Abstract: A method of manufacturing a semiconductor package is provided, with an integrated heatsink and electrical connection feature. The semiconductor die can be attached to the terminal using eutectic bonding, preferably CuSn eutectic, Ag containing adhesives or Ag sintering material. These bondings are lead (Pb) free connection methods, which make the finished semiconductor package RoHS compliant (restriction of hazardous materials).

Abstract: A method is provided for securely providing data for use in a consumer electronics device having a processor performing instructions defined in a software image. The method includes receiving the data encrypted according to a global key, further encrypting the data according to a device-unique hardware key, storing the further encrypted data in a secure memory of the consumer electronics device, providing the global key to a whitebox encoder for encoding according to a base key to generate a whitebox encoded global key, and transmitting the software image to the consumer electronics device for storage in an operating memory of the consumer electronics device, the software image having a whitebox decoder utility corresponding to the whitebox encoder and the whitebox encoded global key.

Abstract: A method for signing data such as software images is provided that uses modules executable by a generic client to sign hashes of the software images rather than the images themselves. The method avoids both the requirement for new or updated client software and the uploading of full software images to the signing system. This approach uses a generic client that requests and downloads processing modules from the signing system to perform the pre-processing operations in signing software images, as well as optionally for post-processing operations.

Abstract: A method and apparatus for distributing a software release is disclosed. The method comprises accepting, in a software distribution system, a software download configuration from a software download system administrator, the software download configuration comprising: first information defining software post processing, the software post processing identifying: a software image to be included in the software release; and a post processing operation to be performed on the software image, the post processing operation associated with a post processing configuration specifying post processing operation parameters defining how the post processing operation is performed by the post processing server; and second information defining a restriction on distribution of the software release.

Abstract: A respirator (100) includes a face mask (130), a porous filter (230) comprising a filtration material, an air flow system (120) in fluid communication with the porous filter (230) and the face mask (130), and an oxidant generator (850) configured to produce at least one oxidant. The air flow system (120) includes an enclosed container (121) and a blower (310) housed within the enclosed container (121). The air flow system (120) is configured to generate a flow of air such that ambient air passes through the porous filter (230) to the face mask (130). At least one contaminant in the flow of air is adsorbed by the porous filter (230), and the filtration material catalyzes an oxidation reaction between the oxidant and the contaminant to promote decomposition of the contaminant on the porous filter (230). According to another aspect, provided is an air purification system including at least one respirator (100) and a decontamination device (800).

Abstract: A method and apparatus, and system for providing device credentials to a plurality of devices is disclosed.

Abstract: A system is provided for configurably signing a secure data image that includes software code that interprets cryptographic atomic code. In the system, a code signing engine includes an interpreter that interprets atomic code signing operations presented in a recipe defined by a system administrator according to configuration parameter values supplied with the input image.

Abstract: In one aspect, provided is an aqueous antiseptic composition comprising glycerin 8.5-16%by weight; caprylyl glycol 0.45-3%by weight; and a first ingredient; wherein the first ingredient is acrylates/C10-30 about 0.01-0.1%by weight or ethoxydiglycol about 1-5% by weight. The glycerin, the caprylyl glycol and the first ingredient taken together form a first component. A sum of the first component is more than 13%by weight of the antiseptic composition. Other exemplary embodiments are also described. In certain embodiments, provided is an antiseptic composition useful for making skin or hand sanitizers that has a long-lasting, great antiseptic efficacy but at the same time having skin-moisturizing, low toxicity and low skin-irritating, hypo-allergenic properties, low inflammability, and low production cost.

Abstract: A method and apparatus for revoking and replacing digital certificates issued by distributed servers is disclosed. An architecture in which issued certificates from distributed factory and field provisioning servers are gathered into a centrally managed certificate authority which manages the full certificate lifecycle. Revocation and rekey approvals are performed through this central certificate authority, while the resulting revocation status and rekey approvals are made available for consumption by those same distributed servers.

Abstract: A system and method for provisioning confidential data such as unique credentials is described. The technique initializes a whitebox cryptographic software module to a particular PKI client to soft-lock whitebox cryptographic operations to the particular PKI client and uniquely encrypting the credentials with a node-locking key (NLK) derivable from a digital certificate.

