Abstract: The technology described herein detects a first device associated with a user that is within a detectable range of a second device. The system requests authentication information. In response to receiving the authentication information, a token generator associated with the user can generate a secure token. The secure token can be sent to the server. Once the secure token is verified, the user is granted access to one or more services.

Abstract: A system enabling hands-free operation of controls for accessing a transportation vehicle is provided. The system comprises code readers associated with respective entry barriers for admitting passengers to a transportation vehicle. The code readers read a machine-readable passenger code generated by a mobile electronic device and actuate mechanisms allowing entry through the barriers responsive confirmation of the code. A signal receiver in communication with a Passenger Service Unit for passenger seat onboard the vehicle receives instructions from the mobile electronic device and instruct the PSU to actuate passenger cabin controls for the passenger seat. An application on the mobile electronic device determines a time-stamped temperature of a passenger and generates the passenger code, which includes passenger identification, authorization to pass through the entry barriers and board the vehicle, and a determination if the temperature of the passenger indicates an acceptable passenger health status.

Abstract: A computer system configured to authenticate the identity of a user who is attempting to access a website or conduct a transaction is provided. The system is configured to receive a geographical location associated with the user and to receive the geographical location of a mobile phone associated with the user, and to determine whether the two geographical locations are within an acceptable distance. The system is configured to take into account the accuracy of the mobile phone location.

Abstract: In a method for provisioning account information of a payment card, user datum encryption information is transmitted to a transaction data processing system. A user datum encrypted using the user datum encryption information and a request to share account provisioning information is received from the transaction data processing system when the payment card is present by a user at the transaction data processing system. A user account associated with the payment card is determined and the user of the payment card is authenticated. A request for confirmation that the account provisioning information should be shared is sent to a user device associated with the user account and a confirmation response is received from the user device that includes permission to share account provisioning information. Account provisioning information is then transmitted to the transaction data processing system.

Abstract: A method includes receiving a first data block including an identifier for a component, receiving a second data block including usage data for the component and a link to the first data block, storing the first and second data blocks in a blockchain, and allocating respective usage tokens to each of a plurality of entities based on the usage data.

Abstract: An on-board communication device, an on-board communication system, and a specific processing prohibition method for a vehicle, in which a specific service can be prevented from being provided without limitation is disclosed. The on-board communication system can perform update processing of a relay processing program for a gateway using a wireless communication path through a wireless communication device or a communication path through a communication cable connected to a connector unit. When receiving an authentication request through either of the two communication paths, the gateway performs authentication processing, and if the authentication processing was successful, the gateway receives an update relay processing program through this communication path, and performs update processing by overwriting a stored relay processing program.

Abstract: Disclosed methods and system describe a server that uses AI modeling to predict negative cash flow at a user level. The server periodically retrieves data associated with the user, the data comprising monetary attributes associated with one or more accounts of the user; executes a deep neural network model trained based upon historical data associated with at least a subset of the users configured to predict a negative cash flow in one or more accounts of the user, a depth of the negative cash flow, and a duration of the negative cash flow; transmits, to a second server, the predicted values, whereby when the second server determines that a likelihood of account needs satisfies a threshold, the second server establishes an electronic communication session with an electronic device of the user; trains the deep neural network when the second server establishes the electronic communication session.

Abstract: Disclosed is a monitoring system, having: a keybox configured to store a key; a monitoring device, wherein via a monitoring device controller, the monitoring device is configured to: detect a first alert condition indicative of the keybox being outside a communication range of shortwave radio; and transmit a first alert to a remote implement that is indicative of an occurrence of the first alert condition.

Abstract: Method and systems for managing clear-down are provided. The method can include generating a clear-down trigger associated with an ion mobility spectrometer and operating the ion mobility spectrometer in fast clear-down mode in response to the clear-down trigger. Methods and systems can further provide that where the ion mobility spectrometer operates in fast-switching mode, the ion mobility spectrometer alternating a plurality of times between operation according to a positive ion mode and operation according to a negative ion mode, and further operating according to the positive ion mode for less than about 1 second before switching to the operation according to the negative ion mode, and operating according to the negative ion mode for less than about 1 second before switching to the operation according to the positive ion mode.

Abstract: A method and system for acquiring an Internet user's consent to be geographically located via at least two independent sources of geographical information. At least one independent source of geographical information is the wireless location of the Internet user's mobile phone.

