Abstract: An approach for authenticating a device is provided. The approach includes a computer implemented method for receiving a first stage biometric variable verification data for accessing the device. The approach further includes a computer-implemented method for computing a second stage binary authentication data for accessing the device. The approach further includes analyzing the received first stage biometric variable verification data and the second stage binary authentication data. The approach further includes receiving the second binary authentication data for accessing the device.

Abstract: An authentication apparatus includes an electrocardiogram (ECG) signal receiver configured to receive a target ECG signal, and a preprocessor configured to filter the target ECG signal. The apparatus further includes an authenticator configured to process the filtered target ECG signal based on a pattern of a reference ECG signal, and determine whether the target ECG signal corresponds to the reference ECG signal based on the processing.

Abstract: Technologies are provided in embodiments to manage an authentication confirmation score. Embodiments are configured to identify, in absolute session time, a beginning time and an ending time of an interval of an active user session on a client. Embodiments are also configured to determine a first value representing a first subset of a set of prior user sessions, where the prior user sessions of the first subset were active for at least as long as the beginning time. Embodiments can also determine a second value representing a second subset of the set of prior user sessions, where the prior user sessions of the second subset were active for at least as long as the ending time. Embodiments also determine, based on the first and second values, a decay rate for the authentication confidence score of the active user session. In some embodiments, the set is based on context attributes.

Abstract: A method includes a computer device receiving a set of images for at least one user; the computer device receiving unique visual clue inputs from the at least one user for each image of the set of images; the computer device receiving drawing gesture inputs from the at least one user for each image of the set of images; and the computer device using the visual clue and drawing gesture inputs to create passwords to provide a locked access point for at least one device.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.

Abstract: An information processing apparatus includes a determination unit, an operator change unit, and an image change unit. The determination unit determines whether or not an image displayed on a display unit of a portable information processing apparatus has been rotated. The operator change unit changes an operator of the information processing apparatus, when the determination unit determines that the image has been rotated. The image change unit changes the image displayed on the display unit of the information processing apparatus on the basis of the operator who has been changed by the operator change unit.

Abstract: An image processing apparatus includes an imaging unit, an authenticating unit, and a controller. The imaging unit acquires a face image of a user. The authenticating unit performs a first authentication process based on the face image and a second authentication process based on information other than the face image. The controller suspends the first authentication process based on the face image while maintaining the imaging unit in an activated state when the authenticating unit performs the second authentication process.

Abstract: Session-specific information stored to a cookie or other secure token can be selected and/or caused to vary over time, such that older copies will become less useful over time. Such an approach reduces the ability of entities obtaining a copy of the cookie from performing unauthorized tasks on a session. A cookie received with a request can contain a timestamp and an operation count for a session that may need to fall within an acceptable range of the current values in order for the request to be processed. A cookie returned with a response can be set to the correct value or incremented from the previous value based on various factors. The allowable bands can decrease with age of the session, and various parameter values such as a badness factor for a session can be updated continually based on the events for the session.

Abstract: An apparatus and method for a two phase password input mechanism are provided. The method includes resetting a password entry, displaying a password entry screen, inputting a password element of a plurality of password elements, determining whether the entered password is complete, determining whether the entered password is correct when the entered password is complete, and if the entered password is correct, unlocking the mobile device. The plurality of password elements include at least two elements that cannot be observed from a same viewpoint.

Abstract: An information processing apparatus includes, a processor configured to execute a process including, determining whether a relationship between biometric information acquired from a living body and biometric information stored in a storage unit satisfies a predetermined standard, creating first authentication information by detecting predetermined operation when the relationship between the biometric information acquired from the living body and the biometric information stored in the storage unit does not satisfy the predetermined standard, comparing the first authentication information and second authentication information stored in the storage unit, and activating the information processing apparatus when the first authentication information and the second authentication information match.

Abstract: Computer systems and methods in various embodiments are configured for improving the security and efficiency of client computers interacting with server computers through supervising instructions defined in a web page and/or web browser. In an embodiment, a computer system comprising one or more processors, coupled to a remote client computer, and configured to send, to the remote client computer, one or more instructions, which when executed by the remote client computer, cause a run-time environment on the remote client computer to: intercept, within the run-time environment, a first call to execute a particular function defined in the run-time environment by a first caller function in the run-time environment; determine a first caller identifier, which corresponds to the first caller function identified in a run-time stack maintained by the run-time environment; determine whether the first caller function is authorized to call the particular function based on the first caller identifier.

