Abstract: A method of provisioning a subordinate trusted security zone in a processor having a trusted security zone. The method comprises receiving by a master trusted application executing in a master trusted security zone of the processor a request to provision a subordinate trusted security zone in the processor, wherein the request comprises a master trusted security zone key, wherein the request designates the subordinate trusted security zone, and wherein the request defines an independent key. The method further comprises provisioning by the master trusted application the subordinate trusted security zone to be accessible based on the independent key.

Abstract: A method of extending trust from a trusted processor to a graphics processing unit to expand trusted processing in an electronic device comprises inserting a trusted kernel into the graphics processing unit, monitoring the activity level of the graphics processing unit, suspending graphics processing on at least a portion of the graphics processing unit, repurposing a portion of the graphics processing unit to perform trusted processing, and releasing the portion of the graphics processing unit from trusted processing.

Abstract: Embodiments of the disclosure relate generally to methods and systems for transmitting and displaying digital ticket documentation. A mobile communication device may comprise one or more keys that are specific for the device, wherein the keys are stored in a trusted security zone on the mobile device. In some embodiments, the keys may be associated with a specific ticket provider. The keys may be used to processes one or more datasets received from a ticket provider, wherein processing the dataset(s) may generate a digital ticket. The ticket may be generated and stored in the trusted security zone of the mobile device. The mobile device may be operable to present the ticket via the user interface of the mobile device and/or a near field communication transceiver of the mobile device.

Abstract: Embodiments relate generally to methods and systems for creating and using a watermark for verification of operation in a trusted security zone of a mobile device. The watermark may be created or chosen by a user and may be unique to the user. The watermark may be stored in a trusted security zone of the mobile device and may not be accessible from any other area of the mobile device. The watermark may comprise one or more of an image, an audio file, a video, a shape, a signature, a word, a phrase, or a number. The watermark may be verified by a user before operation of a secure application executed in the trusted security zone of the mobile device, and the watermark may also be present throughout the use of a secure application.

Abstract: An electronic device.

Abstract: A method of trusted data communication. The method comprises executing a data communication application in a trusted security zone of a processor, wherein the processor is a component of a computer, commanding a controller of a peripheral device to execute a control application in a trusted security zone of the controller, wherein the controller is a component of the computer, commanding at least one of another peripheral device or a user interface device to not access a data bus of the computer, verifying that the controller is executing the control application in the trusted security zone of the controller, sending data from the processor to the controller over the data bus of the computer, and the controller one of transmitting the data sent by the processor on an external communication link, reading a memory storage disk, or writing to a memory storage disk.

Abstract: A method is provided for markers to implement augmented reality. An image is captured of an environment. A plurality of markers is detected in the image of the environment. A virtual image is displayed overlaid on the image of the environment, wherein the virtual image is based on a combination of the plurality of markers.

Abstract: Embodiments relate generally to systems and methods for providing access to a trusted security zone container within a trusted security zone of a mobile device. An application may receive trusted service manager validation data from a trusted service manager. The application may also receive a trusted security zone master key, wherein the trusted security zone master key provides access to a plurality of trusted security zone containers within the trusted security zone. The application may hash the trusted service manager validation data with the trusted security zone master key. The application may generate the trusted security zone sub key based on hashing to access one or more containers. One or more signal may be transmitted to provision the set of one or more trusted security zone containers with the trusted security zone sub key. The application may provide the sub key to the trusted service manager to access a container.

Abstract: Embodiments relate generally to systems and methods for generating and using user specific keys to execute one or more secure application in a trusted security zone of a mobile device. The user specific keys may be used in place of a trusted security zone master key and may be generated based on the trusted security zone master key. The trusted security zone master key and the user specific keys may be stored in the trusted security zone. A trusted security zone key may be used to verify the identity of a user and/or mobile device when executing in the trusted security zone. It may be tied to a particular user and may be known by a trusted service manager in communication with the mobile device.

Abstract: A method of configuring a trusted security zone into a portable electronic device. The method comprises executing instructions on a processor of the portable electronic device that determine the state of a JTAG (JTAG) port of the portable electronic device, if the JTAG port is determined to be enabled, executing instructions on the processor preventing configuration of the trusted security zone into the portable electronic device, and if the JTAG port is determined to be disabled, configuring the trusted security zone into the portable electronic device, whereby a vulnerability to hacking the trusted security zone via an enabled JTAG port is reduced.

Abstract: A system is provided. The system comprises a processor, a memory coupled to the processor, and an application stored in the memory. When executed by the processor, the application receives a plurality of first messages from a first plurality of handsets, each of the first messages indicating that one of the first plurality of handsets has installed a first ID, wherein the first ID is associated with a first ID provider, receives a second message from the first ID provider, the second message indicating that new content associated with the first ID is available, and in response to the second message, transmits a plurality of third messages, each of the third messages directed to one of the first plurality of handsets, indicating that new content associated with the first ID is available.

