Abstract: This disclosure relates to systems and methods for enabling the use of secret digital or electronic information without exposing the sensitive information to unsecured applications. In certain embodiments, the methods may include invoking, by a client application executing in an open processing domain, a secure abstraction layer configured to interface with secret data protected by a secure processing domain. Secure operations may be securely performed on the secret data by the secure abstraction layer in the secure processing domain based on an invocation from a client application running in the open processing domain.

Abstract: This disclosure relates to systems and methods for distributing content to a mobile device. Systems and methods are described that provide techniques for the dynamic selection of content for distribution to a mobile device based on user profile information and/or feedback information associated with a user of the mobile device. Additional embodiments of the disclosed systems and methods may provide for the pre-distribution of certain shared content portions to a mobile device. In further embodiments, information relating to the rendering of content items from a set of serialized and/or episodic content items on a mobile device may be used to determine whether to pre-distribute other content items from the set of content items.

Abstract: A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user's input reflects the fact that the user knows the PIN, then the user is authenticated.

Abstract: Systems and methods are disclosed for managing and protecting electronic content and applications. Applications, content, and/or users can be given credentials by one or more credentialing authorities upon satisfaction of a set of requirements. Rights management software/hardware is used to attach and detect these credentials, and to enforce rules that indicate how content and applications may be used if certain credentials are present or absent. In one embodiment an application may condition access to a piece of electronic content upon the content's possession of a credential from a first entity, while the content may condition access upon the application's possession of a credential from a second entity and/or the user's possession of a credential from a third entity. Use of credentials in this manner enables a wide variety of relatively complex and flexible control arrangements to be put in place and enforced with relatively simple rights management technology.

Abstract: The present disclosure relates to systems and methods for facilitating trusted handling of genomic bioinformatics, and/or other sensitive information. Certain embodiments may facilitate policy-based governance of access to and/or use of information through enforced disclosure accounting processes. Among other things, embodiments of the disclosed systems and methods may mitigate the potential for various attacks, including reidentification attacks targeting particular individuals associated with information included in a genomic data set.

Abstract: Systems and methods are described for determining an optimal path and/or route to a destination for a vehicle. Embodiments of the systems and methods disclosed herein facilitate intelligent route planning to a desired destination by a vehicle. In certain embodiments, a path and/or route to a desired destination is determined that accounts for vehicle charging and/or refueling requirements. Disclosed systems and methods may further generate and distribute reservation information ensuring availability of vehicle charging and/or refueling stations along a selected route. Further embodiments disclosed herein may implement information targeting services in connection with intelligent route planning.

Abstract: This disclosure related to systems and methods that facilitate the secure collection and management of operational data relating to a power generation system that includes one or more wind turbines. Embodiments disclosed herein may also be used to provide various insights on wind farm operation and management using collected operational data. Further embodiments facilitate policy-managed access to operational data, including policy-managed access implementing differential privacy, in a manner allowed and/or otherwise controlled by parties having ownership rights or interests in the data.

Abstract: The present disclosure relates generally to systems and methods for association of information with a product using genetic material. In various embodiments, genetic material such as plasmids may be incorporated into and/or otherwise persistently associated with a product. The genetic material may be encoded with, among other things, information that may uniquely identify the product, provide details relating to the origins of the product, the handling, distribution, and/or chain of custody of the product, intellectual property rights and/or other rights associated with the product, and/or the like. By extracting and analyzing the genetic material from the product, information encoded in the genetic material may be obtained by an interested party.

Abstract: This disclosure relates to, among other things, systems and methods for managing the secure management and distribution of electronic content over broadcast and/or broadband communication channels. Certain embodiments disclosed herein may allow for implementation of a digital rights management service in connection with bidirectional communication channels and/or unidirectional communication channels, such as a broadcast signal. Various embodiments may allow for the generation and/or transmission of a digital rights management license in a field included in a broadcast signal. The license may be used by a client device to securely manage a received broadcast signal in accordance with associated rules and/or rights.

Abstract: A system for publishing digital content is described which, in one embodiment, includes a beacon device associated with a first user configured to transmit identification information and information indicating its current position. A browsing device includes a display configured and adapted to display to a second user a representation of a local geographical area, and to selectively display to the second user content information associated with the first user, based at least in part on whether the location of the beacon device is within the local geographical area.

