Abstract: A method for aligning an input interface (240) of a touchscreen (230) with an overlay (210) for the touchscreen (230) is provided. The method comprises receiving a touch input on the touchscreen (230), wherein the touch input identifies a first position on the touchscreen (230) corresponding to an alignment mark (220) of the overlay; determining, based on the received touch input, a region of the touchscreen (230) in which to render the input interface (240); and rendering the input interface (240) in the determined region of the touchscreen (230).

Abstract: Disclosed are compounds of the formula (I) and pharmaceutically acceptable salts thereof: wherein R1, R2, R4, R5, R6, R7, R8, R9, R10, Z, X1, X2, X3, L2, HET, n and q are as defined herein. The compounds are inhibitors of adrenomedullin receptor subtype 2 (AM2). Also disclosed are the compounds for use in the treatment of diseases modulated AM2, including proliferative diseases such as cancer; pharmaceutical compositions comprising the compounds; methods for preparing the compounds; and intermediates useful in the preparation of the compounds.

Abstract: Disclosed are compounds of the formula (I) and pharmaceutically acceptable salts thereof: (I) wherein R1, R2, R3, R4, R5, R6, R8, R9, X, X1, X2, X3, L1 and n are as defined herein. The compounds are inhibitors of adrenomedullin receptor subtype 2 (AM2). Also disclosed are the compounds for use in the treatment of diseases modulated AM2, including proliferative diseases such as cancer; pharmaceutical compositions comprising the compounds; methods for preparing the compounds; and intermediates useful in the preparation of the compounds.

Abstract: Cluster groups define a relationship between clusters in an HCI system. New cluster groups may be created, and a cluster may be added or removed from an existing cluster group. A method and system are disclosed to support a dynamically scaled hyperconverged system with non-overlapping and overlapping cluster groups. A dynamically scalable hyperconverged system may allow for piece-wise upgrades while supporting inter-operable and non-interoperable components having a secure intercommunication capability. A system is disclosed for scaling a single managed hyperconverged infrastructure (HCI) where all components are allowed to run a compatible communication protocol (e.g., interoperable communication protocol) but are not required to operate an interoperable software version.

Abstract: Disclosed are compounds of the formula (I) and pharmaceutically acceptable salts thereof: wherein HET, R1, R2, R3, R4, R5, L, L1, X1, X2, X3 and q are as defined herein. The compounds are inhibitors of adrenomedullin receptor subtype 2 (AM2). Also disclosed are the compounds for use in the treatment of diseases modulated AM2, including proliferative diseases such as cancer; pharmaceutical compositions comprising the compounds; methods for preparing the compounds; and intermediates useful in the preparation of the compounds.

Abstract: Disclosed are compounds of the formula (I) and pharmaceutically acceptable salts thereof: (I) wherein R1, R2, R3, R4, R5, R6, R8, R9, X, X1, X2, X3, L1 and n are as defined herein. The compounds are inhibitors of adrenomedullin receptor subtype 2 (AM2). Also disclosed are the compounds for use in the treatment of diseases modulated AM2, including proliferative diseases such as cancer; pharmaceutical compositions comprising the compounds; methods for preparing the compounds; and intermediates useful in the preparation of the compounds.

Abstract: Cluster groups define a relationship between clusters in an HCI system. New cluster groups may be created, and a cluster may be added or removed from an existing cluster group. A method and system are disclosed to support a dynamically scaled hyperconverged system with non-overlapping and overlapping cluster groups. A dynamically scalable hyperconverged system may allow for piece-wise upgrades while supporting inter-operable and non-interoperable components having a secure intercommunication capability. A system is disclosed for scaling a single managed hyperconverged infrastructure (HCI) where all components are allowed to run a compatible communication protocol (e.g., interoperable communication protocol) but are not required to operate an interoperable software version.

Abstract: A method and system for use in distributing token records is disclosed. At least one token record comprises a unique seed associated with a one-time password (OTP) token. An encryption key and a corresponding decryption key are generated for assisting selective encryption and decryption of a token record associated with a OTP token. The encryption key and the decryption key being unique to an end user of the token record. The token record is encrypted with the assistance of the encryption key. One of the decryption key and the encrypted token record is provided to the end user of the token record. The other of the decryption key and the encrypted token record is provided to the end user in response to secure receipt of the one of the decryption key and the encrypted token record by the end user. The encrypted token record can be decrypted with the assistance of the decryption key.

Abstract: Improved techniques involve selecting a set of authentication factors from among multiple factors based on a current situation and information about how well the multiple authentication factors have worked in similar situations in the past. Along these lines, when an authentication system performs an authentication operation on a requesting party, the authentication system first assesses a situational environment. Based on the assessment of the situational environment, the authentication system decides that it is necessary to re-authenticate the requesting party. In some arrangements, the authentication system may determine which set of factors has the highest likelihood of successfully verifying the user's identity when compared with other authentication factors. The authentication system then carries out an authentication operation on the selected set of factors and bases a successful authentication result on whether the selected set of factors can be verified.

Abstract: A technique provides access control on a mobile device (e.g., a smart phone, a tablet, etc.). The technique involves displaying an image on a touch screen of the mobile device. The technique further involves, while the image is displayed on the touch screen, receiving user input from a user. The user input includes user gestures applied to the touch screen over the displayed image. The technique further involves performing an access control operation which provides an access control result based on the user input, the access control result (i) providing access to a set of protected resources when the user input matches expected input and (ii) denying access to the set of protected resources when the user input does not match the expected input.

