Abstract: An example system for securely provisioning computerized devices of a plurality of tenants includes a Security Credential Management System (SCMS) host that is communicatively connected to the devices and is operable to receive provisioning requests from computerized devices needing certificates. Each provisioning request indicates a tenant identifier (ID) uniquely identifying a tenant of the plurality of tenants. The system also includes a registration authority communicatively connected to the SCMS host and operable to transmit requests to SCMS backend components.

Abstract: A device for nonlethally incapacitating a human target. The device can propel a net with one or more conductive loops toward a target. The device can then wirelessly electrically energize the conductive loop or loops to further incapacitate the target. In this manner a human target can be safely captured and controlled.

Abstract: Systems, methods and devices for provisioning a computerized device(s). The system may include a distributor computer that is connected to the computerized device, and is operable to receive a digital asset and transmit it to the device. The system may include a digital asset management server that is connected to the distributor computer, and is operable to transmit the digital asset to the distributor computer, and a provisioning controller that is connected to the distributor computer and the digital asset management server, and is operable to cause transmission of the digital asset to the distributor computer. The system can include a second distributor computer that is connected to the digital asset management server and the device (e.g., at a later time), and that receives a second digital asset and transmits it to the device, wherein the second digital asset causes the device to become partially or fully functional.

Abstract: An example system receives certificate requests from clients. Each request can indicate a number of computerized devices needing certificates; a timestamp indicating when the request was transmitted; and a client identifier. The system includes a Quality of Service (QoS) manager that: distributes the requests from the clients across client queues, each of the client queues corresponding to a particular client; and divides requests into smaller subgroups of entries corresponding to a subset of the computerized devices needing certificates. The system can also transmit retrieved entries from the client queues to a certificate management service.

Abstract: A system includes a campaign management service to detect a campaign initiation request indicating a number of computerized devices to be updated for a campaign and store data corresponding to the computerized devices to be updated. The campaign management service can generate a bloom filter data structure comprising hash values based on the data for each of the computerized devices to be updated and transmit the bloom filter data structure to a network edge. The system can include the network edge that can use the bloom filter data structure from the campaign management service to determine whether a computerized device is to obtain a device update from the campaign management service. The network edge can retrieve the device update and modify the computerized device by transmitting the device update to the computerized device, which then installs it.

Abstract: Systems, methods, and devices for securely provisioning a roadside unit (RSU) that includes an application certificate, wherein the RSU is geographically restricted according to the application certificate. An enhanced SCMS system may receive a request for an application certificate for the RSU; determine, in response to the request, an operating geolocation for the RSU; verify that the operating geolocation is within the allowed geo-region for the RSU; generate an application certificate that includes the operating geolocation; and provide the application certificate to the RSU device.

Abstract: Systems and methods for secure provisioning and management of computerized devices. The system may include a distributor appliance that is communicatively connected to the computerized device, and that is operable to receive a digital asset and to load the digital asset into the computerized device. It may include an optional digital asset management system that is connected via a secure communication channel to the distributor appliance, and that is operable to transmit the digital asset to the distributor appliance; and a provisioning controller that is connected via a secure communication channel to the distributor appliance and is connected via another secure communication channel to the optional digital asset management system, and that is operable to directly or indirectly transmit the digital asset to the distributor appliance. The computerized device is not fully functional before the digital asset is loaded into it.

Abstract: Scalable certificate management system architectures. An example system may include one or more application platforms (e.g., VMs) that run a registration authority and are communicatively connected to one or more compute engines that perform cryptographic computations required by the registration authority. The system may also include one or more application platforms that run an enrollment certificate authority and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the enrollment certificate authority. It may further include one or more application platforms that run a pseudonym certificate authority and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the pseudonym certificate authority.