Abstract: The present disclosure relates to a method for identity authentication based on face recognition. The method comprises: initiating an interaction authentication request, which includes requested interaction tracks, and sending the interaction authentication request to an authentication client; receiving face interaction information sent by the authentication client; extracting face action tracks from the face interaction information; determining whether the face action tracks are consistent with the requested interaction tracks; if the face action tracks are consistent with the requested interaction tracks, determining that the authentication is passed, otherwise determining that the authentication fails. The above solution could prevent the authentication server from being cheated by face pictures or videos taken previously and could ensure that the face pictures or videos passing the authentication is taken in real time from a real person.

Abstract: A security system and method for authenticating a user's access to a target system is disclosed. The security system receives an authentication request from the user and generates a security matrix which comprises a mapping between each symbol within a symbol set and a code value randomly selected from a distinct code set. The number of elements in the symbol set and in the code set are selected to provide a predetermined level of security against capture of a user-defined keyword by an unauthorized observer. The security system sends the security matrix to the user and awaits a one-time code in response. The user forms the one-time code based on the user keyword and the security matrix. The security system validates the one-time code against the security matrix and the keyword to determine an authentication result, permitting or denying the user access to the target system.

Abstract: A method for unlocking a screen of a device, including: detecting an inputting operation on the device for inputting an unlock password, the inputting operation causing one character to be inputted to the device; performing, in response to the detecting, a comparison to determine whether all input characters corresponding to a password indicator displayed on the screen match a preset password; and unlocking the screen of the device if it is determined that all the input characters corresponding to the password indicator match the preset password.

Abstract: Antialiasing for picture passwords and other touch displays is disclosed. In some embodiments a client device for authenticating a user is operable to obtain a sequence of input actions for an image and obtain a partial hash from a Proof of Knowledge (PoK) server where the partial hash is part of a hash used for authentication of the user. The client device is also operable to calculate a hash for the sequence and determine if a part of the hash matches the partial hash. If the part of the hash matches the partial hash, the client device sends a communication to the PoK server to authenticate the user based on the hash for the sequence of the one or more input actions and obtain a response indicating whether the user is authenticated. In this way, sending some hashes to the proof of knowledge server may not be necessary, saving resources.

Abstract: A mobile terminal is disclosed. A mobile terminal according to one embodiment of the preset invention includes a first touch screen including a sub display, a second touch screen including a main display, a touch recognition sensor configured to recognize a first touch input and a second touch input starting on a first position of the first touch screen, a memory configured to store the recognized first touch input and the second touch input as a unlock pattern and if a third touch input and a fourth touch input starting on a second position of the first touch screen are recognized by the touch recognition sensor, a controller configured to compare the unlock pattern stored in the memory with the recognized third touch input and the fourth touch input and execute unlock of the main display according to a result of the comparison.

Abstract: An electronic camera includes an image pickup device, a memory, a face detecting section, a face recognizing section, and an object specifying section. The image pickup device photo-electrically converts an image of an object into an electric signal and generates an image signal as the electric signal. The memory has recorded registration data representing characterizing points of faces as recognizing targets. The face detecting section detects face areas in a shooting image plane based on the image signal and extracts characterizing points of faces of objects from the face areas. The face recognizing section determines whether or not the face areas are the recognizing targets based on data of the characterizing points corresponding to the face areas and on the registration data. The object specifying section specifies as a main object an object present on nearest side of the electronic camera of objects as the recognizing targets.

Abstract: A method performed by an authentication processor for authenticating an unknown user claiming to be a legitimate user. The method includes comparing a legitimate user response metric to an unknown user response metric and one of preventing access to the computer system and decreasing a level of access to the computer system when the unknown user response metric differs from the legitimate user response metric by more than a predefined degree of acceptable variation. The legitimate user response metric represents observed changes in micro-behaviors of the legitimate user in response to viewing a plurality of prime images. The unknown user response metric represents observed changes in micro-behaviors of the unknown user in response to viewing the plurality of prime images.

Abstract: Technologies are provided in embodiments to manage an authentication confirmation score. Embodiments are configured to identify, in absolute session time, a beginning time and an ending time of an interval of an active user session on a client. Embodiments are also configured to determine a first value representing a first subset of a set of prior user sessions, where the prior user sessions of the first subset were active for at least as long as the beginning time. Embodiments can also determine a second value representing a second subset of the set of prior user sessions, where the prior user sessions of the second subset were active for at least as long as the ending time. Embodiments also determine, based on the first and second values, a decay rate for the authentication confidence score of the active user session. In some embodiments, the set is based on context attributes.

