Abstract: Systems are disclosed for enabling artificial intelligence (“AI”) agents to securely access client-hosted Model Context Protocol (“MCP”) servers over cloud-managed connections. A cloud connector executing at a client authenticates with a connection server of an AI platform to establish a secure tunnel. A platform-based AI agent can transmit resource commands over the secure tunnel to the client-based MCP server and receive corresponding outputs. The outputs are processed with guardrails configured to detect prompt injection, confidential content, or personally identifiable information, and modified results are utilized during execution of other agent objects, such as AI models, vector databases, datasets, or scripts. Resource commands may also be logged and modified before execution, while redundant tunnels ensure reliability.

Abstract: Systems and methods for generating system architecture representation by implementing machine learning (ML) techniques are disclosed. The system receives a request for generating system architecture representation from at least one user and generates an architecture summary for the received request. Further, the system determines an architecture pattern relevant to the received request based on a context of the generated architecture summary using the large language models and machine learning (ML) models. The system further generates an architecture code corresponding to the received request. The system validates the generated architecture code for determining errors in the generated architecture code based on compliance-based rules, legal-based rules, and security-based rules specific to an organization using the machine learning (ML) models.

Abstract: An example method includes training a digital asset artificial intelligence model to automatically tag digital assets with descriptive tags corresponding to relevant contextual information associated with the digital assets. The method further includes detecting usage of at least one digital asset of the digital assets and analyzing, using the digital asset AI model, the usage by analyzing the descriptive tags corresponding to relevant contextual information associated with the at least one of the digital assets detected as being used to identify anomalies.

Abstract: Disclosed embodiments relate to systems and methods for controlling access to a resource by an artificial intelligence orchestration system. Example techniques include receiving, at an authorization component integrated with the orchestration system, a request to perform an operation, the request being initiated by an autonomous component; deriving, from the request and data associated with an environmental state, information representing at least one of a purpose and a context of the operation; dynamically evaluating the information, to identify one or more least-privileged permissions required for the operation; issuing an authorization artifact that embeds an ephemeral permission set scoped to the least-privileged permissions; and enabling the operation to execute using only the ephemeral permission set.

Abstract: Embodiments described herein may be directed to systems, methods, apparatuses, devices, computer program products, computer-executable instructions, and/or applications for securely and anonymously accessing web resources and customizable attribution of identity. In accordance with the present disclosure, a user may inspect and analyze a webpage as well as the underlying source code from an “arm's length” using a secure analysis application to prevent exposure on the user's local machine. The secure analysis application may provide increased flexibility in masking and/or modifying the user's digital persona to external websites.

Abstract: Various embodiments of the present technology generally relate to systems and methods for providing an SSH engine. In an example, a method includes receiving, by an SSH engine, a request for a Secured Shell (SSH) configuration file from a client device. The SSH engine may then determine access privileges associated with the client device and generate rules based on the access privileges. The access privileges may identify resources that the client device has authority to access. The SSH engine may then validate each rule of the rules based on the access privileges and generate the SSH configuration file including the rules for the client device.

Abstract: A cyber threat information processing method, a cyber threat information processing processor, and a storage medium storing a program for processing cyber threat information may process an executable file to ensure characteristic information of the executable file, transmit the ensured characteristic information of the executable file over an independent network, and receive malware profiling information generated based on the characteristic information of the executable file over the independent network.

Abstract: A same wireless access profile is installed on each of multiple mobile communication devices. The wireless access profile includes outer identity information and anonymous inner identity information for each service. The anonymous inner identity information includes a credential used by each of the multiple mobile communication devices to use the service. To use the service such as access a remote network, a respective mobile communication device communicates an anonymous username and password assigned to the service to a policy server during first level authentication. The policy server stores a network address of the authenticated mobile communication device. During second level authentication, the policy server receives an identity of the mobile communication device from a network gateway. The policy server provides access control information (assigned to the service) to the network gateway.

Abstract: Systems and methods are disclosed for offering a secure model as a service. A system can be configured to implement, via a trusted execution environment comprising an enclave virtual machine and a customer key host, a distributed privacy policy in which a master decryption key is split-shared between the trusted execution environment the customer key host; perform a decryption of the master decryption key according to the distributed privacy policy to obtain a decrypted master key; and, based on the decrypted master key, perform, in the trusted execution environment, a private collaborative computation using one or more of customer data and a customer model. Secure multiparty computation can be used to perform the decryption of the master decryption key.

Abstract: A secure authentication scheme for a field service technician to access a device like a medical device in the field is provided. The system is arranged to authenticate an encrypted credential list using a public key from a public/private key pair and to authenticate a user to a device via SSH with a username and password combination stored in the encrypted credential list.

