Abstract: Techniques are provided for computing with private healthcare data. The techniques include a method comprising constructing an isolated memory partition that forms a secure enclave and pre-provisioning software within the secure enclave. The pre-provisioned software is configured to receive at least one of input data or the instructions for the one or more application computing processes in an encrypted form; decrypt the at least one of input data or instructions using one or more cryptographic keys; execute the one or more application computing processes based on the decrypted at least one of input data or instructions to generate output data; generate a proof of execution that indicates that the one or more application computing processes operated on the received input data; encrypt the output data using the one or more cryptographic keys; and provide external access to the encrypted output data and the proof of execution.

Abstract: System and methods are provided to create representations of geographic areas. Such representations enable users to search for items and services of interest and to quickly locate and utilize such items and services. Representations are created using user preferences thus reducing the amount of information presented to a user, i.e., user preferences control the contents of a representation. Control APIs contained within a representation may be used to control devices represented in a representation or to manufacture them using 3-D printing technologies. Methods to learn user preferences via his movements and other actions and impose a user's preferences upon an environment are shown. Some details of the invention are described by applying the invention to problems in retail marketing and figures depicting an implementation illustrate certain aspects of the invention.

Abstract: Applications of the privacy switch technology are shown for handling data breaches in database systems, thereby providing fundamental improvements to the security and utility of database technology.

Abstract: An online service provisioning process is provided during which the service provider's knowledge about the user to whom the service is delivered does not increase. This is accomplished by presenting user attribute information to the service provider as obfuscated objects that can be independently verified and which are privacy preserving.

Abstract: A method of associating multiple user endpoints (UEs) with a single IMS session in an IMS network having a serving node for controlling at least one IMS session for a user and at least a first access network for providing access to UEs. The method involves associating a first UE with the user and with an IMS session; discovering a second UE in a proximity of the first UE; discovering information about the second UE; communicating the information about the second UE to the serving node; the serving node utilizing computer-implemented policy logic to determine whether to associate the second UE with the user and the IMS session; and if the policy logic determines that the second UE is to be associated, the serving node associating the second UE with the IMS session while retaining the association with the first UE.

Abstract: A system and method is presented that extracts snippets form web pages according to specially designed logic. The extracted snippets might be made relevant to, i.e., indexed by, a location and time/day applicability. Such snippets may be thought of as apps or services that are defined only when a mobile terminal is in a pre-defined geographical area at a certain time and day (e.g., as defined by a calendar of events). Extracted snippets are stored and made searchable. Methods and a system are described to control the display of snippet search results. Snippets may be selected by user or by programmed logic and executed on the mobile terminal or in remote servers without the need to download the app or source code associated with the snippet.

Abstract: A method for obtaining a representation of an environment includes requesting device context information from a user device. The request is sent to the user device from a virtual machine environment established by a database processor. The virtual machine environment is established by the database processor in response to a request received from the user device over a network for a representation of an environment. User preference information is requested and the device context information and the user preference information are received in the virtual machine environment. Based on the device context information, an environmental data set (EDS) is identified that includes information reflective of the environment. The EDS is received in the virtual machine environment and the EDS is modified based at least in part on the user preference information. Executable computer code is constructed for generating a representation from the modified EDS and sent to the user device.

Abstract: A system and method is provided for using information broadcast by devices and resources in the immediate vicinity of a mobile device, or by sensors located within the mobile device itself, to ascertain and make a determination of the immediate environment and state of the mobile device. This determination may be used to control and manage the actions that the device is asked to carry out by or on behalf of the user.

Abstract: A method for sharing information has an assertion associated therewith such that the receiving communication device is able to verify the assertion without the sender revealing underlying data demonstrating the validity of the assertion. The assertion is derived from underlying data input to a pre-provisioned first algorithm. The assertion is encapsulated in a first data object by a PGE that controls an environment in which the first algorithm is executed. A first proof is generated that is configured to verify that the first algorithm used the underlying data to produce the assertion when provided to a PVE along with the first data object. The underlying data is excluded from the first proof and the first data object such that privacy of the underlying data is maintained. The information, the first proof and the first data object are sent to the receiving communication device from the sending communication device.

Abstract: System and methods are described to create successive abstractions of real and virtual environments and objects. A common framework is provided to define abstractions for a large collection of various input data feeds. It is assumed that environments are either instrumented to produce such messages or that they may contain sensors or smart devices that generate such messages. Incoming messages are analyzed preserving latency requirements and without imposing unduly heavy procedures. The analysis yields various abstractions at several scales that can be utilized by application programs. A system architecture using specialized storage mechanisms is proposed that preserves the latency requirements of the incoming data messages and the generated abstractions.

Abstract: A method for sharing information has an assertion associated therewith such that the receiving communication device is able to verify the assertion without the sender revealing underlying data demonstrating the validity of the assertion. The assertion is derived from underlying data input to a pre-provisioned first algorithm. The assertion is encapsulated in a first data object by a PGE that controls an environment in which the first algorithm is executed. A first proof is generated that is configured to verify that the first algorithm used the underlying data to produce the assertion when provided to a PVE along with the first data object. The underlying data is excluded from the first proof and the first data object such that privacy of the underlying data is maintained. The information, the first proof and the first data object are sent to the receiving communication device from the sending communication device.

