Abstract: In an example, there is disclosed a computing apparatus, having a computing resource; a bespoke sensor for measuring at least one parameter of usage of the computing resource; and one or more logic elements providing a trusted compute meter (TCM) agent to: receive an external workload; provision a workload enclave; execute the external workload within the TCM enclave; and measure resource usage of the external workload via the bespoke sensor. There is also disclosed a computer-readable medium having stored thereon executable instructions for providing a TCM agent, and a method of providing a TCM agent.

Abstract: In an example, there is disclosed a computing apparatus, including a processor, including a trusted execution instruction set; a memory having an enclave portion, wherein the enclave is accessible only via the trusted execution instruction set; a swap file; and a memory management engine operable to: allocate a buffer within the enclave; receive a scope directive to indicate that the buffer is in scope; and protect the buffer from swapping to the swap file while the buffer is in scope. There is further disclosed an method of providing a memory management engine, and one or more computer-readable storage mediums having stored thereon executable instructions for providing the memory management engine.

Abstract: Methods and apparatus are described for synchronizing compression for communication between a user equipment (UE) and a serving node. The methods and apparatus include determining that a compressor memory of a compressor and a decompressor memory of a decompressor are out-of-synchronization based on a checksum failure. Further, the methods and apparatus include resetting the compressor memory and the decompressor memory to a predetermined state in response to determining that the compressor memory and the decompressor memory are out-of-synchronization, wherein the compressor memory and the decompressor memory are synchronized at the predetermined state.

Abstract: The present disclosure presents a method and an apparatus for managing performance of a user equipment (UE). For example, the disclosure presents a method for managing performance of a UE by computing, at a user equipment (UE), a first capacity estimate over a Wi-Fi interface in response to initiating of a new connection at the UE; detecting, at the UE, that the first capacity estimate is below an aggregation threshold; computing, at the UE, a second capacity estimate over a cellular interface in response to detecting that the first capacity estimate is below the aggregation threshold; and assigning the new connection initiated at the UE to the Wi-Fi interface or the cellular interface based at least on the first capacity estimate or the second capacity estimate. As such, performance of a UE may be managed.

Abstract: This disclosure describes systems and methods related to utilizing hardware assisted protection for media content. In some embodiments, a provided method comprises: receiving, from a content server and by a computing device processor of a secure enclave of a device, first encrypted media content; decrypting, by the computing device processor, the first encrypted media content using a first decryption key; generating, by the computing device processor, a second decryption key; encrypting, by the computing device processor, the first decrypted media content using the second key, thereby resulting in second encrypted media content; and sending, by the computing device processor and to one or more graphical processing units (GPUs) comprised in a graphics component of the device, the second encrypted media content and the second decryption key.

Abstract: In an example, there is disclosed a computing apparatus, including a processor, including a trusted execution instruction set; a memory having an enclave portion, wherein the enclave is accessible only via the trusted execution instruction set; a swap file; and a memory management engine operable to: allocate a buffer within the enclave; receive a scope directive to indicate that the buffer is in scope; and protect the buffer from swapping to the swap file while the buffer is in scope. There is further disclosed an method of providing a memory management engine, and one or more computer-readable storage mediums having stored thereon executable instructions for providing the memory management engine.

Abstract: In an example, there is disclosed a computing apparatus, including: a driver identity detector to detect the identity of a driver; and one or more logic elements providing a driver competency engine, operable to: detect the identity of the driver; evaluate the driver's operation of a vehicle; and build a driver competency profile based at least in part on the evaluating. The driver competency engine may further be operable to detect a context of the operation, such as environmental factors. There is also described a method of providing a driver competency engine, and one or more computer readable mediums having stored thereon executable instructions for providing a driver competency engine.

Abstract: A method, system and apparatus is disclosed for auto-tuning a circuit associated with an upstream transducer (UPT) and a circuit associated with a downstream transducer (DNT) for reciprocal operation in an ultrasonic flowmeter. The method includes exchanging signals between the upstream transducer and the downstream transducer; comparing at least one of respective maximum amplitudes of an upstream signal and a downstream signal and respective center frequencies of a Fast Fourier Transform (FFT) of the upstream signal and the downstream signal; and responsive to determining that at least one of the respective maximum amplitudes and the respective center frequencies do not match, correcting the mismatch.

Abstract: In an example, there is disclosed a computing apparatus, comprising: a trusted execution environment (TEE); and a security engine operable to: identify a key negotiation for an encrypted connection between a first device and a second device; request a service appliance key for the key negotiation; receive the service appliance key; and perform a service appliance function on traffic between the first device and the second device. There is also disclosed a method of providing the security engine, and a computer-readable medium having stored thereon executable instructions for providing the security engine.

Abstract: Certain embodiments herein relate to location verification for autonomous unmanned aerial vehicles (also referred to as “drones”). In some embodiments, an unmanned aerial vehicle engaged in autonomous flight may determine its location using a satellite-based navigation system. The location may be evaluated against location data obtained from one or more secondary factors, such as public broadcast beacons, cellular towers, wireless network identifiers, visual markers, or any combination thereof. If the location is determined to be invalid, the unmanned aerial vehicle may be instructed to take a mitigation action. Additionally, certain embodiments also include the verification of a flight plan for the unmanned aerial vehicle using secure no-fly logic to verify a flight plan does not violate no-fly zones. If the flight plan is verified, the flight plan may be signed using a cryptographic signature and provided to a navigation module that verifies the signature and executes the flight plan.

