Abstract: Systems and methods for applying a digitally signed QR code to a vehicle are provided. In one implementation, a method includes the step of receiving, from a requesting entity, a Certificate Signing Request (CSR) and object-related information associated with an object. The method further includes the step of issuing a digital certificate to authenticate the object and/or the requesting entity. Also, the method includes the step of digitally signing a machine-detectable code configured to reference a database associated with the digital certificate and the object-related information. The method also includes the step of sending the digitally signed machine-detectable code to the requesting entity.

Abstract: Systems and methods for validating email recipients are provided. A method, according to one implementation, includes a step of obtaining a recipient email address entered in an address field of an email message that is being composed by a sender. The method also includes a step of checking validity of the recipient email address and a domain associated with the recipient email address, to identify one or more possible issues in the recipient email address before the email message is sent. The present disclosure can be implemented by an email coordinator service. Advantageously, an email does not leave the sender's possession until there is a validation of the recipient's address and domain.

Abstract: Systems and methods are provided for establishing a trust framework with respect to smart wearable devices. In one implementation, a smart wearable device includes memory configured to store one or more certificates issued by a Certificate Authority (CA), wherein the one or more certificates enable a user of the smart wearable device to digitally verify his or her identity for performing a security-based action. The smart wearable device further includes a Near Field Communication (NFC) device configured to wirelessly link with a security terminal to perform the security-based action when the identity of the user is verified.

Abstract: Systems and methods for generating cryptographic keys in a multi-stage process are provided. A method, in an embodiment, includes generating a plurality of partial cryptographic components adapted for at least one public-key cryptographic algorithm, wherein each partial cryptographic component is generated using a process specific to its respective algorithm; storing the partial cryptographic components in one or more secure pools accessible to a key assembly module; retrieving, by the key assembly module, one or more selected partial cryptographic components from the secure pools based on a requested key type or security parameter; and assembling a public-private key pair from the retrieved partial cryptographic components, wherein assembling the public-private key pair comprises performing reduced cryptographic computations compared to generating all components in a single, monolithic process.

Abstract: Systems and methods are provided for securely managing sensitive information, such as patient data or medical data. According to one implementation, a method includes a step of receiving sensitive information from one or more electronic medical devices over one or more secure, encrypted communication channels in a home network, wherein the one or more electronic medical devices are pre-authenticated using secure credentials. The method also includes a step of re-encrypting the sensitive information received from the one or more electronic medical devices to create secured data packets. Next, the method includes a step of transmitting the secured data packets over the Internet to a remote healthcare server.

Abstract: Systems and methods are provided for validating certificates of a certificate chain and validating Intermediate Certificate Authorities (ICAs). According to one implementations, a centralized certificate validation server is configured to receive a certificate status request from a resource-constrained device, wherein the certificate status request inquires as to whether security measures are in place to allow the resource-constrained device to securely perform an intended communication with a selected Intermediate Certificate Authority (ICA). The centralized certificate validation server is further configured to check a list of valid certificates and trusted ICAs with respect to a domain in which the resource-constrained device is deployed. Also, based on checking the list, the centralized certificate validation server is configured to respond to the resource-constrained device as to whether the resource-constrained device can continue with the intended communication with the selected ICA.

Abstract: Systems and methods for managing a quantum vault for storing a secret include, responsive to a determination of a first level of quantum computing processing capability, defining a first encryption algorithm for the quantum vault such that the first encryption algorithm is sufficient to protect against the first level of quantum computing, such that a first layer of the quantum vault is configured with the first encryption algorithm; and monitoring the quantum computing processing capability; and responsive to a determination of a second level of the quantum computing processing capability where the first encryption algorithm is no longer sufficient to protect against, defining a second encryption algorithm for the quantum vault such that the second encryption algorithm is sufficient to protect against the second level of quantum computing processing capability, and such that the second encryption algorithm is configured as an outermost layer over the first encryption algorithm.

Abstract: Systems and methods are provided for creating simulations and attack vectors related to events surrounding embedded and/or Internet of Things (IoT) devices using injectable grammar. According to one implementation, a server, arranged in a network environment, includes a processing device and a memory device configured to store a management program having logic. The logic enables the processing device to perform a step of incorporating a grammar template into the management program. The management program includes a grammar template that simulates events associated with the embedded devices, and is configured to manage the definition of the associated events. The logic further enables the processing device to perform a step of executing the grammar template in the network environment, yet outside of a sandbox environment, to simulate the events associated with the embedded devices.

Abstract: Systems and methods manage public-key hygiene across certificate authorities (CAs) using privacy-preserving queries to a certificate transparency (CT) log. A CA receives a certificate signing request (CSR), extracts a public key, and applies a predetermined cryptographic transform, such as homomorphic, to generate a privacy-preserving representation of the public key. The CA checks a CT log database updated by multiple CAs to determine whether the public key has been previously used to obtain a certificate. If no prior use is detected, the CA may issue a certificate and update the CT log with the privacy-preserving representation or a hash thereof to denote usage. If prior use is detected, the CA may reject the CSR, request resubmission with a different public key, or require explicit authorization to proceed. The CT log may store only encrypted public keys or both plaintext and encrypted entries to support public and private hierarchies.