Abstract: An authentication system comprises a plurality of servers storing respective shares of a private key, and a controller associated with the servers. The authentication system is configured to receive a message comprising a password encrypted using a public key corresponding to the private key. The controller directs performance of distributed password-based authentication in the authentication system based at least in part on the encrypted password utilizing the shares of the private key stored in the respective servers. The message is formatted in a manner consistent with an authentication protocol that normally utilizes public key signatures as a mechanism for authentication but is modified to support password-based authentication. For example, the message may be formatted in a manner consistent with a request message of a Kerberos PKINIT protocol extension.

Abstract: A technique provisions a mobile device (e.g., a smart phone, a tablet, a personal digital assistant, etc.) with a security application on the fly. The technique involves providing, by processing circuitry of the mobile device, an initial access request to an enterprise gateway which is operated by an enterprise. The technique further involves receiving, by the processing circuitry, an enterprise response message from the enterprise gateway in response to the initial access request. The enterprise response message denies access to a set of enterprise resources of the enterprise. The technique further involves automatically prompting, by the processing circuitry, the mobile device to install a mobile security application from an application server in response to the enterprise response message denying access to the set of enterprise resources of the enterprise.

Abstract: Method and system for distributing token records in market environment is disclosed. At least one token record comprising a unique seed associated with a OTP token. Encryption key and decryption key are generated for assisting selective encryption and decryption of token record associated with OTP token. The token record is encrypted with the assistance of encryption key. One of encrypted token record and decryption key is provided into market environment. A device comprising an identifier for facilitating identification of token record associated with OTP token is provided into market environment together with the one of encrypted token record and decryption key. The identifier concealed by tamper-evident removable material such that any effort to reveal identifier will be readily apparent. The other of the encrypted token record and decryption key is provided to an entity in response to entity providing identifier.

Abstract: A technique provides user authentication using a smart device (e.g., a smart phone, a tablet, etc.). The technique involves displaying, by processing circuitry of a smart device, a password prompt on a touch screen of the smart device. The password prompt includes a motion video of touch screen gestures to prompt a user of the smart device to enter a gesture password. The technique further involves receiving, by the processing circuitry, a trial gesture password entered by the user via the touch screen. The trial gesture password includes a user-entered sequence of touch screen gestures. The technique further involves performing, by the processing circuitry, multiple gesture password confirmation operations to verify that the user is able to re-enter the trial gesture password via the touch screen over time to authenticate the user to the smart device.

Abstract: A technique provides access control. The technique involves prompting a user to enter color-shape pairings, and receiving multiple color-shape pairings from the user. Each color-shape pairing includes (i) a color selection from multiple selectable colors and (ii) a shape selection from multiple selectable shapes. The technique further involves generating an access control result based on the received multiple color-shape pairings, the access control result controlling access to a set of protected resources. For example, color segments can be displayed on a touch screen in the form of a color wheel, and multiple shapes can be rendered within each color segment. Alternatively, (i) a color palette including the multiple selectable colors and (ii) a shape menu including the multiple selectable shapes can be rendered on the touch screen to prompt the user to provide drag and drop gestures over the touch screen. Other configurations are suitable for use as well.

Abstract: A technique performs authentication before delivering a token to a client device. The technique involves receiving a first message from a first application on the client device, the first message including a token request and a first set of authentication factors. The technique further involves receiving a second message from a second application on the client device, the second message including an authentication request and a second set of authentication factors. The technique further involves generating a result message which (i) provides access to a token for use by the client device when the first set of authentication factors is consistent with the second set of authentication factors, and (ii) rejects the token request when the first set of authentication factors is inconsistent with the second set of authentication factors. The client device may be a mobile device, and the first and second messages may be received via wireless communications.

Abstract: A password hardening system is arranged between one or more clients and a domain controller or other authentication entity. The password hardening system comprises a plurality of servers configured to store in a distributed manner respective shares of at least one of a hardened surrogate password and a corresponding user password. The password hardening system is configured to intercept a first set of one or more communications based at least in part on the user password and directed to an authentication entity external to the password hardening system, and to provide to the authentication entity in place of at least a portion of the intercepted first set of one or more communications a second set of one or more communications based at least in part on the hardened surrogate password. The password hardening system may be configured to serve as a proxy between an authenticating client and the authentication entity.

Abstract: In a software-as-a-service system, a federated relationship is established between a first tenant subsystem (host) and a user account on a second tenant subsystem (guest), the federated relationship including visibility controls in the host specifying resources made accessible to an authorized user of the user account. When a guest user accesses the host, an authentication is performed that includes requesting and receiving from the guest a security assertion that the user has been authenticated by the guest as the authorized user. Each tenant subsystem includes mechanisms for authenticating its own users for access control; the cross-tenancy authentication extends this operation to make and accept authentication assertions from other tenants. A second risk-based authentication may be performed for additional confidence, typically based on comparing circumstances for the present access to circumstances for past accesses.

Abstract: A segmentation method comprises clustering spatial, intensity and volumetric shape index to automatically segment a medical lesion. The algorithm has the following steps: (1) calculating volumetric shape index (SI) for each voxel in the image; (2) combining the SI features with the intensity range and the spatial position (x, y, z) to form a 5-dimensional feature vector set; (3) grouping the 5-dimensional feature vector set into clusters; (4) employing a modified expectation-maximization algorithm (EM) considering not only spatial but also shape features on an intensity mode map from the clustering algorithm to merge the neighbouring regions or modes. The joint spatial-intensity-shape feature provides rich information for the segmentation of the anatomic structures of interest, such as lesions or tumours.

Abstract: An authorization device is configured to authorize access to a resource. The authorization device receives an authorization request to authorize a client device to perform an operation on the resource associated with a data system and compare an access characteristic associated with the resource with a policy associated with the resource. The authorization device generates a first message when a result of the comparison indicates that the client device is authorized to perform the operation on the resource and generates a second message when a result of the comparison indicates that the client device is unauthorized to perform the operation on the resource.