Abstract: A technique for detecting unauthorized copies of a soft token that runs on a mobile device includes generating a set of random bits on the mobile device and providing samples of the set of random bits, as well as token codes from the soft token, for delivery to a server during authentication requests. The server acquires the set of random bits of the mobile device, or learns the set of random bits over the course of multiple login attempts. Thereafter, the server predicts values of the samples of the set of random bits and tests actual samples arriving in connection with subsequent authentication requests. Mismatches between predicted samples and received samples indicate discrepancies between the random bits of the device providing the samples and the random bits of the mobile device, and thus indicate unauthorized soft token copies.

Abstract: An improved technique provides scheduled data transfer between a mobile device and a server. The mobile device combines token codes generated by a soft token with sequences of auxiliary bits and displays the combinations to users as passcodes. Users may then copy the passcodes to their computers for authenticating to a server on a remote network. As the passcodes include both token codes and sequences of auxiliary bits, a communication channel is established whereby the auxiliary bits as well as the soft token codes are transmitted from the mobile device to the server.

Abstract: An improved technique for assessing the security status of a device on which a soft token is run collects device posture information from the device running the soft token and initiates transmission of the device posture information to a server to be used in assessing whether the device has been subjected to malicious activity. The device posture information may relate to the software status, hardware status, and/or environmental context of the device. In some examples, the device posture information is transmitted to the server directly. In other examples, the device posture information is transmitted to the server via auxiliary bits embedded in passcodes displayed to the user, which the user may read and transfer to the server as part of authentication requests. The server may apply the device posture information in a number of areas, including, for example, authentication management, risk assessment, and/or security analytics.

Abstract: There is described an indicia reading terminal that can be operative to process a frame of image data for attempting to decode a decodable indicia. A frame can be a frame that is among a succession of frames for subjecting to processing subsequent to and during a time a trigger signal is active. Such a succession of frames can include zero or more binned frames, zero or more unbinned frames, zero or more windowed frames, and zero or more unwindowed full frames. An indicia reading terminal can also include a variable focus imaging lens.

Abstract: An RFID enabled mobile device is configured to provide a secure release of RFID information. The RFID enabled mobile device, such as an RFID enabled cellular telephone, includes a set of sensors, such as a camera, one or more accelerometers, a wireless transceiver configured to send and receive data with an Internet device, and a global positioning system (GPS) receiver. The RFID enabled mobile device utilizes sensor attributes or information from one or more sensor of the set of sensors and, based upon the sensor attributes, controls the release of RFID information and/or other authentication data to an RFID interrogation system. In essence, the RFID enabled mobile device leverages from the conventional sensors typically incorporated as part of the mobile device and uses contextual data from its sensors and communication partners to make security decisions regarding the release of RFID information.

Abstract: A method by which a computer system authenticates a user is provided. The method includes (a) displaying a plurality of unique elements to a user on a display device, (b) receiving a set of points corresponding to a sweeping motion performed by the user with respect to the display device, (c) determining a pair of unique elements of the plurality of unique elements defined by endpoints of the sweeping motion, and (d) authenticating the user only if the pair of unique elements is associated for authentication purposes with the user. An apparatus and computer program product for performing the method are also provided.

Abstract: A proof of retrievability (POR) mechanism is applicable to a file for providing assurances of file possession to a requesting client by transmitting only a portion of the entire file. The client compares or examines validation values returned from predetermined validation segments of the file with previously computed validation attributes for assessing the existence of the file. Since the archive server does not have access to the validation function prior to the request, or challenge, from the client, the archive server cannot anticipate the validation values expected from the validation function. Further, since the validation segments from which the validation attributes, and hence the validation values were derived, are also unknown to the server, the server cannot anticipate which portions of the file will be employed for validation.

Abstract: Embodiments of the present invention comprise an image engine constructed as an IC structure that has one or more active regions for illuminating, imaging, and decoding a decodable indicia. In one embodiment of the image engine, the IC structure can comprise an imaging region, an aiming region, and an illumination region, all disposed on a single, contiguous substrate. The resultant constructed embodiment can fit within a form factor, wherein the form factor is less than about 500 mm3.

