Abstract: A method at a computing device for enabling access to a credential vault if a master password for the credential vault is lost, the method including selecting at least one credential from within the credential vault; encrypting one of the master password or a vault key for the credential vault with the selected at least one credential, thereby creating a recovery file; and storing the recovery file, wherein the selected at least one credential can be used to decrypt the recovery file to enable access to the credential vault.

Abstract: Systems and methods for monitoring data input are disclosed. A dataset entered into a non-password field is received. Based on the dataset meeting one or more criteria for a likely password, a determination as to whether the dataset is inadvertently entered into the non-password field is made. Based on determining that the dataset is inadvertently entered into the non-password field, further processing of the dataset is inhibited.

Abstract: The present disclosure describes methods and systems, including computer-implemented methods, computer program products, and computer systems, for distributing recovery keys. One method includes: transmitting, from a first user device to a secure community server, a key distribution request, wherein the key distribution request identifies a second user device, and the first user device and the second user device are members of a same secure community managed by the secure community server; transmitting a first portion of a recovery key to secure community server for forwarding to the second user device; transmitting a second portion of the recovery key to the secure community server; and discarding the first portion and the second portion of the recovery key at the first user device.

Abstract: Systems and methods for maintaining encryption keys are disclosed. An encrypted master key is determined by encrypting a master key based on an initial user password and discarding the master key. The encrypted master key is stored. A request for the master key including a present user password is received and verified based on comparison to the initial user password. Based on failure of verifying the present user password, a failed attempt counter that is maintained within a secure container is created. User password based access to the master key is locked out based on the failed attempt counter exceeding a defined value.

Abstract: Systems and methods for managing a condition of a vehicle based on initial image data. The initial image data depicts an initial condition of a physical component of the vehicle. The system includes an image sensor and an environment sensor. The system includes processor-executable instructions to detect, via the environment sensor, an environment condition corresponding to a potential vehicle damaging event. In response to detecting the environment condition, the system generates, via the image sensor, just-in-time image data of the physical component of the vehicle. The system compares the just-in-time image data and the initial image data to identify a vehicle condition change. In response to identifying a vehicle condition change, the system transmits, to a computing device, the just-in-time image data.

Abstract: Systems and methods for tracking users within a facility. The facility includes two or more zones and each facility zone is associated with a respective acoustic device. The system includes a communication module, a processor, and memory storing processor executable instructions. The instructions, when executed, cause the processor to: receive a first acoustic input from a first acoustic device associated with a first zone and determine that the first acoustic input is associated with a first user. The instructions, when executed, further cause the processor to associate the first acoustic input with the first user. Using contextual data of the first user, the instructions, when executed, further cause the processor to confirm the association of the first acoustic input with the first user and associate a location of the first user with the first zone.

Abstract: Methods and systems for performing garbage collection involving sensitive information on a mobile device are described herein. Secure information is received at a mobile device over a wireless network. The sensitive information is extracted from the secure information. A software program operating on the mobile device uses an object to access the sensitive information. Secure garbage collection is performed upon the object after the object becomes unreachable.

Abstract: A method of providing private information on a display of an electronic device, includes identifying private information for display on the display of the electronic device, identifying attributes for display of the private information, displaying the private information utilizing the attributes identified, and during displaying the private information utilizing the attributes identified, displaying additional information utilizing alternate attributes that differ from the attributes identified for the private information.

Abstract: A method of authenticating access on an electronic device. A digital image overlaid by an array of alphanumeric characters is displayed on a three-dimensional display of the electronic device. The digital image includes a three-dimensional representation of a scene and is displayed in three-dimensional coordinates. The array of alphanumeric characters is positioned on the three-dimensional display with respect to the digital image in three dimensions in response to received input. Access to the electronic device is authenticated in response to detecting that a designated character in the digital image is aligned with a designated object in the digital image.

Abstract: Methods and systems to mitigate headlight blinding during travel in a vehicle by relaying location data from vehicles to a remote server. The remote server identifies vehicles approaching each other on an otherwise unoccupied roadway and sends one or more of those vehicles a warning signal. The vehicle receiving such as warning signal may then automatically take a headlight mitigation action.

Abstract: Methods and systems for mitigating irritants during travel in a vehicle. The method includes determining, at a remote server, an airborne irritant is present external to the vehicle, which may involve data from the vehicle or from other nearby vehicles. The data may be direct irritant measurements by sensors or may be indirect data indicative of possible irritants. Based on the determination that the airborne irritant is likely present external to the vehicle, an irritant mitigation action is caused within the vehicle. The irritant mitigation action may include displaying a notification signaling presence of the airborne irritant, outputting an audio notification signaling presence of the airborne irritant, closing a window of the vehicle, or closing an air vent of the vehicle.

