Abstract: Described herein is a mechanism for visual recognition of items or visual search using Optical Character Recognition (OCR) of text in images. Recognized OCR blocks in an image comprise position information and recognized text. The embodiments utilize a location-aware feature vector created using the position and recognized information in each recognized block. The location-aware features of the feature vector utilize position information associated with the block to calculate a weight for the block. The recognized text is used to construct a tri-character gram frequency, inverse document frequency (TGF-IDP) metric using tri-character grams extracted from the recognized text. Features in location-aware feature vector for the block are computed by multiplying the weight and the corresponding TGF-IDF metric. The location-aware feature vector for the image is the sum of the location-aware feature vectors for the individual blocks.

Abstract: A method includes: accessing a set of hardware parameters characterizing an embedded device; identifying a set of supported container functions based on the set of hardware parameters; accessing a selection of container functions; identifying a set of selected container functions based on the selection of container functions and the set of supported container functions; generating a hardware abstraction layer (HAL) including a set of libraries supporting the set of selected container functions; generating a container runtime environment (CRE) configured to execute, at the embedded device, a containerized application via the HAL, the containerized application including the set of selected container functions; installing the HAL and the CRE onto the embedded device; installing the containerized application onto the embedded device via the CRE; and at the embedded device, executing the containerized application via the CRE and the HAL.

Abstract: Systems and methods are described that use cryptographic techniques to improve the security of applications executing in a potentially untrusted environment associated with a software application. Embodiments of the disclosed systems and methods may, among other things, facilitate cryptographic operations within an execution environment associated with browser software of a client system while maintaining security of cryptographic keys imported into the environment. As the security of keys is maintained in an execution environment implementing embodiments of the disclosed systems and methods, users and/or systems may be more willing to consign their keys for use in connection with cryptographic operations performed in such environments.

Abstract: Distributing different resolution point clouds of a full resolution point cloud, including: applying a plurality of sieve functions to the full resolution point cloud (PC) to generate a plurality of partial point clouds (PCs), wherein the partial PCs are disjointed elements of the full resolution PC; scrambling each partial PC of the plurality of partial PCs using a respective one of a plurality of secret keys; and distributing at least one scrambled PC and a selected secret key to an intended recipient, wherein the selected secret key is selected based on an appropriate resolution determined for the intended recipient.

Abstract: In overview, a computer-implemented method of transmitting data in a data stream from a first device to a second device is disclosed. The data stream is encrypted before transmission from the first device to the second device, and a location of the data in the data stream is indicated to the second device. The location may be a pre-shared location between the first and second devices, or the first device may transmit the location of the data to the second device. The second device decrypts the encrypted data stream, identifies the data in the data stream based on the location, and encrypts the identified data in the data stream.

Abstract: In general, one aspect disclosed features a media asset capture and processing method, implemented via a computer-based state machine executing on a computer processor, the method comprising: implementing a first phase including media asset capture and frame processing limited to Rich Execution Environment (REE) read-only (RO) frame access; implementing a second phase including processing with REE read-write (RW) frame access; and implementing a third phase including processing with REE read-only (RO) frame access.

Abstract: An integrated-circuit device comprises a processor, a peripheral component, a bus system, connected to the processor and to the peripheral component, and configured to carry bus transactions; and hardware filter logic. The bus system is configured to carry security-state signals for distinguishing between secure and non-secure bus transactions. The peripheral component comprises a register interface, accessible over the bus system, and comprising a hardware register and a direct-memory-access (DMA) controller for initiating bus transactions on the bus system. The peripheral component supports a secure-in-and-non-secure-out state in which the hardware filter logic is configured to prevent non-secure bus transactions from accessing the hardware register of the peripheral component, but to allow secure bus transactions to access the peripheral component.

Abstract: Disclosed are methods and systems to provide distributed computation within a Fully Homomorphic Encryption (FHE) system by using g-adic properties to separate a ciphertext into multiple ciphertexts for each Hensel digit level. A number t of computation units may individually perform addition and/or multiplication of each Hensel digit level on each of the computation units and then reconstruct the resulting value from the result ciphertext of each computation unit using p-adic and g-adic operations. Accordingly, computation burdens may be distributed to several computation units.

