Abstract: The system disclosed implements a secure method for facilitating secure exchange of health information among various stakeholders, including data owners or contributors, data requestors or miners, and medical providers, including hospitals, clinics, and research laboratories. Additional aspects of the system provide means for conducting secure research on health data collected from data contributors. Health information is exchanged using a decentralized system that incentivizes data contributors to provide health data to data miners. The data miners, which may be pharmaceutical companies, medical laboratories, or hospitals, use various methods in order to perform research on aggregated contributor data, while maintaining contributor privacy.

Abstract: A method and a system for determining an optimal authentication scheme for an authenticating system. Embodiments may include: receiving, from the authenticating system an identity of a user requiring access to the authenticating system and a policy of the authenticating system; receiving, from a storage device, data including historical information regarding previous authentication attempts by the user; producing a list including an optimal selection of one or more authentication schemes, each including one or more authentication factors, according to the historical information and the authenticating system policy; and sending the selection list of one or more authentication schemes to the authenticating system.

Abstract: Embodiments of the present disclosure can present information on services hosted and used by various assets on a network, and allow users to control access to such services. In particular, embodiments of the disclosure may be used to present one or more services hosted by a network asset, and control access to such services by other network assets based on user input.

Abstract: Systems and methods for partial frame encryption in accordance with embodiments of the invention are disclosed. In one embodiment, the method receives a video bitstream that includes several frames, each frame including several independently encoded compression units within the frame, encrypts a portion of each of several compression units in several frames, and generates an output bitstream that includes the several independently encoded compression units including the encrypted portions of the compression units.

Abstract: A method comprising the steps of receiving a data object, obfuscating the meaning of at least a portion of the data and transmitting the data to a second processor-controlled device. In some embodiments the data may be formatted as either a spreadsheet or an XML file and the obfuscation process may operate on the elements and the attributes of the XML file. The obfuscating may include replacing meaningful data with identifiers before transmitting them to another client device or a server. In response, the other client device or server may operate on the data and return it, or optionally return code or applets to be executed on the client device. Some embodiments allow for a server or other client device to access remote resources for use when processing the data. The client devices may be cellular telephones or other smart devices including portable computers and tablets.

Abstract: An authorization server system that manages authorization information configured to enable providing of a service without requiring input of authentication information, comprises: a management unit which manages the authorization information; a providing unit which provides a deletion screen that includes the authorization information generated when an authorization operation of a user is performed but not the authorization information generated without performing the authorization operation of the user in accordance with reception of a request of the deletion screen configured to delete the authorization information managed by the management unit; and a deletion unit which deletes the authorization information managed by the management unit, in accordance with reception of a deletion instruction via the deletion screen.

Abstract: A network server is operated so as to facilitate legal eavesdropping by receiving, from the first user via a network, a session key (SK) encrypted with a second user's public key, kpubU2, and the SK encrypted with an escrow server's (ES) public key, kpubES. The kpubU2 key is the public key of the second user asymmetric private/public key pair kpriU2/kpubU2. The kpubES key is the public key of the ES asymmetric private/public key pair kpriES/kpubES. The received SK encrypted with kpubES is stored. The SK encrypted with kpubU2 is transmitted to the second user via the network. A message encrypted with the SK is received from one of the first and the second users via the network, stored, and transmitted to the other of the first and the second users via the network.

Abstract: A lightweight throttling mechanism allows for dynamic control of access to resources in a distributed environment. Each request received by a server of a server group is parsed to determine tokens in the request, which are compared with designated rules to determine whether to process or reject the request based on usage data associated with an aspect of the request, the token values, and the rule(s) specified for the request. The receiving of each request can be broadcast to throttling components for each server such that the global state of the system is known to each server. The system then can monitor usage and dynamically throttle requests based on real time data in a distributed environment.

Abstract: A security system is applied to venue-cast content transmissions over a broadcast/multicast network infrastructure. The broadcast network infrastructure may be Evolution-Data Only Broadcast Multicast Services (BCMCS) that facilitates distribution of a subscription-based content delivery service. A venue-cast service can be part of the subscription-based content delivery service and has an associated service key. Upon subscribing to the content delivery service, the subscriber access terminal is given the service key. Such service key may be associated with a particular subscriber package and/or venue location. The same service key is provided to the broadcast network infrastructure that broadcasts venue-cast content. A broadcast access key is generated by the broadcast network infrastructure and used to encrypt venue-specific content to be broadcasted. Consequently, only access terminals that have received the service key (e.g.

Abstract: An intra-forecast mode selecting method is provided to select an intra-forecast mode suitable for intra-forecast coding of a coding subject block from intra-forecast modes including a DC intra-forecasting mode based on a difference in forecast between a coding amount of the intra-forecast mode and an intra-forecast. The intra-forecast mode selecting method is comprised of intra-forecast mode selecting means for correcting the coding amount of the DC intra-forecast mode to be equal to that of the other intra-forecast or less to select an intra-forecast mode based on a difference in forecast between the coding amount of the corrected DC intra-forecast and the intra-forecast.