Abstract: Techniques described herein involve processes and systems for performing identity verification on a network. In one example, this disclosure describes a method that comprises receiving, by a computing system and from a requesting device, a request to perform an identity verification for a requesting user that is operating the requesting device; outputting, by the computing system and to the requesting device, code information; enabling, by the computing system, the requesting device to display a code derived from the code information; receiving, by the computing system and from a verification device, an image of another device; and determining, by the computing system and based on the image of the other device, whether the other device is the requesting device.

Abstract: Some techniques are described herein for initially setting up an accessory with a controller. Such techniques have a setup component of a controller establish a relationship with the accessory and facilitate establishment of relationships between applications of the controller and the accessory. In some examples, the setup component causes an accessory management credential to be installed on the accessory so that the accessory can be configured by the setup component to establish a relationship with an application in communication with the setup component. In some examples, such communication between the application and the accessory occurs without further interactions with the setup component.

Abstract: In a blockchain-based SDP access control method and apparatus, an SDP connection initiation host submits identity authentication request information to a blockchain system node, receives an authentication result feedback after verification; sends, to the blockchain system node, a query request for an SDP connection accepting host list that can be accessed, the query request including an authentication result of the blockchain system node for the SDP connection initiation host; after verifying the query request, the blockchain system node queries the SDP connection accepting host list that can be accessed by the SDP connection initiation host, and records the SDP connection accepting host list to a blockchain ledger; the SDP connection initiation host initiates a connection request to the SDP connection accepting host, queries the SDP connection accepting host list that can be accessed by the SDP connection initiation host; and if so, then access service is provided.

Abstract: The present disclosure relates to the technical field of intelligent gateway security, in particular to a security architecture and system for a central gateway, and a storage medium.

Abstract: Techniques for determining whether to send an MFA push notification are described. An indication of a request for a user account to access the application service via a primary device is received at an MFA service from an application service. Using a PAN protocol, determine whether the primary device and the secondary device are within a threshold proximity. When the primary device and the secondary device are within the threshold proximity, allows a push notification to be transmitted to the secondary device requesting authentication to grant access to the user account by the primary device, and when the primary device and the secondary device are not within the threshold, refrain from transmitting the push notification.

Abstract: A client device determines that a telephony outage is occurring. The client device connects to an on-premises telephony node using an encrypted password at the client device. The client device accesses a set of telephony services via the on-premises telephony node.

Abstract: An information processing apparatus (100) includes: an acquisition unit (102) that acquires first personal identifiable information and terminal identifiable information from a storage medium of a portable type that stores the first personal identifiable information and the terminal identifiable information; an authentication unit (104) that authenticates second personal identifiable information acquired by a sensor mounted on a terminal and the terminal identifiable information of the terminal by using the first personal identifiable information and the terminal identifiable information being acquired from the storage medium; and an execution unit (106) that executes predetermined processing when the authentication succeeds.

Abstract: A matching system includes a key generation apparatus that generates a registration key matrix, generates a matching key matrix, and generates an auxiliary key matrix from a matrix product of registration key matrix and the matching key matrix; a first transformation apparatus that generates a registered feature vector from registered information input, and generates a registered concealed vector by calculating a product of the registered feature vector and registration key matrix received from the key generation apparatus; a second transformation apparatus that generates a matching feature vector from matching information input, and generates a matching concealed vector by calculating a product of the matching feature vector and the matching key matrix received from the key generation apparatus; and a matching apparatus that matches the registered information and the matching information by calculating a vector-matrix product of the registered concealed vector, the matching concealed vector and the auxiliary

Abstract: A method for secure collection of sensitive data at a computer device includes receiving a request for sensitive data. The request indicates a set of parameters and a dynamic encryption key. The dynamic encryption key is generated by an authorized data requester based on a login session identifier. The method includes creating a user interface for collecting the set of parameters by an artificial intelligence (AI) software of the computer device. The method includes providing the user interface for collecting the set of parameters. Responsive to collecting the set of parameters from the user, the method includes encrypting the set of parameters using the dynamic encryption key and an encryption algorithm associated with the authorized data requester. The method includes transmitting the encrypted set of parameters to the authorized data requester to be decrypted.

Abstract: A method and an apparatus for processing a multi-cloud service, an electronic device, a storage medium and a system are provided. The method includes acquiring a target multi-cloud scheduling instruction, where the target multi-cloud scheduling instruction includes a multi-cloud scheduling demand and description of schedule-required information; transmitting an application for the schedule-required information to a target user in a trusted environment based on the description of the schedule-required information, to obtain the schedule-required information; generating a scheduling strategy in the trusted environment based on the target multi-cloud scheduling instruction and the schedule-required information; and initiating scheduling to a target cloud vendor based on the scheduling strategy to obtain a scheduling result.