Abstract: An intention detection mechanism detects a target user accessing an operational context and accesses sensor data collected by a plurality of sensors encoding signals describing one or more characteristics of the target user and surroundings of the target user. The intention detection mechanism converts the accessed sensor data into a multi-channel sensor data time series, where each channel represents a characteristic of the target user. The intention detection mechanism compares the sensor data time series to a multi-channel intentionality template to determine whether the sensor data time series contains the multi-channel intentionality template. The multi-channel intentionality template describes characteristics indicative of an intent of a target user accessing the operational context. If the sensor data time series contains the multi-channel intentionality template, the intention detection mechanism communicates a signal confirming that the target user intended to access to the operational context.

Abstract: An intention detection mechanism detects a target user accessing an operational context and accesses sensor data collected by a plurality of sensors encoding signals describing one or more characteristics of the target user and surroundings of the target user. The intention detection mechanism converts the accessed sensor data into a multi-channel sensor data time series, where each channel represents a characteristic of the target user. The intention detection mechanism compares the sensor data time series to a multi-channel intentionality template to determine whether the sensor data time series contains the multi-channel intentionality template. The multi-channel intentionality template describes characteristics indicative of an intent of a target user accessing the operational context. If the sensor data time series contains the multi-channel intentionality template, the intention detection mechanism communicates a signal confirming that the target user intended to access to the operational context.

Abstract: A distributed identity server cluster maintains a first communication channel between an endpoint device in a first geographic region and a first server. The first server receives a request from the endpoint device to communicate with an application containing a digital key for accessing the endpoint device and stored at an authentication device located in a second geographic region. The server cluster transmits a notification to the application with instructions for the authentication device to connect to the server cluster. The server cluster opens a second communication channel between the authentication device and a second server in communication with the first server. The server cluster transmits data between the endpoint device and the authentication device across the first communication channel and the second communication channel.

Abstract: An identity verification system is disclosed for identifying a user based on the classification of user characteristic data. The identity verification system receives a request for access to an operational context that comprises authentication credentials representing an identity of a requesting target user. The system authenticates the identity of the requesting target user by determining an identity confidence value describing a likelihood that an identity of the requesting target user matches the identity represented by the authentication credentials. The system determines a proximity of the requesting target user to the operational context by determining a distance between a location of the requesting computing device and a location of an authenticating computing device operated by the requesting target user. The system grants the request from the requesting target user for access to the operational context if the requesting target user is within a threshold proximity of the operational context.

Abstract: An identity verification system determines a communication channel that transmits signals between the computer system and an authentication device by selecting a data link circuit at the computer system. The identity verification system transmits an authentication request received at the computer system to the authentication device via the communication channel and the authentication device validates the authentication request. In response to the authentication device validating the authentication request, the identity verification system measures a proximity of the authentication device to the computer system based on data transmitted through a proximity channel. If the measured proximity of the authentication device satisfies a threshold proximity, the user verification system grants grant the target user access to the to the computer system.

Abstract: An intention detection mechanism detects a target user accessing an operational context and accesses sensor data collected by a plurality of sensors encoding signals describing one or more characteristics of the target user and surroundings of the target user. The intention detection mechanism converts the accessed sensor data into a multi-channel sensor data time series, where each channel represents a characteristic of the target user. The intention detection mechanism compares the sensor data time series to a multi-channel intentionality template to determine whether the sensor data time series contains the multi-channel intentionality template. The multi-channel intentionality template describes characteristics indicative of an intent of a target user accessing the operational context. If the sensor data time series contains the multi-channel intentionality template, the intention detection mechanism communicates a signal confirming that the target user intended to access to the operational context.

Abstract: When a system configuration is deployed, the recipe used, the results of the deployment, and/or the results of any qualification tests performed may be anchored to a distributed ledger. Periodically, the system configuration may be audited by verifying the recipe against the anchored version. The results of such audits may also be anchored to the distributed ledger. Thus, what is anchored to the distributed ledger represents a cryptographically verifiable history of the configuration of the system. Consequently, the system configuration at any time can be proven by comparing historical configuration information maintained by the owner of the system to the distributed ledger.

Abstract: When a system configuration is deployed, the recipe used, the results of the deployment, and/or the results of any qualification tests performed may be anchored to a distributed ledger. Periodically, the system configuration may be audited by verifying the recipe against the anchored version. The results of such audits may also be anchored to the distributed ledger. Thus, what is anchored to the distributed ledger represents a cryptographically verifiable history of the configuration of the system. Consequently, the system configuration at any time can be proven by comparing historical configuration information maintained by the owner of the system to the distributed ledger.

Abstract: An application shim receives transactions that will update a portion of data stored in an existing data store. A reduced representation of the pre-update portion of data is generated and compared to an existing reduced representation of the same portion of data to verify that the data has not been tampered with. An updated reduced representation is generated based on the post-update portion of data. The updated reduced representation is added to a distributed ledger such as a block chain. Further verification of non-tampering may be provided by comparing the reduced representation stored by the system and the one appended to the blockchain. If a discrepancy is identified, appropriate corrective action may be taken, such as blocking further transactions, notifying responsible entities, and/or restoring the data from a backup.