Abstract: A method for outputting sensitive data to a user includes a communication terminal checking to determine whether at least a portion of the sensitive data is to be outputted by determining whether the communication terminal is in one of a plurality of predefined communication configurations for outputting the sensitive data. If the communication terminal is found to be a first configuration, the communication terminal transmits the sensitive data so that at least one of the video data and the audio data is output to the user via at least one peripheral device connected to the communication terminal. If the communication terminal is in a second configuration, the communication terminal performs at least one security action to help further protect the sensitive data.

Abstract: There is provided a method and apparatus for allowing a user of a mobile device to securely access a storage device of a home network of the user. The method and apparatus advantageously allow for the user to share data stored on the home network with other users, or to give full or restricted access to other computing devices. The apparatus consists of a network element residing on the home network of the user, which enables communications between the network storage and the mobile device when the mobile device is in a remote location.

Abstract: A processor of a mobile terminal refers to an app table that stores a reference flag on a per-app basis, the flag indicating whether the operation-unlock app screen is to be displayed in the foreground window of a display. Furthermore, the processor acquires from the app table the flag that corresponds to the current app in response to a lighting-off command. Moreover, the processor determines whether the operation-unlock app screen is to be displayed in the foreground window instead of the current app screen on the basis of the acquired flag. On the basis of the result of the determination, the processor controls the changing of a screen in the foreground window.

Abstract: The present invention relates to a method for control of a video interface (4) associated to a user (12) for use in conference situations and the like, comprising the steps of capturing a frame (11) of a video stream originated from the user (12), recognizing a face (10) of the user (12) within the video frame (11), detecting an orientation of the face (10) of the user (12) within the video frame (11), and providing a control signal indicating the orientation of the face (10). The invention also relates to a method for operation of the video interface (4) comprising the steps of the above control method, mapping the orientation of the face (10) based on the control signal to a focus area (15) of the video interface (4), and highlighting the focus area (15). The invention further relates to a face orientation detector (6) and a video conferencing server (5), which are adapted to perform the above methods.

Abstract: Systems, methods, and computer-readable media are disclosed for generating a baseline use profile that indicates typical patterns of use of a device over time, transitioning the device to a challenge mode when sensor data indicates a deviation from the baseline use profile by more than a permissible tolerance, presenting challenges to the user while in the challenge mode, and determining whether to restrict or allow access to device functionality based on user responses to the challenges.

Abstract: A system, apparatus, method, and machine readable medium are described for non-intrusive privacy-preserving authentication.

Abstract: A network communications method utilizing a network watermark for providing security in the communications includes creating a verifiable network communications path of nodes through a network for the transfer of information from a first end node to a second end node; verifying the network communications path of nodes, by the first end node, before communicating by the first end node information intended for receipt by the second end node; and once the network communications path of nodes is verified by the first end node, communicating by the first end node, via the verified communications path of nodes, the information intended for receipt by the second end node; wherein the network watermark represents the verifiable network communications path of nodes.

Abstract: An electronic device includes an inertial force sensor, a memory unit, and a control unit connected to the inertial force sensor and the memory unit. The control unit includes a characteristic-waveform processor and an authenticator. The characteristic-waveform processor is operable to generate a characteristic waveform based on output waveforms output from the inertial force sensor in response to operations performed by a first user, and to record the characteristic waveform in the memory unit. The authenticator is operable to generate a reference waveform based on one or more output waveforms output from the inertial force sensor in response to respective ones of one or more operations performed by a second user, and to determine whether or not the first user and the second user are identical to each other by comparing the reference waveform with the characteristic waveform. This electronic device performs accurate authentication with a simple structure.

Abstract: A proximity of a second user is sensed while a first user who is a registered user views an iris recognition portable device. Whether the second user is registered is checked according to whether an iris of the second user is recognized. The displayed screen may be altered when the second user is determined to be a non-registered user.

Abstract: A method and an apparatus for dynamically adjusting a viewing angle of a screen are provided. The method is suitable for dynamically adjusting a viewing range of a screen of a handheld electronic device, wherein the viewing angle of the screen is adjustable. The method is as follows. First, a shifting value of a target deviating from the viewing range of the screen is detected by a sensor. Next, the viewing range of the screen is dynamically adjusted according to the shifting value, so as to cover the target within the viewing range of the screen. Accordingly, the snooping for the content of a frame displayed on the screen by others can be prevented and a user can view the frame displayed on the screen more conveniently.

