Abstract: In some embodiments, techniques for data security may include encoding and decoding unreadably encoded data, such as data encrypted with a public key or tokenized. In some embodiments, techniques for data security may include distributing an encrypted private key. In some embodiments, unreadable data may be encrypted and/or decrypted using time-varying keys. In some embodiments, techniques for data security may include combining information and a policy, and encoding the combined information and policy, wherein encrypting the combined information and policy is performed using a public key, or via tokenization. In some embodiments, techniques for data security may include receiving data, wherein the data has been encoded, decoding the data, determining a first datum and a second datum, wherein the first datum and the second datum are associated with the decoded data, and determining a policy, wherein the policy is associated with the first datum.

Abstract: Methods and systems for using and providing trustworthy DNS resolutions are provided. A method for using trustworthy DNS resolutions may include obtaining a DNS resolution listing for a domain name and validating the listing's plausibility using a plausible range list. The method may also include selecting a DNS resolution from the DNS resolution listing based on a requested host associated with the domain name. The method may further include initiating a connection to the host using the selected DNS resolution. A method for providing trustworthy DNS resolutions may include obtaining a plurality of potential DNS resolutions for a domain name. The method may also include generating a DNS resolution listing for a domain name and providing the DNS resolution listing. A system may include a DNS resolution selection module and a connection module. Another system may include a DNS resolution inquiry module and a DNS resolution listing provision module.

Abstract: In some embodiments, a technique for logging an item encountered by a mobile device comprises automatically detecting an item in an uncontrolled environment, extracting an identity associated with the item, logging an encounter, wherein the encounter includes the identity, and deleting the encounter after a predetermined period of time has elapsed, wherein the encounter is not marked as relevant.

Abstract: Establishing trust according to historical usage of selected hardware involves providing a usage history for a selected client device; and extending trust to a selected user based on the user's usage history of the client device. The usage history is embodied as signed statements issued by a third party or an authentication server. The issued statement is stored either on the client device, or on an authentication server. The usage history is updated every time a user is authenticated from the selected client device. By combining the usage history with conventional user authentication, an enhanced trust level is readily established. The enhanced, hardware-based trust provided by logging on from a trusted client may eliminate the necessity of requiring secondary authentication for e-commerce and financial services transactions, and may also be used to facilitate password recovery and conflict resolution in the case of stolen passwords.

Abstract: Analyzing routing information to identify and intercept unauthorized, unwanted, and/or otherwise malicious communications is disclosed. In some embodiments, routing information associated with a message currently being processed is checked against corresponding information associated with a message from the same source that was processed previously. In some embodiments, a message processing system that handled and/or otherwise has access to routing information for both messages performs the check, such as a network messaging and/or access service provider with which the sender is associated, performs the check. If the routing information for the current message does not match the corresponding information observed in the previous message, responsive action is taken. Using routing information to determine whether a source of an infected message should be notified is disclosed.

Abstract: In some embodiments, techniques for computer security comprise preventing and/or mitigating identity theft such as phishing.

Abstract: In some embodiments, techniques comprise receiving a request for an allocation of a network address; determining a location; encoding the location within a response to the request for the allocation of the network address, wherein the response to the request for the allocation of the network address also includes the network address; and providing the response to the request for the allocation of the network address, wherein the response to the request for the allocation of the network address includes the encoded location and the encoded network address.

Abstract: Methods, systems, and techniques for reducing web page load time are provided. An exemplary method for reducing web page load time includes detecting, in a browser, a cursor in a region of a web page. The region surrounds a selectable item associated with a URL. The exemplary method includes determining whether the cursor is present in the region for a threshold period of time. The exemplary method further includes performing a speculative action when it is determined that the cursor has been present in the region for the threshold period of time, without modifying underlying code of a web page associated with the URL.

Abstract: Embodiments of the present invention include methods and systems for domain name system (DNS) pre-resolution. A method for DNS pre-resolution is provided. The method includes initiating a DNS lookup call for one or more sub-resource uniform resource locator (URL) hostnames associated with a referring URL prior to navigation to the referring URL, whereby a resolution result for at least one of the sub-resource URL hostnames is cached in a DNS cache in preparation for navigation to the sub-resource URLs. The method further includes learning relationship information including the sub-resource URLs associated with the referring URL for DNS pre-resolution. A system for DNS pre-resolution is also provided. The system includes a DNS pre-resolver, a navigation monitor and a relationship data store.

Abstract: In some embodiments, techniques for electronic messaging may include receiving an email message; receiving an interaction with a user interface relating to the email message; extracting an email address associated with the email message; determining that the email address matches an entry in a whitelist; and responsive to receiving the interaction with the user interface relating to the email message and to determining that the email address matches the entry in the whitelist, removing the entry from the whitelist.

Abstract: In some embodiments, a technique for providing location-based functionality comprises providing functionality, wherein the functionality uses information provided by a location-aware device.

Abstract: In some embodiments, a technique for logging an item encountered by a mobile device comprises automatically detecting an item in an uncontrolled environment, extracting an identity associated with the item, logging an encounter, wherein the encounter includes the identity, and deleting the encounter after a predetermined period of time has elapsed, wherein the encounter is not marked as relevant.

Abstract: A portable device is provided that carries account data. The account data may include a security code having a value that is time-varying. The value of the security code may be programmatically varied based on at least one of an algorithm or event. Authorization and use of the account may be sought from an authorization agent using the account data provided on the portable device.

Abstract: In some embodiments, techniques for computer security comprise preventing and/or mitigating identity theft such as phishing.

Abstract: A method of protecting connectivity in a network is provided. The method includes monitoring a client communication received from a client on the network, and determining, based on the monitoring, to buffer the client communication. Next, to avoid a flood block response from a node on the network, based on the determining the client communication is buffered, whereby the connectivity of the client is protected.

Abstract: A portable device is provided that carries account data. The account data may include a security code having a value that is time-varying. The value of the security code may be programmatically varied based on at least one of an algorithm or event. Authorization and use of the account may be sought from an authorization agent using the account data provided on the portable device.

Abstract: A connected computer may be operated as node by inspecting communications from other nodes that pass through that node. From the communications, two or more pointers may be determined for the given node. These pointers may include a first pointer identified by a default designation that links the given node to a first node in the network, and a second pointer to another node. The second pointer may be identified by a determination that a designated criteria has been satisfied after the given node is placed on the network.

Abstract: Systems and methods are provided whereby latency between a sending device and a receiving device during network communications is reduced by adaptively and dynamically acknowledging the reception of each of a determined number of packets that are transmitted by the sending device to the receiving device over the network. In one aspect, the receiving device adaptively and dynamically acknowledges the reception of each data packet as it is received from the sending device. In another aspect, the receiving device adaptively and dynamically acknowledges the reception of a group of at least two packets as the remaining data packets are received from the sending device.

Abstract: In some embodiments, techniques for secure data entry comprise presenting a data field in a spoof-resistant manner, receiving field data, and securing field data.

Abstract: This disclosure is directed to providing directional feedback to a user. For example, this disclosure describes techniques for determining at least one characteristic of a device in space. For example, a device may be configured to determine, using one or more sensors, one or more characteristics of the device in space. For example, the device may be configured to determine one or more of a direction, and/or geographical position of the device as pointed by a user in space. The device may compare one or more of the determined one or more characteristics of the device in space to a desired destination or path specified by the user, and provide the user with directional feedback if the determined one or more characteristics of the device in space are consistent with the desired destination or path.