Abstract: A user verification device, an authentication system, and an authentication method for a security key are provided. The user verification device includes a security chip, a proximity sensor, a connector, and a microcontroller unit. The connector is connected to an electronic apparatus. The microcontroller unit is coupled to the security chip, the proximity sensor, and the connector. When the microcontroller unit receives an identity authentication request from the electronic apparatus through the connector, the microcontroller unit determines whether an object is approaching the user verification device through the proximity sensor. When the microcontroller unit determines that the object is approaching the user verification device through the proximity sensor, the microcontroller unit reads an identity authentication response from the security chip and outputs the identity authentication response to the electronic apparatus through the connector.

Abstract: System and techniques for implementing a fine-grained access control structure for a data structure are described herein. An identification of an access vector for an element of a hierarchical data structure can be obtained and used to search the hierarchical data structure to locate a portion of the hierarchical data structure that includes the element. A representation of the portion of the hierarchical data structure can be rendered to a user interface that includes a control to assign an access permission to the element. Once an input from the control to modify an access to the hierarchical data structure is received, the hierarchical data structure can be updated based on the input from the control.

Abstract: Example embodiments of systems and methods for data transmission system between transmitting and receiving devices for use in a tap and walk store are provided. In an example embodiment, the transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key. Disclosed systems allow a user to purchase items utilizing the disclosed transmitting device.

Abstract: A homomorphic cyclic operation system performs a homomorphic cyclic operation on a periodic array of data using homomorphic encryption having a homomorphic operation defined with respect to at least one multiplication and comprises: an encryption apparatus that encrypts the periodic array of data by storing it in the coefficients of an indeterminate polynomial to generate a ciphertext of periodic data; and a homomorphic cyclic operation apparatus that shifts the periodic array of data in the ciphertext of the periodic data by applying the indeterminate raised to the power of a shift amount to the ciphertext of the periodic data.

Abstract: A method for data filtering that identifies a topic of interest for a user and individual sub-topics within the topic the user could be, or is, interested in. A three-dimensional map depicting a topic of interest containing markers for the sub-topics is created and used to specify a level of detail about the user's interest in the sub-topics that can be shared to or used by an external source.

Abstract: A compliance checker system to enable use of a device with a plurality of partners by ensuring that the device complies with a partner policy for each of the plurality of partners, wherein the compliance checker is device neutral. A compliance checker application to determine whether the device complies with the partner policy of a particular partner, prior to permitting access to resources provided by the particular partner, the compliance checker including one or more specific checkers, the specific checker comprising one or more of: a device encryption compliance checker configured to determine whether a disk drive of the device is encrypted, an operating system checker configured to determine whether an operating system of the device is up-to-date, and a virus checker configured to determine whether the device has an active anti-virus application.

Abstract: A method of updating vehicle ownership authorizations in a vehicular system and such a system that includes a memory unit and an electronic control unit. The electronic control unit monitors data, provisioned by one or more vehicle sensory systems, related to a vehicle user and to at least one of vehicle access keys, vehicle parking position and further vehicle occupants, evaluates the monitored data, for determining if a vehicle user is unknown and upon determination that the vehicle user is unknown further evaluates the monitored data, for determining an indication of change of vehicle ownership, using data previously registered with the memory unit of the system related to at least one of vehicle access keys, vehicle parking positions, vehicle users and further vehicle occupants. In response to a determined indication of change of vehicle ownership and optional verification thereof, vehicle ownership authorizations are updated in the memory unit.

Abstract: The present invention relates to a system and a method for multi-factor authentication of communication device metadata. The system includes a communication device, and a recipient device that work together to authenticate communication device metadata using digital signatures and a user's identity through voice biometrics. User enrolls into the system by providing voice samples, from which a unique voiceprint is created and stored. For authenticating the communication device metadata with user authentication, the user issues a voice command, and the system extracts voice signatures which are compared with the stored voiceprint to verify the user's identity. Upon successful authentication, the communication device metadata is accessed, and corresponding digital signatures are generated. Further, the system authenticates the generated digital signatures and user's identity. If both are verified, the communication device metadata is considered valid and used for further processing.

Abstract: A computer-implemented method for performing at least one computational operation on an encrypted input by at least one processor of a server in a client-server setting, where parameters of the computational operation are private to the server and the input is private to the client is provided. The method includes receiving, by the server, a ciphertext c of a leveled homomorphic encryption (LHE) scheme as encrypted input. Randomness is homomorphically added by the server to the ciphertext c and the resulting ciphertext b is transmitted to the client. The server receives a refreshed ciphertext b? obtained by the client in a ciphertext refresh procedure including decrypting and re-encrypting the ciphertext b. The server homomorphically removes the previously added randomness from the received refreshed ciphertext b? to obtain a refreshed ciphertext c?. The server performs the at least one computational operation on the refreshed ciphertext c?.

Abstract: In one embodiment, a method is disclosed comprising: detecting, by a processor, a remote access session from an accessing device to an accessed device; determining, by the processor, an access session screen-sharing security policy for the accessed device; and preventing, by the processor, the remote access session in response to a violation of the access session screen-sharing security policy.