Abstract: Disclosed herein are systems, methods and devices system for identifying a misbehaving computerized device. In some implementations, the system includes a cloaking authority device for identifying a misbehaving computerized device, wherein the cloaking authority device includes a processor that can receive a request for a cloak index, wherein the request for the cloak index comprises a linkage value retrieved from a pseudonym certificate. In some examples, the processor can also request, from a pseudonym certificate authority device, first information that is used to produce the cloak index, wherein the first information is associated with the linkage value. Additionally, the processor can process, by the cloaking authority device, the linkage value to produce the cloak index based in part on the first information, wherein the cloak index identifies a misbehaving computerized device. Furthermore, the processor can transmit, by the cloaking authority device, the cloak index to a misbehavior authority device.

Abstract: Systems for secure provisioning and management of computerized devices. The system may include a distributor appliance that is communicatively connected to the computerized device, and that is operable to receive a digital asset and to load the digital asset into the computerized device. It may also include a digital asset management system that is connected via a first secure communication channel to the distributor appliance, and that is operable to generate and conditionally transmit the digital asset to the distributor appliance; and a provisioning controller that is connected via a second secure communication channel to the distributor appliance and is connected via a third secure communication channel to the digital asset management system, and that is operable to direct the digital asset management system to transmit the digital asset to the distributor appliance. The computerized device is not fully functional before the digital asset is loaded into it.

Abstract: A cloaking authority system that securely and anonymously identifies a misbehaving device based on its digital certificate. The system may include a cloaking authority server or device that is communicatively connected to a misbehavior authority server, and may also include a pseudonym certificate authority device, and a registration authority device. The cloaking authority device receives, from the misbehavior authority server, a request for a cloak index, wherein the request for the cloak index includes the linkage value from a PC of a misbehaving computerized device. The cloaking authority device processes the linkage value to produce a cloak index, which identifies the misbehaving computerized device and which is unique and anonymous, and transmits it to the requesting misbehavior authority server. The misbehavior authority server uses the cloak index to identify the specific computerized device that has misbehaved, usually repeatedly.

Abstract: Systems and methods for real-time routing and retail order now adaptation to enhance execution performance can be configured to receive an order from a customer including a product identifier, order characteristics, and pricing information; identify a set of appropriate market venues based on the product identifier and/or order characteristics; determine expected behavior of the market venues based on historical data for executed orders and real-time order statistics; select, based upon expected behavior, a first market venue; and route the order, in real-time, to the first market venue for fulfillment.

Abstract: An electronic signature capture system and process meets the legal requirements of a valid electronic signature while also providing electronically signed documents that have the appearance, and thus equivalent acceptability, of a traditional pen-and-ink signature. The documents can be signed using a mouse, a stylus, a touch screen, a graphics tablet, or other suitable input device to draw a signature analogue on the screen similar to signing a paper document with a pen. A fingerprint image, retinal scan image, or other similar biometric input may be captured in addition to or instead of a signature. The signature analogue is saved and linked to a particular user and to particular documents. The signature analogue may be combined with the document in a composite image file, or the signature analogue may be applied dynamically to appropriate document components to assemble an executed document as needed.

Abstract: A method of identifying an object comprising providing an vehicle having on a surface thereof at least one layer of paint, such as a urethane-based paint. A unique alphanumeric identification is applied to the paint layer with a fluorescent material at a selected unrevealed location thereon. The fluorescent material is permitted to migrate into the at least one paint layer, while an excess amount of fluorescent material remains on the at least one paint layer. Thereupon, the excess amount of fluorescent material is removed from the at least one paint layer with a solvent. The unique discrete identification created by fluorescent material migrated into the at least one paint layer is visible at an acute angle to the object surface without use of an ultraviolet light, while being substantially invisible at an angle normal to the object surface.

Abstract: A method of identifying an object comprising providing an vehicle having on a surface thereof at least one layer of paint, such as a urethane-based paint. A unique alphanumeric identification is applied to the paint layer with a fluorescent material at a selected unrevealed location thereon. The fluorescent material is permitted to migrate into the at least one paint layer, while an excess amount of fluorescent material remains on the at least one paint layer. Thereupon, the excess amount of fluorescent material is removed from the at least one paint layer with a solvent. The unique discrete identification created by fluorescent material migrated into the at least one paint layer is visible at an acute angle to the object surface without use of an ultraviolet light, while being substantially invisible at an angle normal to the object surface.