Abstract: Trusted, privacy-protected systems and methods are disclosed for processing, handling, and performing tests on human genomic and other information. According to some embodiments, a system is disclosed that is a cloud-based system for the trusted storage and analysis of genetic and other information. Some embodiments of the system may include or support some or all of authenticated and certified data sources; authenticated and certified diagnostic tests; and policy-based access to data.

Abstract: Systems and methods for secure user authentication are described. In certain embodiments, a client device such as a smartphone may be provisioned with a secure key and/or other secret information. The client device may be used to generate unique secure tokens and/or other credentials used in connection with an authentication process. A user may provide the generated tokens and/or other credentials to a service provider in connection with a request to access a managed service. The validity of the generated tokens and/or other credentials may be verified by an authentication service in communication with the service provider.

Abstract: This disclosure relates to systems and methods for managing access to data through enforcement of one or more associated rules. In various embodiments, a directory may be used to manage and/or otherwise record various relationships between objects, that may include governed objects such as data sets, and associated rules and rule sets. Access requests involving governed objects may be compared with relevant rules to determine whether the requested access should be allowed and what, if any, restrictions should be applied in connection with such access. Various embodiments of the disclosed systems and methods may allow for a data governance model that is flexible, allows for use across multiple complex organizations, and is highly extensible.

Abstract: The disclosure relates to, among other things, systems and methods for facilitating the verification of the integrity of digital content. Embodiments of the disclosed systems and methods may provide mechanisms for generating a secure and unambiguous record of the creation and/or modification of digital content and/or other media associated with events. Further embodiments may provide for a ledger configured to capture a record of creation and/or modification actions performed in connection with digital content.

Abstract: The disclosure relates to, among other things, systems and methods for facilitating the verification of the integrity of digital content. Embodiments of the disclosed systems and methods may provide mechanisms for generating a secure and unambiguous record of the creation and/or modification of digital content and/or other media associated with events. Further embodiments may provide for a ledger configured to capture a record of creation and/or modification actions performed in connection with digital content.

Abstract: Embodiments of the disclosed systems and methods provide for techniques for managing generative AI services that allow for generative AI models to better use confidential, proprietary, sensitive, and/or otherwise managed data while maintaining the security of such data. Various embodiments may provide for generative AI model training based on variable and/or otherwise tuned reliance on input training data sets and queries may leverage this differential training. Differential analysis techniques may be further employed to identify confidential data included in model outputs. In further embodiments, query and/or output labeling may be used in connection with access rights management techniques to manage access to proprietary information that may be included in model outputs. Embodiments of the disclosed systems and methods may be used in a variety of applications, use cases, and/or contexts, including in personalized medicine and differential diagnosis applications.

Abstract: The disclosure relates to systems and methods for managing data generated by connected systems and/or devices in connection with energy usage and/or management decisions. In certain embodiments, a gateway device in communication with one or more connected devices may be configured to receive energy management signal information and apply one or more policies in connection with the management of the connected devices. Responses generated in connection with such energy management decisions may be reported securely in a manner that respects various stakeholder concerns relating to transparency, confidentiality, privacy, auditability, and/or affirmation of data provenance.

Abstract: The disclosure relates to, among other things, systems and methods for augmenting and/or otherwise supplementing content using watermarks. Consistent with embodiments disclosed herein, a user device such as a smartphone may be used to retrieve watermark information encoded in a watermark. The watermark information may comprise content that supplements an associated content item, link and/or location information that may be used to retrieve supplemental content, and/or the like. In some embodiments, the watermark information may comprise cryptographic and/or other access token information used to decrypt and/or otherwise access supplemental content.

Abstract: The disclosure relates to, among other things, systems and methods for securely managing digital assets, products, and/or associated tokens in a dynamic way. Various embodiments disclosed herein may use trusted ledgers to securely record certain assertions relating to the digital assets, products, rightsholders, and/or various ecosystems participants. Such assertions may be used in connection with rights binding, content packaging, management, and/or protection operations in connection with a variety of transactions associated with digital assets, products, and/or associated tokens.

Abstract: Embodiments of the disclosed systems and methods facilitating multi-party control of protected cryptographic keys in cloud-based service architectures. Consistent with embodiments disclosed herein, secure enclaves associated with cloud service virtual machines may be leveraged in a manner such that multi-custody control of protected keys may be implemented, while cloud-service account root authority access to these keys may be restricted. In certain embodiments, policy managed by a key management system may persistently bind an application key to an enclave signing key, which may be placed under multi-custody control. With the application key being securely bound to the enclave signing key within enforced policy, the application kay may be effectively placed under multi-custody control within the cloud-based service.

