Abstract: Disclosed in some examples are methods, systems, devices, and machine-readable mediums that detect evil twin and other anomalous access points in an IT infrastructure by detecting access points that are not in their expected locations based upon an analysis of access point reports from one or more computing devices.

Abstract: Disclosed in some examples are methods, systems, devices, and machine-readable mediums which provide for sidebar communication threads forked from, or related to, a principal thread. Messages in the sidebar communication thread may include a history of the principal thread, including one or more messages from the principal thread, and may include a proposed principal thread message that is the subject of the sidebar thread discussion. The sidebar thread may also include sidebar thread messages that carries the conversation of the sidebar thread participants. Once a termination condition is reached for the sidebar thread, the sidebar thread terminates and either the proposed principal thread message (as potentially modified by participants of the sidebar thread) becomes an accepted principal thread message and it is posted to the principal thread as if it was sent by the sidebar initiator or no message is posted (e.g., the proposed principal thread message is rejected).

Abstract: Disclosed in some examples are methods, systems, devices, and machine-readable mediums for authenticating a user using biometric data without distributing unencrypted biometric data or decrypting biometric data during authentication, including selecting, based on a first set of data points representing a biometric characteristic of a user, an encryption parameter of an encryption function, generating first encrypted challenge data by encrypting, by applying the encryption parameter to the encryption function, challenge data to create encrypted authentication data, receiving, from a network based authentication device, during an authentication process, second encrypted challenge data for authenticating the user, and determining whether to authenticate the user using a comparison of the first encrypted challenge data to the second encrypted challenge data.

Abstract: Disclosed are methods, systems, devices, and machine-readable mediums which provide for sidebar communication threads forked from, or related to, a principal thread. Messages in the sidebar communication thread may include a history of the principal thread, including one or more messages from the principal thread, and may include a proposed principal thread message that is the subject of the sidebar thread discussion. The sidebar thread may also include sidebar thread messages that carries the conversation of the sidebar thread participants. Once a termination condition is reached for the sidebar thread, the sidebar thread terminates and either the proposed principal thread message (as potentially modified by participants of the sidebar thread) becomes an accepted principal thread message and it is posted to the principal thread as if it was sent by the sidebar initiator or no message is posted (e.g., the proposed principal thread message is rejected).

Abstract: A system that can coordinate user interface formats having customized threads comprising messages from a common thread. Each client device can be managed by a data structure that defines thread containers, where individual thread containers define threads and topics for each thread. Each thread can also be associated with unique groups of messages. The data structure can cause each client computer to display different user interface formats, with each format showing different threads for each user. Users engaged in a chat on a parent thread can split the parent thread into multiple child threads, that can each be associated with unique topics. The system can then associate individual messages of the parent thread with each child thread. The system provides more granular control of user interface formats to allow users to separate messages of high-priority topics.

Abstract: The techniques disclosed herein provide a system that can identify two or more independently managed message threads and modify a user interface to enable a common user of the threads to view messages of both threads. For instance, if a user is participating in a first chat session that is displayed within a first message thread, the system can identify other threads that are related to the first thread. The related threads can be identified by a user input or by a query performed by a system. In some embodiments, the system can only search for threads that have at least one common user to the first thread. The system can provide this display of two related threads while linking the threads but not merging the messages of the threads. A data structure can be maintained to control the display of each thread.

Abstract: A method and system for providing a common group suggestion as a recipient of a message in a communication service are disclosed, comprising receiving a request to create a message, receiving first and second recipients of the message, identifying one or more common groups of a communication service based on received first and second recipients of the message, receiving a selection of one or more of the identified common groups, and transmitting a message to the selected common group.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable media for cryptography using different sized symbol sets. To protect against a brute force or other similar type of attack, multiple symbol sets having different sizes can be used for encrypting/decrypting data. For example, different portions of the data (e.g., data blocks representing multiple symbols, set of bits representing a single symbol) may be encrypted/decrypted using different symbol sets that include different numbers of unique symbols. Using different sized symbol sets adds additional complexity to the encryption process, thereby greatly increasing the difficulty in decrypting the encrypted data with a brute force attack.

Abstract: In some embodiments, a location of a mobile terminal is determined by obtaining a location of a first access point (AP), receiving a visibility indication indicating that a second AP received a signal from the first AP or the first AP received a signal from the second AP, determining a location of the second AP based on the received visibility indication and the location of the first AP, determining a location of the mobile terminal in communication with the second AP based on the determined location of the second AP, and transmitting a message indicating the location of the mobile terminal on a digital communication network.

Abstract: Disclosed in some examples are methods, systems, devices, and machine-readable mediums that detect evil twin and other anomalous access points in an IT infrastructure by detecting access points that are not in their expected locations based upon an analysis of access point reports from one or more computing devices.

