Abstract: Embodiments of this application provide a digital rights management DRM method, apparatus, and system, to implement a DRM interworking operation between DRM servers and clients of different vendors. The method includes: A DRM server encrypts a first media file by using a first encryption method to obtain a first encrypted media file; the DRM server generates content protection description information of the first encrypted media file, where the content protection description information includes a content identifier and encryption method information, the content identifier identifies the first encrypted media file, and the encryption method information identifies the first encryption method; the DRM server performs first formatting on the content protection description information to generate formatted content protection data; the DRM server encapsulates the formatted content protection data to generate a content protection data packet.

Abstract: A method for managing an authentication includes establishing, by a server device, a secured network channel with a client, providing, via the secured network channel, a private key to the client, after the providing, obtaining, from the client, a request for establishing a session with the client via a second network channel, in response to the request: sending a challenge request to the client, obtaining a challenge response associated with the challenge request, wherein the challenge response specifies a first challenge answer, performing a challenge processing using a private key to generate a second challenge answer, making a determination, using the first challenge answer and the second challenge answer, that the client is authenticated, and based on the determination, initiating the session with the client.

Abstract: In certain aspects of the present disclosure, a computer-implemented includes generating a unique code for display on a managed device, and authorizing a manager device to selectively initiate at least one workflow on the managed device. The method includes, responsive to the manager device scanning the unique code, verifying the manager device is authorized. The method includes displaying on the manager device, based on verification that the manager device is authorized, an option corresponding to the at least one workflow. The method includes receiving, from the manager device, a selected workflow. The method includes, responsive to receiving the selected workflow, transmitting a message to a push notification server initiating the managed device to communicate with an MDM server. The method includes transmitting a command to the managed device causing performance of the selected workflow on the managed device. Systems and machine-readable media are also provided.

Abstract: Systems and methods are provided for use in monitoring decentralized data structures including identity attributes, through tokenization of the attributes. One example computer-implemented method includes receiving a request associated with a digital identity including multiple attributes and, for each of the attributes in the request, generating a token specific to the attribute, searching for the generated token in a network graph having multiple stored tokens, and identifying one of the multiple stored tokens as a match to the generated token. The computer-implemented method then further includes, for each of the attributes in the request, retrieving additional ones of the multiple stored tokens linked to the identified one of the stored tokens, comparing the retrieved tokens to the generated token, and promoting the request for further action, in response to at least one of the retrieved tokens being inconsistent with the generated token.

Abstract: A technique for verifying information within a document id disclosed. The method comprises receiving two documents, a first document with known correct information and a second document for which the information needs to be verified. The method further comprises dividing each document into a series of corresponding regions based on the information found in each region. The method further comprises generating a hash value for each region through the use of a hashing algorithm. The method further comprises verifying the second document by comparing the hash values of each region to the corresponding hash values of the first document to verify that the two hash values are identical.

Abstract: In a system and method for globally tracking, monitoring, and authorizing the dispensing of valuable and high-risk products such as drugs, secure delivery devices are needed, coupled to a blockchain serving as a distributed database forming a ledger of the journey of the devices and the dispensing of the product, to allow changes to the ledger to be agreed upon by participants in the blockchain through a consensus mechanism.

Abstract: A device can include an internal secure processing environment (SE) and communicate with a configuration system. The device may utilize a near field communications (NFC) radio. A mobile handset can connect with the SE in the device using NFC. The mobile handset can communicate with the configuration system and receive configuration data and a software package for the device. The SE can derive a PKI key pair and send the derived public key to the configuration system via the mobile handset. The SE and the configuration system can mutually derive an encryption key using the derived PKI key pair. The configuration data can be transmitted over the NFC radio, and the mobile handset can establish a Wi-Fi access point. The software package can be encrypted using the encryption key and transmitted to the device over the established Wi-Fi access point, thereby completing a configuration step for the device.

Abstract: One example method includes receiving an orchestration automation request for an asset, identifying an ethics rule that applies to the asset, comparing the ethics rule to asset values contained in an AI ethics datastore, based on the comparing, identifying a list of assets that conform to the ethics rule, and when the asset appears in the list of assets that conform to the ethics rule, automatically placing the asset at an entity of a computing infrastructure.

Abstract: Authentication means (101) of an authentication system (S) performs authentication based on input authentication information. Determination means (102) determines, based on the input authentication information, whether there are a plurality of users for which there is a possibility of successful authentication. Input request means (104) requests, when it is determined that there are the plurality of users, input of additional authentication information that is based on a difference in user information on each of the plurality of users. Additional authentication means (105) performs additional authentication based on the input additional authentication information.

Abstract: Systems and methods for authentication may include an authentication server. The authentication server may include a processor and a memory. The processor may be configured to transmit an authentication request. The processor may be configured to receive a first response that is responsive to the authentication request, the first response comprising a first cryptogram. The processor may be configured to generate a first challenge based on the first response. The processor may be configured to encrypt the first challenge with a symmetric key. The processor may be configured to transmit the first challenge receive a second response that is responsive to the first challenge, the second response comprising a second cryptogram. The processor may be configured to authenticate the second response.

