Abstract: This disclosure relates to systems and methods for managing access to data through enforcement of one or more associated rules. In various embodiments, a directory may be used to manage and/or otherwise record various relationships between objects, that may include governed objects such as data sets, and associated rules and rule sets. Access requests involving governed objects may be compared with relevant rules to determine whether the requested access should be allowed and what, if any, restrictions should be applied in connection with such access. Various embodiments of the disclosed systems and methods may allow for a data governance model that is flexible, allows for use across multiple complex organizations, and is highly extensible.

Abstract: The present disclosure relates generally to systems and methods for association of information with a product using genetic material. In various embodiments, genetic material such as plasmids may be incorporated into and/or otherwise persistently associated with a product. The genetic material may be encoded with, among other things, information that may uniquely identify the product, provide details relating to the origins of the product, the handling, distribution, and/or chain of custody of the product, intellectual property rights and/or other rights associated with the product, and/or the like. By extracting and analyzing the genetic material from the product, information encoded in the genetic material may be obtained by an interested party.

Abstract: This disclosure related to systems and methods that facilitate the secure collection and management of operational data relating to a power generation system that includes one or more wind turbines. Embodiments disclosed herein may also be used to provide various insights on wind farm operation and management using collected operational data. Further embodiments facilitate policy-managed access to operational data, including policy-managed access implementing differential privacy, in a manner allowed and/or otherwise controlled by parties having ownership rights or interests in the data.

Abstract: This disclosure relates to systems and methods for using available computational resources of a variety of connected devices in a connected device ecosystem in connection with performing various computational and/or processing operations. In certain embodiments, computational and/or processing operations may be distributed between a plurality of connected devices by a trusted service, leveraging available computational resources of the connected devices to perform relatively complex computations and/or operations. Systems and methods are further disclosed that allow for enforcement of various policies in connection with such distributed computation and/or processing operations, which may help to protect the privacy and security interests of various stakeholders in the connected device ecosystem.

Abstract: This disclosure relates to systems and methods for managing mobile device network access. Systems and methods are described that allow for a mobile device to identify and selectively authenticate with one of a plurality of mobile network operators based on one or more policies associated with the mobile device and/or its user. Based on one or more policies, the mobile device may determine that a particular network is a preferred network and used provisioned electronic subscriber information stored on the device associated with the preferred network to connect to the preferred network. In various embodiments, other available networks may be checked, and the mobile device may switch networks in the event a new preferred network is identified.

Abstract: This disclosure relates to systems and methods for managing the operation of unmanned vehicles within policy managed locations and/or areas. In some embodiments, an unmanned vehicle may issue an operator signed request to enter a policy managed area and/or use a certain sensor system within a policy managed area to an unmanned vehicle management system. The unmanned vehicle management system may verify the operator's identity and associated rights with a trusted authority, identify a policy associated with the policy managed area, and enforce the identified policy in connection with generating a response to the request. In this manner, the use of unmanned vehicles and/or associated systems may be managed in accordance with certain policies and/or rules associated with a particular operating location and/or area.

Abstract: This disclosure relates to, among other things, systems and methods for managing the secure management and distribution of electronic content over broadcast and/or broadband communication channels. Certain embodiments disclosed herein may allow for implementation of a digital rights management service in connection with bidirectional communication channels and/or unidirectional communication channels, such as a broadcast signal. Various embodiments may allow for the generation and/or transmission of a digital rights management license in a field included in a broadcast signal. The license may be used by a client device to securely manage a received broadcast signal in accordance with associated rules and/or rights.

Abstract: This disclosure relates to systems and methods for managing connected devices and associated network connections. In certain embodiments, trust, privacy, safety, and/or security of information communicated between connected devices may be established in part through use of security associations and/or shared group tokens. In some embodiments, these security associations may be used to form an explicit private network associated with the user. A user may add and/or manage devices included in the explicit private network through management of various security associations associated with the network's constituent devices.

Abstract: This disclosure relates to systems and methods for verifying the presentation of content to a target audience using generated metrics indicative of a likelihood that the content was presented to actual human individuals within the target audience. In some instances, such a metric may be associated with a probability model estimating that a user (e.g., a user of a device) is human and not a bot and/or other automated service. Metrics consistent with aspects of the disclosed embodiments may be generated based, at least in part, on user information received from a user and/or associated devices and/or associated services.