Abstract: Systems and methods for validating documents, organization, and individuals are provided, utilizing both automated and manually controlled validation checks. In one implementation, a method includes a step of receiving a request to perform a validation analysis with respect to an organization, wherein the validation analysis includes Machine-Learning (ML) procedures for checking multiple validation metrics. In response to gathering multiple documents relevant for performing the validation analysis, the method further includes a step of extracting data from each of the multiple documents relevant for checking the multiple validation metrics. Also, the method includes a step of accepting manual assistance from a validation specialist when needed for performing the validation analysis.

Abstract: Systems and methods for controlling automated access to webpage content include receiving, by a web server, a request for a webpage from a client device; determining, by analyzing one or more request parameters or behavioral indicators, that the client device is a bot rather than a human-operated client; obtaining, from the bot, an x.509 certificate; validating the x.509 certificate to authenticate the bot's identity; retrieving metadata from the validated x.509 certificate, the metadata comprising at least one of: a bot type, authorized content categories, permitted request frequencies, or intended usage policies; comparing the retrieved metadata against predefined access rules stored by the web server; and serving the requested webpage content or a modified version thereof based on the comparison, thereby ensuring that the bot's access aligns with its authorized permissions.

Abstract: Systems and methods for monitoring and managing cryptographic libraries within a version control system include steps of subsequent to integrating a monitoring agent with the version control system as a hook or plugin that triggers upon one or more version control events including commits, pushes, or merges, continuously observing code changes in real-time as source code is committed to the version control system; analyzing newly added or modified files within the committed code to detect cryptographic libraries and associated cryptographic functions; and generating alerts upon detection of introduced, deprecated, or vulnerable cryptographic components.

Abstract: Systems and methods for coordination and management of keys and instructions for multiple encryption include, responsive to receiving encrypted data that has been encrypted via a plurality of layers of encryption, accessing a coordinator to determine instructions for multiple encryption; and decrypting the encrypted data based on the instructions and utilizing a plurality of keys with a key for each of the plurality of layers of encryption.

Abstract: Systems and methods are provided for validating client information prior to certificate issuance. A method, according to one implementation, includes a step of providing an initiation option to a validation agent in response to the validation agent selecting a portion of a document retrieved from a reliable web source, the initiation option allowing the validation agent to initiate an automated validation procedure. In response to the validation agent selecting the initiation option, the method includes a step of performing the automated validation procedure, wherein the automated validation procedure includes a) a comparing sub-step in which the portion of the document selected by the validation agent is compared with client information included in a certificate request, and b) a compliance sub-step in which it is determined whether or not a comparison, based on the comparing sub-step, complies with a validation guideline.

Abstract: Systems and methods are provided for validating client information prior to certificate issuance. A method, according to one implementation, includes a step of obtaining enrollment information submitted from an organization to a trust entity, the enrollment information including details of the organization. In response to a web browser of the trust entity being navigated to a webpage associated with the organization, the method further includes a step of extracting identifying data from the webpage. Based on a comparison between the identifying data and the details of the organization, the method also includes a step of providing feedback to a validation agent of the trust entity regarding a validation status of the organization.

Abstract: Systems and methods are provided for validating client information prior to certificate issuance. A method, according to one implementation, includes a step of displaying client information submitted by a client on a home screen of a user interface being operated by a validation agent responsible for executing a validation job for the client. Also, the method includes a step of displaying a validation sources tab on the home screen. In response to selection of the validation sources tab, the method also includes displaying links to vetted web sources from which data can be obtained to assist the validation agent with executing the validation job.

Abstract: Systems and methods for analyzing online content are provided. In one implementation, a method includes a step of evaluating an online article to derive credibility information, wherein the online article includes textual and/or graphical content that is accessible via one or more content-sharing platforms. The method also includes a step of adding the credibility information to metadata associated with the online article such that the credibility information is viewable by an end user when the online article is accessed.

Abstract: Systems and methods are provided for issuing digital certificates and promoting cybersecurity. According to one implementation, a method, executed by an end entity, includes a step of, responsive to receiving input from a user associated with the end entity, the input configured to set a flag, detecting a certificate replacement condition in which a current digital certificate issued to the end entity is ready to be reissued or replaced. The flag is configured to signify an intent to automatically transition the end entity to a different cryptography scheme. In response to determining that the flag is set when the certificate replacement condition is detected, the method further includes a step of automatically transitioning from a current cryptography scheme established over a current certificate chain to a new cryptography scheme established over an alternate certificate chain.

Abstract: Tracking hash-based signatures using a distributed ledger includes, subsequent to generating a plurality of one-time signatures (OTSs) organized in a Merkle tree for use in a stateful hash-based digital signature scheme, receiving a request for a digital signature based therein; obtaining an OTS from the plurality of OTSs based on checking the distributed ledger; and creating a transaction on the distributed ledger based on the request to mark the OTS as used. The stateful hash-based digital signature scheme can be Leighton-Micali Signature (LMS) or extended Merkle Signature Scheme (XMSS).

Abstract: Systems and methods are provided for recommending a deployment of cybersecurity products according to threat intelligence pertaining to an organization. A method, according to one implementation, includes a step of extracting, from one or more sources, cybersecurity intelligence related to an online presence of an organization. The method also includes a step of analyzing the cybersecurity intelligence to determine a cybersecurity posture of the organization, where the cybersecurity posture is defined by at least a set of one or more cybersecurity issues. Also, the method includes a step of creating a cybersecurity product deploying recommendation to assist the organization with mitigating the set of one or more cybersecurity issues.