Abstract: An automatic file encryption method and device for automatically encrypting a file. A processor identifies a characteristic associated with likely sensitive content based on a usage pattern of encrypting files having the characteristic. Creation of a new file is detected and the newly-created file is analyzed to determine whether the file contains sensitive content based upon it having the characteristic. If the file is found to have the characteristic, then the file is automatically encrypted.

Abstract: As vehicles collect more data in autonomous or semi-autonomous operation, the collected data such as video, navigation and telemetry data, can containing personally identifiable information (PII). The PII may be governed by specific handling requirements or privacy policies. In order to comply with these requirements and policies a method, system and computer readable memory are provided for determining a location of a vehicle to enable determination of an enforcement policy associated with the location of the vehicle. The enforcement policy defines one or more PII objects that are to be filtered from the vehicle data. The PII objects contained within the vehicle data can then be filtered such that the PII objects are not identifiable. The filtered data can then be stored or transmitted to a remote location.

Abstract: A method for authorizing online sharing of content including a digital photograph or video, includes receiving, at an electronic device, the content, identifying an image of a person in the content, identifying authorization conditions associated with the person, identifying an image of an object or audio in the content, based on both the image of the person identified and the image of the object or audio identified, determining if the authorization conditions associated with the person are met, and in response to determining that the authorization conditions are met, providing online access to the digital photograph or video.

Abstract: A method includes displaying a user interface having selectable features on the touch-sensitive display, determining that the electronic device is in a one-handed mode, determining that at least one of the selectable features of the user interface is displayed in an inaccessible portion of the touch-sensitive display, displaying, in an accessible portion of the touch sensitive display, an additional selectable feature associated with the at least one of the selectable features displayed in the inaccessible portion, and in response to receiving a selection of the additional selectable feature, performing a function associated with the at least one of the selectable features.

Abstract: A method of applying information on the display of the electronic device includes displaying content elements associated with an application running on the electronic device on a display of the electronic device, receiving a selection of a content element associated with the application running on the electronic device, determining an identity profile having an associated key, encrypting information associated with the selected content element utilizing the key associated with the determined identity profile to generate encrypted information, displaying the encrypted information in the selected content element.

Abstract: Methods and systems to mitigate headlight blinding during travel in a vehicle by relaying location data from vehicles to a remote server. The remote server identifies vehicles approaching each other on an otherwise unoccupied roadway and sends one or more of those vehicles a warning signal. The vehicle receiving such as warning signal may then automatically take a headlight mitigation action.

Abstract: A method of managing access to protected file content is disclosed. The method includes: receiving a request to open a first file stored on the computing device; determining that the first file is a protected file; in response to determining that the first file is a protected file: identifying a first application that is suitable for opening the first file; determining that the first application is an unsecured application; and in response to determining that the first application is an unsecured application, locking the first application to prevent unauthorized access of application data of the first application in a locked state.

Abstract: A computer-implemented method of detecting clipboard listener applications that includes placing, by a clipboard listener-detector application, a content reference, such as a Uniform Resource Identifier (URI), on a device clipboard; receiving, by the clipboard listener-detector application, at least one request from one or more clipboard listener applications for data based on the content URI; identifying the one or more clipboard listener applications from which said at least one request was received; and outputting an identity of each of the one or more identified clipboard listener applications.

Abstract: Methods and devices are provided relating to taking an action in response to determining that a person who is present in the vicinity of the device, such as a smart speaker, is not authorized to be present. In an aspect, the electronic device receives the notification and a topic identifier associated with the notification. Information identifying persons located in the vicinity of the electronic device may be received. The device may then receive and/or determine information identifying at least one person located within the vicinity who is not authorized, based on the topic identifier, to be present in the vicinity when the notification is to be outputted. The device generates an output signal indicating receipt of the notification and that there is at least one person present in the vicinity who is not authorized to be present when the notification is to be outputted.

Abstract: Systems, methods, and software can be used to share content. In some aspect, a first user input for copying a content is received at a first application on a mobile device. A token that is associated with the content is generated. A Uniform Resource Identifier (URI) is sent from the first application to a clipboard application. A second user input for pasting the content is received at a second application on the mobile device. The token is received at the second application from the clipboard application. A request for the content is received from the second application. The request includes the token. Whether the second application is authorized to receive the content is determined at the first application. In response to determining that the second application is authorized to receive the content, the content is provided to the second application.