Abstract: A vehicle communication network is monitored to detect a plurality of electronic control units (ECUs). Upon identifying a new ECU in the plurality of ECUs, a highest ECU trip counter is determined from the plurality of ECUs. A global trip counter stored in the memory is updated based on the highest ECU trip counter. The updated trip global trip counter is greater than the highest ECU trip counter. Then a replacement synchronization message is provided to the plurality of ECUs on the vehicle communication network. The replacement synchronization message includes the updated global trip counter.

Abstract: Data encrypted using a first device-specific key of a first host device is written to a first logical storage device of a storage system. The storage system generates a copy of the first logical storage device, and associates the copy of the first logical storage device with a second logical storage device of the storage system. Data encrypted using a second device-specific key of a second host device is written to the second logical storage device of the storage system. Responsive to a request from the second host device for particular data of the second logical storage device, the storage system determines if the particular data was encrypted using the first key or the second key, and provides the second host device with the particular data and an indication of a result of the determination.

Abstract: Systems and methods for fingerprint recognition-based event admission are provided. A user may use a user device to purchase a ticket for an event and provide a fingerprint scanned on the user device to a fingerprint validation system. The fingerprint validation system may associate the purchased ticket with the user and store the fingerprint template associated with the user as a reference template. When the user arrives at an entrance of the event, the user may scan a fingerprint at a fingerprint scan device at the entrance. Fingerprint validation system may compare the received fingerprint template with stored fingerprint reference templates, validate that the user is associated with a purchased ticket, and grant access to the event.

Abstract: Methods and systems for receiving a detection of a physical presence of a user and, in response, initiating a start-up process on an enterprise device according to a profile associated with the user are described. Thereafter, the system receives authentication credentials at the enterprise device and the user is granted access to the enterprise device after the authentication credentials are verified.

Abstract: A management method implemented by a transmission device capable of communicating via a radio link with a piece of gateway equipment of a telecommunications network and configured for communicating with a network server of the network. The method includes: receiving a management request of a terminal capable of communicating via the radio link with a piece of gateway equipment of the network and having established a communication session with the network server, at least one session key being shared between the terminal and the network server, the management request containing an identifier of the terminal and the session key; intercepting, following reception of the management request, at least one message sent by the terminal; and transmitting, in response to the message, at least one response message encrypted with the session key received. A transmission device implementing the method is also provided.

Abstract: A face authentication apparatus includes a face image acquisition unit, a collation unit, a time measurement unit, and a threshold change unit. The face image acquisition unit acquires a face image of an authentication target. The collation unit performs face authentication on the face image of the authentication target on the basis of a threshold. The time measurement unit measures the elapsed time from the time of starting operation of the face authentication apparatus. The threshold change unit restricts changing of the threshold to a value larger than a value determined depending on the measured elapsed time.

Abstract: A communication rate between a cloud-based server and an HVAC controller located within a building may be controlled based on the amount of power available at the HVAC controller. The cloud-based server may notify a user if the amount of power available at the HVAC controller is determined to be low.

Abstract: A method includes verifying the identity of an individual. The method further includes receiving non-financial data from the individual and generating a user-level profile. The user-level profiles include the non-financial data received from the individual. The method further includes generating a user-level token unique to the individual. The user-level token is associated with the generated user-level profile. The method also includes provisioning the user-level token to a device associated with the individual. The method further includes receiving an identity verification request comprising the user-level token, wherein the identity verification request is structured as a financial transaction card-originated message, validating the user-level token, and analyzing a context of the received user-level token to determine a relevant non-financial data element included in the non-financial information within the user-level profile.

Abstract: Disclosed is an entry system for a building having: a first door lock that includes a controller; wherein the first door lock is configured for encoding access rights to a first client keycard responsive to a first engagement with a master keycard.

Abstract: A store management server configured to communicate with an alert device installed in a store, includes a network interface and a processor configured to identify a customer entering the store, acquire customer information about the identified customer, detect that the customer is holding a commodity in the store, acquire sales restriction information about the commodity held by the customer, determine whether the customer is eligible to buy the commodity held by the customer based on the acquired customer information and sales restriction information, and control the network interface to transmit, when it is not determined that the customer is eligible to buy the commodity, a first command to an alert device. The first command causes the alert device to output an alert.

Abstract: The invention is directed to a sensor system (100) for increasing security of a use of at least one magnetic object (102) in vicinity of an MR imaging device (200), wherein at least one magnetic property of the magnetic object (102) can be measure and evaluated in order to increase the safe use of the magnetic object (102) within MR environments.

