Abstract: Wallets for cryptocurrencies and other digital currencies combine multiple digital currency accounts into a wallet and manage multiple other wallets. The accounts include accounts for different cryptocurrencies, different distributed finance accounts, different credit or debit cards, and different bank accounts. Multiple other wallets may be managed from a master wallet with more limited instances of the accounts, rules for authorization, wallet activation, location tracking, copying, and destruction rules under control of specific wallets managed ultimately by the master wallet. These capabilities fit in secure storage devices for cold hard storage of the master. Different wallet copies are distributed for other cold hard storage, hot hard storage, cold soft storage or hot soft storage instances of these children wallets.

Abstract: Systems and methods for advanced data and program protection are provided. Some embodiments extend the data-at-rest protection naturally provided by some self-encrypting drives in order to provide additional assurances to data-in-motion and data-in-use in the host computer to which the attached storage device is attached. In some embodiments, this protection is available even if only intermittently attached, and it requires no software to be installed on the host machines because the software run on the host is run in the host off the attached storage drive itself.

Abstract: Methods and systems for controlling pernicious lies in digital media are provided. A system server provides enforced moderated dialogue on the suspected lies in the form of a new type of private court. The system provides a way to identify and document lies, and gathering court participants. The system also provides a way of adjudicating the suspected lies through specific questions. Finally, the system provides a way of publishing verdicts. The system provides a method of incorporating Artificial Intelligence modules that can replace the specified human activities. One major advantage is that the present methods and systems are backed by science and history that provides an optimum, if nevertheless still imperfect, solution to the problem. It also provides a solution that can be near real time on the first appearance of an instance of lying deceit.

Abstract: Systems and methods for initial provisioning through shared Proofs of Knowledge (PoKs) and crowdsourced identification are provided. In some embodiments, a method of sharing a PoK between a first Relying Party (RP) server and a second RP server includes receiving, by the first RP server, a request from a client device by a user for sharing the PoK. The method also includes causing, by the first RP server, the PoK to be provided to the client device and receiving, by the second RP server, a request from the client device to use the shared PoK for authentication of the user. In this way, the user may be provided additional convenience by allowing the reuse of the shared PoK. Also, depending on the number of RP servers that accept the shared PoK, the user may also be provided a degree of crowdsourced identification.

Abstract: Systems and methods for encryption management for storage devices are disclosed. A method of operation of a storage device includes receiving a first request from a client device by a user for a first interaction and authenticating that the user is permitted for the first interaction with the storage device. The method includes receiving a second request for a second interaction with the storage device and performing advanced capabilities testing on the user based on the second interaction. Based on the advanced capabilities testing, the method includes permitting the user to complete the second interaction. In this way, additional safeguards may be provided to prevent the unintentional damage or destruction of data stored on the storage device. This may include testing that the user is in the right state of mind and/or ensuring that the user is aware of the consequences of the requested interaction with the storage device.

Abstract: Methods and devices for vehicular storage security are disclosed. In some embodiments, a method of operation of a storage device includes determining if there is at least one pending command. In response to determining that there is at least one pending command, the method includes configuring a next command of the at least one pending command, where configuring the next command includes determining if one or more other storage devices are a target of the next command. If one or more other storage devices are a target of the next command, the method includes determining if there are any remaining targets of the next command and delivering the pending command to a next target of the remaining targets. In this manner, complex storage systems may be kept secure.

Abstract: Embodiments described herein relate to a server computer operable to provide a proof of knowledge service. In some embodiments, the server computer includes processor(s) and memory containing instructions executable by the processor(s) such that the server computer is operable to authenticate a user on behalf of a relying party server. The server computer is further operable to obtain results of one or more tests from a client device of the user. The server computer is further operable to send one or more instructions to the relying party server in accordance with the results of the one or more tests, where the one or more instructions have been predefined by the user and define one or more actions to be taken by the relying party server in an event where the user does not pass the one or more tests.

Abstract: Systems and methods for advanced data and program protection are provided. Some embodiments extend the data-at-rest protection naturally provided by some self-encrypting drives in order to provide additional assurances to data-in-motion and data-in-use in the host computer to which the attached storage device is attached. In some embodiments, this protection is available even if only intermittently attached, and it requires no software to be installed on the host machines because the software run on the host is run in the host off the attached storage drive itself.

Abstract: Methods and devices for vehicular storage security are disclosed. In some embodiments, a method of operation of a storage device includes determining if there is at least one pending command. In response to determining that there is at least one pending command, the method includes configuring a next command of the at least one pending command, where configuring the next command includes determining if one or more other storage devices are a target of the next command. If one or more other storage devices are a target of the next command, the method includes determining if there are any remaining targets of the next command and delivering the pending command to a next target of the remaining targets. In this manner, complex storage systems may be kept secure.