Abstract: A method, electronic device, and computer readable storage medium, for secure context-aware management of passwords stored in a password manager application in an electronic device. The password manager application prompts for entry of a password at a first user interface to unlock display of sensitive information in a second user interface. A first portion of the sensitive information is displayed in a prioritized list in the unlocked second user interface, with the second portion of the sensitive information remaining user inaccessible, only while the password manager application is in a certain password access context based on contextual information in the electronic device. The contextual information can be any combination of a current geolocation of the device, a current time, an identification of an access point in a vicinity of the device, and other contextual information.

Abstract: A system and method for protecting presented content text from unauthorized perception. A message comprising presentable data defining presentable content is received. A presence of a privacy indication token within the presentable data is determined. Based on determining the presence of the privacy indication token within the presentable data, a presentation privacy filter is applied to presentations of the presentable content.

Abstract: A method and system are provided for opportunistically initiating a multimedia call between two or more devices such as smart speakers at a time when users of the respective smart speakers are available to participate in a call. A server system receives an instruction from a first smart speaker associated with a first user to establish a real-time communication session with a second smart speaker. In response to that instruction, the server system monitors availability of both the first user and the second user at their respective smart speakers. On determining that both the first user and the second user are available at the same time, the server system initiates the real-time communication session between the first smart speaker and the second smart speaker.

Abstract: Methods and systems to restrict vehicle operations based on driver identity. Owners or administrators may impose restrictions on certain users of a vehicle. Certain drivers may be classed as restricted users that have associated limitations or restrictions on their use of vehicle features. The vehicle determines the identity of the driver. Based on that identity and/or the class with which the identity is associated, some features may be disabled and some features may be subject to limitation, such as mileage, speed, or location restrictions. Ongoing monitoring of limited features may result in detection of a violation that triggers one or more security actions.

Abstract: A method and system are provided for opportunistically initiating a multimedia call between two or more devices such as smart speakers at a time when users of the respective smart speakers are available to participate in a call. A server system receives an instruction from a first smart speaker associated with a first user to establish a real-time communication session with a second smart speaker. In response to that instruction, the server system monitors availability of both the first user and the second user at their respective smart speakers. On determining that both the first user and the second user are available at the same time, the server system initiates the real-time communication session between the first smart speaker and the second smart speaker.

Abstract: A method of providing private information from an electronic device, includes identifying private information for display on the display of the electronic device, determining if a private output connection is established, and, in response to determining that the private output connection is established, providing the private information via the private output connection.

Abstract: A method at a computing device for enabling access to a credential vault if a master password for the credential vault is lost, the method including selecting at least one credential from within the credential vault; encrypting one of the master password or a vault key for the credential vault with the selected at least one credential, thereby creating a recovery file; and storing the recovery file, wherein the selected at least one credential can be used to decrypt the recovery file to enable access to the credential vault.

Abstract: Systems and methods for monitoring data input are disclosed. A dataset entered into a non-password field is received. Based on the dataset meeting one or more criteria for a likely password, a determination as to whether the dataset is inadvertently entered into the non-password field is made. Based on determining that the dataset is inadvertently entered into the non-password field, further processing of the dataset is inhibited.

Abstract: The present disclosure describes methods and systems, including computer-implemented methods, computer program products, and computer systems, for distributing recovery keys. One method includes: transmitting, from a first user device to a secure community server, a key distribution request, wherein the key distribution request identifies a second user device, and the first user device and the second user device are members of a same secure community managed by the secure community server; transmitting a first portion of a recovery key to secure community server for forwarding to the second user device; transmitting a second portion of the recovery key to the secure community server; and discarding the first portion and the second portion of the recovery key at the first user device.

Abstract: Systems and methods for maintaining encryption keys are disclosed. An encrypted master key is determined by encrypting a master key based on an initial user password and discarding the master key. The encrypted master key is stored. A request for the master key including a present user password is received and verified based on comparison to the initial user password. Based on failure of verifying the present user password, a failed attempt counter that is maintained within a secure container is created. User password based access to the master key is locked out based on the failed attempt counter exceeding a defined value.