Abstract: Systems and methods are described that use cryptographic techniques to improve the security of applications executing in a potentially untrusted environment associated with a software application. Embodiments of the disclosed systems and methods may, among other things, facilitate cryptographic operations within an execution environment associated with browser software of a client system while maintaining security of cryptographic keys imported into the environment. As the security of keys is maintained in an execution environment implementing embodiments of the disclosed systems and methods, users and/or systems may be more willing to consign their keys for use in connection with cryptographic operations performed in such environments.

Abstract: The disclosure relates to systems and methods for managing data generated by connected systems and/or devices in connection with energy usage and/or management decisions. In certain embodiments, a gateway device in communication with one or more connected devices may be configured to receive energy management signal information and apply one or more policies in connection with the management of the connected devices. Responses generated in connection with such energy management decisions may be reported securely in a manner that respects various stakeholder concerns relating to transparency, confidentiality, privacy, auditability, and/or affirmation of data provenance.

Abstract: This disclosure relates to, among other things, systems and methods for managing the communication of messages between devices using a service system operating as a trusted intermediary. Information indicative of device location and/or orientation may be communicated to the service system, which may use the information to determine whether a transmitting device is oriented and/or otherwise pointed in the direction of an intended receiving device. The trusted service may enforce policy articulated by the receiving device in connection with the communication of a message from the transmitting device to the intended receiving device.

Abstract: This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and/or white box obfuscation techniques.

Abstract: This disclosure relates to, among other things, managing data communicated between systems, services, and/or devices using explicit private networking techniques that provide relatively robust end-to-end security. In some embodiments, explicit private networking techniques may protect data in transit and/or as at rest and/or in use in potentially hostile environments. In various embodiments, an explicit private networking techniques architecture may protect connected device data where and when it is generated by encrypting it and maintaining that protection until it is consumed in a trusted information platform and/or service that uses identity and access management services to identify, authenticate, and/or authorize permissions to read, modify, and/or collaborate with that data and/or control devices and/or issue associated device commands.

Abstract: Embodiments of the disclosed systems and methods provide for the management of the distribution and licensing of content using various content distribution and management techniques. Content links consistent with the disclosed embodiments may be used in connection with the disclosed systems and/or services to provide an integrated framework through which artists and/or creators may manage their content assets and/or facilitate the distribution and use of such content assets in accordance with agreements associated with the assets. Artists and/or creators may distribute content links via a variety of channels in connection with promoting their content. Content consumers may interact with such content links to interface with rights license services, which may in turn access agreements identified by and/or accessible using information included in the content link information in connection with license generation and issuance and agreement enforcement.

Abstract: This disclosure relates to, among other things, scalable data processing, storage, and/or management systems and methods. In various embodiments, sequence number schemes associated with ingested data records may allow for improved management of data stored in one or more layers (e.g., hot and/or cold data storage layers) using data merging, deletion, and/or compaction techniques. In certain embodiments, certain data records stored in one or more segment files associated with a partition may be merged into compacted segment files, thereby reducing storage overhead associated with storing prior records that have been updated and/or deleted records. In further embodiments, data record tombstones may be employed in connection with the management of deleted records.

Abstract: The disclosure relates to, among other things, systems and methods for securely managing digital assets, products, and/or associated tokens in a dynamic way. Various embodiments disclosed herein may use trusted ledgers to securely record certain assertions relating to the digital assets, products, rightsholders, and/or various ecosystems participants. Such assertions may be used in connection with rights binding, content packaging, management, and/or protection operations in connection with a variety of transactions associated with digital assets, products, and/or associated tokens.

Abstract: This disclosure relates to systems and methods for managing data associated with a user using a personalized cloud storage platform operating as a centralized repository for user data generated from a variety of sources and/or user devices. By centralizing the storage and/or management of personal data that would conventionally be confined between multiple information silos, embodiments of the systems and methods disclosed herein may improve the ability of a user to control their personal data, facilitate utilization of their personal data in a variety of ways not offered by services associated with the silos, and/or allow a user to centrally manage their personal data. Further embodiments disclosed herein allow a user to define one or more policies or other rules associated with personal data stored in their personal cloud.

Abstract: This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and/or white box obfuscation techniques.