently associates at least one of said first and second controls with said data item.
Claim 51
Dependent Claim
26 words
A method as in claim 1 further including the step of allowing a user to select between said first entity's control and said second entity's control.
Claim 52
Dependent Claim
24 words
A method as in claim 22 further including the step of allowing a user to select between said first procedure and said second procedure.
Claim 53
Dependent Claim
24 words
A method as in claim 22 further including the step of allowing a user to select between said first control and said second control.
Claim 54
Dependent Claim
24 words
A method as in claim 26 further including the step of allowing a user to select between said first control and said second control.
Claim 55
Dependent Claim
24 words
A method as in claim 32 further including the step of allowing a user to select between said first control and said second control.
Claim 56
Dependent Claim
26 words
A method as in claim 35 further including the step of allowing a user to select between said first load module and said second load module.
Claim 57
Dependent Claim
24 words
A system as in claim 36 wherein said protected processing environment allows said user to select between said first control and said second control.
Claim 58
Dependent Claim
21 words
A method as in claim 1 wherein at least said secure processing step is performed at an end user electronic appliance.
Claim 59
Dependent Claim
20 words
A method as in claim 2 wherein at least said performing step is performed at an end user electronic appliance.
Claim 60
Dependent Claim
22 words
A method as in claim 22 wherein at least two of the recited steps are performed at an end user electronic appliance.
Claim 61
Dependent Claim
24 words
A method as in claim 26 wherein at least one of steps (c), (d) and (e) is performed at an end user electronic appliance.
Claim 62
Dependent Claim
17 words
A method as in claim 32 wherein step (b) is performed at an end user electronic appliance.
Claim 63
Dependent Claim
22 words
A method as in claim 35 wherein at least two of the recited steps are performed at an end user electronic appliance.
Claim 64
Dependent Claim
19 words
A system as in claim 36 wherein said protected processing environment is part of an end user electronic appliance.
Claim 65
Dependent Claim
62 words
A method as in claim 1 wherein the step of securely receiving a first entity's control comprises securely receiving said first entity's control from a remote location over a telecommunications link, and the step of securely receiving said second entity's control comprises securely receiving said second entity's control from the same or different remote location over the same or different telecommunications link.
Claim 66
Dependent Claim
46 words
A method as in claim 2 wherein step (a) comprises securely delivering said first procedure from a remote location over a telecommunications link, and step (b) comprises securely delivering said second procedure from the same or different remote location over the same or different telecommunications link.
Claim 67
Dependent Claim
46 words
A method as in claim 22 wherein step (a) comprises supplying said first control from at least one remote location over a telecommunications link, and step (b) comprises supplying said second control from the same or different remote location over the same or different telecommunications link.
Claim 68
Dependent Claim
48 words
A method as in claim 26 wherein step (a) comprises providing said first data item from at least one remote location over a telecommunications link, and step (b) comprises providing said second data item from the same or different remote location over the same or different telecommunications link.
Claim 69
Dependent Claim
29 words
A method as in claim 32 wherein step (a) comprises securely delivering said first and second controls from at least one remote location over at least one telecommunications link.
Claim 70
Dependent Claim
60 words
A method as in claim 35 wherein said first load module receiving step comprises securely receiving said first load module from at least one remote location over at least one telecommunications link, and said second load module receiving step comprises securely receiving said second load module from the same or different remote location over the same or different telecommunications link.
Claim 71
Dependent Claim
28 words
A system as in claim 36 wherein said communications arrangement receives said first and second controls from at least one remote location over at least one telecommunications link.
Claim 72
Dependent Claim
23 words
A method as in claim 1 wherein the processing step includes processing said first and second controls within the same secure processing environment.
Claim 73
Dependent Claim
22 words
A method as in claim 2 wherein step (c) includes executing said first and second procedures within the same secure processing environment.
Claim 74
Dependent Claim
24 words
A method as in claim 22 wherein at least step (c) is performed within the same secure processing environment at said third party's location.
Claim 75
Dependent Claim
21 words
A method as in claim 26 wherein step (d) is performed within the same secure processing environment at said second location.
