Abstract: A system and method of erasing data on a data handling device may include providing a device with a data storage element and a biometric characteristic scanning element, scanning a triggering biometric characteristic of a secured user by the scanning element, and storing protected data in a protected storage location on the data handling device. System and method may also include monitoring the scanning element for detection of a biometric characteristic, detecting a biometric characteristic by the scanning element, and determining if the detected biometric characteristic corresponds to the triggering biometric characteristic. If the detected biometric characteristic corresponds to the triggering biometric characteristic, then erasing data in the protected storage location.

Abstract: According to one embodiment, an encryption device encrypts each of numerical values based on an encryption key, and generates encrypted data. On the basis of each of the encrypted data, a computation device generates a primary computation result corresponding to data in which a computation result of an expression that has added and subtracted each of the numerical values is encrypted. On the basis of the primary computation result, a secondary computation key and random numbers, a computation assist device generates a secondary computation result. The computation device generates a tertiary computation result based on the secondary computation result and a tertiary computation key, and decides the magnitude relation between a minuend and a subtrahend in the expression based on the tertiary computation result.

Abstract: Multi-variable assessment systems and methods that evaluate and predict entrepreneurial behavior are provided herein. Methods include obtaining entrepreneur data related to personal skills data, business history data, and social network data for the entrepreneur across a plurality of network modalities, the plurality of network modalities including social networks, phone records, and message records, determining business event information for business events identified between the entrepreneur and contacts of the entrepreneur found in the entrepreneur data, and performing a dynamic measurement of engagement between the entrepreneur and the contacts by looking for contacts between the entrepreneur and the contacts that cross the plurality of network modalities, wherein the dynamic measurement includes an entrepreneur score for the entrepreneur.

Abstract: A method is provided in one example embodiment and includes receiving at a node of a transitive IP network a data packet including a Network Services Header (“NSH”); accessing by the transitive IP network node context contained in the NSH, wherein the context may be used by the transitive IP network node to perform an enhanced network service in connection with the received data packet; performing by the transitive IP network node the enhanced network service in connection with the received data packet using the accessed context; and, subsequent to the performing, forwarding the received packet to a next node.

Abstract: One embodiment of the present invention provides a system for retrieving a content collection over a network. During operation, the system determines additional information associated with the piece of content that is needed for consumption of the content collection; generates a plurality of Interests, which includes at least one Interest for a catalog of the content collection and at least one Interest for the additional information; and forwards, concurrently, the plurality of Interests, thereby facilitating parallel retrieval of the content collection and the additional information.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, an IVN transceiver is disclosed. The IVN transceiver includes an IVN bus interface, a microcontroller communications interface, and a security module connected between the IVN bus interface and the microcontroller communications interface and configured to perform a security function.

Abstract: Disclosed are a security verification method, apparatus, and terminal. The method includes: acquiring a first verification code and prompting the first verification code, the content of the first verification code describing scenario information that is simple for a user to understand, and triggering the user to send a second verification code over a user terminal; receiving the second verification code, and acquiring an ID of the user terminal sending the second verification code; and obtaining a security verification result according to two verification results of the second verification code and the corresponding ID. A first verification code describing scenario information that is simple for a user to understand is displayed such that the user understands the scenario information corresponding to the first verification code and unauthorized users are prevented from stealing the verification codes using similar websites.

Abstract: A model-based industrial security policy configuration system implements a plant-wide industrial asset security policy in accordance with security policy definitions provided by a user. The configuration system models the collection of industrial assets for which diverse security policies are to be implemented. An interface allows the user to define security policies for a plant environment at a high-level by grouping the industrial assets into security zones, and defining any additional communication permissions in terms of asset-to-asset, asset-to-zone, or zone-to-zone conduits. Based on the model and these policy definitions, the system generates asset-level security setting instructions configured to set appropriate security settings on one or more of the industrial assets, and deploys these instructions to the appropriate assets in order to implement the defined security policy.

Abstract: A method, executed by a computer, for recording data includes splitting a file into sequential extents, reordering the sequential extents into non-sequential extents, writing the non-sequential extents to a storage medium, writing dummy data to the storage medium, and writing extent placement information corresponding to a placement for the non-sequential extents to the storage medium. A computer program product and computer system corresponding to the above method are also disclosed herein.

