Abstract: An automatic account management system includes a storage unit and a processing unit. The storage unit stores personnel information and device information. The personnel information corresponds to an authorized person and includes their identification name and contact details, while the device information corresponds to a managed device and includes multiple accounts and credentials for login. The processing unit includes a credential modification module, a remote login module, and an account verification module. The credential modification module is adapted to modify one of the credentials through a credential modification algorithm, and the modified credential is then stored in the storage unit and updated to the managed device through the remote login module. The account verification module, referencing the identification name and contact details, contacts the authorized person through an electronic process for verifying validities of these accounts.

Abstract: A system and method for enhancing reliability and trustworthiness in cyber-physical systems using artificial intelligence are disclosed. The system comprises a plurality of sensors for collecting real-time data, a data processing unit that analyzes the data using machine learning models to identify patterns and anomalies, and a communication interface for transmitting recommendations based on the analysis. The machine learning models include an adversarial random forest (ARF) model and a probabilistic circuit model, and the analysis results are cross-validated across the collected data to verify accuracy and reliability. The method involves collecting data, analyzing it using the machine learning models, cross-validating the results, generating recommendations, and displaying them to an end-user. The invention provides a novel approach for enhancing the reliability and transparency of AI-driven cyber-physical systems.

Abstract: Techniques and methods are described to perform physical layer authentication, using a received signal transmitted from a communication device that has been already authenticated previously. To identify a potential attacker, a current value of a plurality of physical layer L1 parameters of the wireless channel is determined, with said L1 parameters describe for a sparse channel. A value of the plurality of L1 parameters that have been stored at the previous authentication are obtained from a storage. Based on the current value and the stored value of the plurality of L1 parameters, the communication device is authenticated. In this way, the physical layer authentication may provide for a robust and reliable authentication of communication devices in sparse communication channels, including static and dynamic wireless environments.

Abstract: Apparatus and associated methods relate to an artwork authenticity owner validation system. In an illustrative example, an artwork remote identification system (ARIS) may include an artwork companion chip (ACC) and a certificate of authenticity (COA). The ACC, for example, may be physically attached to an artwork. The ACC and the COA, for example, may each include a unique identifier. For example, a centralized server may be configured to automatically authenticate an ownership of the artwork attached to the ACC by validating the ACC and the COA. For example, the user may scan the COA and then the ACC within a predetermined time limit to gain access to modify an ownership record in an artwork profile of the artwork. Various embodiments may advantageously allow a modification to the ownership information only when the centralized authentication server validates the COA and the ACC within the predetermined time period.

Abstract: Provided is a computing system including: a first device configured to securely manage first secret information and first permutation information; and a second device configured to securely manage second secret information and second permutation information, and wherein first managed information that is managed by the first device from among first permutation results obtained as a result of permutating the first secret information, second managed information that is managed by the first device from among second permutation results obtained as a result of permutating the second secret information, third managed information that is managed by the second device from among the first permutation results, and fourth managed information that is managed by the second device from among the second permutation results are used to compute a secret product being a product of the first secret information and the second secret information.

Abstract: A monitoring apparatus obtains a device list from a device management server, determines a monitoring method for monitoring a device included in the device list, and executes first registration processing in order to register a first device that is monitored using a first monitoring method, to an authorization server, and executes second registration processing different from the first registration processing in order to register, to the authorization server, a second device that is monitored using a second monitoring method different from the first monitoring method. The first registration processing includes instructing the first device to use a designated proxy server, and instructing the first device to transmit, to the authorization server, a request to register the first device to the authorization server, after the first device has started to use the designated proxy server.

Abstract: The present disclosure relates to dynamic meeting space configuration based on content. A client device can detect an entry of a user into a meeting space and notify a management service of the entry of the user into the meeting space. The client device can receive an access token from the management service and provide an access request for an enterprise resource to an enterprise resource service, where the access request comprises the access token. The client device can receive the enterprise resource from the enterprise resource service. The client device can provide data regarding the security classification of the enterprise resource to an edge device located within the meeting space. The client device can receive, from the edge device, a confirmation that a plurality of internet of things (IoT) devices located within the meeting space have been configured according to the security classification of the enterprise resource.

Abstract: Systems, computer program products, and methods are described herein for a password less service identification protocol (PLSI). The PLSI protocol is a protocol and procedures that allow access to the full security layer of the critical computing infrastructure for complete secure access. There are four processes associated with the PLSI protocol including access initiation, PLSI service identification generation, PLSI handshake process, and PLSI service identification destruction. The secure password less critical computing infrastructure access communication network protocol can be used to utilize secure connection devices, to access critical production servers or databases where in the required security and compliance to segregation of duty based on entitlement, to establish a secure connection between two or more autonomous devices initiating, to establish secure connection on distributed cloud infrastructure, and/or to access node in block chain network to process the transaction.

Abstract: The methods and systems disclosed herein allow for faster and more efficient authentication using a partial cookie instead of a full cookie (or other data structure). In one example, a server receives, during the first browser session at the first time, a first request for authorization from an electronic device along with authentication information. Responsive to generating a profile using the authentication information, the server transmits to the electronic device a first data source configured to grant access to the profile to the electronic device, via a first authentication protocol; and receives, at a second browser session at a second time, from the electronic device, a second request for authorization to access the profile; responsive to a determination that the electronic device includes the first data source, the server executes a secondary authentication protocol.

