Abstract: A client hosted virtualization system includes a full volume encryption (FVE) storage device, a processor, and non-volatile memory with BIOS code and virtualization manager code. The virtualization manager initializes the client hosted virtualization system, authenticates a virtual machine image, launches the virtual machine based on the image, receives a transaction from the virtual machine targeted to the FVE storage device, sends the transaction to the FVE storage device, receives a response from the FVE storage device, and sends the first response to the first virtual machine. The client hosted virtualization system is configurable to execute the BIOS or the virtualization manager.

Abstract: A method and apparatus for protecting the integrity of a mobile terminal are provided. The mobile terminal includes a secure world for preventing unauthorized access to resources, and a normal world other than the secure world. The integrity protection method for the mobile terminal includes sensing a power-on of the mobile terminal, verifying, by a trusted entity in the normal world, the integrity of a first subsequent entity, and sending, when an integrity breach is detected in the first subsequent entity, by the trusted entity, a modification indication signal to the secure world.

Abstract: A method is provided in one example embodiment and includes storing secure boot variables in a baseboard management controller; and sending the secure boot variables to a basic input/output system (BIOS) during a power on self-test, where the BIOS utilizes the secure boot variables during runtime to authenticate drivers and an operating system loader execution. In particular embodiments, the secure boot variables may be included in a white list, a black list, or a key list and, further, stored in erasable programmable read only memory.

Abstract: At least one of the embodiments described herein relate generally to a method of providing visual privacy for a message sent to at least one device. The method may include the acts of: receiving the message at the at least one device, the message including content and a privacy indicator; converting the content to a content image; applying a blur function to the content image to generate a blurred content image; generating an obscured layer from the blurred content image; partitioning the content image into one or more segments to generate a content layer, the one or more segments each having one or more segment attributes; aligning the obscured layer with the content layer, wherein selecting an area on the obscured layer corresponding to the one or more segments removes the obscured layer for the one or more segments based on the one or more segment attributes.

Abstract: The present disclosure includes apparatus, systems, digital logic circuitry and techniques relating to data encoding. A method performed by a system on a chip (SOC) includes receiving data to be output to a memory unit external to the SOC. Also a key for scrambling the received data is received. A proper subset of the key is identified and used to scramble the received data. The scrambled data is output to the memory unit external to the SOC.

Abstract: The present invention relates to the field of computers, and disclosed are a method, device, and system for encrypting and decrypting an image. The method for encrypting an image includes: encrypting a preset size of header data of a to-be-encrypted image, and obtaining an encrypted data corresponding to the header data; determining a storage location for saving the encrypted data, saving the encrypted data in the storage location, and acquiring an offset for saving the encrypted data; and placing the encryption identifier and the offset in a storage area of the preset size of the to-be-encrypted image, so as to encrypt the to-be-encrypted image. The system includes: a device for encrypting an image and a device for decrypting an image. The present invention is capable of improving the speed and efficiency of encrypting and decrypting an image.

Abstract: Organizations maintain and generate large amounts of sensitive information using computer hardware resources and services of a service provider. Furthermore, there is a need to be able to delete large amounts of data securely and quickly by encrypting the data with a key and destroying the key. To ensure that information stored remotely is secured and capable of secure deletion, cryptographic keys used by the organization should be prevented from being persistently stored during serialization operations. Signaling methods are used to notify virtual machine instances of serialization events in order to prevent keying material from being stored persistently.

Abstract: Methods, apparatus and articles of manufacture for increasing mobile device security are provided herein. A method includes establishing a pre-determined set of cryptographic information, wherein said pre-determined set of cryptographic information comprises one or more user-selected non-alphanumeric input elements applied to one or more visual components; generating a prompt via a computing device interface in connection with an authentication request to access a protected resource associated with the computing device; processing input cryptographic information entered via the computing device interface in response to the prompt against the pre-determined set of cryptographic information; and resolving the authentication request based on said processing.