Abstract: There is described an indicia reading terminal that can be operative to process a frame of image data for attempting to decode a decodable indicia. A frame can be a frame that is among a succession of frames for subjecting to processing subsequent to and during a time a trigger signal is active. Such a succession of frames can include zero or more binned frames, zero or more unbinned frames, zero or more windowed frames, and zero or more unwindowed full frames. An indicia reading terminal can also include a variable focus imaging lens.

Abstract: A client device or other processing device separates a file into blocks and distributes the blocks across multiple servers for storage. In one aspect, subsets of the blocks are allocated to respective primary servers, a code of a first type is applied to the subsets of the blocks to expand the subsets by generating one or more additional blocks for each subset, and the expanded subsets of the blocks are stored on the respective primary servers. A code of a second type is applied to groups of blocks each including one block from each of the expanded subsets to expand the groups by generating one or more additional blocks for each group, and the one or more additional blocks for each expanded group are stored on respective secondary servers. The first and second codes are advantageously configured to provide security against an adversary that is able to corrupt all of the servers over multiple periods of time but fewer than all of the servers within any particular one of the periods of time.

Abstract: Embodiments of the present invention comprise an image engine constructed as an IC structure that has one or more active regions for illuminating, imaging, and decoding a decodable indicia. In one embodiment of the image engine, the IC structure can comprise an imaging region, an aiming region, and an illumination region, all disposed on a single, contiguous substrate. The resultant constructed embodiment can fit within a form factor, wherein the form factor is less than about 500 mm3.

Abstract: There is described an indicia reading terminal that can be operative to process a frame of image data for attempting to decode a decodable indicia. A frame can be a frame that is among a succession of frames for subjecting to processing subsequent to and during a time a trigger signal is active. Such a succession of frames can include zero or more binned frames, zero or more unbinned frames, zero or more windowed frames, and zero or more unwindowed full frames. An indicia reading terminal can also include a variable focus imaging lens. Control of the variable focus imaging lens can be provided so that during an exposure period for a binned frame the variable focus imaging lens is set to a short range focus setting and further so that during an exposure period for a windowed frame the variable focus imaging lens is set to a long range focus setting.

Abstract: An exterior rearview mirror assembly for a motor vehicle includes a housing defining an interior and including a mirror opening oriented rearward when the exterior rearview mirror assembly is secured to the motor vehicle. A backing plate is operatively connected to the housing in the interior. The backing plate is selectively moveable within the housing. A primary mirror is fixedly secured to a first portion of the backing plate. A secondary mirror is fixedly secured to a second portion of the backing plate. The secondary mirror is spaced apart from the primary mirror. An adhesive member extends between the backing plate and the primary and secondary mirrors such that the single adhesive member secures all of the primary and secondary mirrors to the backing plate. A demarcation divider separates the primary and secondary mirrors. The demarcation divider is secured to the backing plate.

Abstract: An exterior rearview mirror assembly for a motor vehicle includes a housing defining an interior and including a mirror opening oriented rearward when the exterior rearview mirror assembly is secured to the motor vehicle. A backing plate is operatively connected to the housing in the interior. The backing plate is selectively moveable within the housing. A primary mirror is fixedly secured to a first portion of the backing plate. A secondary mirror is fixedly secured to a second portion of the backing plate. The secondary mirror is spaced apart from the primary mirror. An adhesive member extends between the backing plate and the primary and secondary mirrors such that the single adhesive member secures all of the primary and secondary mirrors to the backing plate. A demarcation divider separates the primary and secondary mirrors. The demarcation divider is secured to the backing plate.

Abstract: There is described an indicia reading terminal that can be operative to process a frame of image data for attempting to decode a decodable indicia. A frame can be a frame that is among a succession of frames for subjecting to processing subsequent to and during a time a trigger signal is active. Such a succession of frames can include zero or more binned frames, zero or more unbinned frames, zero or more windowed frames, and zero or more unwindowed full frames. An indicia reading terminal can also include a variable focus imaging lens. Control of the variable focus imaging lens can be provided so that during an exposure period for a binned frame the variable focus imaging lens is set to a short range focus setting and further so that during an exposure period for a windowed frame the variable focus imaging lens is set to a long range focus setting.