Abstract: An exemplary system and method are disclosed that provide the private querying of a biometric scan, such as a person's photo, against a private database such that the client issuing the private query learns only the identity of the query if it is in the database while the server performing the processing learns nothing of the biometric scan. The exemplary system and method conduct privacy-preserving searches over fuzzy databases via a fuzzy labeled set intersection (FLPSI) protocol. FLPSI protocol computes an intersection of noisy input sets to assess for closeness/similarity metrics in an efficient and optimized search.

Abstract: A wearable device includes a processor and a lower module. The lower module includes a pressure sensor for detecting a mechanical movement of a skin that covers an artery. The mechanical movement of the skin is due to blood flow through the artery. The processor is configured to receive skin movement information from the movement sensor; calculate a pulse front velocity (PFV), which is a velocity of a blood wave as the blood wave passes under the pressure sensor; estimate a pulse wave velocity (PWV) using the PFV; and estimate the blood pressure using the PWV.

Abstract: A wearable device includes a processor and a lower module. The lower module includes a pressure sensor for detecting a mechanical movement of a skin that covers an artery. The mechanical movement of the skin is due to blood flow through the artery. The processor is configured to receive skin movement information from the movement sensor; calculate a pulse front velocity (PFV), which is a velocity of a blood wave as the blood wave passes under the pressure sensor; estimate a pulse wave velocity (PWV) using the PFV; and estimate the blood pressure using the PWV.

Abstract: In one embodiment, a computing device determines a size of a view port of a graphical user interface based on a scrolling frame rate, processing resources, or memory resources of the computing device. One or more content objects are displayed in the view port. A scroll region for the user to scroll within is determined and the scroll region is independent of the boundaries of the displayed content objects. A first touch gesture across one or more boundaries of the displayed content objects is received. A velocity of the first touch gesture motion is determined. When the velocity is less than or equal to a threshold velocity, the computing device scrolls to an adjacent content object of the current displayed content object. When the velocity is higher than the threshold velocity, the computing device scrolls to advance multiple content objects with respect to the current displayed content object.

Abstract: In one embodiment, a computing device may estimate an average dimension of several content objects. The estimation may be based on one or more calculated dimensions of one or more previously rendered content objects. The computing device may determine a first number of content objects to render for display within an area of a graphical user interface (GUI). This determination may be based at least on the average dimension of the content objects and a maximum dimension along an axis of the GUI. The computing device may also render the first number of content objects for display along the axis. The computing device may also display the first number of content objects within the area of the GUI.

Abstract: In one embodiment, a method includes providing for display to a user content including multiple content objects that each has a boundary defining a two-dimensional area. A two-dimensional scroll region for user scrolling within the content is determined. The two-dimensional scroll region is independent of the two-dimensional areas of the content objects. User input to scroll within the content in one or both of the two dimensions across one or more of the boundaries is received. The method includes scrolling within the content according to the user input, the scrolling being continuous across the boundaries.

Abstract: In one embodiment, a computing device determines a size of a view port of a graphical user interface based on a scrolling frame rate, processing resources, or memory resources of the computing device. One or more content objects are displayed in the view port. A scroll region for the user to scroll within is determined and the scroll region is independent of the boundaries of the displayed content objects. A first touch gesture across one or more boundaries of the displayed content objects is received. A velocity of the first touch gesture motion is determined. When the velocity is less than or equal to a threshold velocity, the computing device scrolls to an adjacent content object of the current displayed content object. When the velocity is higher than the threshold velocity, the computing device scrolls to advance multiple content objects with respect to the current displayed content object.

Abstract: In one embodiment, a method includes providing for display to a user content including multiple content objects that each has a boundary defining a two-dimensional area. A two-dimensional scroll region for user scrolling within the content is determined. The two-dimensional scroll region is independent of the two-dimensional areas of the content objects. User input to scroll within the content in one or both of the two dimensions across one or more of the boundaries is received. The method includes scrolling within the content according to the user input, the scrolling being continuous across the boundaries.

Abstract: In one embodiment, a computing device may estimate an average dimension of several content objects. The estimation may be based on one or more calculated dimensions of one or more previously rendered content objects. The computing device may determine a first number of content objects to render for display within an area of a graphical user interface (GUI). This determination may be based at least on the average dimension of the content objects and a maximum dimension along an axis of the GUI. The computing device may also render the first number of content objects for display along the axis. The computing device may also display the first number of content objects within the area of the GUI.

Abstract: A method of operation of a bundle management system includes: generating a resource bundle with client-based script code based on a client device condition of a potential client device; generating a condition map correlating the client device condition to the resource bundle; generating a bundle set including the resource bundle based on a developer version of the client-based script code; uploading the condition map to a web service system; and configuring the web service system to operate a web service corresponding to the developer version of the bundle set.

Abstract: In one embodiment, a computing device identifies a first number of content objects to render for display along an axis within an area of a graphical user interface based on an assumed dimension of every content object and a maximum dimension of the area along the axis. The computing device renders the first number of content objects for display along the axis within the area, and determines a difference between the assume dimensions and actual dimensions of the rendered content objects along the axis. The computing device adjusts the assumed dimension based on the difference, and identifies a second number of content objects to render for display along the axis within the area based on the assumed dimension as adjusted and the maximum dimension of the area along the axis. And the computing device renders the second number of content objects for display along the axis within the area.

