Abstract: A system, apparatus, method, and machine readable medium are described for authenticating a client to a device.

Abstract: A system, apparatus, method, and machine readable medium are described for authenticating a client to a device.

Abstract: A system, apparatus, method, and machine readable medium are described for biometric device attestation. For example, one embodiment of an apparatus includes: a biometric device to read biometric authentication data from a user and determine whether to successfully authenticate the user based on a comparison with biometric reference data; and a cryptographic engine to establish communication with a relying party and to attest to the model and/or integrity of the biometric device to the relying party.

Abstract: A system, apparatus, method, and machine readable medium are described for authorizing a new authenticator with a relying party. For example, one embodiment of a method comprises: identifying a plurality of relying parties with which an old authenticator is registered; generating at least one key for each of the plurality of relying parties; authenticating with each of the relying parties using a client having the old authenticator configured thereon, the client authorizing the new authenticator by providing an authorization object to each relying party comprising the at least one key, data identifying the new authenticator, and cryptographic data to be used by the relying party to verify the authorization object; and wherein, in response to verifying the authorization object, each relying party registers the new authenticator.

Abstract: A system, apparatus, method, and machine readable medium are described for non-intrusive privacy-preserving authentication.

Abstract: A system, apparatus, method, and machine readable medium are described for determining the authentication capabilities. For example, one embodiment of a method comprises: receiving a policy identifying a set of acceptable authentication capabilities; determining a set of client authentication capabilities; and filtering the set of acceptable authentication capabilities based on the determined set of client authentication capabilities to arrive at a filtered set of one or more authentication capabilities for authenticating a user of the client.

Abstract: A system, apparatus, method, and machine readable medium are described for determining the authentication capabilities. For example, one embodiment of a method comprises: receiving a policy identifying a set of acceptable authentication capabilities; determining a set of client authentication capabilities; and filtering the set of acceptable authentication capabilities based on the determined set of client authentication capabilities to arrive at a filtered set of one or more authentication capabilities for authenticating a user of the client.

Abstract: A system, apparatus, method, and machine readable medium are described for implementing privacy classes within an authentication framework. For example, one embodiment of a method comprises: transmitting a query for client information from a server to a client, the client information including information related to authentication devices coupled to the client; analyzing the query to determine an appropriate privacy class to be used for providing client information to the server; providing a subset of client information selected based on the determined privacy class, the subset of client information including the information related to the authentication devices coupled to the client; and using the subset of client information within an authentication framework to provide user authentication services over a network.

Abstract: A system, apparatus, method, and machine readable medium are described for implementing a composite authenticator. For example, an apparatus in accordance with one embodiment comprises: an authenticator for authenticating a user of the apparatus with a relying party, the authenticator comprising a plurality of authentication components; and component authentication logic to attest to the model and/or integrity of at least one authentication component to one or more of the other authentication components prior to allowing the authentication components to form the authenticator.

Abstract: A system, apparatus, method, and machine readable medium are described for non-intrusive privacy-preserving authentication.

Abstract: A system, apparatus, method, and machine readable medium are described for performing advanced authentication techniques and associated applications. For example, one embodiment of a method comprises: receiving a policy identifying a set of acceptable authentication capabilities; determining a set of client authentication capabilities; and filtering the set of acceptable authentication capabilities based on the determined set of client authentication capabilities to arrive at a filtered set of one or more authentication capabilities for authenticating a user of the client.

Abstract: A system, apparatus, method, and machine readable medium are described for performing eye tracking during authentication. For example, one embodiment of a method comprises: receiving a request to authenticate a user; presenting one or more screen layouts to the user; capturing a sequence of images which include the user's eyes as the one or more screen layouts are displayed; and (a) performing eye movement detection across the sequence of images to identify a correlation between motion of the user's eyes as the one or more screen layouts are presented and an expected motion of the user's eyes as the one or more screen layouts are presented and/or (b) measuring the eye's pupil size to identify a correlation between the effective light intensity of the screen and its effect on the user's eye pupil size.

Abstract: A system, apparatus, method, and machine readable medium are described for adaptive authentication. For example, one embodiment of an apparatus comprises: an adaptive authentication module to receive a client request to perform a transaction which requires authentication; a risk engine to analyze first data related to a client to determine a risk value associated with the client; an assurance level gain analysis module to determine an assurance level required for allowing the client to complete the transaction and to determine an assurance level gain required to arrive at the assurance level based on the risk value; the adaptive authentication module to select one or more authentication techniques based at least in part on the indication of the assurance level gain.

Abstract: A system, apparatus, method, and machine readable medium are described for determining the authentication capabilities. For example, one embodiment of a method comprises: receiving a policy identifying a set of acceptable authentication capabilities; determining a set of client authentication capabilities; and filtering the set of acceptable authentication capabilities based on the determined set of client authentication capabilities to arrive at a filtered set of one or more authentication capabilities for authenticating a user of the client.

Abstract: A system, apparatus, method, and machine readable medium are described for implementing privacy classes within an authentication framework. For example, one embodiment of a method comprises: transmitting a query for client information from a server to a client, the client information including information related to authentication devices coupled to the client; analyzing the query to determine an appropriate privacy class to be used for providing client information to the server; providing a subset of client information selected based on the determined privacy class, the subset of client information including the information related to the authentication devices coupled to the client; and using the subset of client information within an authentication framework to provide user authentication services over a network.

Abstract: A system and method for generating and storing a large number of public key certificates that enables a revocation status to be determined while providing a smaller amount of storage than is typically required.

Abstract: Sifting arrangement for sifting a product stream. The sifting arrangement includes a zigzag sifter having at least one access opening and a sifting chamber that is divided into at least two compartments. The zigzag sifter is substantially vertically oriented. This Abstract is not intended to define the invention disclosed in the specification, nor intended to limit the scope of the invention in any way.

Abstract: The distributor of a cigarette rod making machine employs a zig-zag sifter which receives a mixture of tobacco ribs and shreds from a reservoir by way of a duct or an elevator conveyor. The shreds leave the uppermost stage of the sifter and are conveyed, by a Coanda separator, into an upright gathering duct which discharges shreds for delivery onto the concave surface(s) of one or more guides serving to direct one or more streams of shreds against the underside(s) of one or more foraminous belt conveyors which advance the stream(s) past one or more trimming devices serving to remove the surplus and to thus convert each stream into a rod-like filler which is ready to be draped into a web of cigarette paper. The removed surplus is returned into the reservoir or directly into the zig-zag sifter.

Abstract: A shower of tobacco particles is fed into the upper end of a downwardly sloping and downwardly tapering funnel-shaped part of a conveyor wherein the particles gather into a flow of interlaced particles. Successive increments of the flow are acted upon by one or more jets of air issuing from at least one nozzle which loosens successive foremost increments of the flow prior to admission into a tobacco filler rod forming unit in a cigarette rod making machine.

Abstract: The distributor of a cigarette rod making machine employs a zig-zag sifter which receives a mixture of tobacco ribs and shreds from a reservoir by way of a duct or an elevator conveyor. The shreds leave the uppermost stage of the sifter and are conveyed, by a Coanda separator, into an upright gathering duct which discharges shreds for delivery onto the concave surface(s) of one or more guides serving to direct one or more streams of shreds against the underside(s) of one or more foraminous belt conveyors which advance the stream(s) past one or more trimming devices serving to remove the surplus and to thus convert each stream into a rod-like filler which is ready to be draped into a web of cigarette paper. The removed surplus is returned into the reservoir or directly into the zig-zag sifter.