Abstract: In a secure communication system and method, a message is transmitted between a first user device and a second user device through a first routing device, a first connection server, the first routing device, a second routing device, a second connection server, and the second routing device. At the first user device, the message is encrypted at three levels. At the first routing device and the second routing device, the message is decrypted at the third and second levels, and encrypted at new second and third levels. At the first connection server and the second connection server, the message is decrypted at the third, second and first levels, and encrypted at new first, second and third levels. At the second user device, the message is decrypted at the third, second and first levels to retrieve the original message.

Abstract: Systems and methods of authorizing access to access-controlled environments are provided. In one example, a method includes receiving, passively by a computing device, user behavior authentication information indicative of a behavior of a user of the computing device, comparing, by the computing device, the user behavior authentication information to a stored user identifier associated with the user, calculating, by the computing device, a user identity probability based on the comparison of the user behavior authentication information to the stored user identifier, receiving, by the computing device, a request from the user to execute an access-controlled function, and granting, by the computing device, the request from the user responsive to determining that the user identity probability satisfies a first identity probability threshold associated with the access-controlled function.

Abstract: Methods and systems for resetting a digital credential within a digital credential based authentication system. The method includes logging a first administrative user into the digital credential system, receiving, from the first administrative user, a first portion of authentication credentials for a first customer, validating, by the first administrative user using the digital credential system, the first portion, logging a second administrative user into the digital credential system, receiving, from the second administrative user, a second portion of authentication credentials for the first customer, receiving the second portion by the second administrative user, validating, by the second administrative user using the digital credential system, the second portion; and resetting the authentication credentials based on the validation of the first portion and second portion.

Abstract: In an embodiment, one or more ad data sets are received at a first processor. The ad data sets may be partially encoded or encrypted to prevent the processor from viewing certain visitor information. The ad data sets are merged together around common users or order IDs. An attribution credit is applied to each advertising event, creating an attribution data set. The data in the attribution data set is aggregated according to each advertising event, and based on the aggregated results, an advertising recommendation is calculated and sent to the advertising entity.

Abstract: A Honeypot Adaptive Security (HAS) system is described that determines whether a pre-loaded partner or third-party (PP-TP) application executed on a client device has gained over-privileged access to confidential client or network (CCN) data, or over-privileged use of client account features or information provided by a telecommunications service provider. The HAS system is configured to retrieve client data associated with a PP-TP application executed on the client device, retrieve policy rules associated with the PP-TP application, generate a PP-TP application data model to determine a probability of the PP-TP application gaining over-privileged access to CCN data or over-privileged use of client account features on a client device. Responsive to the determined probability, the HAS system is configured to deploy a solution data package to the client device that resolves the instance of over-privileged access or over-privileged use.

Abstract: An apparatus comprising a processor to execute the rule optimizer to perform a number of operations. One operation comprises obtaining 5 log data including a result of detecting an exploit attack based on a rule. Another operation comprises time-series analyzing the obtained log data to update at least some of previously applied detection rules. There is provided an apparatus for automatically optimizing a rule to improve the detection accuracy for an exploit attack in a rule-based attack detection system, and a method performed on the apparatus.

Abstract: An automated system comprising a processor and a database are described. The processor executes communication software reading: at least one image corresponding to an identifier of a blood product from a donor; and at least one database storing at least one communication from a receiver of the blood product. The communication software executed by the processor determines an intermediary from the identifier and contacts the intermediary to obtain contact information of the donor.

Abstract: A smart home system is provided. In operation, a user input of a guest at a location is detected, and calendar information is received from a calendar application. In response to detecting the user input, an identity of a guest is determined. Utilizing the identify of the guest, it is determined that the guest is expected for a calendared event at the location by reviewing the calendar information from the calendar application. Utilizing the determined identity of the guest and the determination that the guest is expected for the calendared event at the location, a visual notification is outputted, and an audible notification is outputted.

Abstract: A service action category based cloud security system and method implement cloud security by categorizing service actions of cloud service providers into a set of service action categories. The service action categorization is performed agnostic to the applications or functions provided by the cloud service providers and also agnostic to the cloud service providers. With the service actions of cloud service providers thus categorized, cloud security monitoring and threat detection can be performed based on service action categories. Thus, cloud security can be implemented without requiring knowledge of the applications supported by the cloud service providers and without knowing all of the individual service actions supported by the cloud service providers.

Abstract: An apparatus is provided to enable power supply input to be isolated from power supply output. Power is received from a first power signal at a first of a plurality of charge stores. A second power signal is output from a second of the plurality of charge stores. The second power signal is isolated from the first power supply. The first charge store can be charged from the power input whilst isolated from the power output. The second charge store can be discharged to the power output, while isolated from the power input.

