Abstract: An exemplary data package for a network-based instant messaging system includes descriptive data about a user of the instant messaging system and data indicating a network location of a gadget to render the descriptive data, the location accessible by one or more other users of the instant messaging system. Various other exemplary methods, systems, device, etc., are also disclosed.

Abstract: A disc stores therein a computer program and encrypted information. A BIOS is executed at the time of start-up and starts the computer program. A TPM is connected to the BIOS by a low-speed bus. The TPM includes a register for storing data. A blob stores therein true hash values of the computer program and the BIOS in advance. The BIOS includes a hash value calculating unit that calculates hash values of the computer program and the BIOS and stores those hash values in the register. The TPM compares the hash values stored in the register with the hash values stored in the blob and decrypts information in the blob if the hash values agree with each other.

Abstract: A method is provided for the restitution of multimedia data transmitted by a gateway to a communications terminal via a first transmission channel. The method includes the following steps: interrogating the terminal via the gateway about its capabilities of restituting the multimedia data; transmitting, to the gateway via the terminal, a list of commands that it is capable of executing; transmitting, via the gateway, multimedia data with the aid of at least one series of commands that is part of the list of commands that can be executed by the terminal, and restituting, in this terminal, the multimedia data with the aid of the received command.

Abstract: Methods for ad-hoc trust establishment using visual verification are described. In a first embodiment, a visual representation of a shared data is generated on two or more devices and the visual representations generated can be visually compared by a user. This method can be used to verify that the correct devices are involved in a negotiation, when pre-existing trust relationships do not exist between the devices. The visual representation may, for example, comprise a picture with a number of different elements, each representing a part of the shared data. In another embodiment, a method of secure key exchange is described in which, before sharing the keys, the parties exchange information which encapsulates the key. This information can be used subsequently to check that a party has not changed the key that they are using and prevents a man in the middle attack.

Abstract: A method comprising an indicator showing an overall security status of a user.

Abstract: Techniques are described that can be used to enable a transfer of an operating system from one machine to another. The transfer permits the operating system to be available to the target machine at buffers that are accessible to one or more application or other logic. In some implementations, information related to an operating system migration is stored in a buffer that is accessible to an application that is to use the information and thereby avoids a copy of such information from an intermediate buffer to an application buffer.

Abstract: The storage unit stores therein authentication IDs that are used for authentication of users and address information in association with one another. The authentication processing unit receives from a PC an authentication message that includes an authentication ID and is used for the authentication of the user of a communication terminal, and performs authentication on the user based on the received authentication message. The SIP address acquiring unit acquires from the storage unit address information that corresponds to the authentication ID included in the authentication message when the user is authenticated. The SIP address registering unit sends the SIP location server a registration request for registering the acquired address information as the address information of the user of the IP telephone terminal associated with the PC that transmits the authentication message.

Abstract: A device for processing variable-size macroblocks to achieve high-speed interframe prediction. A predictor calculator determines a motion vector predictor (MVP) for a current macroblock from motion vectors of other macroblocks adjacent to the current macroblock. To achieve this, the predictor calculator specifies adjacent macroblocks to an address calculator. The address calculator calculates a vector memory address for each specified adjacent macroblock, based on the block size of that specified macroblock. The predictor calculator reads out motion vectors from the received addresses and determines MVP for the current macroblock.

Abstract: Reputation-based automatic remediation is applied for enforcing good network hygiene of a client. A scanning module scans the client to detect files on the client in response to an attempt by the client to connect to a secure network. A reputation score module retrieves onto the client a reputation score for each of the files detected. The reputation scores can be retrieved from a reputation database of a reputation server storing reputation data for files. A hygiene score module calculates on the client a hygiene score for the client based on the reputation scores for the files on the client. The hygiene score indicates a likelihood of the client to engage in risky behavior. The threshold determination module determines whether the hygiene score exceeds a threshold for bad client hygiene. The policy module applies a policy to the client that restricts network access in response to the hygiene score for the client exceeding the threshold.

Abstract: A system, method and computer program product for malware detection based on the behavior of applications running on a computer system, including: asynchronous processing of system events for malware threat analysis using application filters; analyzing events using heuristic and signature data; analyzing applications behavior and detecting abnormal behavior of “clean” applications; automatically classifying applications (i.e., detecting new versions) based on behavior analysis; automatically analyzing the reliability of web sites based on behavior triggered by the web site accesses; in enterprise networks, detecting abnormalities in configuration of user computer systems; recognizing a user by his behavior profile and using the profile for an automatic configuration of user applications.

