Abstract: Disclosed are a group of single nucleotide polymorphism (SNP) loci and a method for identifying biogeographic origins of East Asian populations, and belong to the technical field of gene identification. The application takes single nucleotide polymorphism molecular genetic markers as objects, systematically selects loci with high genetic differentiation in the East Asian populations of Beijing Han population, Southern Han population, Dai population, Japanese and Kinh Population from Vietnam, and constructs an efficient, simple and fast artificial intelligence model through the XGBoost machine learning algorithm for analyzing biogeographic origins of five East Asian populations.

Abstract: Remote devices have replaced keys as a means to access a secure feature of a vehicle. Remote door locks, starters, climate control, trunk openers, etc., have allowed vehicles to be more welcoming and easier to use. However, such functions often rely on radio frequency transmissions that can merely relay signals coming from an authorized device that may allow a nefarious user to access the vehicle or contents therein. By encoding sequence numbers and timestamps within an exchange, a vehicle may determine that an authorized user is too far away to be granted access to the secure feature, thereby denying access to the nefarious user implementing a relay attack on the vehicle.

Abstract: Remote devices have replaced keys as a means to access a secure feature of a vehicle. Remote door locks, starters, climate control, trunk openers, etc., have allowed vehicles to be more welcoming and easier to use. However, such functions often rely on radio frequency transmissions that can merely relay signals coming from an authorized device that may allow a nefarious user to access the vehicle or contents therein. By encoding sequence numbers and timestamps within an exchange, a vehicle may determine that an authorized user is too far away to be granted access to the secure feature, thereby denying access to the nefarious user implementing a relay attack on the vehicle.

Abstract: Embodiments of the present disclosure are directed to methods and systems for providing secure over-the-air firmware updates to one or more vehicles. More specifically, the present disclosure describes applying to firmware images distributed to one or more vehicles encryption that is unique to each update version. The encryption is also unique to each vehicle receiving the update. Embodiments of the present disclosure can also include determining and verifying the integrity of an available OTA firmware update prior to authorizing installation of the firmware update in a vehicle.

Abstract: Embodiments of the present disclosure are directed to methods and systems for providing secure over-the-air firmware updates to one or more vehicles. More specifically, the present disclosure describes applying to firmware images distributed to one or more vehicles encryption that is unique to each update version. The encryption is also unique to each vehicle receiving the update. Embodiments of the present disclosure can also include determining and verifying the integrity of an available OTA firmware update prior to authorizing installation of the firmware update in a vehicle.

Abstract: When operating these different environments, the infrastructure of and around a vehicle should be secure to prevent unauthorized and possibly malicious access to the vehicle and the systems therein. To obtain this security, the various systems and components of the vehicle can utilize certificates to authenticate and authorize users as well as equipment and/or components interfacing with the vehicle. According to one embodiment, a portable compute device or tool with internet access can be used in any one or more environments to transport certificates used to support secure connectivity for vehicle systems in a state where the vehicle may or may not have immediate internet access. This tool can also provide various service functions in these different environments. These functions can include performing diagnostics, updating firmware images, collecting log and other data from the vehicle, etc.

Abstract: The disclosed computer-implemented method for locating unrecognized computing devices may include (1) identifying a plurality of cooperating computing devices on a wireless network that are each configured with a device location application, (2) determining a physical location for each cooperating computing device within the plurality of cooperating computing devices, (3) receiving, from the device location application on the plurality of cooperating computing devices, data about packets intercepted by the plurality of cooperating computing devices that are directed to the wireless network by an unrecognized computing device, and (4) locating the unrecognized computing device based on information received from the plurality of cooperating computing devices that identifies both the physical location for each cooperating computing device and signal strengths of the packets intercepted by the plurality of cooperating computing devices.

Abstract: A wireless router configured to detect an intruder. In one embodiment, a method may include monitoring received signal strength in a wireless router and creating a profile of the received signal strength as monitored during a learn mode. The method may also include comparing activity of the received signal strength in the wireless router, during an intruder detection mode, to the profile and issuing a notification, based on the comparing.

Abstract: A method and system for intruder detection is provided. The method includes generating a whitelist of media access control (MAC) addresses of a plurality of wireless devices that are acceptable in a detection zone of a wireless router and detecting, by the wireless router, a further wireless device. The method includes issuing a notification in response to absence, on the whitelist, of a media access control address of the further wireless device, the notification indicating a physical intruder within the detection zone, wherein at least one action of the method is performed by a processor in or coupled to the wireless router.

Abstract: A method for a secure boot of a vehicular system is provided. The method includes performing a security self-verification on a first electronic control unit (ECU) of a vehicular system and sending a security challenge to a second electronic control unit of the vehicular system. The method includes verifying a security response from the second electronic control unit, the security response relating to the security challenge and indicating an aspect of contents of memory of the second electronic control unit. The performing the security self-verification and verifying the security response establishes a chain of trust that includes the first electronic control unit and the second electronic control unit.

Abstract: A method and system for detecting an intruder is provided. The method includes monitoring received signal strength in a wireless router and creating a profile of the received signal strength as monitored during a learn mode. The method includes comparing activity of the received signal strength in the wireless router, during an intruder detection mode, to the profile and issuing a notification, based on the comparing, wherein at least one step of the method is performed by a processor.

Abstract: A method for authenticating messages is provided. The method includes calculating a hash value based on a key and a message count value and receiving a data message associated with the message count value. The method includes receiving an authentication message that includes the message count value and a message authentication code derived from the data message, the message count value and the key. The method includes applying portions of the data message to look up portions of the hash value and combining the portions of the hash value to form a verification version of the message authentication code. The method includes determining whether the message authentication code matches the verification version of the message authentication code.

Abstract: A method for intruder detection is provided. The method includes determining received signal strength of a first wireless device, while the first wireless device is moved at random within a region and generating a profile of the received signal strength of the first wireless device. The method includes determining received signal strength of a second wireless device and issuing an alert, responsive to received signal strength of the second wireless device meeting the profile. An intruder detection system is also provided.

Abstract: The disclosed computer-implemented method for locating unrecognized computing devices may include (1) identifying a plurality of cooperating computing devices on a wireless network that are each configured with a device location application, (2) determining a physical location for each cooperating computing device within the plurality of cooperating computing devices, (3) receiving, from the device location application on the plurality of cooperating computing devices, data about packets intercepted by the plurality of cooperating computing devices that are directed to the wireless network by an unrecognized computing device, and (4) locating the unrecognized computing device based on information received from the plurality of cooperating computing devices that identifies both the physical location for each cooperating computing device and signal strengths of the packets intercepted by the plurality of cooperating computing devices.

Abstract: A method for intruder detection is provided. The method includes monitoring, at a wireless sniffer in a building, received signal strength relative to each of a plurality of wireless access points, wherein a first wireless access point of the plurality of wireless access points is located within the building and a second wireless access point of the plurality of wireless access points is located external to the building. The method includes creating a profile of the received signal strength from each of the plurality of wireless access points, during a learn mode and comparing activity of the received signal strength from each of the plurality of wireless access points to the profile, during an intruder detection mode. The method includes issuing a notification, based on the comparing. An intruder detection system is also provided.

Abstract: A computer-implemented method for authenticating messages in a control area network is described. In one embodiment, a message identifier for a data message is ascertained. Each device is associated with one or more message identifiers. The data message is sent from a first device to a second device. The data message is associated with the ascertained message identifier. An authentication code computed by the first device is sent to the second device. The authentication code is sent by the first device in the data message or in an authentication message.