Abstract: Systems and methods for establishing a data connection between a mobile device and a peripheral. The mobile device is configured to determine whether to handle user approval of the data connection between the mobile device and the peripheral. Through the mobile device, an input mechanism is provided for the user to provide input. The input is used in determining whether to approve the data connection between the mobile device and the peripheral.

Abstract: Vehicle management system in a vehicle and method of operating the same. The vehicle includes an operator zone and a passenger zone. The system includes processor-executable instructions to disable a vehicle lock actuator to prevent locking of a vehicle door where unsafe vehicle conditions may be detected. The system is configured to detect that the operator zone is unoccupied and determine that the passenger zone is occupied while the operator zone is unoccupied to identify that the vehicle is in a non-driver occupied mode. The system receives a vehicle lock request signal and, in response to receiving the vehicle lock request signal while the vehicle is in the non-driver occupied mode, disables the vehicle lock actuator to prevent locking of a vehicle door.

Abstract: A secure cabinet that can secure and distribute products. The cabinet can have a user interface that receives information about a user and the user's identity can then be authenticated. The cabinet can accept a user's request to dispense a product and, if the user is approved, the cabinet can dispense a quantity of product to the approved user.

Abstract: A system and method for a privacy mode are disclosed. A trusted execution environment and general operating system that has restricted access to the trusted execution environment are maintained on a processor. A privacy mode command indicating either one of a first value and a second value is received. A peripheral control interface, which is communicatively coupled to the trusted execution environment and otherwise communicatively isolated from the general operating system, is disabled when the privacy mode enable indicator has the first value and is enabled when the privacy mode enable indicator has the second value. An associated peripheral is disabled from providing signals to processing circuits when the peripheral control interface is in the disabled state and enabled to provide signals to processing circuits when the peripheral control interface is in the enabled state.

Abstract: This disclosure relates to management of privileges associated with applications accessible by users of electronic devices. In one aspect, an electronic device detects that a privilege has been revoked, shuts down any application running on the electronic device that has previously accessed the privilege, and restarts any application that was shut down, the restarted application no longer having any access to the revoked privilege. In another aspect, an electronic device keeps a log of which applications have previously accessed which privileges, receives a new set of privileges associated with applications, determines that a privilege has been revoked, and if the log indicates that an application previously accessed the privilege, resets the electronic device.

Abstract: A method at an electronic device having at least one slot to receive a removable security module, the method including detecting coupling of the security module to the electronic device; sending a challenge to the security module; receiving a response from the security module; checking whether the response is valid at the electronic device; and providing a signal based on results of the checking, wherein only a defined number of security modules are configured to provide a valid response per slot or for each security module type at the electronic device. Further, a method for preventing functionality on an electronic device, the method including replacing a valid security module coupled to the electronic device with a dummy security module; detecting uncoupling of the dummy security module; and providing an alert.

Abstract: Devices and methods of access control are provided. A device includes a processor, an input interface coupled to the processor, and a memory coupled to the processor. The device may be configured to receive a first input via a first input interface and determine whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data. Based on the determination, if the first input includes valid authentication data, allow access. If the first input includes invalid authentication data, disallow access. If the first input includes duress authentication data, allow access when a second input received via a second input interface includes valid second authentication data. Example inputs include iris scan input, retinal scan input, fingerprint scan input, handprint input, palm print input, facial recognition input, alphanumeric input, touchscreen gesture input, breathalyzer sample input, facial or hand gesture input, or voice input, among others.

Abstract: A method of encrypting information on an electronic device includes displaying information associated with an application running on the electronic device, receiving, via the application running on the electronic device, an input to initiate an encrypted camera application that is separate from the application running on the electronic device, initiating the encrypted camera application, determining an identity profile having an associated key, receiving an input from the encrypted camera application to collect image data with the camera, receiving image data from an image sensor of the camera, encrypting the image data utilizing the key associated with the determined identity profile to generate encrypted image data, adding the encrypted image data to a document associated with the application running on the electronic device.

Abstract: This disclosure relates to management of privileges associated with applications accessible by users of electronic devices. In one aspect, an electronic device detects that a privilege has been revoked, shuts down any application running on the electronic device that has previously accessed the privilege, and restarts any application that was shut down, the restarted application no longer having any access to the revoked privilege. In another aspect, an electronic device keeps a log of which applications have previously accessed which privileges, receives a new set of privileges associated with applications, determines that a privilege has been revoked, and if the log indicates that an application previously accessed the privilege, resets the electronic device.