Abstract: A host server information handling system executing a multimedia multi-user collaboration application (MMCA) may include a processor; a memory; a power management unit; a network interface device to receive and provide audio/visual (AV) data during execution of the MMCA for a video conference session; the processor configured to execute a collaborative rights information management system to: manage the recordation of a video conference session during the execution of the MMCA to create a recording of the video conference session and assign a first password to protect the recording of the video conference session as a default password; assign a security level to the recording of the video conference session; and permit access, via the network interface device, to the recordings of the video conference session by transmitting the password to those users who are associated with a higher user access permission level than the aggregated user access permissions and are authorized to access the recording.

Abstract: A set of one or more media items is identified by a first computer system configured to host media items for various users. The set of media items has a first relationship. A content analysis is performed on the set of one or more media items. The content analysis is based on a first machine-learning model. A first content pattern contained within the set of media items is determined based on the content analysis. A first set of one or more altered media items is generated in response to the first content pattern.

Abstract: A data decryption system includes an address checking circuit, an encryption/decryption processor, and a computation circuit. The address checking circuit is configured to receive an address through an address channel. The computation circuit is coupled to the encryption/decryption processor. The computation circuit is configured to receive a reading data of the address from a storage device through a data channel in a first duration. The encryption/decryption processor computes a second key in a second duration, according to a first key and the address, and the second key is configured to decrypt the reading data, wherein the first duration overlaps with the second duration.

Abstract: A method of decommissioning a key in a decryption storage system includes scanning a storage system to identify metadata associated with a current key to be decommissioned. The method further includes encrypting, with the current key, data corresponding to the metadata to generate encrypted data. The method further includes decrypting the encrypted data with a target key to generate decrypted data. The method further includes modifying, by a processing device, the metadata to identify the target key to generate modified metadata. The method further includes storing the decrypted data and the modified metadata to the storage system.

Abstract: An embodiment includes determining, in response to receiving data at a source node for transmission as streaming data on a network, whether a characteristic of the data indicates that an attribute of the data includes sensitive information. The embodiment also includes calculating, responsive to determining that the attribute includes sensitive information, an entropy value for the attribute. The embodiment also includes determining, responsive to the calculating of the entropy value, a likelihood that the attribute is encrypted by comparing the entropy value to a threshold value. The embodiment also includes generating a parameter value for a cryptographic parameter for the attribute.

Abstract: Disclosed herein are systems and methods for creating an ultra-lightweight multi-tenant network virtualization model by augmenting an OSI layer 4 tuple (protocol, source IP address, destination IP address, source port, destination port) with additional private gateway-specific source and destination augmented addresses. A unique OpenVPN Augmented Address (OAA) may be created and assigned to each device on a network such as a mesh-linked system. This OAA may form part of a packet shim created with routing path information for both the source and the destination resources. Once created, the shim may be inserted into a packet header for transmission. Once the initial packet is transmitted, each hop creates its own resources for managing transmission of subsequent packets in this session. The packet shim operates to establish a communications session on layer 4 (Transport) between the requestor and the target resource which is intermediate-device agnostic.

Abstract: A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment.

Abstract: The invention is concerned with insertion of secondary content in a time slot of primary content. The primary content and the secondary content are provided to a receiver via a managed content delivery network configured for IPTV delivery. The secondary content may be personalized content, such as an ad. Both the primary content and the secondary content may be encrypted, and decryptable with different decryption keys. Measures are described for pre-caching the decryption key for the secondary content at the receiver ahead of a scheduled play-out time of the secondary content. By pre-caching the decryption key, an interruption in play-out may be avoided or reduced compared to a basic scenario in which the receiver requests the decryption key at or immediately before the scheduled play-out time.

Abstract: The present invention provides a method for generating customizable and encapsulated media files, said method comprising: determining at least one media unit for encapsulation, each media unit comprising a basic media content. For each of said determined media unit, defining multiple data layers, each layer being associated with a different data type, wherein said defining of said layers comprises: defining media objects of each media unit, defining properties of each defined media object, defining customization rules for said determined at least one media unit, defining dynamic motion rules for at least one of said defined media objects and creating an encapsulated media file containing the at least one media unit and data layers thereof, said encapsulated media file being configured for de-capsulation thereof for playing content thereof, according to the defined layers thereof.

