Abstract: Systems and methods for providing multi-perimeter firewalls via a virtual global network are disclosed. In one embodiment the network system may comprise an egress ingress point in communication with a first access point server, a second access point server in communication with the first access point server, an endpoint device in communication with the second access point server, a first firewall in communication with the first access point server, and a second firewall in communication with the second access point server. The first and second firewalls may prevent traffic from passing through their respective access point servers. The first and second may be in communication with each other and exchange threat information.

Abstract: A system and method for submission and recordation of application programmer interfaces (APIs) using non-fungible tokens (NFTs) inserted into a blockchain.

Abstract: A wireless communication method and apparatus, an electronic device and a storage medium, belongs to the field of wireless communication technology. The method includes establishing a Bluetooth connection between a first device and a second device; sending a first data packet to the second device and receiving a second data packet sent by the second device based on a Bluetooth connection between the first device and the second device; establishing a wireless connection between the first device and the second device, in which the establishing of the wireless connection does not include an interaction process of handshake messages; and performing the wireless communication between the first device and the second device based on the first data packet and the second data packet.

Abstract: This invention relates to a quantum cloud-based processing system for managing transaction data across multi-application environments with enhanced security, adaptability, and efficiency. The system receives transaction data and metadata, encrypts it using dynamically generated quantum encryption keys, and queries downstream applications to retrieve data structure requirements. It creates a hierarchical map to trace data transformations, tokenizes data into standardized units with encoded metadata, and performs multi-level data augmentation using advanced machine learning techniques. The system ensures seamless integration with applications through a soft commit mechanism, detects and categorizes anomalies, and generates comprehensive discrepancy and anomaly impact reports. Dynamic updating modules adapt to changes in application requirements, while logging and storage modules maintain secure and auditable records of all workflows.

Abstract: A system performs digital notarization using a biometric identification service. A signature requesting service receives a request to validate a digital item with a signature for a person. The signature requesting service provides a payload that identifies the digital item and/or the person to an identity service. The identity service obtains one or more digital representations of biometrics for the person, determines an identity for the person, and returns a data structure including the payload and one or more identity attestations regarding the determined identity. The identity service encrypts at least a portion of the data structure using a private encryption key. A public encryption key for the identity service can then be used to decrypt the portion to verify that the data structure was generated by the identity service after determining the identity. In this way, validation can be verified to the full trust level of the identification service.

Abstract: In certain embodiments, image-feature malicious-activity detection and access prevention may be facilitated, where an activity notification associated with a transaction triggers feature detection for at least one image related to a different transaction. In some embodiments, a first image (received in connection with a first transaction) may be associated with the first transaction, and a second image (received in connection with a second transaction) may be associated with a second transaction. In response to a malicious activity notification associated with the first transaction, an identifying characteristic (e.g., a facial feature) detected in the first image may be used to determine whether to prevent access to an account related to the second transaction. As an example, in response to determining that the identifying characteristic is present in the second image, access to the account related to the second transaction may be prevented.

Abstract: An anomaly detection-based attention purification graph defense method is provided, which includes: Step 1: selecting an anomaly detection algorithm, passing an input graph into an anomaly detection module, and obtaining potential abnormal edges, wherein the obtained result is specifically a two-dimensional matrix named linkpred; Step 2: passing the linkpred matrix obtained in Step 1 and other required training parameters into an ADGAT model for training, and purifying an attention layer in the training process by linkpred; Step 3: using the trained model to generate graph node features to complete a specific downstream graph task. In the downstream graph task with high security requirements, the method can enhance the robustness of the model on the premise of defending the inherent noise and malicious disturbance in graph data and ensuring the performance of GNNs.

Abstract: In one aspect, a computerized system for securing data cloning and sharing options on data warehouses, comprising: a clone determiner engine that determines that a data asset is a primary data asset or a clone data asset, wherein the clone determiner engine comprises: a log data analyzer that obtains and analyzes a set of logs of the data asset from a specified log source, and wherein set of logs are used to determine that the data asset is the primary data asset or the clone data asset, a timestamp analyzer engine that obtains a timestamp data of the data asset and reviews the timestamp data to analyze ordering of the data asset, and wherein the timestamp analyzer engine determines the data asset is a primary asset or a secondary asset, and a fingerprints analyzer that obtains and reviews the data asset and any metadata of data asset, and wherein the fingerprints analyzer creates a fingerprint based on a content of the data asset and the metadata of the data asset, and wherein the fingerprints analyzer then

Abstract: A Unified Communication Platform (UCP) that enables mobile devices and platforms (as well as applications or programs running thereon) to communicatively interface with each other over various communication channels and provides for authentication of the users involved in the communication session.

Abstract: Aspects of the disclosure relate to using machine-learning models to determine graduated levels of access to secured data for remote devices. In some embodiments, a computing platform may establish a connection with a mobile device. Subsequently, based on establishing the connection, the platform may identify initial device information, device features, and user information. The platform may input the identified information into an authentication model to compute a baseline authentication score and then may identify an initial level of access to secured resources for the mobile device. Thereafter, the platform may receive from the mobile device, AR/VR device information captured by the mobile device. The platform may input the AR/VR device information into the authentication model to compute an augmented authentication score. Based on the augmented score, the platform may identify an augmented level of access to secured resources for the mobile device.