Claim 76
Dependent Claim
32 words
A method as in claim 32 wherein step (a) comprises securely delivering said first and second controls into said same secure processing environment used by or on behalf of said third entity.
Claim 77
Dependent Claim
26 words
A method as in claim 35 wherein said securely processing step comprises securely executing said first and second load modules within the same secure processing environment.
Claim 78
Dependent Claim
28 words
A method as in claim 1 further including the step of securely combining said first entity's control and said second entity's control to provide a combined control arrangement.
Claim 79
Dependent Claim
19 words
A method as in claim 2 further including combining said first and second procedures to provide a combined procedure.
Claim 80
Dependent Claim
21 words
A method as in claim 32 further including securely combining said first and second controls to provide a combined control arrangement.
Claim 81
Dependent Claim
21 words
A method as in claim 35 further including securely combining said first and second load modules to provide a combined executable.
Claim 82
Dependent Claim
23 words
A system as in claim 36 wherein said protected processing environment combines said first and second controls to provide a combined control arrangement.
Claim 83
Dependent Claim
18 words
A method as in claim 1 wherein said two securely receiving steps are independently performed at different times.
Claim 84
Dependent Claim
14 words
A method as in claim 3 wherein steps (a) and (b) are independently performed.
Claim 85
Dependent Claim
16 words
A method as in claim 22 wherein steps (a) and (b) are performed at different times.
Claim 86
Dependent Claim
16 words
A method as in claim 26 wherein steps (a) and (b) are performed at different times.
Claim 87
Dependent Claim
22 words
A method as in claim 32 wherein step (a) includes securely and independently delivering said first and second controls at different times.
Claim 88
Dependent Claim
17 words
A method as in claim 35 wherein said securely receiving steps are performed independently at different times.
Claim 89
Dependent Claim
20 words
A system as in claim 36 wherein said communications arrangement independently receives said first and second controls at different times.
Claim 90
Dependent Claim
34 words
A method as in claim 2 further including the step (d) of securely conditioning at least one aspect of use of said data item based on said delivering steps (a) and (b) having occurred.
Claim 91
Dependent Claim
32 words
A method as in claim 1 wherein at least one of the first entity's control and the second entity's control comprises at least one executable component and at least one data component.
Claim 92
Dependent Claim
28 words
A method as in claim 22 wherein at least one of the first and second controls comprises at least one executable component and at least one data component.
Claim 93
Dependent Claim
28 words
A method as in claim 26 wherein at least one of the first and second controls comprises at least one executable component and at least one data component.
Claim 94
Dependent Claim
28 words
A method as in claim 32 wherein at least one of the first and second controls comprises at least one executable component and at least one data component.
Claim 95
Dependent Claim
52 words
A system as in claim 36 wherein at least one of the first control and second controls comprises at least one executable component and at least one data component, and the protected processing environment executes the executable component in a manner that is at least in part responsive to the data component.
Claim 96
Dependent Claim
61 words
A method as in claim 1 wherein said first appliance includes a protected processing environment, and wherein: said method further comprises a step of receiving, at said first appliance, said data item separately and at a different time from said receiving said first entity's control; and said securely processing step is performed at least in part in said protected processing environment.
Claim 97
Dependent Claim
49 words
A method as in claim 2 wherein: said method further comprises a step of delivering said data item to said electronic arrangement separately and at a different time from said delivering said first procedure; and said performing step is performed at least in part in a protected processing environment.
Claim 98
Dependent Claim
54 words
A method as in claim 22 wherein: said method further comprises supplying said data item to said third party separately and at a different time from supplying of said first control to said third party; and said securely performing step comprises performing said protected operation at least in part in a protected processing environment.
Claim 99
Dependent Claim
65 words
A method as in claim 26 wherein: said method further includes the steps of: providing said first data item separately and at a different time from providing of said first control, and providing said second data item separately and at a different time from providing of said second control; and step (e) comprises performing said operation at least in part in a protected processing environment.