Abstract: Methods, devices, and systems are described for creating and implementing search query vectors for knowledge base articles or other formal articles, the query vectors automatically created from informal correspondence such as a service request email to an information technology (IT) department. Term frequency-inverse document frequency (TF-IDF) scores are calculated for rarewords in the correspondence with respect to a corpus of other service requests. High scoring terms with the same neighbors as those in the corpus of formal articles are added to the search query vector, while high scoring terms that do not share the same neighbors are thrown out. The query vector is then used to run a search of the knowledge base for relevant articles.

Abstract: A method of transmitting image data in a safety sensor or in a safety system is provided, in which transmission errors are recognized in that meta information is added to the image data prior to the transmission and the meta information is checked after the transmission. The image data are here transmitted by an unsafe communication link, in particular a black channel, the meta information is prepended and/or appended to the image data and/or to the partial packets, and the meta information comprises a piece of information on the structure of the image data.

Abstract: Data from a SaaS application may be stored and accessed locally, enabling SaaS data to be interacted with, regardless of connectivity, while providing secure authentication when offline. When online, a user may perform an authentication procedure and provide credentials to an application server, which may provide an authentication token for access to secure data or applications. The authentication token and user credentials may be cached locally. When offline or experiencing intermittent connectivity, if user provided credentials match the cached credentials, then the client application may retrieve the cached authentication token and allow the embedded browser to resume utilizing the network application and/or data; while if the new credentials do not match the previously provided and cached credentials, access may be denied. Thus, the embedded browser may perform authentication agnostic to whether the device is online or offline at that time, requiring no changes to the browser or network application.

Abstract: Provided is a method for protecting an encrypted control word. The method includes: receiving a hardware security module entitlement management message and an encrypted control word transmitted from a main chip, where the hardware security module entitlement management message includes a key for decrypting the encrypted control word; decrypting, based on the hardware security module entitlement management message and a hardware security module root key stored in the hardware security module, the encrypted control word to obtain a control word; reencrypting the control word based on a re-encryption key stored in the hardware security module to obtain a reencrypted control word; and transmitting the reencrypted control word to the main chip, so that the main chip decrypts, based on a main chip entitlement management message transmitted from the front end, the reencrypted control word to obtain the control word.

Abstract: A motion picture distribution system, the system including a central computer, an exhibitor computer, a communication channel, and a back channel. The central computer is located at a central site and configured to distribute a digital version of the motion picture. The exhibitor computer is located at an exhibitor location that is remote from the central site. The exhibitor computer is configured both to receive the digital version of the motion picture from the central computer, and to display the motion picture. The communication channel is configured to facilitate the electronic transfer of the digital version of the motion picture from the central computer to the exhibitor computer. The back channel is coupled between the central computer and the exhibitor computer, and configured to allow for the transfer of information between the exhibitor computer and the central computer.

Abstract: A memory device, including a secure command decoder implementing security logic configured to detect commands carrying an encrypted immediate data payload from a requesting host, authenticate the host as source of the command, decode the immediate data and perform a memory access command called for by a command portion of the decrypted immediate data upon the storage cells of the memory device using the non-command portion of the decrypted immediate data, as well as to encrypt any result from executing the command portion prior to returning the result to the requesting host, and an input/output interface for I/O data units supporting multiple hosts.

Abstract: [Object] To provide a novel and improved information processing device that can make more efficient an inspection performed by a flying body capable of performing imaging. [Solution] Provided is an information processing device including an imaging position information acquisition unit configured to acquire imaging position information at a time when a structure is imaged which is acquired by an imaging device configured to fly over a periphery of the structure to image the structure on the basis of certain flight information, and a damage data generating unit configured to use a captured image of the structure imaged by the imaging device and the imaging position information and to generate data related to damage of the structure including position information of damage of the structure included in the captured image.

Abstract: An image generation apparatus includes a processing circuit and a memory storing at least one computational image. The at least one computational image is a light-field image, a compressive sensing image, or a coded image. The processing circuit (a1) identifies a position of an object in the at least one computational image using a classification device, (a2) generates, using the at least one computational image, a display image in which an indication for highlighting the position of the object is superimposed, and (a3) outputs the display image.

Abstract: A method for generation of an application cryptogram for use in a payment transaction includes: storing, in a first memory, a single use key associated with a transaction account; electronically transmitting the single use key to a processing server; receiving an encrypted session key and a server encryption key from the processing server; executing a first query to store the encrypted session key in the first memory and a second query to store the server encryption key in a second memory; decrypting the encrypted session key using the server encryption key; generating an application cryptogram based on the decrypted session key; and electronically transmitting the generated application cryptogram for use in a payment transaction.