Abstract: In accordance with a method of verifying a transaction between a user communication device and a third party, a request is received at each of a plurality of elector nodes to verify the transaction. A leader node is selected from among the elector nodes using a Proof of Elapsed Time (PoET) consensus decision-making algorithm in which each of the elector nodes is assigned a random wait time, the leader node being a first of the elector nodes whose wait time is exceeded. The leader node is used to select a subset of verifier nodes from among a plurality of verifier nodes in accordance with a second consensus decision-making algorithms different from the PoET consensus decision-making algorithm. The leader node is used to select a given verifier node from among the subset of nodes. The given verifier node is caused to verify the transaction.

Abstract: A method of associating multiple user endpoints (UEs) with a single IMS session in an IMS network having a serving node for controlling at least one IMS session for a user and at least a first access network for providing access to UEs. The method involves associating a first UE with the user and with an IMS session; discovering a second UE in a proximity of the first UE; discovering information about the second UE; communicating the information about the second UE to the serving node; the serving node utilizing computer-implemented policy logic to determine whether to associate the second UE with the user and the EMS session; and if the policy logic determines that the second UE is to be associated, the serving node associating the second UE with the IMS session while retaining the association with the first UE.

Abstract: In accordance with a method of generating a cryptographic coin., a first spending right cryptographic credential is generated using a proof of zero knowledge protocol. The first spending right cryptographic credential includes a first cryptocurrency component and a proof that verifies that a first cryptocurrency transaction logic produced the first cryptocurrency component using as input a first spending right. A second spending right cryptographic credential is generated using the proof of zero knowledge protocol. The second spending right cryptographic credential includes a second cryptocurrency component and a proof that verifies that a second cryptocurrency transaction logic produced the first cryptocurrency component using as input a second spending right. A cryptographic coin is generated using service logic that encapsulates the first and second spending right cryptographic credentials using the proof of zero knowledge protocol.

Abstract: A method for achieving consensus amongst a distributed and decentralized set of computers, devices or components in a network interacting via messaging is presented. The method does not rely on the availability of an overall ledger that is consulted for every interaction. Rather, the interacting components communicate directly with each other via messages that contain proofs of consistency that may be used to achieve local consistency amongst the interacting components. Local consistency guarantees global consistency. For regulatory and record keeping purposes, use of an overall ledger may be contemplated for regulatory and record keeping purposes. The latter may be updated by the interacting devices via an asynchronous updating mechanism.

Abstract: A system and method is presented that extracts snippets form web pages according to specially designed logic. The extracted snippets might be made relevant to, i.e., indexed by, a location and time/day applicability. Such snippets may be thought of as apps or services that are defined only when a mobile terminal is in a pre-defined geographical area at a certain time and day (e.g., as defined by a calendar of events). Extracted snippets are stored and made searchable. Methods and a system are described to control the display of snippet search results. Snippets may be selected by user or by programmed logic and executed on the mobile terminal or in remote servers without the need to download the app or source code associated with the snippet.

Abstract: A user device containing sensors is delivered customized services without utilizing private user data or while only using it in highly constrained ways. This is accomplished by sending one or more queries to the user device. Each query requests a binary response and each query inquires whether or not the user device has obtained one or more specified parameter values, or range of parameter values, from one or more sensors incorporated in or in communication with the user device. For each query a binary response is received, which indicates that the user device has or has not obtained the one or more specified parameter values, or the range of parameter values, about which the respective query is inquiring.

Abstract: A method for achieving consensus amongst a distributed and decentralized set of computers, devices or components in a network interacting via messaging is presented. The method does not rely on the availability of an overall ledger that is consulted for every interaction. Rather, the interacting components communicate directly with each other via messages that contain proofs of consistency that may be used to achieve local consistency amongst the interacting components. Local consistency guarantees global consistency. For regulatory and record keeping purposes, use of an overall ledger may be contemplated for regulatory and record keeping purposes. The latter may be updated by the interacting devices via an asynchronous updating mechanism.

Abstract: A system includes a database of image data associated with a vehicle; and control logic configured to cause a user device to capture one or more images and compare data associated with the one or more images with the image data to determine if a user is present in a vehicle and disable a text messaging function at least in part responsive to the determination using the image data.

Abstract: A system and method is presented that uses software logic (executing in one or more servers) to inter-connect mobile devices and location-deriving signal generating devices to collectively act as an Imaging System that outputs a periodic succession of images containing information about the preferences and purchase and transaction history of consumers. The Imaging System so constructed is called a SoftCamera in a fashion analogous to a conventional light-based camera. Images output by the SoftCamera may be transmitted to third-party providers or used to send information and recommendations to consumers. The SoftCamera thus may be used as a Recommender System in certain embodiments.