Abstract: A biometric authentication platform uses fault-tolerant distributed computing to determine if a supplied biometric live scan and template are from the same person. Features provide additional protection for biometric data. The template and live scan may be encrypted using a symmetric encryption key. The encrypted template and live scan may be sent with copies of the symmetric key, each copy further encrypted by a public key associated with one processor's public-private key pair. Each processor may decrypt a copy of the symmetric key, which may then be used by the processor for decrypting the live scan and template for matching. A decentralized user ledger may store an encrypted copy of the biometric template, with the key stored locally in a registered device. Alternatively, a decentralized user ledger may store a hash of the biometric template, for verification of a template that is maintained on a registered device.

Abstract: Systems and methods for authentication may include an authenticator. The authenticator may include a processor and a memory. The processor may be configured to: receive one or more challenges; generate a first instruction, the first instruction including a request to retrieve a first Fast Identity Online (FIDO) key; transmit the first instruction; receive the first FIDO key; sign the one or more challenges using the first FIDO key; and transmit one or more signed challenges for validation using a second FIDO key.

Abstract: A method and system for security assessment include a simulator configured to simulate a warping-based backdoor attack and an evaluation module configured to evaluate security and output a warning about a backdoor risk. The simulator, which comprises a warping unit and a backdoor model, is configured to generate a warping field, the warping unit is configured to receive the clean image and the warping field as inputs and output the warped backdoor image and the simulator is configured to train the backdoor model using the warped backdoor image.

Abstract: A system includes a plurality of computing nodes that form a blockchain network, wherein one or more of the computing nodes is a metaverse computing node configured to generate a mixed reality environment. A processor of at least one computing node is configured to receive information relating to a suspicious data interaction associated with a data file of a user, simulate, based on the received information, the suspicious data interaction in a synthetic mixed reality environment that is substantially identical to the mixed reality environment, verify the suspicious data interaction while the simulated data interaction is being performed, when the suspicious data interaction cannot be verified, disable one or more future data interactions processed using the same smart contract used to process the suspicious data interaction, and when the suspicious data interaction is successfully verified, terminate the simulated data interaction and process the suspicious data interaction.

Abstract: An apparatus for bypassing user authentication comprises a memory and a processor. The processor is configured to receive a contextual payload for authentication of a first user and process the contextual payload to identify interaction session information associated with the first user. The processor is further configured to identify a file associated with the first user and a session classifier based on the interaction session information. In response to determining authentication information from the interaction session information, the processor is further configured to transmit file information associated with the file of the first user to an entity device associated with an entity and to transmit an instruction to display pre-populated fields in a process flow based on the identified session classifier on the entity device. The processor is further configured to establish a network connection between a first user device associated with the first user and the entity device.

Abstract: Systems and methods are provided for sending a combined read and reaction message. The systems and methods perform operations comprising: accessing, by a messaging application, a conversation session comprising a plurality of messages exchanged between a plurality of client devices, the messaging application being associated with a first client device of the plurality of client devices; generating, by the messaging application, metadata associated with one or more of the plurality of messages; encrypting, by the messaging application, the metadata in accordance with an end-to-end encryption process to enable a second client device of the plurality of client devices to read the metadata and prevent the second client device from modifying the metadata; and transmitting, to a server, a packet comprising an encrypted message slot and a first metadata slot, the first metadata slot comprising the encrypted metadata.

Abstract: Disclosed is a method for ultra-wide band (UWB) security ranging and a UWB device configured to perform secure ranging. The method includes obtaining, from a UWB sub-system of the UWB device, first encryption data including a symmetric key encrypted with a public key of a secure application of the UWB device; transferring the first encryption data to the secure application; obtaining, from the secure application, second encryption data including a ranging data set (RDS) encrypted with the symmetric key; and transferring the second encryption data to the UWB sub-system. In this case, the RDS may include a ranging session key configured to secure a UWB ranging session, and the secure application may be included in a trusted execution environment area.

Abstract: A computer implemented method of automatically generating security rules for a networked environment based on anomalies identified using Machine Learning (ML), comprising receiving one or more feature vectors each comprising a plurality of operational parameters of a plurality of objects of a networked environment, identifying one or more anomaly patterns in the networked environment by applying one or more trained ML models to the one or more feature vectors trained to identify patterns deviating from normal behavior of the plurality of objects, parsing each anomaly patterns to a set of behavioral rules by traversing the anomaly pattern through a tree-like decision model, and generating one or more security rules for the networked environment according to the set(s) of behavior rules. Wherein the one or more security rules are applied to increase security of the networked environment.

Abstract: A system is provided for generation of substitutable configuration of secure distributed register tokens. In particular, the system may generate, on a distributed register, a secure token with a built-in source code function for triggering a substitution of the secure token with one or more substitute tokens upon the occurrence of a specific condition. The function may pull one or more values associated with the secure token (e.g., from an oracle) and generate the one or more substitute tokens based on the one or more values. Once the substitute tokens are generated, the substitute tokens may be used to replace the secure token on the distributed register.

Abstract: An approach for increasing security of biometric templates is described. An improved system is adapted to split a full set of features or representations of a trained model into a first partial template and a second partial template, the second partial template being stored on a secure enclave accessible only through zero-knowledge proof based interfaces. During verification using the template, a new full set of features is received for comparison, and a model is loaded based on the available portions of the model. Comparison utilizing the second partial template requires the computation of zero-knowledge proofs as direct access to the underlying second partial template is prohibited by the secure enclave.