Abstract: Systems and methods for attached digital storage devices are provided. In some embodiments, a method of operation of a storage device includes receiving a request from a client device by a user for an interaction with the storage device; performing advanced capabilities testing on the user based on the interaction; and based on the advanced capabilities testing, permitting the user to complete the interaction with the storage device. In this way, the utility of the storage device is increased in new ways.

Abstract: Embodiments described herein relate to a server computer operable to provide a proof of knowledge service. In some embodiments, the server computer includes processor(s) and memory containing instructions executable by the processor(s) such that the server computer is operable to authenticate a user on behalf of a relying party server. The server computer is further operable to obtain results of one or more tests from a client device of the user. The server computer is further operable to send one or more instructions to the relying party server in accordance with the results of the one or more tests, where the one or more instructions have been predefined by the user and define one or more actions to be taken by the relying party server in an event where the user does not pass the one or more tests.

Abstract: Systems and methods for initial provisioning through shared Proofs of Knowledge (PoKs) and crowdsourced identification are provided. In some embodiments, a method of sharing a PoK between a first Relying Party (RP) server and a second RP server includes receiving, by the first RP server, a request from a client device by a user for sharing the PoK. The method also includes causing, by the first RP server, the PoK to be provided to the client device and receiving, by the second RP server, a request from the client device to use the shared PoK for authentication of the user. In this way, the user may be provided additional convenience by allowing the reuse of the shared PoK. Also, depending on the number of RP servers that accept the shared PoK, the user may also be provided a degree of crowdsourced identification.

Abstract: Systems and methods for encryption management for storage devices are disclosed. A method of operation of a storage device includes receiving a first request from a client device by a user for a first interaction and authenticating that the user is permitted for the first interaction with the storage device. The method includes receiving a second request for a second interaction with the storage device and performing advanced capabilities testing on the user based on the second interaction. Based on the advanced capabilities testing, the method includes permitting the user to complete the second interaction. In this way, additional safeguards may be provided to prevent the unintentional damage or destruction of data stored on the storage device. This may include testing that the user is in the right state of mind and/or ensuring that the user is aware of the consequences of the requested interaction with the storage device.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.

Abstract: Systems and methods for a multiple password web service and management dashboard are provided. In some embodiments, a server computer providing a Proof of Knowledge (PoK) service includes one or more processors and memory containing instructions executable by the one or more processors. The server computer is thereby operable to receive an input from a client device attempting to authenticate with a Relying Party (RP) server. The server computer compares the input to each of multiple stored PoKs. In response to the input matching at least one of the stored PoKs, the server computer provides the client device access to the RP server. According to some embodiments, this enables a user to more easily remember a PoK while maintaining security and privacy.

Abstract: Embodiments described herein relate to securing the privacy of knowledge used to authenticate a user (i.e., Proof of Knowledge (PoK) test(s)). In some embodiments, a client device is operable to receive a first encryption key and encrypted test(s) from a PoK server. The client device also receives a second encryption key from a Relying Party (RP) server. The client device can decrypt the encrypted test(s) by using the first encryption key and the second encryption key to thereby render decrypted test(s). The client device is further operable to obtain answer(s) for the decrypted test(s), send a communication to the PoK server based on the answer(s), and receive a communication from the RP server that authorizes a user of the client device to access service(s) administered by the RP server.

Abstract: Antialiasing for picture passwords and other touch displays is disclosed. In some embodiments a client device for authenticating a user is operable to obtain a sequence of input actions for an image and obtain a partial hash from a Proof of Knowledge (PoK) server where the partial hash is part of a hash used for authentication of the user. The client device is also operable to calculate a hash for the sequence and determine if a part of the hash matches the partial hash. If the part of the hash matches the partial hash, the client device sends a communication to the PoK server to authenticate the user based on the hash for the sequence of the one or more input actions and obtain a response indicating whether the user is authenticated. In this way, sending some hashes to the proof of knowledge server may not be necessary, saving resources.

Abstract: A server provides a picture password proof of knowledge. The server includes a processor creating a user identifier when communicating with a relying party (RP) server, sending the identifier to the RP server, creating a login token in response to a user authentication request originating from a client browser (CB), sending a web address containing the login token to the RP server, receiving and authenticating actions from the CB regarding the proof of knowledge, generating and sending an authentication token to the CB responsive to the received and authenticated actions, receiving from the RP server a request for an identification token, the request including the authentication token, and generating and sending the identification token to the RP server to enable the user at the CB to be verified and logged-in to the RP server.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.