Abstract: A transceiver baseband hardware is provided. The transceiver baseband hardware includes a baseband hardware. The baseband hardware includes an encryption-decryption block. The encryption-decryption block encrypts intended transmission data and decrypts encrypted data with key coefficients via a cross logical operation of the encryption-decryption block. The cross logical operation includes when lower significant bytes of the key coefficients operating on most significant bytes of the intended transmission data and the encrypted data.

Abstract: Techniques are disclosed relating to multiway communications. In some embodiments, a first electronic device initiates a multiway call between a plurality of electronic devices and exchanges a first secret with a first set of electronic devices participating during a first portion of the multiway call, the first secret being used to encrypt traffic between the first set of electronic devices. The first electronic device receives an indication that first set of participating electronic devices has changed and, in response to the indication, exchanges a second secret with a second set of electronic devices participating during a second portion of the multiway call, the second secret being used to encrypt traffic between the second set of participating electronic devices. In some embodiments, the indication identifies a second electronic device as leaving the multiway call, and the second secret is not exchanged with the second electronic device.

Abstract: A system, method, and computer program product to renewably prevent traitors in a broadcast encryption system from re-using compromised keys. A license agency assigns individual receivers a set of Sequence Keys preferably at manufacture, and assigns Sequence Key Blocks (SKBs) to protected content files to be distributed. The files may be distributed on prerecorded media and typically include several file modifications. The particular modifications in a pirated version of a file can help identify which traitors contributed to its theft. SKBs assigned to new files distributed after traitors have been identified cannot be usefully processed using the compromised keys employed in previous content piracy. Innocent receivers that happen to have compromised key(s) in common with traitors can use a replacement uncompromised Sequence Key from the set to usefully decrypt content. Traitors will however step through all their Sequence Keys without reaching one that will work.

Abstract: In one example, an apparatus such as an authorization server and method for secure communication between constrained devices issues cryptographic communication rights among a plurality of constrained devices. Each of the plurality of constrained devices comprises no more than one cryptographic algorithm code module per cryptographic function. The method includes receiving a cryptographic communication rights request associated with at least a first of the plurality of constrained devices in response to a cryptographic algorithm update request, and includes providing a response including an identification of a subset of the plurality of constrained devices that have cryptographic communication rights with the identified first of the plurality of constrained devices. A software update server then updates the cryptographic code modules in the sub-set of the plurality of constrained devices.

Abstract: Apparatus and methods for enabling presence-based and/or use-based services. In one embodiment, a presence database and an evaluation entity collect information relating to a device's location and activity. The presence database collects location-based data to build anonymized user profiles; estimates a physical location of the device; and provides targeted content to the device. The user profiles are stored at e.g., a user premises, or at a headend network or elsewhere within the “cloud”. Additionally, in one variant, signals are collected from “smart” appliances (in a home or other premises) to create personal, shared, and family environmental settings which are instantiated when a user enters the premises. Methods and apparatus to collect browsing behavior across desktop and mobile devices on third party sites (including web browsing, social networking, and e-commerce) which are represented by the managed network are also provided.

Abstract: Innovations in hash-based block matching facilitate block copy (“BC”) prediction that is more effective in terms of rate-distortion performance and/or computational efficiency of encoding. For example, some of the innovations relate to encoding blocks with hash values determined using hash-based block matching. Other innovations relate to reconstructing blocks using hash values determined with hash-based block matching.

Abstract: Techniques are described for the exchange of control signals between a controlled unmanned aircraft (i.e. drone) and a ground control station and for the transmission of communication signals, such as video, from the drone to the ground control station so that the signals are more difficult to intercept or jam. The video signal transmitted from the drone can be an analog RF signal employing one or more of video “scrambling”, RF signal inversion, hopping, usage of a wide frequency range and other techniques. To secure the control signals between the drone and the ground control station, techniques can include hopping, encryption and use of a wide frequency range.