Abstract: In one embodiment, an access policy enforcement service receives a user authentication request from an end-user device. The access policy enforcement service identifies a telemetry collection intent from the user authentication request. The access policy enforcement service determines a monitoring policy based on the telemetry collection intent identified from the user authentication request. The access policy enforcement service configures, according to the monitoring policy, one or more telemetry collection agents to collect telemetry for traffic associated with the end-user device.

Abstract: User identity authentication and verification systems, methods, and apparatuses are disclosed, including a mobile computing device configured to receive a verification request from a remote computing system, the verification request including instructions for a user to perform a task for verifying his identity. A task includes scanning a band securely attached to the user's body, the band including an embedded communication device and a tamper indication circuit. In response to performing the scan, the mobile computing device receives, from the embedded communication device, a circuit tamper status and uniquely identifying data encoded within the communication device.

Abstract: Various embodiments provide systems and methods for providing security in a ZTNA system.

Abstract: Provided is a method for threshold secret sharing and reconstruction for multi-compartment, and more particularly, to a method for creating a share and reconstructing a secret in a system constituted by a plurality of compartments. The method for threshold secret sharing for multi-compartments may include: an operation of creating, when at least one second compartment is related toward a first compartment in one direction, an encrypted secret value by using an external share which does not belong to the first compartment, but belongs to the at least one second compartment; an operation of creating a first polynomial for defining the first compartment by using the encrypted secret value; and an operation of creating an internal share of the first compartment by using the first polynomial.

Abstract: Described herein are methods and systems implementing physically unclonable functions (PUFs). An example method includes: inputting a first challenge bit string into a first PUF; capturing a first response bit string from the first PUF; inputting a second challenge bit string into a second PUF; capturing a second response bit string from the second PUF; performing a hash operation on the first response bit string and the second response bit string, the hash operation generating a hashed-response bit string; and storing the first and second challenge bit strings and the hashed-response bit string in a first database.

Abstract: A wireless transmit/receive unit (WTRU) may be configured to receive a key identifier. The key identifier may be associated with a second WTRU. Additionally, or alternatively, the key identifier may include a 5G ProSe remote user key (5GPRUK) identifier (ID). The WTRU may be configured as a WTRU-to-network relay for the second WTRU. The key identifier may be received during a key request procedure. The key request procedure may be performed by the WTRU on behalf of the second WTRU. The WTRU may be configured to send the key identifier to a network function. The key identifier may be sent to the network function to initiate a secondary authentication procedure. The WTRU may be configured to receive an authentication response message from the second WTRU. The WTRU may be configured to receive a response from the network function.

Abstract: A system performs digital notarization using a biometric identification service. A signature requesting service receives a request to validate a digital item with a signature for a person. The signature requesting service provides a payload that identifies the digital item and/or the person to an identity service. The identity service obtains one or more digital representations of biometrics for the person, determines an identity for the person, and returns a data structure including the payload and one or more identity attestations regarding the determined identity. The identity service encrypts at least a portion of the data structure using a private encryption key. A public encryption key for the identity service can then be used to decrypt the portion to verify that the data structure was generated by the identity service after determining the identity. In this way, validation can be verified to the full trust level of the identification service.

Abstract: A processing system includes a memory configured to store encrypted information representing state and control information for a guest virtual machine. The processing system further includes a processor configured to selectively reserve exclusive use of a set of performance monitoring counters by the guest virtual machine during execution of the guest virtual machine based on a state of a first control field accessed from the encrypted information for the guest virtual machine. The processor further is configured to permit or deny use of the set of performance monitoring counters by the guest virtual machine based on a state of a second control field set by a hypervisor and accessed from the decryption of the encrypted information for the guest virtual machine accessed from the memory.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for encoding data on client devices. One of the methods includes obtaining dataset for transmission; dividing the dataset into two subsets according to one or more selection criteria, wherein data items that satisfy the one or more criteria are added to a first subset and the data items that do not satisfy the one or more criteria are added to a second subset, wherein the first subset is smaller than the second subset; encoding the data items of the first subset according to a first encoding technique and encoding the data items of the second subset according to a second encoding technique; applying a local differential privacy (LDP) mechanism to data elements of the first subset and the second subset to generate an LDP message; and transmitting the LDP message to an external recipient.

Abstract: In one aspect, a computerized method for detecting hiding and data intelligence gathering in a data lake or a cloud warehouse, comprising: implementing a hiding and data intelligence collection analysis phase in the data lake or the cloud warehouse; implementing a discovery process in the data lake or the cloud warehouse; implementing a data gathering process in the data lake or the cloud warehouse; and performing one or more dynamic masking operations to detect a Dynamic Masking column anomalies and to detect one or more atypical commands in the data lake or the cloud warehouse.