Abstract: A system for secure data protection and encryption for computing devices. The present invention includes a fast encryption technique for quickly ensuring that the correct binding parameters are used for an encrypted data file. The encrypted file is used in two ways. Because unsecure data could pass through a peripheral device to gain access to a secure computing environment, a dongle housing encryption and decryption subsystems is placed in between the unsecure sources and the peripheral that can encrypt and decrypt data intended for the secure computing environment. The firmware of the computing device can be updated by dividing the update file into encrypted segments that are verified on the device and placed into non-volatile memory. When all parts have been received, decrypted, and written into memory, the device reboots using the updated firmware.

Abstract: A method for verifying a set of policy instructions to be used by a policy decision point (PDP) in adjudicating access requests to protected resources. The policy instructions are in the form of Horn clauses or conditional tag-expressions that are validated against a known test policy or desired outcome. The policy instructions are then compiled into aggregate form. When a plurality of policy instructions creates a conflict, the policy instructions are hierarchically organized to resolve said conflict.

Abstract: A system for controlling file access on a mobile computing device. Policy conditions are held at a policy decision point (PDP) and can be dynamically modified at run-time. Access requests to a file or set of files are intercepted by an agent that subsequently brokers the adjudication of said request via a secure, encrypted and hidden back-channel where the requestor is never allowed access to or knowledge of either the adjudication process or the parameters associated with adjudication. The PDP then returns either an access approval or denial based on said policy conditions.

Abstract: A method for presenting advertisement images on a display screen, comprising: subdividing a map image into a plurality of geographic regions; associating an advertisement image with a region of the plurality of geographic regions; receiving a signal indicative of a group of regions of the plurality of geographic regions; receiving a signal indicative of a region-of-interest, the region-of-interest corresponding to at least one region of the plurality of geographic regions; determining whether the region and the region-of-interest are included in the group of regions, and if so, generating a presentation of the advertisement image; and, displaying the presentation on the display screen.

Abstract: Systems and methods for secure, policy-based, access control and management of mobile computing devices, including policy decision enforcement mechanisms, device and private network presence testing, aspects of file system controls, policy set sanity checking algorithms, performance optimizations.

Abstract: A system for secure data protection and encryption for computing devices. The present invention includes a fast encryption technique for quickly ensuring that the correct binding parameters are used for an encrypted data file. The encrypted file is used in two ways. Because unsecure data could pass through a peripheral device to gain access to a secure computing environment, a dongle housing encryption and decryption subsystems is placed in between the unsecure sources and the peripheral that can encrypt and decrypt data intended for the secure computing environment. The firmware of the computing device can be updated by dividing the update file into encrypted segments that are verified on the device and placed into non-volatile memory. When all parts have been received, decrypted, and written into memory, the device reboots using the updated firmware.

Abstract: Policy-based client-server systems and methods for attestation in managing and securing mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trusted expert parties and authorities within the expression and enforcement of policies for controlling use of, and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, as well as potential business models for attestation used in such a policy-based system. The system of the present invention resolves attestation record conflicts using digital certificates and digital signatures.

Abstract: An autonomous and adaptive method and system for secure, policy-based control of remote and locally controlled computing devices. The invention uses a policy-based access control mechanism to achieve adaptive and dynamic behavior modification based on the context of the local operating environment of the computing device. The modification system assesses the desirability of actions or outcomes as determined by the policy rules and modifies them accordingly, thus altering the behavior of the computing device. The system can utilize a machine learning technique, pattern matching and heuristic evaluation. When applied to the control of robotic and autonomous devices, the system allows the robot to offload adjudication to a remote system and also facilitates cooperative behaviors between robots operating in dynamic environments.

Abstract: Policy-based client-server systems and methods for attestation in managing and securing mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trusted expert parties and authorities within the expression and enforcement of policies for controlling use of, and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, as well as potential business models for attestation used in such a policy-based system. The system of the present invention resolves attestation record conflicts using digital certificates and digital signatures.

Abstract: Policy-based client-server systems and methods for attestation in managing and securing mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trusted expert parties and authorities within the expression and enforcement of policies for controlling use of, and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, as well as potential business models for attestation used in such a policy-based system.

Abstract: An autonomous and adaptive method and system for secure, policy-based control of remote and locally controlled computing devices. The invention uses a policy-based access control mechanism to achieve adaptive and dynamic behavior modification based on the context of the local operating environment of the computing device. The modification system assesses the desirability of actions or outcomes as determined by the policy rules and modifies them accordingly, thus altering the behavior of the computing device. The system can utilize a machine learning technique, pattern matching and heuristic evaluation. When applied to the control of robotic and autonomous devices, the system allows the robot to offload adjudication to a remote system and also facilitates cooperative behaviors between robots operating in dynamic environments.

Abstract: A method for presenting applications on a display screen, comprising: displaying a first presentation on the display screen, the first presentation including two or more icons; receiving a signal indicative of an icon, the icon being one of the two or more icons, the icon having an application associated therewith; initiating the application, the application having information associated therewith; generating a second presentation, the second presentation having a first area for presenting the information at least partially surrounded by a second area for presenting reduced-size versions of the two or more icons other than the icon; and, displaying the second presentation on the display screen to replace display of the first presentation.

Abstract: Policy-based client-server systems and methods for attestation in managing and scouring mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trust expert parties and authorities within the expression and enforcement of policies for controlling use of and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, a well as potential business models for attestation used in such a policy-based system.

Abstract: A method for presenting advertisement images on a display screen, comprising: subdividing a map image into a plurality of geographic regions; associating an advertisement image with a region of the plurality of geographic regions; receiving a signal indicative of a group of regions of the plurality of geographic regions; receiving a signal indicative of a region-of-interest, the region-of-interest corresponding to at least one region of the plurality of geographic regions; determining whether the region and the region-of-interest are included in the group of regions, and if so, generating a presentation of the advertisement image; and, displaying the presentation on the display screen.

Abstract: A method in a server coupled to a device through a network for delivering message content to the device, the method comprising: maintaining at the server a message content store, the message content store including message content sorted by geographic position, class, and subclass; receiving at the server from the device a request message for message content, the request message including a geographic position of the device, an extent of a geographic region surrounding the geographic position of the device, a class, and a subclass; determining at the server the message content using the geographic position, the extent, the class, and the subclass; and, sending a response message including the message content from the server to the device, wherein the message content is displayed on a display screen of the device.

Abstract: A method for presenting applications on a display screen, comprising: displaying a first presentation on the display screen, the first presentation including two or more icons; receiving a signal indicative of an icon, the icon being one of the two or more icons, the icon having an application associated therewith; initiating the application, the application having information associated therewith; generating a second presentation, the second presentation having a first area for presenting the information at least partially surrounded by a second area for presenting reduced-size versions of the two or more icons other than the icon; and, displaying the second presentation on the display screen to replace display of the first presentation.

Abstract: Toner is rounded by vigorously mixing less than about 5 percent by weight of particulate silica to the total weight of a starting toner in a closed, recirculating air system. The starting toner contains at least about 4.5 percent by weight of the starting toner of a wax and additionally contains at least 5 percent by weight of the starting toner of a softening agent. The temperature during the mixing is no more than 13 degrees C. above the onset of the glass transition temperature of the starting toner. The final toner comprises rounded starting toner having particulate silica embedded during the mixing process.