Abstract: A device and its operations are described herein. In some examples, the operations can include executing a first application within a first operating system domain of a device, the first application associated with at least a first activity view. The operations can further include detecting user input associated with the first application. The user input is associated with activating a second activity view of a second application. The operations can further include determining that the second application corresponds to a second operating system domain of the device. The operations can further include establishing a first proxy link within the first operating system domain that corresponds with a second proxy link within the second operating system domain. The first proxy link is associated with causing the second proxy link to invoke the second activity view of the second application within the second operating system domain.

Abstract: A method at a computing device having a plurality of concurrently operating domains for providing a unified home screen, the method sending a request for package information from a home screen application on the computing device; receiving the request for package information at a unified package manager on the computing device; requesting, from the plurality of concurrently operating domains, package information; receiving package information from at least one of the plurality of concurrently operating domains at the unified package manager on the computing device; decorating the received package information with domain information for a domain from which the package information was received at the unified package manager on the computing device; and providing the decorated package information to the home screen application.

Abstract: A method at a computing device having a plurality of concurrently operative operating systems, the method comprising: operating a proxy process within a target operating system on the computing device; receiving, from an originating operating system, a request for resources from a target process within the target operating system at the proxy process; requesting, from the proxy process, the resources of the target process; and returning a handle to the target process from the proxy process to the originating operating system.

Abstract: A mobile communications device may include a near field communications (NFC) device, an input device configured to generate a memory wipe command, a memory, and a memory controller coupled with the NFC device, the input device, and the memory. The memory controller may be capable of receiving secure data from a provisioning server to the memory, receiving wiping instruction data from the provisioning server to the memory for wiping the secure data from the memory, and wiping the secure data from the memory based upon the memory wipe command and the received wiping instruction data.

Abstract: In one example, a stitching point routing device, which stitches a previous segment of an end-to-end label-switched path (LSP) to a next segment of the end-to-end LSP, includes network interfaces configured to receive packets via the previous segment and send packets via the next segment, and one or more processors configured to determine whether the next segment supports entropy labels, determine whether a packet received from the previous segment is encapsulated by a label stack including an entropy label, when the next segment does not support entropy labels and when the packet is encapsulated by the label stack including the entropy label, remove the entropy label from the label stack, when the next segment supports entropy labels and when the packet is not encapsulated by the label stack including the entropy label, add an entropy label to the label stack, and forward the packet along the next segment.

Abstract: Often, for reasons of wireless bandwidth conservation, incomplete messages are provided to wireless messaging devices. Employing cryptography, for secrecy or authentication purposes, when including a received message that has been incompletely received can lead to lack of context on the receiver's end. By automatically obtaining the entirety of the message to be included, an outgoing message that includes the received message can be processed in a manner that securely and accurately represents the intended outgoing message. Alternatively, a server can assemble a composite message from a new message and an original message and, in cooperation with a wireless messaging device, sign the composite message. Since signing the composite message involves access to a private key, access to that private key is secured such that such access to the private key can only be arranged responsive to an explicit request for a hash that is to be signed using the private key.

Abstract: A communications system may include a provisioning terminal comprising a first near field communications (NFC) device, where the provisioning terminal is capable of communicating with a provisioning server. The system may further include a mobile communications device comprising a second NFC device, a processor capable of providing a mobile wallet interface, a memory, and a memory controller coupled with the second NFC device, the memory, and the processor. The memory controller may be capable of receiving an applet and associated mobile wallet interface data from the provisioning server via the provisioning terminal based upon NFC communication between the first NFC device and the second NFC device, storing the applet and the associated mobile wallet interface data in the memory, and sending the mobile wallet interface data from the memory to the processor for the mobile wallet interface.

Abstract: A mobile communications device may include a near field communications (NFC) device, an input device configured to generate a memory wipe command, a memory, and a memory controller coupled with the NFC device, the input device, and the memory. The memory controller may be configured to receive secure data from a provisioning server and store the secure data into the memory, receive wiping instruction data from the provisioning server and store the wiping instruction data into the memory for wiping the secure data from the memory, and wipe the secure data from the memory without an over-the-air (OTA) connection to the provisioning server based upon the memory wipe command and the wiping instruction data stored in the memory.

Abstract: In some aspects of what is described here, a first wireless device detects proximity of a second wireless device (e.g., by a Near Field Communication (NFC) interface or another type of interface). Based on detecting proximity of the second wireless device, the first wireless device generates a recommendation request from information received from the second wireless device. The first wireless device sends the recommendation request to a trusted authority and receives a response. The response includes the trusted authority's recommendation whether to trust the second wireless device. The first wireless device can determine whether to trust the second wireless device based on the recommendation.

Abstract: A trusted service manager (TSM) server may include at least one communications device capable of communicating with at least one application server, a verification database server, and at least one mobile communications device. The TSM server may further include a processor coupled with the at least one communications device and capable of registering the at least one application server with the verification database server, receiving a request from the at least one application server to access the memory of the mobile communications device, cooperating with the verification database server to verify the at least one application server based upon the access request and based upon registering of the at least one application server, and writing application data from the at least one application server to the memory of the at least one mobile communications device based upon verifying the at least one application server.

