Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising a memory configured to store an encryption key and a list of access tokens and at least one processing core configured to select a first access token from the list of access tokens based, at least partly, on at least one of a current time and a sequence number, decide, based at least partly on the first access token, whether to grant a user device access to the apparatus, and cause the apparatus to receive a second list of access tokens from at least one of the user device and a second user device.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to compile, from information comprised in a message received in the apparatus, a protection bit sequence, the protection bit sequence comprising a first part and a second part, identify a sender of the message based on identifying a secret key that decrypts the first part into a plaintext bit sequence comprised in the message, and verify the protection bit sequence has been advanced with respect to a protection bit sequence in a previous message from the same sender.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising at least one processing core configured to obtain, from a timestamp, a truncated timestamp comprising a first number of least significant bits of the timestamp and not comprising at least one most significant bit of the timestamp, to derive a hash value based at least in part on the timestamp, a payload and a secret value, and to compile a first message comprising the truncated timestamp, the payload and, at least in part, the hash value, and a transmitter configured to be directed by the at least one processing core, to transmit the first message toward a recipient.

Abstract: This specification relates to a method and apparatus for receiving user tracking data from a user tracking system, the user tracking data comprising at least one tracking parameter relating to a user position; determining whether one or more tracking parameters are missing; in response to determining that one or more tracking parameters are missing, sending a request to a server for a prediction model for estimating the one or more missing tracking parameters; receiving the prediction model from the server; and calculating an estimated position in respect of each of the one or more missing tracking parameters based on the received prediction model.

Abstract: This specification relates to a method and apparatus for receiving user tracking data from a user tracking system, the user tracking data comprising at least one tracking parameter relating to a user position; determining whether one or more tracking parameters are missing; in response to determining that one or more tracking parameters are missing, sending a request to a server for a prediction model for estimating the one or more missing tracking parameters; receiving the prediction model from the server; and calculating an estimated position in respect of each of the one or more missing tracking parameters based on the received prediction model.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to compile, from information comprised in a message received in the apparatus, a protection bit sequence, the protection bit sequence comprising a first part and a second part, identify a sender of the message based on identifying a secret key that decrypts the first part into a plaintext bit sequence comprised in the message, and verify the protection bit sequence has been advanced with respect to a protection bit sequence in a previous message from the same sender.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising a memory configured to store an encryption key and a list of access tokens and at least one processing core configured to select a first access token from the list of access tokens based, at least partly, on at least one of a current time and a sequence number, decide, based at least partly on the first access token, whether to grant a user device access to the apparatus, and cause the apparatus to receive a second list of access tokens from at least one of the user device and a second user device.

Abstract: According to an example aspect of the present invention, there is provided an apparatus comprising at least one processing core configured to obtain, from a timestamp, a truncated timestamp comprising a first number of least significant bits of the timestamp and not comprising at least one most significant bit of the timestamp, to derive a hash value based at least in part on the timestamp, a payload and a secret value, and to compile a first message comprising the truncated timestamp, the payload and, at least in part, the hash value, and a transmitter configured to be directed by the at least one processing core, to transmit the first message toward a recipient.

Abstract: An approach is provided for a data application interface with improved security. The approach further involves processing a request for access to user data items to determine one or more associated domains and/or one or more access rules associated with the user data items. In one embodiment, the access rules specify criteria for determining one or more authorized domains and/or one or more users that have access rights to the user data items. The approach also involves determining whether to grant the access to the user data items based, at least in part, on a comparison of the determined domains against the criteria and/or access rules.

Abstract: An approach is provided for managing processes for enabling execution of applications within a user device. One or more characteristics of an application are determined by a process monitor module. A process management module then determines a process of the device for execution the application based, at least in part, on the one or more characteristics. A process allocation policy is executed for enabling process allocation decisions.

Abstract: An approach is provided for using scripts to utilize a service. A request specifying one or more tasks of the service with respect to a target object is received. One or more scripts are determined for performing the one or more tasks. It is determined to initiate the one or more scripts to use, at least in part, information associated with the target object to perform the one or more tasks.

Abstract: An approach is provided for expedited service integration using action plugin templates. Context information and a target object are determined. A plugin based on a template configured for a service provider is received. A plugin action is determined using the target object and context information. Execution of the plugin on the target object is initiated to perform the plugin action.