Abstract: A light source is provided with a digitally addressable lampshade that includes a plurality of regions of controllable opacity. Systems and methods are described for controlling the digital lampshade. In an exemplary embodiment, an addressable lampshade effects a time-varying pattern of changes to the opacity of the regions to generate a lamp identification pattern. A lamp is identified from the patterns by a camera-equipped mobile device. The mobile device then causes the identified lamp to generate a position-determining pattern of light. The mobile device determines its own position relative to the lamp based on the pattern of light received by the camera. The mobile device then instructs the digital lampshade, according to user input, to allow illumination or to provide shade at the determined position of the mobile device.

Abstract: Systems, methods, and instrumentalities are disclosed for providing security to a wireless transmit receive unit (WTRU). A software vulnerability ticket (SVT) may be received by a WTRU. The SVT may include a location to fetch software update information, content of the software update information, and/or an indication that an update is not available. The SVT may be stored in a memory associated with the WTRU. It may be determined (e.g., by a security agent associated with the WTRU) whether the WTRU has a fresh SVT. A security agent may run in a secure execution environment on the WTRU. The secure execution environment may not be dependent on a main operating system associated with the WTRU. If it is determined that the WTRU has a fresh SVT, a security update may be performed. If it is determined that the WTRU does not have a fresh SVT, a recovery procedure may be executed.

Abstract: Systems and methods are provided for protecting the privacy of wireless enabled medical device (WEMD) communications, particularly against traffic-analysis attacks. In an exemplary method, a WEMD measures a physiological parameter and conveys that physiological parameter to a WEMD-receiver using messages that simulate at least one message from a cover device, for example by embedding physiological data in a message from a simulated cover device. In some embodiments, the WEMD sends messages that simulate traffic patterns of the cover device. The cover device may be a device not associated with serious medical conditions, such as a fitness-oriented heart rate monitor. In some embodiments, the simulation is discontinued under emergency conditions or in particular regions that are deemed to be safe.

Abstract: Systems and methods are described for improved navigation assistance by providing overview directions focusing on points where other users tend to make mistakes or display emotional responses, such as stress, that indicate that they feel they may make mistakes. In an exemplary method, a navigation process receives information about a present user's navigation route, the present user's status, and the user history. The navigation service compiles the received information and determines an enhanced navigation route.

Abstract: Systems and methods are described for providing user control over access to private data. An exemplary embodiment is performed on a client computing device in which separate computing environments referred to as context modules are installed. Each context module has a context identifier. An application is installed in a context module. The client computing device receives a request for data from the application, where the request for data includes a schema identifier that identifies the data. If the schema identifier is associated with the context identifier in a rules data storage, then the data is provided to the application. Otherwise, a user is prompted as to whether to permit the data request.

Abstract: Systems and methods are described that enable a 3D telepresence. In an exemplary method, a 3D image stream is generated of a first participant in a virtual meeting. A virtual meeting room is generated. The virtual meeting room includes a virtual window, and the 3D image stream is reconstructed in the virtual window. The first participant thus appears as a 3D presence within the virtual window. The virtual meeting room may also include virtual windows providing 3D views of other participants in the virtual meeting and may further include avatars of other meeting participants and/or of the first meeting participant.

Abstract: A mobile computer device comprising a front, a back, and at least two sides. The device comprises a touch screen in the front display. The sides connect the front surface to the back surface. The mobile device comprises a side touch sensor disposed in at least one of the two sides. The mobile device also comprises a proximity sensor that senses heat, a processor, and a computer memory. The computer memory may have executable instructions for the processor that comprise activating the side touch sensor when the proximity sensor senses heat above a threshold.

Abstract: Systems, methods, and/or techniques for mitigating attacks on an IoT device at a gateway device may be provided. The gateway device may receive a communication directed to an Internet of Things (IoT) device and forward it to the IoT device. The IoT device may indicate to the gateway device that the communication is associated with an attack and send the gateway device a sleep time period and a request to change a filtering rule set at the gateway device. The gateway device may change the filtering rule set and receive another communication directed to the IoT device. If the another communication is valid based on the filtering rule set with the change and a number of valid packets is less than a threshold, and the sleep time period has expired, the gateway device may send another communication to the IoT device.

Abstract: Systems, methods, and/or techniques for transferring ownership or rolling-over machine-to-machine (M2M) and/or internet of things (IoT) devices from a first owner to a second owner may be disclosed. For example, at a M2M and/or IoT device, a roll-over token and/or a message with the roll-over token may be received. The roll-over token may be configured to be used to transfer ownership and/or update credentials, and/or the roll-over token may be configured to be requested by a first device management server (DMS) associated with the first owner and/or may be generated by a reset server (RS), for example, in response to the request by the first DMS. A validity of the roll-over token may be checked or determined.

Abstract: Methods, apparatus, and systems for performing any of generating, adapting, selecting, transferring, and displaying a user interface (UI) in a network are provided. A representative method of generating a user interface on a user interface device for operating a device on a network includes detecting a first predetermined user interaction with the user interface device indicative of a desire to use the user interface device to operate a device on a network, and responsive to detection of the first predetermined user interaction, generating by the user interface device a first user interface, wherein the first user interface is generated at a location relative to the user interface device based on the location of the detected first predetermined user interaction with the user interface device.

