Abstract: Systems and techniques are described for optimizing secure communications. A client can use an authentication protocol, e.g., Kerberos, to authenticate with the server. Specifically, the client can obtain a service ticket from a ticket granting server, and then use the service ticket to authenticate with the server. The server can respond by providing an encrypted session key. The session key can then be used by the client and server to securely communicate with each other. A wide area network (WAN) optimization device described in this disclosure is capable of obtaining the session key without decrypting the service ticket. Specifically, the WAN optimization device can use information other than the service ticket to obtain the session key.

Abstract: Systems and methods for domain classification using the network request behavior of clients are provided. The network requests of a plurality of clients are analyzed to determine a domain corresponding to each request. This information can be used to associate a set of domains with each individual client. Because of the reciprocal nature of a network request, the information is also used to associate a set of clients with each individual domain. Within the plurality of domains associated with the plurality of clients, there may exist known domains having a classification and unknown domains having no classification. Based on the correlation of clients and domains from their respective associations, the system generates domain classification information for at least one of the unknown domains.

Abstract: A television event may be consumed after been stored in a mass memory of a multimedia unit, but still fully relies on the security of a secure device. A conversion of a received content aims at firstly descrambling the content using control words included in entitlement control messages and immediately re-encrypting the descrambled content by a unique key generated specifically for this content. Access conditions attached to the entitlement control message containing the control word are temporarily stored and once the decryption is terminated, the secure device produces an information block. This information block containing for example access conditions and an identifier of the content is either stored into a secure memory of the secure device or stored in the mass memory with the encrypted content. The unique key is made up of a combination of a root key specific to the secure device and the information block.

Abstract: A method, a device, and a storage medium provide a risk engine that calculates a level of risk stemming from a communication to access a service or an asset. The risk engine operates as a fuzzy logic neural network. The risk engine obtains parameters from the communication and applies rules to calculate the level of risk.

Abstract: A method and apparatus are disclosed for assessment of a sealed package. Light is emitted from a narrow-band laser source towards said package from outside of said package. An absorption signal of said light scattered in said package is measured, wherein said absorption is caused by said at least one gas when said light is scattered and travels in said sealed package. Measuring is made outside of said package, whereby said assessment is non-intrusive with regard to said package. It is determined if a deviation exists from a predetermined, expected gas composition and/or concentration of said at least one gas within said sealed package based on said measured absorption signal. Thus sealing of said package for said gas is detected.

Abstract: Various embodiments herein include at least one of systems, methods, and software of a cross-network listening agent for network entity monitoring. In some such embodiments, the cross-network listening agent is an element of software or a hardware device connected to a network and listens for metric data broadcast by other entities of the network. The cross-network listening agent receives the broadcast metric data and transmits the metric data to a network and system management system resident on another network. The network entities are generally any device that reports status with regard to metrics the network entity monitors with regard to its own state. In some embodiments, the network entities report their status in Simple Network Management Protocol (SNMP) messages that are broadcast on the network, but are unable to reach the network and system management system resident on the other network.

Abstract: An OTDR device and method for characterizing one or more events in an optical fiber link are provided. A plurality of light acquisitions is performed. For each light acquisition, test light pulses are propagated in the optical fiber link and the corresponding return light signals from the optical fiber link are detected. The light acquisitions are performed under different acquisition conditions, for example using different pulsewidths or wavelengths. Parameters characterizing the event are derived using the detected return signal from at least two of the plurality of light acquisitions.

Abstract: A system and method for user authentication utilizing PKI credentials and user credentials on an electronic device comprising a mobile communication device, smart phone, a computer or other computing device.

Abstract: A method for controlling an information processing system that includes a client device including a plurality of sensors that acquire positional information of the client device and a server device that transmits data to the client device includes causing the server device to specify a positioning requirement corresponding to positional information of the client device based on association information associating a distance between the client device and a location in which the server device transmits the data to the client device located with each of the sensors, and causing the client device to select a sensor based on the positioning requirement specified by the server device among the sensors.

Abstract: A remote access system for processing local data with a computing algorithm stores information on various computing algorithms available via the system. A remote user at a user system selects an algorithm, which is then encrypted and downloaded to the user system. The downloaded algorithm is decrypted and stored in host memory in a controlled manner. Alternatively, the selected algorithm may be offered through cloud processing, in which case the user uploads local data for cloud processing. In this case, the system manages the cloud processing at remote providers and tracks heuristic, caching, and performance. In either case, the local data is processed with input parameters from the user, and visual results are provided to the user along with a cost for storing final results of the processing. Once the user makes the required payment, the final results can be stored locally at the user system.

Abstract: An example method to monitor online activity involves comparing first uniform resource locators collected from a first client device of a known panelist with second uniform resource locators collected from second client devices associated with different users; and determining which of the second uniform resource locators correspond to online activity of the known panelist based on ones of the first uniform resource locators matching at least portions of ones of the second uniform resource locators.