Abstract: There is provided an electronic device for managing functionality of applications. The device including a processor which detects an input with respect to a graphical element displayed on a display of the electronic device, the graphical element representing a first application, generates at least one sub-graphical element from the graphical element, the at least one sub-graphical element representing a functional data item associated with the first application and controls the display to display the at least one sub-graphical element.

Abstract: The present embodiments relate generally to systems and methods for securing operation of an ultrasound scanner for use with a multi-use electronic display device. In some embodiments, the multi-use electronic display device can control whether the ultrasound scanner is permitted to generate ultrasound image data for display based on an institution affiliation status of the ultrasound scanner retrieved from a server. In some embodiments, the multi-use electronic display device can control whether the ultrasound scanner is permitted to generate ultrasound image data for display based on whether a digital certificate provided by a server is successfully validated.

Abstract: A system, method, and computer-readable media for performing a fine-grained encrypted search of data stored in encrypted form in an encrypted search database. The system includes at least one processor and at least one memory having computer-readable instructions for performing the method. The method includes performing an encrypted search of the encrypted search database based on one or more search terms, presenting a result of the encrypted search on an interface, and performing a further search of an encrypted data storage based on a response to the result.

Abstract: Various systems and methods for domain authentication are described herein. In an example, the method may include detecting a domain from a request of a tenant for access to a farm. The method may also include identifying a presence of a site ID from a database of the farm based on the domain. The method may also include sending an authentication request to a default site or a custom site, the authentication request managed through a site manager based on the identified presence of the site ID in the database of the farm. The method may also include routing traffic from the tenant to the farm in response to satisfaction of the authentication request.

Abstract: A computing system includes a processor and a data store coupled to the processor. The computing system provides access to electronic content stored in the data store. A user interface component receives an indication of an external user with which to share an item of electronic content. A link generation component is generates a link to share the item of electronic content. An access control component receives a request from a requestor to access the item of electronic content using the link, and responsively verify an identity of a requestor. The user interface component provides access to the item of electronic content to the requestor if the identity was verified and receives a user input indicative of an external account binding request. The access control component determines if the requestor has authenticated with the external account and selectively binds the link to the external account if the user authenticates with the external account.

Abstract: A method for processing data by an electronic data-acquisition device, requesting to obtain data from an electronic data-providing device. The electronic data-acquisition device and the electronic data-providing device communicate with each other by using a short-range wireless (NFC) communications technology defining a transmission/reception reference frequency. The method includes the following acts performed by the electronic data-acquisition device: determining a frequency of transmission/reception of an interrogation signal that is different from the transmission/reception reference frequency, as a function of a frequency-determining parameter, delivering an interrogation frequency; and after determining the interrogation frequency, transmitting the interrogation signal to the data-providing device at the interrogation frequency.

Abstract: A computing system includes a processor and memory storing instructions executable by the at least one processor. The instructions, when executed, provide a user interface component that receives an indication of an external user with which to share an item of electronic content, a link generation component that generates a link to share the item of electronic content and identifies a communication endpoint associated with the external user, and an access control component that receives a request to access the item of electronic content using the link and, in response to the request, generates an access code that is communicated to the communication endpoint associated with the external user. The user interface component receives an access input, and the access control component grants access to the item of electronic content based on a determination that the access input includes the access code communicated to the communication endpoint associated with the external user.

Abstract: An apparatus includes a power input, a power output, and a plurality of independent powering units each comprising at least one charge store. Each of the plurality of powering units is capable of receiving power from the power input while isolating the power output, and each of the plurality of powering units is capable of outputting power to the power output while isolating the power input.

Abstract: Spin Hall Effect (SHE) magneto junction memory cells (e.g., magnetic tunneling junction (MTJ) or spin valve based memory cells) are used to implement high entropy physically unclonable function (PUF) arrays utilizing stochastics interactions of both parameter variations of the SHE-MTJ structures as well as random thermal noises. An apparatus is provided which comprises: an array of PUF devices, wherein an individual device of the array comprises a magnetic junction and an interconnect, wherein the interconnect comprises a spin orbit coupling material; a circuitry to sense values stored in the array, and to provide an output; and a comparator to compare the output with a code.

Abstract: The subject matter described herein is generally directed towards generating security parameter index (“SPI”) values at a plurality of endpoints (EP) in a network using time-based one-time passwords (TOTPs). In this manner, the SPI values are generated in a decentralized manner. The SPI values are used for distributed network encryption among the EPs.