Abstract: The present disclosure relates to a computer-implemented method for controlling access to user data of a user. The method comprises: receiving, by a data controller, an access request requesting access to the user data; determining, by the data controller, a consent status and one or more item of information associated with the user data; encrypting, by the data controller, the user data in an encrypted data package encrypted based on the consent status and one or more item of information; and sending, by the data controller, the encrypted data package in response to the access request.

Abstract: The present disclosure relates to a computer-implemented method of distributing a delta update of a firmware, comprising: sending a first verification request to a device for a first attestation report generated based on an existing version of the firmware installed on the device; receiving a first evaluation for the first attestation report from a trusted third party; determining based on the first evaluation whether the device is secure; and sending a delta update to the device upon determining that the device is secure.

Abstract: A method of tracking a history of firmware program updates. The method includes reading current descriptions of current application programming interfaces from a history log. The current application programming interfaces correspond to current software modules. The current software modules form a current firmware program of a target device. The method also includes accessing updated software modules and new descriptions of new application programming interfaces of an updated firmware program. The updated firmware program is created from the current firmware program. The method further includes appending the new descriptions to the current descriptions in the history log, reading the new descriptions of the new application programming interfaces from the history log, generating an updated linkage for the updated firmware program by adding new links for the new application programming interfaces, and storing the updated software modules and the updated linkage in the history log.

Abstract: A method and apparatus for network connection and maintenance having reduced connection time, increased probability of successful connection, and increased reliability once connected. A second communication protocol is added to network devices, so that two connection-related operations are performed during overlapping periods of time, thereby reducing required connection time while increasing probability of successful connection. Once a device is connected to the network, network maintenance messages, including re-keying requests and “keep-alive” messages, may be sent via the second communication protocol during periods of network congestion, increasing network reliability.

Abstract: A technique for an access node to synchronize the accessibility of a plurality of access nodes within a network is described. The technique receives an accessibility update and/or device update from a remote node. For the accessibility update, the access node compares entries in the accessibility update to the local accessibility table. If entries in the accessibility update are more up-to-date than the local accessibility table, the access node adjusts the local accessibility table to reflect the updates. The local access node compares the node identifier, heartbeat, and timestamp to determine whether and entry in the local accessibility table is up-to-date. For the device update, the access node compares entries in the device update to the local device table. If entries in the device update are more up-to-date than the local device table, the access node adjusts the local device table to reflect the updates.

Abstract: The present disclosure advantageously provides a computer-based method for partitioning software for an embedded system with a memory protection unit (MPU). Object code within a plurality of object files is converted to intermediate code. A call graph is generated based on the intermediate code. The call graph is transformed into a directed flow graph, which includes updating the call graph's node weights and directed edge weights. The directed flow graph is partitioned into a target number of MPU memory regions, which includes assigning each element of the object code to one of the MPU memory regions. Each element of the object code is relocated to a new object file that corresponds to the assigned MPU memory region. An MPU configuration object file is created that includes one or more configuration parameters for each MPU memory region.