Abstract: This disclosure describes systems, methods, and computer-readable media related to phishing and brand protection via copycat detection. In some embodiments, a temporary page profile associated with a webpage may be generated. The temporary page profile may include an image component, a geometry component, a style component, and a link component. One or more baseline page profiles may be retrieved. The temporary page profile and the one or more baseline page profiles may be compared. It may be determined that the temporary page profile does not match the one or more baseline page profiles. An alert may be generated to display to a user indicating that fraud has been detected for the webpage.

Abstract: Systems and methods for modem control based on feedback are disclosed. In one embodiment, a modem observer module is associated with software within a computing device. The modem observer receives information from the modem relating to uplink bandwidth availability and/or network conditions that may impact uplink bandwidth. Based on the uplink bandwidth availability at the modem, the modem observer may throttle or limit the number of connections that are active by the applications.

Abstract: Circuitry for providing an oscillating output signal. This circuitry includes a transconductance circuit having a first input, a second input, an output. The transconductance also includes a first transistor, a second transistor, and chopping circuitry. The chopping circuitry is for alternatively connecting, in a first clock cycle phase, a first node to a first terminal of the first transistor and a second node to a first terminal of the second transistor and, in a second clock cycle phase, following the first clock cycle phase, the first node to the first terminal of the second transistor and the second node to a first terminal of the first transistor. An oscillator circuit is also included and coupled to receive voltage from the output of the transconductance circuit, wherein the oscillating output signal is responsive to an output of the oscillator circuit.

Abstract: Technologies for providing electronic security to a first network are disclosed. The system may include a user equipment, a gateway device configured to mediate communication between a first network and a second network for the user equipment, and an electronic security device communicatively coupled to the gateway device. The electronic security device may include a gateway interface module configured to assume an identity associated with the gateway device, a network interface module configured to present the identity to the second network, and a traffic inspection module configured to monitor traffic without substantially affecting a topology of the first network, wherein the electronic security device is configured to identify undesirable traffic; and implement a security policy.

Abstract: Circuitry for providing an oscillating output signal. This circuitry includes a transconductance circuit having a first input, a second input, an output. The transconductance also includes a first transistor, a second transistor, and chopping circuitry. The chopping circuitry is for alternatively connecting, in a first clock cycle phase, a first node to a first terminal of the first transistor and a second node to a first terminal of the second transistor and, in a second clock cycle phase, following the first clock cycle phase, the first node to the first terminal of the second transistor and the second node to a first terminal of the first transistor. An oscillator circuit is also included and coupled to receive voltage from the output of the transconductance circuit, wherein the oscillating output signal is responsive to an output of the oscillator circuit.

Abstract: Techniques of Transmission Control Protocol (TCP) packet transmission for wireless communication are provided for a user equipment (UE). The UE receives a plurality of TCP packets on a downlink channel from a network. In response, the UE generates a plurality of TCP Acknowledgment (ACK) packets corresponding to the plurality of received TCP packets. The plurality of TCP ACK packets is prioritized based on certain criteria. A TCK ACK packet with a highest priority among the plurality of TCP ACK packets is selected. The selected highest priority TCP ACK packet is then sent to the network on an uplink channel.

Abstract: Methods, systems, and devices are described for estimating wireless local area network (WLAN) capacity. In accordance with the present disclosure, one or more applications associated with a mobile device may request WLAN capacity estimation in order to maximize the use of available network resources. In some examples, the mobile device may obtain WLAN information from a WLAN modem driver associated with a WLAN modem via an application program interface (API) to calculate the WLAN capacity. The WLAN capacity may include capacity of an access point (AP) associated with the mobile device to support additional users or data over one or more downlink and/or uplink channels. Accordingly, the mobile device may optimize data download or upload times by efficiently managing the available resources.

Abstract: Various apparatuses and methods for transmitting uplink data of an application at a user equipment are provided. In one aspect of the disclosure, uplink data of an application at a user equipment (UE) is transmitted to a network. A first amount of the uplink data expected to be buffered at a radio link control (RLC) layer is determined based on a latency of the application. A second amount of the uplink data available for transmission at the RLC layer is determined based on information provided by a modem of the UE. A data rate of the application is dynamically adjusted based on a difference between the first amount and second amount of the uplink data. In another aspect of the disclosure, an amount of the application data buffered at the RLC layer is maintained to be greater than a predetermined threshold that sets a Happy bit at an unhappy setting.

Abstract: A technique allows a client computer with a web browser to receive a web page having active content in response to transmitting a request for content. The active content includes a signature and a set of attributes associated with a web domain. The web browser can interpret the signature and the set of attributes as formatted in the active content. Validation of the signature and the set of attributes can be in a secure mode through a secure enclave module.

Abstract: Organizing a trusted network includes receive, by a local device, a message from a first remote trusted device identifying a first service hosted by the first remote trusted device, wherein the local device and the first remote trusted device are in a trusted network. Organizing a trusted network also includes indexing, by the local device, the first service in a registry comprising services available to the local device and a location of each service available, wherein the registry is local to the local device.