Abstract: Measuring with a system having retroreflector targets and a laser tracker includes storing a list of coordinates for three targets and at least one added point; capturing on a photosensitive array a portion of the light emitted by a light beam and reflected off the targets; obtaining spot positions on a photosensitive array of a tracker camera from the reflected light; determining a correspondence between three spot positions on the photosensitive array and the coordinates of the targets; directing a beam of light from the tracker to the targets based at least in part on the coordinates of the first target and the first spot position; measuring 3-D coordinates of the targets with the tracker; determining 3-D coordinates of the at least one added point based at least in part on the measured 3-D coordinates of the targets and the coordinates of the at least one added point.

Abstract: A method and apparatus for transmitting encryption keys in a secure communication system is provided herein. During rekeying of a device, a key encryption key (KEK) is utilized to wrap (encrypt) the traffic encryption key (TEK) when the KEK is available to the device. If unavailable, the TEK will be wrapped using public key encryption with the recipient device's public key. The receiving device will then be able to unwrap the TEK using public key decryption with its own private key. Because TEKs are always transmitted in a secure manner, secure and efficient rekeying of devices on foreign networks can occur.

Abstract: A system, method, and device comprising a virtual badge are disclosed. A virtual badge can be displayed on a cell phone or in another linked portable device, and for security purposes, has images which can be scanned, and the capability to alternate colors and/or self-destruct on a pre-set schedule. Whether for after a disaster or for daily use, the system uses cell phones or mobile devices loaded with specialized software. Using plugin technologies, the system optionally can enable field collected photos and notes on customizable forms to be mapped, tracked, and time/date stamped—including in a 100% disconnected environment. A modifiable virtual badge can aid in inventory, accountability, organization, and efficiency. The system can be employed by the “Whole Community”—citizens, businesses, not-for-profits, and government agencies—for social media, business, cleanup, insurance adjusters, or personnel focused on day to day operations or on mitigation, preparedness, response, and recovery.

Abstract: Techniques are presented for seamless engagement and disengagement of Transport Layer Security proxy services. A first initial message of a handshaking procedure for a first secure communication session between a first device and a second device is intercepted at a proxy device. The first initial message of the handshaking procedure is saved at the proxy device. A second initial message of a second handshaking procedure for a second secure communication session between the proxy device and the second device is sent from the proxy device to the second device. It is determined from the second handshaking procedure that inspection of the first secure communication session is not to be performed by the proxy device. The first secure communication session is established without examination of the communication traffic by the proxy device.

Abstract: Disclosed are various embodiments for reducing input processing latency for remotely executed applications. An application is executed in a hosted environment, and a video signal generated by the application is encoded into a media stream. The media stream is sent to a client by way of a network. Unprocessed user input data for the application is obtained from the client computing device by way of the network. The unprocessed user input data is processed at a first processing rate that is above a second processing rate associated with a normal processing of the unprocessed user input data in the client.

Abstract: Methods are disclosed for identity key management in networked application execution. In one embodiment, an identifier request is transmitted from a client system to a server system, in which an identity key value in the identifier request is blank. Upon detecting the blank identity key value at the server system, the server system operates to generate a new identity key value and an identifier for the new identity key value. The new identity key value and the identifier for the new identity key value are transmitted from the server system to the client system. The new identity key value is stored in a local store of the client system. The local store of the client system is secured by a passcode and persists data through power cycling of the client system. The identifier is used to track execution of a networked application in an anonymous execution mode.

Abstract: An approach is provided for performing multiple and hybrid forms of communication in the same communication session. A communication manager receives a to establish a communication session using a first form of communication, wherein the communication session supports multiple and simultaneous forms of communication. Next, the communication manager selects a second form of communication to conduct the communication session. Then, the communication manager transcodes the second form of communication to the first form of communication. The different forms can be converted to facilitate and enrich the communication capability, according to an embodiment of the invention.

Abstract: Systems and methods are provided for securely sharing data. A processor forms two or more shares of a data set encrypted with a symmetric key, the data set associated with a first user device, and causes the encrypted data set shares to be stored separately from each other in at least one remote storage location. The processor generates first and second encrypted keys by encrypting data indicative of the symmetric key with a first asymmetric key of first and second asymmetric key pairs associated with the first user device and a second user device, respectively, and causes the encrypted key to be stored in the at least one storage location. To restore the data set, a predetermined number of the two or more encrypted data set shares and at least one of the second asymmetric keys of the first and second asymmetric key pairs are needed.

Abstract: Disclosed are methods and systems for providing cloud services to personal computing devices that store large personal files such as personal videos and personal photographs in a lossless format. The methods and systems include a cloud server that synchronizes large personal files in a lossless format between first and second local computing devices. The cloud server may also store the personal large files in a lossy format on the cloud server. The lossy file can be used to facilitate syncing of the lossless file between a first and second local computing device. The lossy file stored on the cloud can also be provided to a third local computing device having limited capabilities (e.g., a mobile device with a limited internet connection or limited screen resolution).