Abstract: The invention relates to a method for pooling and analyzing datasets from data providers. The method includes, at the level of each data provider, for each dataset, a first encryption of each variable of the dataset with a first encryption key common to all data providers, and a second encryption of at least each variable of the dataset with a second encryption key specific to the each data provider and shared with an intermediary. The method also includes, at the level of the intermediary, for each encrypted dataset, decryption of the variables with the second encryption key, and a third encryption of each confidential variable with a third encryption key. The method also includes transmission of the datasets encrypted with the third encryption key to an analysis environment for analysis. It also relates to a computer program and a system for implementing such a method.

Abstract: In some embodiments, a system includes a processor; and a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium including code that: requests, using a device-specific attestation request, a device-specific attestation of a device; receives, via a secure communication channel, device-specific attestation data from the device as a result of the device-specific attestation; and generates an enhanced attestation object based on the device-specific attestation data. In some embodiments, the enhanced attestation object is used to verify that an execution environment of an application on the device is secure. In some embodiments, a device-specific risk score is generated based upon the device-specific attestation data and an enhanced attestation risk score is generated based on the enhanced attestation data analysis, the enhanced attestation risk score being used to verify that the execution environment of the application on the device is secure.

Abstract: Examples of the present disclosure describe systems and methods for implementing a software-based security abstraction engine in a one-way transfer (OWT) system. In examples, data is received at a first device in the OWT system. A first set of policies is identified based on a dataflow identifier associated with the transfer of the data. A policy engine associated with the first set of policies applies the first set of policies to the data to create digital signatures. The digital signatures are evaluated by the security abstraction engine to determine whether the set of digital signatures is valid. If the digital signatures are determined to be valid, a second set of policies is applied to the data. The data is then transmitted to a second device or destination in the OWT system based on the dataflow identifier.

Abstract: Systems and methods for secure information exchange are disclosed. During setup of an accessory device in association with a voice-enabled device, token data may be generated and signed using a private encryption key by the accessory device. An accessory-device system associated with the accessory device may send a request for account identification including the token data to a remote system associated with the voice-enabled device. The remote system may determine if an application associated with the accessory-device system is enabled, and if enabled, may send the account identification in an encrypted format to the accessory-device system.

Abstract: Methods are provided, for controlling router security, cyber vulnerabilities and malware. Such methods may be implemented, for example, via a security application.

Abstract: Method and device for authentication of non-revocation. A revocation list includes at least one pair extracted from a signature generated by a revoked entity, where hi is an element of a mathematical group and ki=hixi, where xi is a secret of the revoked entity. A first entity sends, to a second entity, to authenticate itself therewith: a signature generated by the first entity for this authentication; a character string; an element of the group for each pair in the revocation list; and a zero-knowledge proof that the first entity used a secret of this first entity and the character string to obtain the group element for each pair. The second entity rejects the first entity if the zero-knowledge proof is not valid or if, for at least one the pair, the group element is such that Ci=hiA, where A is a known value.

Abstract: The present disclosure provides a cleaning station configured to decontaminate external storage devices from cybersecurity threats. The cleaning station is configured to scan files in the external storage device using a decontamination means, the decontamination means including one or more anti-virus modules and one or more anti-malware modules. The cleaning station decontaminates the external storage device, and generates an electronic certificate on the external storage device. The cleaning station receives an update signal from a master server, through a management server, which ensures the decontamination means are updated with signatures updates.

Abstract: The invention relates to a computer-implemented method and to a computer program product for the access control of a terminal, private data and other data being stored on the terminal and access to the private data being able to be limited or unlimited, comprising the following steps in the case of unlimited access: capturing an image signal by means of a camera of the terminal; performing a face detection process by means of the captured image signal; and continuously monitoring the number of faces in the captured image signal, which number of faces is determined in the face detection process, the access being limited if the number of faces is greater than one.

Abstract: Various embodiments described herein relate to cybersecurity risk assessment and mitigation for industrial control systems. In an embodiment, a request to perform a cybersecurity assessment of a set of industrial assets is received. Additionally, the set of industrial assets are correlated to industrial asset data associated with the set of industrial assets and a first industrial asset feature set is compared to a cybersecurity rules set to determine a cybersecurity threat level indicator for respective industrial assets from the set of industrial assets. In response to the cybersecurity threat level indicator satisfying a defined criterion, one or more cybersecurity countermeasure actions for the respective industrial assets are then determined based on a comparison between a second industrial asset feature set and a predefined industrial asset feature set for a set of predefined industrial assets associated with one or more predefined cybersecurity countermeasures.

Abstract: A method of discovering components of a wireless network may include transmitting, by a computing system, an account identifier corresponding to an account associated with a cloud network to a credentialing service associated with the account. The method may include receiving a set of credentials from the credentialing service and accessing the cloud network. The cloud network may include a plurality of network components hosted on one or more compute instances. The method may include determining a list of the one or more compute instances within the cloud network. The method may include identifying data associated with each of the one or more compute instances. The method may include determining that a new compute instance of the one or more compute instances is recently instantiated. The method may include generating a record in a database may include at least a portion of the data associated with the new compute instance.