Abstract: An access to resources and data management by servers is provided. In order to provide to users a universal access point to an application, while allowing a strict control of the ownership and localization of data, a first device receives from a user a request to access a resource, and, if the user has the right to access a resources, sends to the user an identifier of a communication endpoint of a second device, among a plurality of second devices, that is able to access the resource and deliver the resource to the client.

Abstract: Provided is a method of providing a qualification authentication result performed by a user terminal, the method including receiving a qualification authentication request for a user of the user terminal from an external device, performing access authentication to authentication information of a user account of the user in response to a selection input for the received qualification authentication request, and in response to the access authentication being successful, providing the external device with a qualification authentication result obtained by searching for target qualification information indicated by the qualification authentication request among qualification information registered in the authentication information of the user account.

Abstract: System and method for fine granularity control of data access and usage for across multi-tenant systems. A user makes a request to access a particular set of data from a particular remote data source for a specific purpose. The system authorizes the user to validate whether the user is qualified to make the request. The data source is checked to see if the particular data has been granted access for that particular purpose. A cloud neutral token is created and converted into a cloud specific token upon reaching the remote data source. The cloud specific token is used to create a temporary IAM role and IAM policy with a predetermined time to live. After the time to live expires, the IAM role and IAM policy are deleted.

Abstract: An apparatus comprises a memory communicatively coupled to a processor. The memory is configured to store network interchange parameters and user profiles. The processor is configured to receive a data exchange request triggered by a user device. Further, the processor is configured to request, to a decentralized network, a token indicating that a user profile associated with the user device is entitled to access an entitlement, determine whether a data exchange network is available to exchange data in accordance with the network interchange parameters, identify a second data exchange network that is available in accordance with second network interchange parameters in response to determine that the data exchange network is unavailable, and request a data exchange output from the second data exchange network via the token. The processor is configured to receive the data exchange output from the second data exchange network.

Abstract: A method of updating personal information stored in an electronic device, the method including determining at least one target file from a plurality of files based on a signal received from an access device to select a file to be updated. The at least one target file includes a first target file stored in a secure area and a second target file corresponding to the first target file and stored in a normal area. Further, it is determined whether to update the personal information based on authority information of the access device. Upon receiving, from the access device, an instruction to update the target file based on an update file, the first target file is updated using the update file, and the second target file is updated based on the updating of the first target file. In addition, there may be other various example embodiments.

Abstract: Edge blockchain authentication for communications networks is disclosed. By using a blockchain approach instead of a conventional network function (NF) authentication approach, authentication for applications and services can be performed at an authenticating data center (ADC) without the need to involve the regional data center (RDC) and/or the national data center (NDC). Application Programming Interfaces (APIs) for individual NFs may not be needed. Once authenticated via the blockchain, legitimate transactions can interact with NFs.

Abstract: When expiration of an admin's certificate is determined, an access engine may initiate an operation to restore the admin's access. This may include a voting operation where at least applications in the system vote on whether the entity claiming to be the admin is the admin. In one example, each application vote may be based on whether information provided by the alleged admin can be verified by the application or from the application. If the applications s can verify the identity of the admin may matching information provided by the admin with information in the applications, such as logged information, the admin may be verified and the certificate may be installed. If the vote is successful, one of the tenant admins may be given temporary privileges or permissions to install the admin's new certificate, after which the admin is reinstated and has access to the system.

Abstract: A secure network communication system and method for secure data exchange using TCP are disclosed. The system provides data exchange between a client and server, through an agent and broker interconnected to exchange data over an unsecured network. Upon receipt of a control packet from the client, the broker forwards a modified control packet to the agent using a secure protocol. The agent inspects the modified control packet and forwards it to the server. Upon receipt of a response packet from the server, the agent forwards the response packet to the broker using a secure protocol. Upon receipt of the response packet, the agent modifies the response packet and forwards it to the client. If the exchange of control packets indicates establishment of a TCP session, the agent and the broker establish a data channel between themselves to create a transparent TCP channel between the client and the server.

Abstract: A system for activating an electronic device is provided. The system includes an electronic device configured to generate an activation token that is based on a one-time public key and an electronic device private key using a Diffie-Hellman protocol. The system also includes a service server configured to generate a service token using the Diffie-Hellman protocol in response to receiving the activation token. The system also includes a third-party server configured to generate third-party service provider token using the Diffie-Hellman protocol based on the activation token. The one or more processors of the electronic device validate the service token and the third-party service provider token, and in response to validating the service token and third-party service provider token, activate the electronic device.

Abstract: An information output device includes: a first output unit that outputs acquired information acquired by a sensor; and a second output unit that converts personal information included in the acquired information into attribute information from which identification of an individual is impossible, and outputs the attribute information.

Abstract: A method for transmitting a message applied to a preset server, a method for transmitting a message applied to a terminal, and an electronic device are provided. The method for transmitting the message applied to the preset server includes: receiving a cloud service access request message transmitted by a terminal, wherein the cloud service access request message includes domain name address information of the preset server; determining a cloud service interface address to be accessed according to the cloud service access request message; performing signature verification on the cloud service access request message according to the cloud service interface address, and re-signing the cloud service access request message in case that the verification has passed, to obtain a new cloud service access request message; and transmitting the new cloud service access request message to the cloud server according to the cloud service interface address.