Abstract: A network router dynamically reconfigures representations of forwarding structures used within a forwarding unit of the router. The forwarding structures comprise a plurality of forwarding next hops associated with the routes and stored in a first representation within the forwarding unit. The router further comprises a control unit having a processor to install the forwarding structures within the forwarding unit. In response to input directing the router to change from a first operating mode to a second operating mode, the control unit installs, within the forwarding unit, one or more new forwarding next hops that are associated with none of the routes by the forwarding structures and are stored in a second representation within the forwarding unit that is different from the first representation and, after installing the new forwarding next hop, updates the forwarding structures to associate at least one of the routes to the new forwarding next hop.

Abstract: Techniques are described for providing a-priori information about the implication of a network device operator interaction with a network device, e.g., a software configuration or hardware change, to be performed on the network device before the interaction actually takes place. The network device operator is provided with information that may be used to make a decision whether to proceed with the interaction. For each logically distinct feature of a network device, the techniques generate a trigger outcome domain (TOD). Each TOD is defined to include a list of operator interactions that defines relevant events in the network device that may be triggerable by the operator interactions, a list of potential outcomes in the network based on the potential events in the network device, and a user interface to display the list of potential outcomes for the operator interactions prior to performing any of the interactions.

Abstract: A mobile communications device may include a near field communication (NFC) device, and a processor coupled with the NFC device. The processor may be configured to operate a first NFC applet and a second NFC applet, determine whether concurrent enabling of the first NFC applet and the second NFC applet will cause a compatibility conflict, and concurrently enable the first NFC applet and the second NFC applet for communicating data via the NFC device based upon a determination that concurrent enabling of the first NFC applet and the second NFC applet will not cause the compatibility conflict.

Abstract: Often, for reasons of wireless bandwidth conservation, incomplete messages are provided to wireless messaging devices. Employing cryptography, for confidentiality or authentication purposes, when including a received message that has been incompletely received can lead to lack of context on the receiver's end. By automatically obtaining the entirety of the message to be included, an outgoing message that includes the received message can be processed in a manner that securely and accurately represents the intended outgoing message. Alternatively, a server can assemble a composite message from a new message and an original message and, in cooperation with a wireless messaging device, construct a cryptographic message syntax message.

Abstract: A method and system for managing, from a communication device, a secure element for contactless transactions such as mobile payment applications. The communication device includes a memory for storing one or more device applications. The method includes determining that an application stored on the secure element does not have an association with any of the device applications, and in response to the determining, sending a communication to a server to delete the application from the secure element.

Abstract: Rather than storing all data in the same manner, e.g., an encrypted manner, a security level with which to associate received data of a given type may be determined. Subsequently, distinct types of data may be stored in a distinct manner, with the manner of storage having a security level appropriate to the type of data. For example, a first type of data may be stored in an encrypted manner (i.e., with a high level of security), while a second level of data may be stored in a plain text manner (i.e., with a low level of security).

Abstract: A mobile communications device may include a memory, a transceiver, and a controller coupled with the memory and the transceiver. The controller may be capable of receiving first authentication data from a security token via communication with the security token, where the first authentication data is associated with an account. The controller may also be capable of transmitting the first authentication data via the transceiver, and receiving second authentication data via the transceiver, where the second authentication data is also associated with the account. The controller may be further capable of storing the second authentication data in the memory, and transmitting a transaction request using the second authentication data.

Abstract: A mobile wireless communications device may communicate with a terminal including a first NFC device, the terminal being capable of receiving data from a provisioning server. The mobile wireless communications device may include a housing, a wireless transceiver carried by the housing, a second NFC device carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing and coupled to the wireless transceiver, the second NFC device, the memory, and the display. The processor may be configured to implement a digital wallet including user cards, receive from the terminal, via the second NEC device, a blank user card including user data fields, and fill the user data fields of the blank user card to define a completed user card and send the completed user card to the provisioning server.

Abstract: A mobile wireless communications device may include a housing, a wireless transceiver carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing. The processor may be configured to implement a digital wallet including a multi-mode user card having first and second user interface modes, and selectively change the multi-mode user card from the first user interface mode to the second user interface mode based upon a current location, a current time, or a determined event. The second user interface mode may include one or more of a mapping interface mode, a survey interface mode, or a purchase interface mode.

Abstract: A reader element is associated with an identity verification element. The reader element has a biometric input device and is configured, through enrollment of a biometric element is used to encrypt a character sequence associated with the identity verification element. In a verification phase subsequent to the enrollment, a user may be spared a step of providing the character sequence by, instead, providing the biometric element. Responsive to receiving the biometric element, the reader element may decrypt the character sequence and provide the character sequence to the identity verification element.