Abstract: A storage case for being provided in a vehicle includes a case body having a storage space for an electronic key; a first actuator to protrude into the storage space and pressing an unlocking button of the electronic key in the storage space; a second actuator; an adjustment piece for adjusting positions of the first actuator and the second actuator; a transceiver for communicating with an external terminal apparatus; and a processor to, in response to the transceiver receiving an unlocking request signal transmitted from the external terminal apparatus, cause the first actuator to press the unlocking button. The adjustment piece includes a rotating plate rotatably provided with respect to the case body; and, with respect to the rotating plate, the first and the second actuators being adjustable to become nearer to each other and adjustable to become farther from each other.

Abstract: A computing device is associated with a retail store. As a customer scans his/her items for purchase, images of a bag containing the items are captured and sent to the computing device to be digitally processed. Based on the processing, the computing device identifies the item(s) the customer intends to purchase, and determines whether there are any other items in the container that are different from the first item. If so, the computing device outputs a signal indicating the presence of the second item in the container.

Abstract: A method and system for securely verifying security compliance of a device on a network by generating a hash value for configuration data of the device, sending this value to a compliance service agent, comparing the hash value with hash value of default configuration data of the device, and reporting security non-compliance of the device when the generated hash value is same as the default hash values.

Abstract: Various embodiments of the present disclosure provide for centralized access permission management of a plurality of application instances.

Abstract: A method for recovering missed RFID tagged items in an RFID tunnel environment is disclosed. The method comprises using a dynamic RFID tunnel system comprised of a first RFID tunnel and a second RFID tunnel to inventory one or more containers of items having RFID tags. A first RFID read of the one or more containers is performed in the first RFID tunnel and compared to an expected containers' inventory stored in a database. If the comparison does not match, a second RFID read of the containers is performed in a second, subsequent RFID tunnel at a higher RFID read power and by moving the containers at a speed slower than a speed of movement of the containers into the first RFID tunnel. If a comparison of the second read to the expected containers' inventory still does not match, the containers may be recirculated through the tunnel system or may be diverted to an exceptions audit depending on how the system is configured.

Abstract: An electronic door lock is operable to control access to an access controlled area adjacent the inner side of a door. The door lock includes an outer base, an inner base, a locking mechanism movable between a locked and unlocked position in response to a control signal, and a control circuit disposed within the inner base and operable to generate the control signal in response to the presentation of an input credential. A plurality of different types of credential readers are each selectively attachable and removable from an attachment interface when the outer base is attached to the door to electrically connect the selected one of the plurality of different types of credential readers to the control circuit. The selected credential reader receives data from a user or credential and generates the input credential. A communication module is operable to communicate with a device separate from the electronic door lock.

Abstract: A vehicle control apparatus includes a processor including hardware, the processor being configured to: determine whether or not a state of a key device has reached a predetermined state requiring setting of a remote immobilizer function; and transmit, in a case where the state of the key device has reached the predetermined state, a first signal requesting setting of the remote immobilizer function.

Abstract: The present invention relates to methods, devices and systems for associating consumable data with an assay consumable used in a biological assay. Provided are assay systems and associated consumables, wherein the assay system adjusts one or more steps of an assay protocol based on consumable data specific for that consumable. Various types of consumable data are described, as well as methods of using such data in the conduct of an assay by an assay system. The present invention also relates to consumables (e.g., kits and reagent containers), software, data deployable bundles, computer-readable media, loading carts, instruments, systems, and methods, for performing automated biological assays.

Abstract: Devices, systems, and methods of detecting user identity, authenticating a user to a computerized service or to an electronic device, differentiating between users of a computerized service, and detecting possible attackers or possible fraudulent transactions. A method includes: generating a user authentication session that requires a user to enter a secret by performing a task; monitoring the user interactions during task performance; extracting a user-specific behavioral characteristic, and utilizing it as a factor in user authentication. The task requires the user to perform on-screen operations via a touch-screen or touchpad or mouse or other input unit of the electronic device, or to move in space or tilt in space the entirety of the electronic device in a way that causes inputting of the secret data-item.

Abstract: The present invention provides a processing circuit applied to a face recognition system, which includes a characteristic value calculation module, a determination circuit and a threshold value calculation module.

Abstract: Systems and methods relate generally to attendee authentication. In a method, a robot gatekeeper has a multi-function printer with program code configured for character recognition and handwriting analysis. The program code is executed by a processor coupled to the memory to initiate operations including: instructing for placement of a hand for a palm vein scanner and a badge for a badge reader; reading a badge to obtain first identification information; reading a palm to obtain first biometric data; accessing a database to obtain second identification information responsive to the first identification information; comparing the first biometric data and second biometric data obtained from the second identification information; printing an anti-tampering feature on a card; scanning a hand written sample on the card; and analyzing the hand written sample scanned with respect to at least one handwriting exemplar in or associated with the second identification information.