Abstract: A first circuit representation of a given function is obtained at a first processing device. The given function comprises at least two computer programming switch statement clauses. A second circuit representation is generated at the first processing device from the first circuit representation wherein the at least two computer programming switch statement clauses are respectively represented by at least two tree circuits that are embedded in the second circuit representation such that the second circuit representation is characterized by a given cost (e.g., a minimum cost). The second circuit representation is encrypted at the first processing device, and sent to a second processing device for secure evaluation of the given function by the second processing device.

Abstract: A capability for secure communication of data from a source device to a destination device is presented. The source device has a device identifier associated therewith. The source device stores an encrypted version of the device identifier that is encrypted based on a master key of the destination device. The source device stores an encryption key. The source device communicates data to the destination device in a secure manner by encrypting the data using the encryption key and propagating the encrypted version of the device identifier and the encrypted data to the destination device. The destination device recovers the data sent by the source device by decrypting the encrypted version of the device identifier based on the master key to determine the device identifier, determining a decryption key based on the device identifier, and decrypting the encrypted data based on the decryption key to recover the data sent by the source device.

Abstract: Method of producing an aggregated message authentication code (MAC). The method comprises generating or receiving, in a computer processor, a first message and its first MAC tag (m1, t1) and computing, in the computer processor, a first hashed message-tag pair H(m1, t1), where H is a cryptographic hash function. The method comprises generating or receiving, in the computer processor, a second message and its second MAC tag (m2, t2) and computing, in the computer processor, a second hashed message-tag pair H(m2, t2). The method comprises computing, in the computer processor, an aggregated MAC (At1) by an addition operation, as follows: At1=(H(m1, t1)+H(m2, t2)) modulo N, where N is a natural number equal to two or greater.

Abstract: A garbled circuit is generated for a client in a leakage-resilient manner with a reduced memory requirement. The garbled circuit is used for secure function evaluation between the client and a server. The garbled circuit is generated with a reduced storage requirement by obtaining a token from the server; querying the token gate-by-gate, wherein for each gate of the garbled circuit, the token generates new wire garblings and stores them with the client using a Stream Cipher and interacts with the leakage-protected area to generate a garbled table for the gate; and receiving the garbled circuit from the token. The token comprises a leakage-protected area. The Stream Cipher is leakage-resilient and can be a symmetric-key cryptographic primitive that has a secret key as an input and generates an unbounded stream of pseudorandom bits as an output. The number of evaluations of the Stream Cipher is kept to a substantial minimum.

Abstract: A first circuit representation of a given function is obtained at a first processing device. The given function comprises at least two computer programming switch statement clauses. A second circuit representation is generated at the first processing device from the first circuit representation wherein the at least two computer programming switch statement clauses are respectively represented by at least two tree circuits that are embedded in the second circuit representation such that the second circuit representation is characterized by a given cost (e.g., a minimum cost). The second circuit representation is encrypted at the first processing device, and sent to a second processing device for secure evaluation of the given function by the second processing device.

Abstract: A capability for secure communication of data from a source device to a destination device is presented. The source device has a device identifier associated therewith. The source device stores an encrypted version of the device identifier that is encrypted based on a master key of the destination device. The source device stores an encryption key. The source device communicates data to the destination device in a secure manner by encrypting the data using the encryption key and propagating the encrypted version of the device identifier and the encrypted data to the destination device. The destination device recovers the data sent by the source device by decrypting the encrypted version of the device identifier based on the master key to determine the device identifier, determining a decryption key based on the device identifier, and decrypting the encrypted data based on the decryption key to recover the data sent by the source device.

Abstract: A capability for secure communication of data from a source device to a destination device is presented. The source device has a device identifier associated therewith. The source device stores an encrypted version of the device identifier that is encrypted based on a master key of the destination device. The source device stores an encryption key. The source device communicates data to the destination device in a secure manner by encrypting the data using the encryption key and propagating the encrypted version of the device identifier and the encrypted data to the destination device. The destination device recovers the data sent by the source device by decrypting the encrypted version of the device identifier based on the master key to determine the device identifier, determining a decryption key based on the device identifier, and decrypting the encrypted data based on the decryption key to recover the data sent by the source device.

Abstract: Method of producing an aggregated message authentication code (MAC). The method comprises generating or receiving, in a computer processor, a first message and its first MAC tag (m1, t1) and computing, in the computer processor, a first hashed message-tag pair H(m1, t1), where H is a cryptographic hash function. The method comprises generating or receiving, in the computer processor, a second message and its second MAC tag (m2, t2) and computing, in the computer processor, a second hashed message-tag pair H(m2, t2). The method comprises computing, in the computer processor, an aggregated MAC (At1) by an addition operation, as follows: At1=(H(m1,t1)+H(m2,t2)) modulo N, where N is a natural number equal to two or greater.

Abstract: A system for providing cost effective, secure key exchange from at least one first device to at least one second device through at least one proxy server is provided. The system includes a first key exchange message from the at least one first device to the at least one second device via the at least one proxy server. A second key exchange message from the at least one second device to the at least one first device via a media stream of the Internet is required to complete the computation of the session key. A method of securing a communication system is also set forth. The method includes the steps of providing a routing device for identifying a subscriber, and providing a master key exchange session, the master key exchange session including a key k to find a subscriber and a nonce r to answer a query to the subscriber, wherein the master key exchange session includes both the key k and the nonce r.