Abstract: A cryptographic ASIC and method for autonomously storing a unique internal identifier into a one-time programmable memory in isolation by a foundry. The identifier may be determined by calculating a transformed hash of a predetermined input, and may serve as a cryptographically defined and verifiable CpuID for a particular ASIC instance. The CpuID may be derived from an input based on a manufacture date, a wafer lot number, a wafer number, row and column coordinates for a die on a wafer, or other foundry-defined data. The CpuID enables a given ASIC instance to be securely and remotely identified across an untrusted network, and to serve as a specified processor that originates an information stream or a message. The ASIC need not always perform high-speed calculations and so may be relatively simple and inexpensive, and in one embodiment serves as a secure data administrator that manages subscriptions and software updates.

Abstract: A signal processing apparatus, signal processing method, program, and signal transmission system can transmit 8K or 4K video signals stably through a device of 100 Gbps. A signal processor includes a mapping unit configured to map an 8K or 4K video signal onto first data streams, prescribed by a predetermined format, of plural channels, and a multiplexer configured to generate plural first data blocks by scrambling the first data streams of either odd-numbered or even-numbered channels, first bits by first bits, invert the polarity of data blocks which are part of the first data blocks, generate plural second data blocks by 8B/10B-converting the first data streams of the other channels, second bits by second bits, and generate serial second data streams of plural lanes by multiplexing the first data blocks and the second data blocks. The processor is applicable to a broadcasting camera, for example.

Abstract: An electronic device and method for automatic generation of a sorted list of items related to a seed item comprises a relatedness determinator to compare the seed item with a plurality of further items and to determine a relatedness value for each further item with respect to the seed item. The device also has a clustering engine to cluster the further items by determining a relative relatedness between (among) the further items. Each further item is assigned to one cluster. The device also has a list generator to generate a sorted result list by sorting the further items according to both, their relatedness value and their belonging (or membership) to a cluster in that once an item is added to the sorted list, the relatedness value depending ranking of the further items in that cluster is at least momentary lowered so as to promote adding items of further clusters.

Abstract: A content distribution server, includes: a storage that stores live content received; a controller that controls distributing the live content stored in the storage as chase content to be played in a delayed manner from the live content received; and a communicator that distributes the live content and the chase content to a viewer terminal, wherein the controller changes a sound of the live content and distributes the sound having been changed to the viewer terminal through the communicator.

Abstract: A multi-core audio processor includes a plurality of data ports configured to receive and transmit data, wherein a first data port of the plurality of data ports is configured to receive data associated with a first stream, a first plurality of audio interface resources configured to perform operations on the data, and a multiplexing unit configured to route data between the plurality of data ports and the first plurality of audio interface resources, the multiplexing unit including a multiplexer associated with each of the first plurality of audio interface resources. The multi-core audio processor also includes a first plurality of transport buffers, at least one transport buffer associated with each of the first plurality of audio interface resources. A first set of buffers of the first plurality of transport buffers is configured to synchronously store data received from the first set of the first plurality of audio interface resources.

Abstract: A communication device may: comprise an output unit configured to output first information obtained by using a first public key in a memory in a case where a predetermined instruction is inputted to the communication device; after the first information has been outputted, receive an authentication request in which the first public key is used from a terminal device; send an authentication response to the terminal device; establish a wireless connection between the communication device and an external device; and in a case where a predetermined condition is satisfied after the first information has been outputted, create a second public key different from the first public key and store the second public key in the memory. In a case where the predetermined instruction is inputted to the communication device again, the output unit may be configured to output second information obtained by using the second public key in the memory.

Abstract: An external trusted time source is implemented over a network for conditional access system (CAS)/digital rights management (DRM) client devices. A client device includes untrusted software and a trusted execution environment (TEE) for processing an entitlement management message (EMM) that includes an epoch sequence number (ESN) transmitted from an EMM server using a first network connection. A remaining client key set (CKS) lifetime value is stored and updated in the TEE based on the ESN processed.

Abstract: Implementations disclose an access control mechanism for peer-to-peer sharing technology. A method includes receiving, by a processing device of a first user device, an encrypted media item and a wrapped key from a second user device, wherein the wrapped key comprises content masked from the first user device; transmitting, by the first user device, the wrapped key and a request to a media server to determine whether the first user device is authorized to play the encrypted media item; receiving, from the media server, a response indicating the first user device is authorized to play the encrypted media item, the response comprising a cryptographic key derived from the wrapped key; and decrypting the encrypted media item using the cryptographic key.

