Abstract: Embodiments are directed to enrollment of an endpoint device in a secure domain. An enrollment request is sent to a delegated registrar (DR) device to initiate a trust-establishment procedure with the DR device to establish initial connectivity and an initial symmetric key to be shared between the DR and the endpoint device. The DR device provides to the endpoint device limited-use credentials for group-access key establishment, and group connectivity parameters for accessing a group administrator (GA) device. The endpoint device and the GA device perform a group-enrollment procedure in which the endpoint device provides the limited-use credentials to the GA device and receives, from the GA device, the group-access key.

Abstract: Systems and methods directed to URI-based host to mobile device setup and pairing are described herein. A uniform resource identifier (URI) may be received from a host device. A request for an application associated with the host device and the wireless device may be transmitted based at least in part on the URI. The requested application may be received. An association with the host device may be established based at least in part on the application.

Abstract: In one example, a system for recognizing an object includes a processor to select from a plurality of image frames an image frame in which a view of the object is not blocked, and to estimate a location of the object in the selected image frame.

Abstract: In one example, a system for recognizing an object includes a processor to select from a plurality of image frames an image frame in which a view of the object is not blocked, and to estimate a location of the object in the selected image frame.

Abstract: A system and method for identifying an occupant of a vehicle as an authorized user and managing settings and configurations of vehicle components based on personal preferences of the authorized user includes detecting occupant characteristics from multiple sensors, determining whether the occupant is an authorized user of the vehicle based on a comparison of the occupant characteristics with a user database including registered user profiles, and automatically adjusting vehicle cabin and/or control components based on personal preferences of the occupant identified as a registered user.

Abstract: In an embodiment, a method includes registering applications and network services for notification of an out-of-band introduction, and using the out-of-band introduction to bootstrap secure in-band provisioning of credentials and policies that are used to control subsequent access and resource sharing on an in-band channel. In another embodiment, an apparatus implements the method.

Abstract: Embodiments are directed to enrollment of an endpoint device in a secure domain. An enrollment request is sent to a delegated registrar (DR) device to initiate a trust-establishment procedure with the DR device to establish initial connectivity and an initial symmetric key to be shared between the DR and the endpoint device. The DR device provides to the endpoint device limited-use credentials for group-access key establishment, and group connectivity parameters for accessing a group administrator (GA) device. The endpoint device and the GA device perform a group-enrollment procedure in which the endpoint device provides the limited-use credentials to the GA device and receives, from the GA device, the group-access key.

Abstract: Systems and methods directed to URI-based host to mobile device setup and pairing are described herein. A uniform resource identifier (URI) may be received from a host device. A request for an application associated with the host device and the wireless device may be transmitted based at least in part on the URI. The requested application may be received. An association with the host device may be established based at least in part on the application.

Abstract: In an embodiment, a method includes registering applications and network services for notification of an out-of-band introduction, and using the out-of-band introduction to bootstrap secure in-band provisioning of credentials and policies that are used to control subsequent access and resource sharing on an in-band channel. In another embodiment, an apparatus implements the method.

Abstract: In accordance with some embodiments, information may be collected from processor-based devices after the processor-based devices have already been deployed. Moreover, in some cases, the information that is to be collected, the collection sources, and the handling of the data may be specified after the processor-based devices have already been deployed.

Abstract: A wireless flash drive may use a Near Field Communication (NFC) radio link with a second device to establish a second, non-NFC, radio link with the second device, and then use the non-NFC link to wirelessly transfer data between the second device and the non-volatile memory in the flash drive. Some embodiments may also have other features, such as a switch to activate the non-NFC link without using the NFC link, a battery to power the non-NFC radio and the non-volatile memory, inductive charging circuitry to wirelessly recharge the battery, or instructions to be uploaded to the second device for use in establishing the non-NFC link.

Abstract: Techniques for monitoring information technology (IT) assets using mobile devices are described herein. The mobile device is configured to wirelessly communicate with the IT asset using a near field communications (NFC) standard used to communicate over short distances. The IT asset is configured to include a monitoring device that is operable in a low power mode as well as in a normal power mode to monitor security related parameters. An alarm is generated in response to detecting a breach in security of the IT asset and the mobile device is notified of the alarm. A user may use the mobile device to send an encrypted message to the IT asset and instruct it to operate in a lockout mode, thereby protecting the digital assets accessible via the IT asset from unauthorized use.

Abstract: A method according to one embodiment includes the operations of configuring a host processor to receive a message filtering rule, the host processor associated with a vehicle; configuring a bus controller to verify authenticity of the message filtering rule, wherein the bus controller is programmed through an interface, the interface inaccessible from the host processor; filtering messages from the host processor using the verified message filtering rule, wherein the filtering is performed by the bus controller; and transmitting the filtered messages from the bus controller over a bus to one or more electronic control units (ECUs), the ECUs communicatively coupled to the bus.

Abstract: Systems and methods directed to URI-based host to mobile device setup and pairing are described herein. A uniform resource identifier (URI) may be received from a host device. A request for an application associated with the host device and the wireless device may be transmitted based at least in part on the URI. The requested application may be received. An association with the host device may be established based at least in part on the application.

Abstract: In accordance with some embodiments, multiple navigation changes to a navigation system may be managed. The navigation system may receive and first set of navigation changes. Then, the navigation system may establish communication with a user device. The navigation system may then receive a second set of navigation changes associated with the user device. As a result, the navigation system may merge the first set of navigation changes with the second set of navigation changes.

Abstract: Systems and methods may provide for receiving a query regarding an establishment, retrieving an output image from an image database in response to the query, and transmitting the output image to a mobile device. In one example, image data including a plurality of interior establishment images and a plurality of stocking area images are also received, wherein the image database may be constructed based on the received image data.

Abstract: A method according to one embodiment includes the operations of configuring a host processor to receive a message filtering rule, the host processor associated with a vehicle; configuring a bus controller to verify authenticity of the message filtering rule, wherein the bus controller is programmed through an interface, the interface inaccessible from the host processor; filtering messages from the host processor using the verified message filtering rule, wherein the filtering is performed by the bus controller; and transmitting the filtered messages from the bus controller over a bus to one or more electronic control units (ECUs), the ECUs communicatively coupled to the bus.

Abstract: A method for assembling authorization certificate chains among an authorizer, a client, and a third party allows the client to retain control over third party access. The client stores a first certificate from the authorizer providing access to a protected resource and delegates some or all of the privileges in the first certificate to the third party in a second certificate. The client stores a universal resource identifier (URI) associated with both the first certificate and the third party and provides the second certificate and the URI to the third party. The third party requests access to the protected resource by providing the second certificate and the URI, without knowledge or possession of the first certificate. When the authorizer accesses the URI, the client provides the first certificate to the authorizer, so that the client retains control over the third party's access.

Abstract: Methods, systems, and apparatus for communicatively pairing and securing an electronic device to a vehicle based electronic system. The pairing can enable the electronic device to seamlessly communicate with the electronic device and can provide infotainment to users of the vehicle.

Abstract: In accordance with some embodiments, data may be collected from vehicles, and then reported to various subscribers with different levels of access privileges and pursuant different levels of security. In some embodiments, the data may be authenticated by a cloud service without revealing the identity of vehicle owner. This may provide enhanced privacy. At the same time, some types of the data may be encrypted for security and privacy reasons. Different information may be provided under different circumstances to different subscribers, such as the government, family members, location based services providers, etc.