Abstract: An information processing device according to the present invention includes a first acquiring unit configured to acquire first authentication information of a person, a tracking unit configured to track a person from whom the first authentication information has been acquired based on a captured image captured by an image capturing device, a second acquiring unit configured to acquire second authentication information of a person in a predetermined place, and an associating unit configured to associate the first authentication information and the second authentication information of the same person based on the result of tracking a person.

Abstract: A credential authorization device having a first fingerprint sensor, configured to detect first sensor data representing one or more elements of a finger from a first person in contact with the first fingerprint sensor; a second fingerprint sensor, configured to detect second sensor data representing one or more elements of a finger from a second person in contact with the second fingerprint sensor; and one or more processors, configured to determine an authorization for a transaction based on an authentication of the first sensor data and the second sensor data.

Abstract: Various embodiments described herein are directed towards authenticating calls by using one or more keys associated with a specific user. In examples, the user is the sender of a call. In various embodiments, when a call is made, an identifying payload is encrypted using a private key associated with the user. The encrypted identifying payload is appended to the call data stream. The identifying payload may be decrypted with a public key. In embodiments, the identifying payload may be verified. In various embodiments, further authentication methods may be performed by using an object such as a contactless card to provide one or more components of the identifying payload and/or keys. In embodiments, a connection may be made between the sender and the intended recipient of a call based on the verification of the identifying payload.

Abstract: A stored-value card system includes a POS terminal, a communications device, and a stored-value card agent. The stored-value card agent is configured to receive, from the communications device, a message that identifies a payment amount; transmit, to a stored-value card network, a request message that includes the payment amount; receive a confirmation of the stored-value card network associating the payment amount with a stored-value card account that is maintained by the stored-value card network; and transmit a token to the communications device. The POS terminal is configured to transmit to the stored-value card network a completion message that includes the token and excludes the payment amount, and receive from the stored-value card network an authorization code that confirms authorization of a funds transfer in the payment amount.

Abstract: Techniques and systems are provided for managing experience payloads associated with various users. A system obtains an experience payload and first biometric information of a user from a first computing device. The system generates a set of characteristic representations of the user using the first biometric information. The system associated the set of characteristic representations with the experience payload. In response to a request from a second computing device at a physical location to obtain the experience payload, the system evaluates biometric information from the request to determine whether it corresponds to the set of characteristic representations. If so, the system provides the experience payload to the second computing device to cause the second computing device to perform operations associated with the user at the physical location.

Abstract: A method is provided for displaying an augmented reality image of account information associated with an indicialess transaction card having a card surface with a background pattern applied thereto. A real-time image of the card surface is captured and processed to determine if the background pattern matches a card background pattern associated with a cardholder account. Responsive to a positive determination, communication is established between the user device processor and a card processor carried by the indicialess transaction card. The user device processor receives from the card processor an encrypted verification block and transmits, to an authentication server, an authentication request including the verification block.

Abstract: A flight departure control system comprises a central departure control system and a plurality of local departure control systems arranged at or in proximity of individual airports. Passengers check-in for flights via the central DCS and for each passenger a passenger data message is created and sent to the local DCS to which the flight relates. On detection of a fault condition at the central DCS or in communications with the central DCS, the local DCS assume responsibility for flights departing from the airport at which they are located based on the received passenger data messages and unchecked-in passengers check-in directly with the local DCS.

Abstract: Transmitting a radio frequency identification (RFID) interrogation signal into an RFID interrogation zone of an Electronic Article Surveillance (EAS) system. Detecting at least one response signal from a first RFID tag of the EAS system responding to the interrogation signal. Capturing, at one or more times in a window of time around the detection, sensor data within a sensor field, the sensor field and the RFID interrogation zone overlapping to form a zone of interest. Characterizing movement of a non-tag object during the window of time based on the captured sensor data. Determining whether the first RFID tag is associated with the characterized non-tag object based on a comparison of the at least one response signal and the characterized movement of the non-tag object.

Abstract: A system and method for determining a point in time compliance status of a computing system with a security guideline standard (SGS) wherein the computing system has a command line shell available through a native operating system, the method comprising inputting into a host computer of the computing system a SGS package that represents a scripted SGS that is a non-text file and is encrypted that provides instructions for an evaluation of a computing system's compliance with the SGS under consideration wherein the SGS package performs at least a portion of an automated evaluation of a compliance status at the point in time of the computing system under consideration when the SGS package is decrypted by the computing system; sending a command query from the decrypted SGS package to the selected device of the computer system; compiling in a locally hosted database of the host computer compliance results sent from the selected device of the computing system in response to the command query from the decrypted SGS

Abstract: A dual sensing device, including a first substrate, a first sensing element layer, and a second sensing element layer, is provided. The first sensing element layer is disposed on the first substrate and includes multiple first sensing elements. The second sensing element layer is disposed on the first sensing element layer and includes multiple second sensing elements, wherein an orthographic projection of the second sensing element on the first substrate overlaps with an orthographic projection of the first sensing element on the first substrate.