Abstract: Recommendation engine apparatus and associated methods provide content compiled from various sources and selected to match user preferences. In one embodiment, the recommendation apparatus comprises a headend entity; in another, it is co-located on a user's CPE. In one embodiment, the recommendation engine creates content records from content metadata for comparison to a user profile. The user profile is pre-programmed; however has the ability to dynamically shift toward a user's preferences as the user takes actions regarding content. Client applications are utilized to compile and present content; feedback mechanisms are utilized to enable “learning” from user activities to generate more precise recommendations as well as to “unlearn” stale preferences. Recommended content is displayed in the form of a playlist, or as a continuous stream on a virtual channel, or presented in an electronic program guide. A business rules “engine” useful in implementing operational or business goals is also disclosed.

Abstract: A method and system for determining access permissions to personalized clusters of multimedia content elements are provided. The method includes receiving a permission index designating at least the content description of at least one personalized cluster and an authentication factor; analyzing the content description; checking if there is at least one personalized cluster that matches the analyzed content description; and generating privacy metadata for each matching personalized cluster, wherein the privacy metadata includes at least the authentication factor associated with the respective content description matching the personalized cluster, wherein the generate privacy metadata determines access permission to the matching personalized cluster.

Abstract: There is provided an information processing apparatus, an information processing method, a program, an information processing system, and a communication apparatus that are capable of enhancing authentication safety, the information processing apparatus including: a communication section configured to receive authentication information and a processing request from a first communication apparatus; an authentication information generation section configured to generate authentication information on the basis of first key information associated with a second communication apparatus; and a processing control section configured to control execution of a process corresponding to the processing request on the basis of the authentication information received by the communication section and the authentication information generated by the authentication information generation section.

Abstract: The present invention discloses a data transmission method and a data transmission apparatus. The method includes: sending, by a first computer, first data to a first image capture apparatus through an image output port of the first computer; receiving, by the first image capture apparatus, the first data; and sending, by the first image capture apparatus, the first data to a second computer; or processing, by the first image capture apparatus, the first data to generate second data, and sending, by the first image capture apparatus, the second data to a second computer; where the first image capture apparatus has an image input port, the image input port is connected to the image output port of the first computer, and the image output port of the first computer includes an output port of a display card of the first computer. The present invention can effectively reduce leakage of corporate data.

Abstract: A method and a corresponding terminal for an encrypted call, to resolve disadvantages of an encrypted call that is implemented relying on a key management center (KMC) and network reconstruction, and reduce costs. The method includes establishing, by a first terminal, a circuit switched call with a second terminal, determining, by the first terminal using the circuit switched call, a key for performing an encrypted call with the second terminal, and performing, by the first terminal, an encrypted call with the second terminal using the key.

Abstract: A first request and a first identifier corresponding to an identity of a first source device that initiated the first request is received. At least a second source device is queried to obtain information indicative of whether the first source device is authorized to complete the first request. The second source device is configured to periodically gather and transmit data, over one or more networks, to one or more local processing devices or one or more remote devices for data analysis. The first request is blocked or authorized to proceed based at least in part on whether at least the first source device is authorized to complete the first request.

Abstract: Aspects of the present disclosure relate to enhancing biometric security. A biometric template and a biometric sample can be compared using a first security technique having a first ECC framework with a first number of codewords. A determination can be made that the biometric template and biometric sample do not match using the first security technique. The biometric template and the biometric sample can then be compared using a second security technique having a second ECC framework with a second number of codewords, the second number of codewords less than the first number of codewords. A determination can then be made that the biometric template and the biometric sample match, and a user associated with the biometric sample can be verified.

Abstract: A system comprises a modem, configured to transmit data modulated based on an intermediate frequency within one of a C, X, or Ku band, and a single-stage block-up converter having an input electrically coupled via one inter-facility link cable to the modem, and an output electrically coupled to a high-power amplifier. The single-stage block-up-converter is configured to up-convert the intermediate frequency to a satellite communication frequency within the Ka, Q, or V band.

Abstract: A method of executing an application by a first terminal is provided. The first terminal executes an application with at least one external device connected to the first terminal, and the first terminal transmits, to a second terminal, information about the application and connection information regarding the at least one external device. The second terminal establishes a connection with respect to the at least one external device based on the connection information, and executes the application with the at least one external device connected to the second terminal based on the information about the application.