Abstract: Digital content distribution methods, systems and devices are provided. The digital content distribution utilizes a content distribution server for providing a user device access to digital content. In certain embodiments, the content distribution server: (a) receives a check-out request from a user device via a content access device; (b) provides metainfo to the user device via the content access device; (c) receives an open content command comprising an identifier of the digital content and an identifier for a user from the user device; (d) determines from the open content command whether the user device is authorized to view the digital content; and (e) provides a license response to the user device based on the user device being authorized to view the digital content, the license response comprising a license and the digital content.

Abstract: A method based on converging a platform-neutral, self-sovereign ledger technology and artificial intelligence in a virtual machine environment concerning the collective efforts and outcomes of an entity (e.g., person, team, or organization) or group of entities in both quantum and non-quantum computing environments. This method results in an artificially intelligent ledger with dual-layer floating encryption and available steganographic integration, which contains representations of things of value (past, current, and future outcomes, including data and other information) concerning entities (e.g., individuals, groups of people, or organizations) engaged in collective effort (e.g., trade, finance, work, or activism). Furthermore, this method produces a means of validating, auditing, and analyzing data and other information and automatically communicating that data and other information to stakeholders.

Abstract: Consistent with the present disclosure, a method and related system for secure autonomic optical transport networks are disclosed. The method includes steps for adding a network element in an optical network. The method includes an initial step of verifying, with a new network element, a first identifier certificate from a proxy network element. In a further step, a second identifier certificate from the new network element is verified with the proxy element. A registrar is used for verifying the second identifier certificate from the proxy network element and sending domain specific parameters to the proxy network element for forwarding to the new network element Next, a local certificate is generated on the new network element. The local certificate is derived from a secure module and sent to the proxy network element for forwarding to the registrar. Further, the new network element in the autonomic domain is enrolled, with the registrar.

Abstract: An encoder for encrypting a plaintext into a ciphertext. The encoder has an encoding submodule for acting as a deterministic random bit generator (DRBG) in an offline mode for generating one or more hash-key value candidates, and for acting as a stream encryptor in an online mode for encrypting the plaintext into the ciphertext; a hash key selector for selecting a hash-key value H from the one or more hash-key value candidates; and a hash submodule for generating a MAC tag using at least the ciphertext and the selected hash-key value H. A corresponding decoder is also provided.

Abstract: A system includes circuitry for rewriting blockchains in a non-tamper-evident or tamper-evident operation using a key secret held in portions by multiple individually untrusted parties. The blockchains may include a series of blocks secured by integrity codes that may prevent non-tamper-evident rewrites by non-trusted parties that are not in possession of the key secret or individually-untrusted parties in possession of only a portion of the key secret. In some cases, multiple individually-untrusted parties may combine their portions into the key secret. As a group, the multiple individually-untrusted parties may perform non-tamper-evident operation with respect to at least one integrity code within the blockchain.

Abstract: An information processing apparatus includes a processor configured to use authentication information of a first user who is registered in plural electronic signature services and uses the electronic signature services, to acquire at least one of contract information regarding a contract using each electronic signature service or service information, from each electronic signature service, the authentication information being provided for each of the electronic signature services and used for using the electronic signature service, and the service information being information regarding each electronic signature service, display a check screen in association with the acquired at least one of the contract information or the service information and the electronic signature service as an acquisition source, the check screen being used for checking the plural electronic signature services, and receive selection of the electronic signature service used by the first user on the check screen.

Abstract: An authentication method includes assigning a risk status to a request received from a remote interaction system, transmitting a notification communication to a device associated with the request, monitoring interaction data from an interaction network, and identifying, from the monitored interaction data, authentication interaction information, the authentication interaction information including a coded sequence and a predetermined authentication identifier. The authentication method also includes comparing the coded sequence in the authentication interaction information to an expected coded sequence and transmitting a verification communication after determining the coded sequence in the authentication interaction information matches the expected coded sequence.

Abstract: The present disclosure is directed to monitoring internal process memory of a computer at a time with program code executes. Methods and apparatus consistent with the present disclosure monitor the operation of program code with the intent of detecting whether received program inputs may exploit vulnerabilities that may exist in the program code at runtime. By detecting suspicious activity or malicious code that may affect internal process memory at run-time, methods and apparatus described herein identify suspected malware based on suspicious actions performed as program code executes. Runtime exploit detection may detect certain anomalous activities or chain of events in a potentially vulnerable application during execution. These events may be detected using instrumentation code when a regular code execution path of an application is deviated from.

Abstract: Detailed herein are embodiments which allow for integrity protected access control to provide defense against deterministic software attacks. Software attacks such as rowhammer attacks which target the TD bit itself are defended against using cryptographic integrity which the data itself is protected by the TD-bit alone. As such, software is reduced to performing only non-deterministic attacks (e.g., random corruption), but all the deterministic attacks are defended against. Additionally, integrity-protected access control bits are protected against simple hardware attacks where the adversary with physical access to the machine can flip TD bits to get ciphertext access in software which can break confidentiality.