Abstract: This disclosure relates to systems and methods for managing mobile device network access. Systems and methods are described that allow for a mobile device to identify and selectively authenticate with one of a plurality of mobile network operators based on one or more policies associated with the mobile device and/or its user. Based on one or more policies, the mobile device may determine that a particular network is a preferred network and used provisioned electronic subscriber information stored on the device associated with the preferred network to connect to the preferred network. In various embodiments, other available networks may be checked, and the mobile device may switch networks in the event a new preferred network is identified.

Abstract: Methods and apparatus for a secure framework for storing and analyzing genomic data. Embodiments of the present invention apply persistent governance to sensitive information and to the analytics that operate upon it, managing the interaction between the two.

Abstract: The present disclosure relates to systems and methods for facilitating trusted handling of genomic and/or other bioinformatic information. Certain embodiments may facilitate policy-based governance of access to and/or use of bioinformatic information, improved interaction with and/or use of distributed bioinformatic information, parallelization of various processes involving bioinformatic information, and/or reduced user involvement in bioinformatic workflow processes, and/or the like. Further embodiments may provide for memoization processes that may persistently store final and/or intermediate results of computations performed using genomic data for use in connection with future computations.

Abstract: This disclosure relates to systems and methods for managing vehicle occupancy and/or selecting and delivering content to vehicle occupants. Sensor information that may be used to estimate an occupancy of one or more vehicles, such as vehicle weight information, may be collected by a service and used to estimate a relative passenger occupancy of a vehicle and/or a number of occupants in the vehicle. Indications of estimated vehicle occupancy may be provided to prospective passengers via one or more visual displays associated with a transit station and/or mobile and/or personal electronic devices associated with the prospective passengers. Vehicle occupancy information may further be used in connection with managing advertisements displayed to occupants of a vehicle.

Abstract: This disclosure relates to systems and methods for enabling the use of secret digital or electronic information without exposing the sensitive information to unsecured applications. In certain embodiments, the methods may include invoking, by a client application executing in an open processing domain, a secure abstraction layer configured to interface with secret data protected by a secure processing domain. Secure operations may be securely performed on the secret data by the secure abstraction layer in the secure processing domain based on an invocation from a client application running in the open processing domain.

Abstract: This disclosure relates to systems and methods generating and distributing protected software applications. In certain embodiments, integrity checking mechanisms may be implemented using integrity checking code in software code prior to compilation into machine code. Following compilation and execution of the application, the introduced code may check the integrity of the application by determining whether the application behaves and/or otherwise functions as expected. By introducing integrity checking in this manner, integrity checking techniques may be injected into the application prior to compilation into machine code and/or independent of the particular manner in which the application is compiled.

Abstract: The disclosure relates to, among other things, systems and methods for facilitating the secure recording of assertions made by entities tied to identities. Embodiments of the disclosed systems and methods may allow users to make non-revocable, difficult to forge, cryptographic assertions tied to their identities through the posting of entries in an immutable ledger. In certain embodiments, a user's cryptographic assertions may be preceded by ledger entries which feature certificates from trusted authorities that tie the keys used for making assertions to the user's identity. Further embodiments provide for a mechanism for disabling further entries posted under a user's key, either automatically or at the user's initiation.

Abstract: This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and/or white box obfuscation techniques.

Abstract: This disclosure relates to systems and methods for managing protected electronic content that employ relatively efficient messaging schemes. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Certain embodiments may further provide for message protocols where fewer messages are sent in connection with a protected content license request process, thereby reducing latency associated with license request and provisioning processes.

Abstract: Systems and methods are described that use cryptographic techniques to improve the security of applications executing in a potentially untrusted environment associated with a software application. Embodiments of the disclosed systems and methods may, among other things, facilitate cryptographic operations within an execution environment associated with browser software of a client system while maintaining security of cryptographic keys imported into the environment. As the security of keys is maintained in an execution environment implementing embodiments of the disclosed systems and methods, users and/or systems may be more willing to consign their keys for use in connection with cryptographic operations performed in such environments.