Abstract: Systems and methods for managing a user identity on a mobile device are provided. The system comprises the mobile device comprising a user agent and a client application, the user agent and the client application in communication with each other. The system further comprises an identity provider in communication with the mobile device, and a client service in communication with the mobile device. The user agent is configured to communicate with the identity provider and retrieve the user identity for the client application, and the client application is configured to transmit the user identity to the client service.

Abstract: A method and apparatus for device authentication are provided. In the method and apparatus, authentication data for a first device is received. The first device is then authenticated based at least in part on demonstrated access to authentication data prior to broadcast of the authentication data. One or more actions may be taken in response to the authentication of the first device based at least in part on the demonstrated access to the authentication data.

Abstract: Mobile devices and methods are disclosed for providing privacy and confidentiality of information through the provision of multiple profiles that control access to the information, and operation of the mobile device in accordance with a profile chosen by entry of an associated access code.

Abstract: The present disclosure relates to a multi-touch method, configured to a touch panel. The method comprises: applying a first object to touch a first image on the touch panel for inputting a first password; and determining whether inputting a second password, and if not, removing the first object from the touch panel for ending a first round of password input.

Abstract: The present invention provides a device and method for classifying a user using pattern recognition of an input device. A series of the keystroke objects are received via the user input interface. A typing signature is determined for the series of keystroke objects using the processor by analyzing the key attributes of the series of keystroke objects using a pattern recognition algorithm. The typing signature is compared to one or more user typing signatures stored in the memory using the processor. The user is classified based on whether or not the typing signature is statistically similar to one of the stored typing signatures.

Abstract: Technology for identifying virtual computing instance issues is described. An operating information report of a virtual computing instance may be parsed to obtain a diagnostic result. The diagnostic result may be compared against a data store of known computing instance issues to determine whether there is an issue for the virtual computing instance. The issue may be flagged when identified and provided for resolution.

Abstract: An information processing device includes: a first acquiring unit that acquires first information to be used for detecting whether a viewer is present around a display unit displaying an image from a first detector that detects the first information; a second acquiring unit that acquires second information to be used for recognizing an instruction action to the image displayed by the display unit from a second detector that detects the second information; and a deciding unit that decides a recognition method of the instruction action by using the second information, based on the first information acquired by the first acquiring unit.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by a predetermined offset.

Abstract: An image forming apparatus capable of flexibly controlling whether or not to perform user authentication when a user performs operations related to functions of the apparatus. When a user instructs the apparatus to perform any of operations related to a secure print job which is a print job executed by using a secure print function, when the apparatus is operated in a function-based authentication mode, it is determined whether or not a user-selected function of a plurality of functions including at least a secure printing function for printing data in response to an input of a password requires user authentication. When the secure printing function is specified as the user-selected function and it is determined that the user-selected function does not require user authentication, the user is allowed to use the secure printing function, even if the user is not authenticated.

Abstract: A mobile terminal is disclosed. A mobile terminal according to one embodiment of the preset invention includes a first touch screen including a sub display, a second touch screen including a main display, a touch recognition sensor configured to recognize a first touch input and a second touch input starting on a first position of the first touch screen, a memory configured to store the recognized first touch input and the second touch input as a unlock pattern and if a third touch input and a fourth touch input starting on a second position of the first touch screen are recognized by the touch recognition sensor, a controller configured to compare the unlock pattern stored in the memory with the recognized third touch input and the fourth touch input and execute unlock of the main display according to a result of the comparison.

Abstract: A method, system and device for allowing the secure collection of sensitive information is provided. The device includes a display, and a user interface capable of receiving at least one user-generated interrupt in response to a stimulus generated in response to content received by the device, wherein the action taken upon receiving the user-generated interrupt depends on a classification of the content, the classification identifying the content as trusted or not trusted. The method includes detecting a request for sensitive information in content, determining if an interrupt is generated, determining if the content is trusted, allowing the collection of the sensitive information if the interrupt is generated and the content is trusted, and performing an alternative action if the interrupt is generated and the content is not trusted. The method may include instructions stored on a computer readable medium.

Abstract: In a method for unlocking an electronic device, a plurality of icons are preset and an icon is designated to be an unlocking icon for unlocking the electronic device. When the electronic device is locked, the icons are moving on the display device, and the moving icons is highlighted one by one according to a moving direction and a time interval. When a highlighted icon is touched and the highlighted icon is the unlocking icon, the electronic device is unlocked.