Abstract: The present invention relates to a microcontroller designed for protection of intellectual digital content. The microcontroller includes a secure CPU, a real-time cipher, and a user programmable multi-layer access control system for internal memory realized by programmable nonvolatile memory. Programmable nonvolatile memory allows in-system and in-application programming for the end user. The programmable nonvolatile memory is mainly used for program code and operating parameter storage. The multiple-layer access control is an integral part of the CPU, providing confidentiality protection to embedded digital content by controlling reading, writing, and/or execution of a code segment according to a set of user-programmed parameters. The cipher incorporates a set of cryptographic rules for data encryption and decryption with row and column manipulation for data storage. All cryptographic operations are executed in parallel with CPU run time without incurring additional latency and delay for system operation.

Abstract: An image encoding/decoding method and apparatus, in which at least one of a plurality of color component images except a first color component image is predicted from motion estimation information or a reconstructed color component image of the first color component images using correlation among the plurality of color component images. The image encoding method includes performing predictive-encoding on the first color component image among the plurality of color component images forming a single image using a general encoding method, and performing motion estimation and compensation on the at least one of the other color component images or predicting the at least one of the other color component images using a reconstructed first color component image.

Abstract: Methods and systems for using simple authenticated messages are disclosed for use with implementing (i) synchronization schemes, (ii) encoded control messaging schemes, and (iii) encrypted data communication schemes. Messages are authenticated by applying a secure hash function to one or more authentication tokens to produce hash results which are compared to stored trusted bit strings, wherein the stored trusted bit strings are replaced with the most-recently received authentication token whose corresponding hash result matched the stored bit string.

Abstract: A computer implemented method of compressing a digitally represented cryptographic value. The method comprising the steps of: (a) selecting a secret value; (b) performing a cryptographic operation on the secret value to generate the cryptographic value; (c) determining whether the cryptographic value satisfies the pre-determined criteria; and (d) repeating the sequence of steps starting at step (a) until the cryptographic value satisfies the pre-determined criteria.

Abstract: Apparatus and methods for scalable block pixel filtering are described. A block filtering instruction is issued to a processing element (PE) to initiate block pixel filtering hardware by causing at least one command and at least one parameter be sent to a command and control function associated with the PE. A block of pixels is fetched from a PE local memory to be stored in a register file of a hardware assist module. A sub-block of pixels is processed to generate sub-block parameters and the block of pixels is filtered in a horizontal/vertical edge filtering computation pipeline using the sub-block parameters.

Abstract: In one embodiment, systems and methods are provided for configuring multiple network interfaces based on a network profile. In one embodiment, a user interface module manages the creation, modification, and deletion of active and inactive profiles, which may be stored to a configuration file accessible to computers with network interfaces belonging to the respective profiles, such as homogeneous or heterogeneous nodes in a clustered network of computers. In one embodiment, a configuration module reads a configuration file with embedded network profiles and builds the appropriate network interfaces according to the interface parameters specified in the network profiles.

Abstract: Devices, methods, and computer-readable media for tagging web page content according to a content access level for entry into a web page content database, and filtering in response to a dynamic web page construction request based on the access level of the requesting source.

Abstract: One embodiment relates to a computer-implemented process of content fingerprinting. A context and a content for fingerprinting are received. The context comprises a set of context components for use in generation of content fingerprints. The content includes instances of at least some of the context components. The content is processed to generate context offset sequences, and a fingerprint for the content is formed from at least a portion of the context offset sequences. Another embodiment relates to a computer-implemented process for comparing a target content against a pool of contents. The process includes constructing an automata data structure based on the fingerprints in the pool. Context offset sequences of a target fingerprint are scanned against the automata data structure to determine matched offset subsequences. Other embodiments, aspects and features are also disclosed.

Abstract: A method where a Downloadable Conditional Access System Provisioning Server (DPS) detects a duplicated secure micro is provided. A method of detecting a duplicated secure micro, the method including: generating authentication time difference information associated with a value of a difference between a time when a host is finally authenticated in a first address and a time when the host is authenticated in a second address; comparing the authentication time difference information with a first reference value and a second reference value, the second reference value being less than the first reference value; and determining whether the secure micro is duplicated based on a result of the comparing.

Abstract: A content distribution system. A distribution management and unauthorized operation management device generates a one-time URL by using URL of content information specified by a user terminal and transmits the one-time URL and bandwidth information concerning the content information to the user terminal.