Abstract: A system and method for providing a providing security credential is disclosed. In one embodiment, the method comprises accepting a request to generate at least one key in an online data signing system; generating, in a hardware security module communicatively coupled to the online data signing system, a first key K1 as a temporary object; encrypting, by the hardware security module, the first key K1 according to a wrapping key Kw to produce an encrypted first key EKw[K1]; storing the encrypted first key; and providing a second key K2 associated with the first key K1 to a user device communicatively coupled to the online data signing system.

Abstract: A system and method for authenticating a user device is disclosed. In one embodiment, the method comprises: transmitting a request for credentials from the user device, wherein the request comprises a user device identifier and the credentials comprise an asymmetric key pair having a public key and an associated private key, the private key being encrypted; receiving the credentials in the user device, the credentials comprising the encrypted private key and the public key; retrieving quick response (QR) code data associated with the user device identifier from a QR code data directory, the QR code data generated from the public key and stored in the QR code data directory according to the user device identifier by a secure online service; extracting the public key from the QR code data; and establishing an authenticated and encrypted communication session with the user device according to the extracted public key.

Abstract: A system is provided for configurably signing a secure data image that includes software code that interprets cryptographic atomic code. In the system, a code signing engine includes an interpreter that interprets atomic code signing operations presented in a recipe defined by a system administrator according to configuration parameter values supplied with the input image.

Abstract: A system is provided for distribution of device key sets over a network in a protected software environment (PSE). In the system, a client device includes a connection interface for receiving a crypto hardware (CH) token belonging to a user, untrusted software, a quoting enclave, and a PSE for generating a provisioning request for a device key set. An attestation proxy server (APS) receives the provisioning message using a first network connection, and transmits the provisioning message to an online provisioning server (OPS) using a second network connection. The OPS constructs a provisioning response and an encrypted device key set, and delivers the provisioning response to the untrusted software using the first and second network connections. The PSE decrypts the encrypted device key set to obtain the device key set, re-encrypts the device key set with a local chip-specific key, and stores the re-encrypted device key set.

Abstract: In one aspect, provided is an aqueous antiseptic composition comprising glycerin 8.5-16% by weight; caprylyl glycol 0.45-3% by weight; and a first ingredient; wherein the first ingredient is acrylates/C10-30 about 0.01-0.1% by weight or ethoxydiglycol about 1-5% by weight. The glycerin, the caprylyl glycol and the first ingredient taken together form a first component. A sum of the first component is more than 13% by weight of the antiseptic composition. Other exemplary embodiments are also described. In certain embodiments, provided is an antiseptic composition useful for making skin or hand sanitizers that have a long-lasting, great antiseptic efficacy but at the same time having skin-moisturizing, low toxicity and low skin-irritating, hypo-allergenic properties, low inflammability, and low production cost.

Abstract: In a system comprising an customer providing a service to a plurality of client devices, a method and system for providing an customer-specific digital certificate to a client device of the plurality of client devices is disclosed. The method comprises receiving, in an intermediate certificate authority, a pre-generated digital certificate and an encrypted client device private key encrypted according to a private key encryption key PrKEK, receiving, from the client device, a request for the customer-specific digital certificate, the request comprising at least one of client device identifying information and information identifying the customer, the request signed according to a pre-provisioned client device digital certificate, and transmitting the customer-specific digital certificate and the encrypted client device private key to the client device.

Abstract: A method and system are provided for updating an elliptic curve (EC) base point G, with the EC basepoint used in encryption and coding of video data. A candidate base point G is generated that includes additional data used for validation purposes and checked as a valid base point before transmission and use.

Abstract: To address the requirements described above, this document discloses a system and method for performing an action on at least one resource node of a hierarchical organization of resource nodes is disclosed. The system utilizes an external Identity Provider that provide more flexible authentication and authorization services, and leverages such services with secure server such as an on-line data signing service to provide flexible permission management.

Abstract: An interactive system for pets comprising: a pet interaction device arranged to engage and capture an actuating motion of a pet, the pet interaction device comprising: one or more actuators for actuation by the pet, the one or more actuators configured to produce a stimulus for the pet or owner, a computing apparatus comprising a processing unit and a memory unit, wherein the processing unit is in communication with the one or more actuators and configured to stimulate or receive the actuating motion of the pet, and wherein the processing unit is further arranged to process the captured actuating motion and communicate the captured actuating motion to the owner.