Abstract: A method of authenticating a user of a computing device is proposed, together with computing device on which the method is implemented. In the method a modified base image is overlaid with a modified overlay image on a display and at least one of the modified base image and modified overlay image is moved by the user. Positive authentication is indicated in response to the base image reference point on the modified base image being aligned with the overlay image reference point on the modified overlay image and selection of a color for a portion of the display that matches a pre-selected color.

Abstract: An unlocking method for a portable electronic device, and a portable electronic device and a touch-sensitive device employing the unlocking method are provided. The portable electronic device has a touch-sensitive display, and a user interface is displayed on the touch-sensitive display. The unlocking method includes respectively displaying at least one unlocking image on at least one unfixed point of the touch-sensitive display when the user interface is in a user interface locking state and sensing a touch signal of the touch-sensitive display. The unlocking method further includes switching the user interface to a user interface unlocking state when at least one click corresponding to the at least one unfixed point is detected on the touch-sensitive display.

Abstract: Exemplary embodiments include a method for remapping subsets of host-centric application programming interfaces to commodity service providers, the method including receiving a commodity service providers object, embedding the commodity service providers object with a handle, transforming the handle into a serialized object readable by a hardware security module, generating a virtualized handle from the transformed handle, selecting a target hardware security module based on characteristics of the serialized object and mapping the virtualized handle to the target hardware security module.

Abstract: A system and method for managing licensing of virtual environment applications. A licensing module of a first installed virtual environment application detects installation of affiliated applications and gives them a group licensing key for passing it to the licensing server. The licensing server derives licensing parameters of the affiliated applications from the group key and gives the licenses to the affiliated applications, in case of successful validation. The licensing system provides protection from un-authorized copying of the applications. If an affiliated virtual environment application is copied (or moved) to another hardware node without its virtual environment, the licensing server will not give the license activation key to this virtual environment application.

Abstract: A system for providing a managed virtual point to point communication service having a verified directory and providing secure transmission and controlled delivery of electronic document images may include a memory, an interface, and a processor. The memory may store a verified directory of users. The interface may communicate with devices of sending and receiving users in the verified directory. The processor may be operative to receive a request to deliver an electronic document image from a sending user to a receiving user. The processor may provide secure access to the electronic document image to the receiving user. The processor may provide a delivery confirmation to the sending device of the sending user upon determining that the electronic document image was securely accessed by the receiving user. The delivery confirmation may indicate that the electronic document image was securely transmitted to the receiving user.

Abstract: Systems and methods allow a user to interact with an augmented reality device. In one implementation, a lockable, wearable device is provided. The wearable device comprises a display; at least one sensor configured to provide an output indicative of a viewing direction of a user; and at least one processing device. The at least one processing device is configured to track a pattern of the viewing direction of the user; and unlock the lockable, wearable device to provide the user with access to information on the display of the device when the tracked pattern of movement matches a predetermined pattern of movement.

Abstract: A method and system are disclosed whereby an activity launch modifier is combined with a passcode. The activity launch modifier is used to determine a portion of an application to activate upon valid authentication.

Abstract: An electronic device includes a positioning module, a micro processing unit and a first storing device. The micro processing unit electrically connects with the positioning module and the first storing device. The electronic detects a position thereof via the positioning module and generates a positioning coordinate datum. The micro processing unit determines whether the electronic device is in a preset working area through the positioning coordinate datum. When the electronic device is not in the preset working area, the micro processing unit stops the electronic device from accessing the first storing device. When the electronic device is in the preset working area, the micro-processing unit allows the electronic device to access the first storing device and boot a first operating system stored thereon.

Abstract: The invention includes a system for transmitting multi-wrapped VPN enabled-data across a communication network from a device to another destination device within a remote protected network. The device comprises a software stack, hardware layer, application-layer VPN software, link-layer VPN software, and user-based application software. Next, the device is coupled to a communication network. Next, the system includes a link-layer VPN aggregator and an application-layer VPN aggregator. Finally, the system includes a protected network that includes the destination device. The invention includes embodiments for configuring a device to transmit multi-wrapped VPN enabled-data and processes for transmitting multi-wrapped VPN enabled-data across a communication network from a device to another destination device within a remote protected network. Finally, the invention includes inverse processes so the destination device can transmit data back through the communication network and to the device.