Abstract: A method for updating firmware of an electronic device includes verifying a first firmware certificate using a first public key, based on at least one of the electronic device being supplied power or the electronic device being reset, verifying a first firmware code included in the first firmware image based on a first hash value included in the first firmware certificate, and operating the electronic device using the first firmware code, based on the verifying of the first firmware certificate and the verifying of the first firmware code being successful. The first firmware certificate being included in a first firmware image stored in a memory of the electronic device.

Abstract: A kernel monitor can be used to mitigate ransomware activity of a host system. In some aspects, a computing system can use the kernel monitor to monitor a set of system calls generated by the host system within a time window to perform a functionality. The kernel monitor can include a respective kernel program monitoring each system call in the set of system calls. The set of system calls can be filtered by the kernel monitor to identify a subset of system calls associated with encrypting a filesystem of the host system. The computing system can determine that the subset of system calls is indicative of ransomware activity associated with the host system based on the subset of system calls exceeding a predefined threshold. Subsequently, the computing system can perform a mitigation operation to mitigate the ransomware activity.

Abstract: The invention provides computer-implemented methods for encrypting data, searching ciphertext, and decrypting ciphertext, and data processing apparatuses, computer programs, and computer readable storage media for achieving the same. Encrypting data comprises salting and then encrypting ciphertext, both processes using a respective exclusive OR operation. Decryption is achieved by the same process in reverse. Searching the ciphertext is achieved by generating a modifier and salted search term, before modifying the ciphertext with the modifier and performing a bytewise comparison between the salted search term and the modified ciphertext.

Abstract: A system performs optimized execution of cells of a notebook by pruning certain cells from execution while evaluating a particular cell, even though the particular cell depends on the pruned cells. The system generates a directed acyclic graph. The system transforms code of a target cell to include code of one or more source cells. The system receives a request to execute at least a portion of the notebook comprising a cell from the sequence of cells. The system identifies a subset of cells of the sequence of cells for execution based on the directed acyclic graph. The system determines based on various factors whether a source cell can be excluded from execution of the notebook based on properties of the source cell. If the system determines that the source cell can be excluded, the system executes the subset of cells without the source cell.

Abstract: A security method for a computer, comprising: providing a security device having a communication connection to the computer and a separate communication connection to an external device; and, at the security device: receiving a message having the computer as the intended destination from the external device; verifying the message; and if the message is verified as legitimate, sending a corresponding message to the computer; or if the message is not verified as legitimate, not sending a corresponding message to the computer

Abstract: Systems, methods, apparatuses, and computer-readable media for secure management of accounts on display devices using a contactless card. An application executing on a display device may receive a request specifying a service provider. The display device may receive a cryptogram generated a contactless card, and transmit the cryptogram to an authentication server. The authentication server may decrypt the cryptogram and generate a virtual account number associated with the contactless card. The authentication server may transmit the virtual account number to the service provider, which may create an account based at least in part on the virtual account number and the decryption of the cryptogram by the authentication server. The display may receive an authentication token generated by the service provider for the account, and access the account created by the service provider based at least in part on the authentication token.

Abstract: Systems and methods for pairing a point-of-sale device (POS) to a site controller (SC) are provided. The method includes: (1) transmitting, from the POS to the SC, via a legacy communication channel, a start pairing command; (2) generating, via the SC, a one-time password upon receiving the start pairing command; (3) transmitting, via the legacy communication channel, the one-time password from the SC to the POS; (4) transmitting, from the POS to the SC, a host CSR; (5) transmitting, from the SC to the POS, a host certificate, and an SSH-CA public key; (6) transmitting, from the POS to the SC, a user CSR; (7) transmitting, from the SC to the POS, a user certificate; (8) storing, via a memory of the POS, the host certificate, the user certificate, and the SSH-CA public key; and (9) removing keys corresponding to the legacy communication channel from the POS.

Abstract: A charge control device for a vehicle includes: a controller configured to communicate with a charging facility for a charge authentication, the controller storing a first private key corresponding to a first certificate in a first area of a memory, wherein the controller is configured to: generate a second private key and a public key in response to a request from a certificate issuer; store the second private key in a second area of the memory different from the first area; transmit the public key to the certificate issuer to receive a second certificate issued by the certificate issuer; maintain use of the first private key until an installation completion of the second certificate; and use the second private key upon the installation completion.

Abstract: A firmware verification method for a management system including a control circuit, a first protection circuit, a second protection circuit, a first memory and a second memory. The first memory includes first firmware including first secondary boot firmware and first primary boot firmware. The second memory includes second firmware including second secondary boot firmware and second primary boot firmware.

Abstract: The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Accordingly, embodiments herein disclose a method performed by an application function (AF) server, the method comprises receiving, from a terminal, a first request message including an user equipment (UE) service identifier (ID), transmitting, to an authorization server, a second request message for request association information of the terminal, the second request message including a terminal ID, receiving, from the authorization server, the association information of the terminal, in case that the association information is retrieved based on the terminal ID and performing to verify whether the UE service ID is associated with the terminal ID in the association information of the terminal.