Abstract: Multi-variable assessment systems and methods that evaluate and predict entrepreneurial behavior are provided herein. Methods include obtaining entrepreneur data related to personal skills data, business history data, and social network data for the entrepreneur across a plurality of network modalities, the plurality of network modalities including social networks, phone records, and message records, determining business event information for business events identified between the entrepreneur and contacts of the entrepreneur found in the entrepreneur data, and performing a dynamic measurement of engagement between the entrepreneur and the contacts by looking for contacts between the entrepreneur and the contacts that cross the plurality of network modalities, wherein the dynamic measurement includes an entrepreneur score for the entrepreneur.

Abstract: A user device may access a remote conference management application and setup a conference customized for the user. For example, one method of operation may include transmitting a notification to a user device of an upcoming scheduled meeting time and receiving a confirmation that the scheduled meeting is a valid meeting time. The method may also include receiving at least one instruction from the user device regarding the meeting time, loading a data file sequence stored in a user account, and transmitting the data file sequence to a presentation management device.

Abstract: Engineers at a software maker can insert software markers, making a compiler provide object code markers that appear to invoke activities from the protection library, but actually have the effect of providing information to a protection process. The engineers can build a protected object file, from which a software protection tool can provide an executable file. The software protection tool can include any tool that can use a pointer to a program statement, including creating DLL's. Alternatively, the system can identify object code markers by their referencing known functions from CALL instructions.

Abstract: An image processing apparatus transmits, after reception of a login notification of an authenticated user, the login notification to an identified application, and then changes displaying of a screen of a display unit to displaying of an initial screen corresponding to the identified application. After the displaying of the display unit has been changed to the displaying of the initial screen, the image processing apparatus transmits the login notification to, among applications belonging to a first group, an application to which the login notification has not been transmitted, and applications belonging to a second group.

Abstract: A computer-implemented method for providing secure data management. The method includes obtaining data via a computing device, with the obtained data not being stored on non-volatile memory elements of the computing device. The method additionally includes encrypting the obtained data using a cryptographic key to generate encrypted data. Thereafter, the encrypted data is transmitted, via a communications network, to a server device for storage. The method additionally includes retrieving the encrypted data from the server. The method further includes decrypting the encrypted data to obtain decrypted data.

Abstract: Systems and methods for device-agnostic, multi-factor network authentication are disclosed. In some embodiments, a wireless network connection can authenticate a device over secure authentication means with a certificate that confirms a device identity. After authenticating the device, a user can be prompted to provide credentials in a captive portal. The captive portal can be inaccessible to devices that have not already authenticated using a certificate. After providing approved credentials to the captive portal, the user can access the network. This embodiment and additional embodiments are readily integrated into private wireless networks and others.

Abstract: Systems and methods for tiered connection pooling are disclosed herein, which may be used in a method of fulfilling user requests in an enterprise computing system. The method involving generating, by a processing unit, a first connection pool comprising one or more previously used authenticated connections with a resource; generating, by the processing unit, a second connection pool comprising one or more unused authenticated connections with the resource; and generating, by the processing unit, a third connection pool comprising one or more unauthenticated connections with the resource; receiving, by the processing unit, a request from the user device to access the resource, the resource requiring authentication for access; and fulfilling, by the processing unit, the request based on a connection from the first, second, or third connection pool.

Abstract: Methods and apparatus for control of data and content protection mechanisms across a network using a download delivery paradigm. In one embodiment, conditional access (CA), digital rights management (DRM), and trusted domain (TD) security policies are delivered, configured and enforced with respect to consumer premises equipment (CPE) within a cable television network. A trusted domain is established within the user's premises within which content access, distribution, and reproduction can be controlled remotely by the network operator. The content may be distributed to secure or non-secure “output” domains consistent with the security policies enforced by secure CA, DRM, and TD clients running within the trusted domain. Legacy and retail CPE models are also supported.

Abstract: The present invention provides improved techniques that can be used to verify illegitimate non-human users that are accessing content. For example, a method of verifying a non-human user of a computerized device may comprise receiving information identifying a potential non-human user of a computerized device, altering a browser page to be used by the potential non-human user, and verifying whether or not the potential non-human user is an actual non-human user based on a behavior of the potential non-human user with the altered browser page.

Abstract: Systems and methods for watermarking content and authenticating watermarked content are provided. Content is rendered on a display while watermarking information embedded in portions of the content are obtained. The watermarking information is verified to authenticate the content. If the content is not authentic, or is not authenticated within a period of time, the content can be terminated or otherwise blocked from rendering on the display.

Abstract: Processor system with a general purpose processor and a cryptographic processor dedicated to performing cryptographic operations and enforcing the security of critical security parameters. The cryptographic processor prevents exposure of critical security parameters outside the cryptographic processor itself, and instead implements a limited scripting engine, which can be used by the general purpose processor to execute operations that require the critical security parameters.