Abstract: Disclosed herein are methods and systems for contextual adjustment of thresholds of user interestedness for triggering video recording. An embodiment takes the form of a method that includes identifying one or more current contextual attributes of a current context of a user. The method also includes setting a current value of a stored interestedness threshold based at least in part on the one or more identified current contextual attributes. The method also includes obtaining one or more current physiological measurements of the user. The method also includes deriving an interestedness score based at least in part on the one or more obtained current physiological measurements. The method also includes comparing the derived interestedness score to the current value of the stored interestedness threshold. The method also includes initiating video recording when the derived interestedness score exceeds the current value of the stored interestedness threshold.

Abstract: A method, apparatus, and system for a smart space rating service (106) are provided. A method includes receiving, from a user device (104a, 104b), a request for a security rating of a smart space (102), calculating the security rating of the smart space (102) based at least in part on security information regarding the smart space (102), the security information received from a plurality of user devices (104a, 104b), and transmitting the security rating of the smart space (102) to the user device (104a, 104b).

Abstract: Systems, methods, and instrumentalities are described for processing personal information implemented in an entity on a wireless transmit/receive unit (WTRU), the method comprising receiving, from a user, an indication associated with a first browsing session, wherein the first browsing session is associated with a website/app, creating, by the entity, a first artificial digital identity associated with the first browsing session, storing first browsing information associated with the first browsing session, wherein the first browsing information is associated with the user, receiving, from the user, an indication associated with a second browsing session, wherein the second browsing session is associated with the website/app, creating, by the entity, a second artificial digital identity associated with the second browsing session, storing second browsing information associated with the second browsing session, wherein the second browsing information is associated with the user, receiving a request for a brow

Abstract: Systems, methods, and/or instrumentalities for creating and/or enabling creation of security profiles are described herein. The security profiles may be created for a user and/or for various entities that the user may interact with. The security profiles may be retrieved when the user accesses a first one of the entities (e.g., a website). The security profile may be used to provide the user with a warning when the user may submit information, credentials, a security answer, and/or the first one of the entities that may provide access to a second one of the entities, thereby compromising the second one of the online entities.

Abstract: Systems, methods, and/or techniques may be disclosed to prevent credentials from being compromised during an attack or theft of Internet of Things (IoT) devices. Secure communications between IoT devices and a device management server may be managed. A group master key may be received at a local key generation unit or a particular IoT attached to a local area network. A first session group key may be generated at the local key generation unit or the particular IoT device using the received group master key and a sequence number. The first session group key may be sent from the local key generation unit to each of a plurality of IoT devices via the local area network.

Abstract: Systems and/or methods for determining an effective viewing time of an advertisement displayed on a device such that a price for the advertisement may be based on the effective viewing time may be provided. For example, first movement data based on a first movement of the device may be measured or determined. A time of displaying the advertisement on the device may be measured or determined, for example. During the time of displaying the advertisement, second movement data based on a second movement of the device may be measured and/or determined. The first movement data, the second movement data, and/or the time to an advertisement service may be sent (e.g., to an advertisement service) such that the effective viewing time for the advertisement and/or the price based thereon may be calculated or determined based on the first movement data, the second movement data, and/or the time.

Abstract: Systems and/or methods for determining effectiveness of advertisements using devices and/or beacons and/or tags. A mobile device may send a request to an advertisement server. In response to the request, the mobile device may receive, from the advertisement server, an advertisement, an advertisement identifier, and a location identifier. Hie advertisement identifier and the location identifier may be associated with the advertisement. The mobile device may store one or more of the advertisement, the advertisement identifier, or the location identifier. The mobile device may scan (e.g., periodically scan) and/or receive a radio identifier. The radio identifier may be received via a short range signal. A watchdog component (e.g., a watchdog function), running on the mobile device may compare the received radio identifier with the location identifier. If the received radio identifier matches the location identifier, the watchdog function may send a message to the advertisement server.

Abstract: Systems and methods are described for improved navigation assistance by providing overview directions focusing on points where other users tend to make mistakes or display emotional responses, such as stress, that indicate that they feel they may make mistakes. In an exemplary method, a navigation process receives information about a present user's navigation route, the present user's status, and the user history. The navigation service compiles the received information and determines an enhanced navigation route.

Abstract: Systems, methods, and instrumentalities are disclosed for integrity protecting log entries generated from a first unit in a distributed system. For example, a first secret key may be received or obtained from a central management system and storing the first secret key in non-volatile memory. A second secret key may be calculated where the second secret key may be shared with a plurality of units within the same local communication domain as a unit using a secure key calculation. The second secret key may further be stored in volatile memory. The first and second keys may be used to calculate a first secret integrity protection key and a first broadcast encryption key. A security sensitive log entry may be generated and may be protected using the first integrity key and the first broadcast encryption key. The log entry may be broadcast to the plurality of units within the domain.

Abstract: Systems and methods are described for automated generation of augmented reality (AR) content. An exemplary method includes receiving video data from an image sensor of an AR device, identifying a two-dimensional (2-D) geometric feature depicted in the received video data, and generating a virtual three-dimensional (3-D) geometric element by extrapolating the 2-D geometric feature into three dimensions. The method also includes modulating the generated virtual geometric element in synchrony with an audio input and displaying the modulated virtual geometric element on a video output of the AR device. The method may be executed in real-time.