Abstract: Disclosed are exemplary embodiments of systems and methods for use in authenticating consumers and/or computing devices to payment accounts. In an exemplary embodiment, a method generally includes generating, by a computing device, an authentication request for a consumer in response to a transaction by the consumer at a merchant. The transaction involves a payment account associated with the consumer, and the authentication request includes a direction to move a communication device associated with the consumer in a manner consistent with a reference movement. The method also includes receiving, by the computing device, an indication of movement of the communication device; comparing, by the computing device, the movement of the communication device to a reference movement; and then authenticating, by the computing device, the consumer to the payment account in connection with the transaction when the comparison indicates that the movement of the communication device matches the reference movement.

Abstract: A data string that includes potentially sensitive information, such as an account number for a payment card, may be evaluated to determine whether or not any portion of the data string encodes a known identifier of sensitive information, such as a known bank identification number (BIN). A fixed number of bytes of the data string may be analyzed using a trie algorithm, in which the value of a first byte is compared with the value of a corresponding first character of the known identifier. A second byte is then compared with a set of values of corresponding second characters, which accompany the first character of the known identifier. Then the value of a third byte of the data string is compared with a set of values of corresponding third values, which accompany the first and second characters of the known identifier. The use of a trie algorithm decreases the length of the search process by several orders of magnitude.

Abstract: Various embodiments include a method of managing a building automation environment comprising: determining coordinates of a wearable device and an associated wearer in the building automation environment; rendering a representative view of a portion of the building automation environment based on the determined coordinates and an environment map associated with the building automation environment, wherein the representative view includes a multi-dimensional view of the portion of the building automation environment and wherein the portion includes one or more devices in the building automation environment; and modifying operation parameters of the portion of the building automation environment through one of gesture-based and voice-based input.

Abstract: A method of generating a shared augmented reality payment authentication entry interface includes detecting a first consumer device and a second consumer device; prompting a display of a first augmented reality payment authentication interface at the first consumer device; and prompting a display of a second augmented reality payment authentication interface at the second consumer device.

Abstract: A parking management system that facilitates motorist guidance, payment, violation detection, and enforcement using highly accurate space occupancy detection, unique vehicle identification, guidance displays, payment acceptance, violation detection, enforcement data generation, electronic booting, and towing management is described. The system enables reduced time to find parking, congestion mitigation, accurate violation detection, and easier enforcement, and increased payment and enforcement revenues to cities.

Abstract: A system and method for providing multi-factor authentication for access through a door, but without the user having to repeat a physical act of providing authentication every time that the door is opened, wherein the first time through the door, multi-factor authentication is provided to the access control system, and wherein each subsequent access through the door, multi-factor authentication is performed automatically and without intervention of the user as long as the user has a wearable device providing at least one factor of the multi-factor authentication, and the user has not removed the wearable device since the multi-factor authentication was last provided to the access control system.

Abstract: The present disclosure relates to credential management for mobile devices that can be used for access to secured physical environments. One aspect comprises a computer implemented method comprising a mobile computing device: receiving, from a server system, and storing, on the mobile computing device: one or more application sequence counter values, one or more limited use credentials (LUCs), each LUC being bound to a corresponding one of the application sequence counter values; one or more emergency credentials, and an account token; subsequently receiving an authentication request from a terminal; in response to receiving the authentication request, determining that no LUC is available for fulfilling the request; and in response to determining that no LUC is available for fulfilling the request: transmitting, to the terminal, the account token and an application cryptogram generated from an emergency credential of said one or more emergency credentials; and updating a current application sequence counter.

Abstract: In general, techniques are described for a personal protective equipment (PPE) management system (PPEMS) that uses images of optical patterns embodied on articles of personal protective equipment (PPEs) to identify safety conditions that correspond to usage of the PPEs. In one example, an article of personal protective equipment (PPE) includes a first optical pattern embodied on a surface of the article of PPE; a second optical pattern embodied on the surface of the article of PPE, wherein a spatial relation between the first optical pattern and the second optical pattern is indicative of an operational status of the article of PPE.