Abstract: Disclosed in some examples are methods, systems and machine-readable mediums which allow for more secure authentication attempts by implementing authentication systems with credentials that include interspersed noise symbols in well-distributed positions determined by the user. These systems secure against eavesdroppers such as shoulder-surfers or man-in-the middle attacks as it is difficult for an eavesdropper to separate the well-distributed noise symbols from legitimate credential symbols.

Abstract: Techniques for modifying operation of sensors using collected sensor data are provided herein. Sensor data describing a physical environment of a user authorized to access an access-controlled resource is collected according to an initial mode of operation. The initial mode of operation defines an initial performance for at least one sensor used to collect the sensor data. In response to detecting presence of a different user in the physical environment of the authorized user based on the sensor data, the at least one sensor is switched from the initial mode of operation to a modified mode of operation. The modified mode of operation is different than the initial mode of operation and defines a revised performance for the at least one sensor used to collect the sensor data.

Abstract: A system that can coordinate user interface formats having customized threads comprising messages from a common thread. Each client device can be managed by a data structure that defines thread containers, where individual thread containers define threads and topics for each thread. Each thread can also be associated with unique groups of messages. The data structure can cause each client computer to display different user interface formats, with each format showing different threads for each user. Users engaged in a chat on a parent thread can split the parent thread into multiple child threads, that can each be associated with unique topics. The system can then associate individual messages of the parent thread with each child thread. The system provides more granular control of user interface formats to allow users to separate messages of high-priority topics.

Abstract: Disclosed in some examples are display systems, methods, devices, and machine-readable mediums which provide for a gesture-based method for specifying a region of a display in which to show shared content. Also disclosed are pairing methods for associating the region of the display with a content source device, methods for sharing content within the region, and methods for providing input from the region back to the content source device. Also disclosed in some examples are display systems, methods, devices, and machine-readable mediums which provide for notification handling for user interfaces.

Abstract: A method and system for automatically adjusting a participation queue among multiple participants of a communication session are disclosed, comprising adding contribution requests to speak or share content in the communication session to the participation queue, calculating a participation metric for each of the multiple participants, determining an order of entries in the participation queue based on a comparison of the participation metrics of the respective participants in the participation queue to a determined participation metric threshold, to increase a priority of an entry of a respective participant having a calculated participation metric below the determined participation metric threshold.

Abstract: A computing device stores a captured image as a transient image template when there is a failure in an image-based authentication of the captured image and the user of the computing device has provided user credentials that authorize the user to access the computing device. The transient image template may be used to further authorize the user to access the computing device during an established time period.

Abstract: The techniques disclosed herein provide enhanced security features for controlling access to shared content and private content of a document. A system can enable multiple users to access a common content file, such as a Word document. Each user can add additional private content unique to each individual user. Private content associated with a particular user is restricted from being shared with any other user. Thus, when a first user opens a file authored and/or owned by other users stored in a cloud storage service, the system allows that first user to see the common content that is shared by the other users plus private content that is unique to the first user, but not allow the first user to view other private content provided by the other users.

Abstract: The system manages a data structure that defines at least one topic limit for each client computer. The data structure can cause each client computer to display different user interface formats based on a topic limit that is allowed per thread. The data structure causes some devices, which may have a limited viewing area, to only show a single-topic thread, while the data structure also causes other devices to display multi-topic threads. Thus, for high priority topics or for devices having a limited display area, the system can cause the display of a single-topic thread pertaining to a topic to which an incoming message corresponds. This feature can improve user interaction by bringing focus to high priority threads when messages of a particular topic are received at select devices, while allowing other devices to provide a broader perspective of thread formats having multiple topics when the same messages are received.

Abstract: In some embodiments, a location of a mobile terminal is determined by obtaining a location of a first access point (AP), receiving a visibility indication indicating that a second AP received a signal from the first AP or the first AP received a signal from the second AP, determining a location of the second AP based on the received visibility indication and the location of the first AP, determining a location of the mobile terminal in communication with the second AP based on the determined location of the second AP, and transmitting a message indicating the location of the mobile terminal on a digital communication network.

Abstract: The techniques disclosed herein provide a system that can identify two or more independently managed message threads and modify a user interface to enable a common user of the threads to view messages of both threads. For instance, if a user is participating in a first chat session that is displayed within a first message thread, the system can identify other threads that are related to the first thread. The related threads can be identified by a user input or by a query performed by a system. In some embodiments, the system can only search for threads that have at least one common user to the first thread. The system can provide this display of two related threads while linking the threads but not merging the messages of the threads. A data structure can be maintained to control the display of each thread.