Abstract: A system includes an electronic circuit that performs operations on encrypted data. The electronic circuit includes electronic circuit elements electrically coupled to receive an encrypted first secret data block including a first data identifier and to decrypt the encrypted first secret data block. The electronic circuit further includes electronic circuit elements electrically coupled to combine the data identifier and an operation identifier of an operation to be executed to generate an intermediate value; apply a one-way hash function to the intermediate value to generate a second data identifier; and encrypt the second data identifier for outputting.

Abstract: A technique and system provide protection to information or documents via an authorization policy that is applied to multiple application programs and authorization requests are submitted through a REST API over HTTP or HTTPS. Methods, techniques, and systems control access to protected information or documents and use of content in protected information or documents to support information management policies.

Abstract: An information processing apparatus or method that can share secret information by plural holders. The apparatus or method execute a control to: calculate or generate an encryption key and k key symbols from k random numbers; encrypt k information symbols using the encryption key to output k encrypted symbols; output any one of the k encrypted symbols and the k key symbols as k message symbols; output a flag indicating which one of the k encrypted symbols and the k key symbols are the k message symbols; encode the k message symbols with a maximum distance separable code to output n code symbols; and-output n code blocks from the n code symbols and the flag, wherein k is a positive integer of one or more, and n is a positive integer larger than k.

Abstract: An apparatus of an aspect includes an encryption unit to receive unencrypted data. The encryption unit is to encrypt the unencrypted data to generate encrypted data. The apparatus also includes circuitry coupled with the encryption unit. The circuitry is to generate a first checksum for a copy of the unencrypted data, generate a second checksum for a copy of the encrypted data, and combine the first and second checksums to generate a first value.

Abstract: Embodiments for device pairing using optical codes are described. One embodiment is a wearable device with an image sensor configured to capture an image including a first optical code from a first host device. The wearable device decodes the first optical code, and in response to the first optical code, initiates broadcast of a pairing advertisement. The host device displays a second optical code in response to the pairing advertisement, and the wearable device captures and processes the second optical code to determine a host pairing advertisement code. The wearable device then, in response to the second optical code, initiate broadcast of a second pairing advertisement including the host pairing advertisement code. In various embodiments, a secure wireless channel is then established and used for further secure communications.

Abstract: A method for maintaining a log of events in a shared computing environment is provided. One example of the disclosed method includes receiving one or more data streams from the shared computing environment that include transactions conducted in the shared computing environment by a first entity and a second entity that is different from the first entity. The method further includes creating a first blockchain entry for a first transaction conducted in the shared computing environment for the first entity, creating a second blockchain entry for a second transaction conducted in the shared computing environment for the second entity, where the second blockchain entry includes a signature that points to the first blockchain entry, and then causing the first and second blockchain entries to be written to a common blockchain data structure in a database that is made accessible to both the first entity and the second entity.

Abstract: Systems, methods and non-transitory computer readable media for detecting identified information in privacy firewalls are provided. A repeating field in a data collection may be analyzed to determine whether the field is likely to include information that identifies particular individuals. An access request of a user may be received. A permission record associated with the user may be accessed. In response to the field being likely to include information that identifies particular individuals and a first value in the permission record, access to the field may be denied, in response to the field not being likely to include information that identifies particular individuals and the first value in the permission record, access to the field may be provided, and in response to a second value in the permission record, access to the field may be provided.

Abstract: A system and method for biobehavioral identification may include a user device, a secure system/client device, and a server. The elements of the system work together to monitor the biologic features (e.g., fingerprints, pupils, or the like) and behavior (e.g., wake time, exercise time, location) to verify the authenticity of a user requesting access to a database and/or secure facility.

Abstract: For privacy-preserving attribution, the exposure and/or attribution to physical media (e.g., a surface or object) is determined on-board the mobile device. The exposure and/or attribution may be communicated remotely from the mobile device without passing specific locations and/or identifiers of the operator. The attribution information may be used by others without having access to private information, which never leaves the mobile device.

Abstract: A computing device implemented method of identity authentication comprises receiving a biometric token; performing a biometric capture of a user; converting the biometric capture into a biometric bitstream; recovering a predictable seed of data using the biometric bitstream and the biometric token; using the recovered predictable seed of data to produce challenge response data sent to a verifier device in response to a challenge message received from the verifier device; and verifying the challenge response data using identity data of the user.

Abstract: An apparatus operating as a certificate authority (CA) is described. The apparatus can perform operations including receiving, from a plurality of requesting devices, a request to join a group. The request can include identification information for the group and attestation evidence for the plurality of requesting devices. Responsive to receiving the request, the apparatus can provide a group certificate for the group to the plurality of requesting devices.