Abstract: A system is provided. The system comprises an at least one computer system, a services database, and an application that, when executed on the at least one computer system, receives a message containing information about a digital image, the information containing a request for a service. The application also transmits an image translation request, wherein the image translation request includes the information. The application also receives a translation containing a service code, validates the services to be provided associated with the service code based on information in the services database, and when validation succeeds, provides a communication service, wherein digital images are associated with the provision of services based on information in the services database.

Abstract: A method for a mobile device to conduct a transaction with an unattended point-of-transaction device is disclosed. The method comprises transmitting to the unattended point-of-transaction device, via near field communication (NFC), information indicating that the transaction is being initiated; receiving from the unattended point-of-transaction device, via NFC, credentials indicating that the unattended point-of-transaction device is authorized to engage in the transaction; and transmitting to the unattended point-of-transaction device, via NFC, secure information indicating to the unattended point-of-transaction device that the mobile communication device is authorized to conduct the transaction. The secure information may be a PIN entered into the mobile device or a data record specifying an action to be performed by the unattended point-of-transaction device.

Abstract: Methods, systems, and computer-readable media are provided for a processing an application-authentication request originating from a mobile device. In particular, an application-authentication request comprises user information that is analyzed by an authentication server. The authentication server generates a call to a subscription profile server to validate the user information as belonging to a user profile that is in good standing. In response to determining that the application-authentication request is valid, the authentication server generates an authentication cookie that is provided to the mobile device. Accordingly, the authentication cookie is used by the mobile device to access applications, such as premium services.

Abstract: A method of downloading trusted content. The method comprises sending by a mobile device a request for a trusted content to a server, wherein the mobile device comprises a first mobile device trusted security zone and builds the request while executing in the first mobile device trusted security zone and wherein the server comprises a server trusted security zone and wherein the server handles the request for the trusted content at least partly in the server trusted security zone. The method comprises receiving the trusted content by the first mobile device trusted security zone, storing the trusted content in a second mobile device trusted security zone of the mobile device, inspecting the trusted content in the second mobile device trusted security zone, and when the trusted content passes inspection, at least one of executing or presenting a portion of the trusted content by the first mobile device trusted security zone.

Abstract: A system is provided for dynamic display based on estimated viewers. The system includes a sensor, a server, and a dynamic display. The sensor senses traffic in an environment. The server estimates a number of potential viewers based on sensing the traffic, selects content based on the number, and communicates the content. The dynamic display receives the content and displays the content for the potential viewers.

Abstract: A method of performing a trusted dynamic host configuration protocol (DHCPT). The method comprises receiving a trusted dynamic host configuration protocol request message, wherein the request message was created in and transmitted from a trusted security zone of a computing device, and wherein the request message requests an internet protocol (IP) address and routing information for the computing device, allocating an internet protocol address and determining routing information for the computing device, wherein the allocating and determining are performed by a dynamic host configuration protocol server while executing in a trusted security zone of the server, and transmitting the internet protocol address and routing information to the computing device over a trusted end-to-end communication link.

Abstract: A computer implemented method is provided for display adaptation based on captured image feedback. Content that comprises a marker is displayed. An image of the content is captured by a mobile device. Whether the marker in the image is recognized is determined. The marker in the image is analyzed in response to a determination that the marker in the image is not recognized. The content is adjusted based on the analyzed marker. The adjusted content is displayed. The marker in the image is analyzed to determine at least one of a time and a location associated with capturing the image of the content in response to a determination that the marker in the image is recognized. Another content is displayed based on at least one of the time and the location determined by analyzing the marker.

Abstract: Subject matter described herein relates to providing to a mobile device a version of content (e.g., music, video, text message, live call, etc.) that is consistent with a user's filter setting. That is, a user is allowed to specify content elements (e.g., words or images) that are proscribed from being presented on the mobile device, and the user's preferences are stored by a mobile telecommunications network. When the network receives content to be provided to the mobile device, the network edits the content in real time to prevent proscribed elements from being presented on the mobile device.

Abstract: A mobile communication device provisioning and management system is provided. The system comprises a computer system and an application, that when executed on the computer system, receives instructions for provisioning a set of mobile communication devices, the instructions comprising a range of unique identifiers and user roles associated with the set. The system also receives a first message from a first mobile communication device, the first message containing a request for provisioning, a first unique identifier, a first user role, and a first user identifier. The system also matches the first unique identifier embedded in the first message with a unique identifier contained in the instructions. The system also matches the user role received in the first message with a user role specified in the instructions and sends a second message to the first mobile communication device, the second message containing provisioning information.