Abstract: Systems and methods are described that protect intellectual property rights in connection with 3-dimensional printing processes. In certain embodiments, an object a user would like to render with a 3-dimensional printing device may be compared with one or more managed objects having certain associated intellectual property rights. If the object is found to be similar to a managed object (e.g., similar in shape, function, composition, etc.), policy associated with the managed object may be enforced in connection with rendering the object. In this manner, intellectual property rights associated with the managed objects may be enforced.

Abstract: Trusted, privacy-protected systems and method are disclosed for processing, handling, and performing tests on human genomic and other information. According to some embodiments, a system is disclosed that is a cloud-based system for the trusted storage and analysis of genetic and other information. Some embodiments of the system may include or support some or all of authenticated and certified data sources; authenticated and certified diagnostic tests; and policy-based access to data.

Abstract: This disclosure relates to systems and methods for distributing content to a mobile device. Systems and methods are described that provide techniques for the dynamic selection of content for distribution to a mobile device based on user profile information and/or feedback information associated with a user of the mobile device. Additional embodiments of the disclosed systems and methods may provide for the pre-distribution of certain shared content portions to a mobile device. In further embodiments, information relating to the rendering of content items from a set of serialized and/or episodic content items on a mobile device may be used to determine whether to pre-distribute other content items from the set of content items.

Abstract: This disclosure relates to systems and methods for enabling the use of secret digital or electronic information without exposing the sensitive information to unsecured applications. In certain embodiments, the methods may include invoking, by a client application executing in an open processing domain, a secure abstraction layer configured to interface with secret data protected by a secure processing domain. Secure operations may be securely performed on the secret data by the secure abstraction layer in the secure processing domain based on an invocation from a client application running in the open processing domain.

Abstract: Systems and methods are disclosed for managing and protecting electronic content and applications. Applications, content, and/or users can be given credentials by one or more credentialing authorities upon satisfaction of a set of requirements. Rights management software/hardware is used to attach and detect these credentials, and to enforce rules that indicate how content and applications may be used if certain credentials are present or absent. In one embodiment an application may condition access to a piece of electronic content upon the content's possession of a credential from a first entity, while the content may condition access upon the application's possession of a credential from a second entity and/or the user's possession of a credential from a third entity. Use of credentials in this manner enables a wide variety of relatively complex and flexible control arrangements to be put in place and enforced with relatively simple rights management technology.

Abstract: A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user's input reflects the fact that the user knows the PIN, then the user is authenticated.

Abstract: Systems and methods are described for determining an optimal path and/or route to a destination for a vehicle. Embodiments of the systems and methods disclosed herein facilitate intelligent route planning to a desired destination by a vehicle. In certain embodiments, a path and/or route to a desired destination is determined that accounts for vehicle charging and/or refueling requirements. Disclosed systems and methods may further generate and distribute reservation information ensuring availability of vehicle charging and/or refueling stations along a selected route. Further embodiments disclosed herein may implement information targeting services in connection with intelligent route planning.

Abstract: The present disclosure relates to systems and methods for facilitating trusted handling of genomic bioinformatics, and/or other sensitive information. Certain embodiments may facilitate policy-based governance of access to and/or use of information through enforced disclosure accounting processes. Among other things, embodiments of the disclosed systems and methods may mitigate the potential for various attacks, including reidentification attacks targeting particular individuals associated with information included in a genomic data set.

Abstract: This disclosure related to systems and methods that facilitate the secure collection and management of operational data relating to a power generation system that includes one or more wind turbines. Embodiments disclosed herein may also be used to provide various insights on wind farm operation and management using collected operational data. Further embodiments facilitate policy-managed access to operational data, including policy-managed access implementing differential privacy, in a manner allowed and/or otherwise controlled by parties having ownership rights or interests in the data.

Abstract: The present disclosure relates generally to systems and methods for association of information with a product using genetic material. In various embodiments, genetic material such as plasmids may be incorporated into and/or otherwise persistently associated with a product. The genetic material may be encoded with, among other things, information that may uniquely identify the product, provide details relating to the origins of the product, the handling, distribution, and/or chain of custody of the product, intellectual property rights and/or other rights associated with the product, and/or the like. By extracting and analyzing the genetic material from the product, information encoded in the genetic material may be obtained by an interested party.

Abstract: This disclosure relates to, among other things, systems and methods for managing the secure management and distribution of electronic content over broadcast and/or broadband communication channels. Certain embodiments disclosed herein may allow for implementation of a digital rights management service in connection with bidirectional communication channels and/or unidirectional communication channels, such as a broadcast signal. Various embodiments may allow for the generation and/or transmission of a digital rights management license in a field included in a broadcast signal. The license may be used by a client device to securely manage a received broadcast signal in accordance with associated rules and/or rights.