Abstract: A method for pairing an electronic accessory provided with one or more motion sensors to a household appliance connected to a computer network.

Abstract: A method of manufacturing a multi-chip includes generating a first authentication certificate in a first die using a private key of the first die, verifying the first authentication certificate in a second die using a public key of the first die, generating a second authentication certificate in the second die using a private key of the second die, and verifying the second authentication certificate using a public key of the second die in a third die.

Abstract: Techniques are disclosed for inline security key exchanges between network devices. An example network device includes one or more processors and memory coupled to the one or more processors. The memory stores instructions that, upon execution, cause one or more processors to obtain a first payload key and obtain a path key. The instructions cause the one or more processors to encrypt a first payload of a first packet using the first payload key and insert the first payload key into first metadata of the first packet. The instructions cause the one or more processors to encrypt the first metadata using the path key and send the first packet to another network device.

Abstract: The object of the invention relates to a method in which a telecommunications operator or an e-delivery provider can send notices by email to one or a number of recipients, certifying the content of the notice and with a link to a proxy server of a CA (certification authority) who will verify the digital certificate of the recipient and their identity.

Abstract: Certain aspects of the present disclosure provide techniques for securing physical (PHY) layers in wireless communication. Certain aspects are directed to a method for wireless communication by a base station (BS). In some examples, includes, by, a secured first index based at least in part on a first index and a first secret key, the first index corresponding to a first orthogonal cover code (OCC) for communication over at least a first channel between the BS and a user equipment (UE). In some examples, the method also includes transmitting, to the UE, the secured first index and the first secret key.

Abstract: The present disclosure provides techniques for identifying regions of a three-dimensional (3D) printable object that are accessible by a tool. An example method includes receiving, from a remote computing device, an encrypted object file that includes a specification of a 3D printable object and receiving a request to process the encrypted object file to identify regions of the 3D printable object that are accessible by a tool. The method also includes obtaining a tool specification, computing a complement of the tool specification, and encrypting the complement of the tool specification to generate an encrypted comparison file. The method also includes computing an encrypted Minkowski sum of the encrypted object file and the encrypted comparison file to generate an encrypted result file that describes the regions of the 3D printable object that are accessible by the tool. The encrypted Minkowski sum is performed without decrypting the encrypted object file.

Abstract: The present disclosure provides techniques for processing a three-dimensional (3D) object file or object model in a privacy-preserving manner. An example method includes receiving, from a remote computing device, an encrypted object file comprising a specification of a 3D printable object and receiving a request to process the encrypted object file to identify a characteristic of the 3D printable object. The method also includes obtaining an encrypted comparison file and computing an encrypted Minkowski sum of the encrypted object file and the encrypted comparison file to generate an encrypted result file that comprises information about the characteristic. Computing the encrypted Minkowski sum is performed without decrypting the encrypted object file. The method also includes sending the encrypted result file to the remote computing device.

Abstract: An approach is disclosed for processing one or more HTTP requests and responses, by a protection solution, where a version of the plurality of HTTP requests and responses is at least version 2. When an HTTP settings request is detected in the one or more HTTP requests, by the protection solution, a protected dynamic dictionary is allocated in a protected memory area and an allocation of an application dynamic dictionary in application space in an HTTP server is prevented. When an HTTP header request is detected in the one or more HTTP requests, fields of the HTTP header are decompressed into the protected dynamic dictionary, the HTTP header request is updated to form an updated header request based on content in the protected dynamic dictionary, and the updated header request is sent to the HTTP server.

Abstract: Automated multi-phase investigation of security incident alerts using a Large Language Model (LLM) with converging dialogue. A computerized system receives a Security Alert Message pertaining to a possible security-related incident pertaining to an organization. The system automatically evaluates whether the Security Alert Message is either (I) a False Positive security alert message or (II) a True Positive security alert message, by performing an iterative multi-phase converging process in which the LLM evaluates at least: (i) the content of that Security Alert Message, and (ii) the meta-data of that Security Alert Message, and (iii) organizational context that is related to that Security Alert Message. An iterative process is performed by the LLM, which utilizes an Agent Module to fetch additional context information from organizational sources. The LLM re-updates the Risk Score and re-evaluates the Risk Score until convergence to a decision.

Abstract: A method for detecting and mitigating security attacks on producer network NFs using access token to non-access-token parameter correlation at a proxy NF includes receiving an inter-PLMN SBI request message. The method further includes obtaining, from an access token transmitted with the inter-PLMN SBI request message, at least one network- or service-identifying parameter and obtaining, externally from the access token, at least one network- or service-identifying parameter. The method further includes comparing the at least one network- or service-identifying parameter obtained from the access token and the at least one network- or service-identifying parameter obtained externally from the access token and performing a network security action when the at least one network- or service-identifying parameter obtained from the access token does not match the at least one network- or service-identifying parameter obtained externally from the access token.