Claim 100
Dependent Claim
67 words
A method as in claim 32 wherein: said method further comprises delivering a data item to said electronic appliance; said securely delivering step (a) further comprises delivering at least one of said first control and said second control separately and at a different time from delivering said data item; and said method further includes performing said protected operation at least in part in a protected processing environment.
Claim 101
Dependent Claim
66 words
A method as in claim 35 wherein said secure operating environment includes a protected processing environment, and wherein: said method further comprises receiving a data item within said secure operating environment; said first load module receiving step is performed separately and at a time different from receiving said data item; and said securely processing step is performed at least in part in said protected processing environment.
Claim 102
Dependent Claim
36 words
A secure operating environment system as in claim 36 wherein said communications arrangement also receives a data item separately and at a different time from at least one of said first control and said second control.
Claim 103
Dependent Claim
115 words
A method as in claim 1 wherein said first appliance is at least a part of an arrangement at a user site providing an input/output bus connecting a first electronic subsystem with at least a second electronic subsystem, said first electronic subsystem including a first electrical connector connected to said input/output bus, said second electronic subsystem including a second electrical connector connected to said input/output bus, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus and transferring at least a portion of said data item over said secure transmission channel from said first electronic to said second electronic subsystem through said first and second connectors and said input/output bus.
Claim 104
Dependent Claim
111 words
A method as in claim 2 wherein said electronic arrangement is disposed at a user site and provides an input/output bus connecting a first electronic appliance with at least a second electronic appliance, said first electronic appliance including a first electrical connector connected to said input/output bus, said second electronic appliance including a further electrical connector connected to said input/output bus, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus and transferring at least a portion of said data item over said secure transmission channel from said first electronic appliance to said second electronic appliance through said first and second connectors and said input/output bus.
Claim 105
Dependent Claim
104 words
A method as in claim 22 wherein an input/output bus at said third party's location connects a first electronic appliance with at least a second electronic appliance, said first electronic appliance including a first electrical connector connected to said input/output bus, said second electronic appliance including a second electrical connector connected to said input/output bus, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus and transferring at least a portion of said data item over said secure transmission channel from first electronic appliance to said second electronic appliance through said first and second connectors and said input/output bus.
Claim 106
Dependent Claim
113 words
A method as in claim 26 wherein an input/output bus at said second location connects a first electronic appliance with at least a second electronic appliance, said first electronic appliance including a first electrical connector connected to said input/output bus, said second electronic appliance including a second electrical connector connected to said input/output bus, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus and transferring at least a portion of at least one of said first data item and said second data item over said secure transmission channel from first electronic appliance to said second electronic appliance through said first and second connectors and said input/output bus.
Claim 107
Dependent Claim
94 words
A method as in claim 32 wherein said electronic appliance includes a first electronic subsystem having a first electrical connector, a second electronic subsystem having a second electronic connector, and an input/output bus connecting said first electronic subsystem with said second electronic subsystem, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus and transferring at least a portion of at least one data item over said secure transmission channel from first electronic subsystem to said second electronic subsystem through said first and second connectors and said input/output bus.
Claim 108
Dependent Claim
115 words
A method as in claim 35 wherein said secure operating environment is contained within an arrangement at a user site further comprising an input/output bus connecting a first electronic appliance with at least a second electronic appliance, said first electronic appliance including a first electrical connector connected to said input/output bus, said second electronic appliance including a second electrical connector connected to said input/output bus, and wherein: said method further comprises establishing a secure transmission channel on said input/output bus, and transferring at least a portion of said data item over said secure transmission channel from said first electronic appliance to said second electronic appliance through said first and second connectors and said input/output bus.
Claim 109
Dependent Claim
104 words
A secure operating environment system as in claim 36 wherein the secure operating environment is located at a user site and wherein: said system further comprises: a first electronic appliance including a first electrical connector, a second electronic appliance including a second electrical connector, and an input/output bus connecting said first electrical connector with said second electrical connector; and wherein said communications arrangement is coupled to said input/output bus, opens a secure transmission channel on said input/output bus, and transfers at least a portion of said data item over said secure transmission channel through said first and second electrical connectors and said input/output bus.