Abstract: Methods, systems, and computer-readable storage media for post-hoc analysis of access control decisions, where actions include receiving a request to analyze an access control request, for which an access control decision has been provided based on a policy, retrieving information associated with the access control request from a log, the information including a first security state version and a time, determining a time interval based on the time and an audit policy, retrieving information associated with at least a second security state version based on the time interval, and evaluating the access control request based on information of the first security state and information of the second security state to provide a post-hoc access control decision.

Abstract: Secure transfer of mobile application content is disclosed. A state-related event associated with a managed application in a managed set of applications may be detected. It may be determined that content from the managed application is stored at a public storage location on a mobile device. At least a portion of the content may be transferred to a secure storage location accessible to the managed set.

Abstract: There is provided a printing apparatus including: a storage section configured to store printing data; an accepting section configured to accept an issuance instruction to issue a password corresponding to the printing data; a password generating section configured to generate a password; an obtaining section configured to obtain a destination corresponding to the printing data; a transmission section configured to transmit the generated password to the destination, on condition that the accepting section accepts the issuance instruction; an input section configured to accept an input of a password by a user; a judgment section configured to judge as to whether or not a password accepted by the input section is coincident with the transmitted password; and a printing section configured to start printing in a case that the judgment section judges that the accepted password is coincident with the transmitted password.

Abstract: Described herein are apparatus, system, and method for providing memory access control to protect software (e.g., firmware backup) and other data. The method comprises providing, by a processor, a protected storage area in a memory for storing backup image of software; detecting corruption in the software; accessing the backup image of the software from the protected storage area; and updating the corrupted software using the backup image, wherein the protected storage area is a reserved storage area of the memory.

Abstract: In providing an image processing apparatus having a browser, it is aimed to improve the operability of the web browser and enhance access restriction. In order to solve conventional problems, an information processing method according to the present invention has the following steps. That is, an information processing method for a browser which operates in an image processing apparatus communicably connected to a network and receives and displays a content from the network includes a detection step (step S902) of detecting whether link information to another content included in a content permitted to be displayed by the browser is selected, and a restriction step (steps S903 and S904) of restricting access to another content in the case the link information to another content is detected to be selected in the detection step.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating management of data in an on-demand services environment. In one embodiment and by way of example, a method for facilitating management of data in an on-demand services environment is provided. The method of embodiment includes detecting an attempt by a user to manipulate data via a collaboration application at a computing system, wherein the attempt includes attempted deletion of the data posted for viewing using the collaboration application. The method may further include determining whether the user is authorized to manipulate the data, and blocking the attempt if the user is not authorized to manipulate the data.

Abstract: In one embodiment, a document is marked with an identifier and stored in a memory. Responsive to a request received from a user to perform an operation upon the document or a copy of the document at a requester computer, a database is accessed. The database is a database associating users authorized to access the documents or copies of the documents with operations the users are authorized to perform is accessed. Operation authorization is determined at least in part according to a document threat index. Upon determining the user is an authorized user and determining via the database the requested operation is an authorized operation, an access code is sent to the requester computer to enable the operation.

Abstract: Described herein are systems and methods for providing context-sensitive data security, for business application performance optimization. In accordance with an embodiment, the system can be used together with a Role Based Access Control model. Data security predicates can be made context-sensitive, by taking into account the context in which an end-user is navigating an application. By providing context-sensitive data security in this manner, the complexity of database queries can be reduced, and the underlying relational database management system can create better-optimized execution plans.

Abstract: Embodiments of computer-implemented methods, systems, and non-transitory computer-readable medium having one or more computer programs stored therein are provided to transfer data between two or more networks configured to have different levels of network security protection. Large data backup files to be transmitted between the two or more networks can be partitioned into smaller partitioned files, contents of which can be encoded as data barcodes. Generated data barcodes can then be decoded to produce contents of the partitioned files. Decoded contents of the partitioned files can then be securely communicated back to the sender for comparison by generating validation barcodes to be decoded by the sender. Generated verification barcodes can then be decoded to confirm success of the transmission of contents of the partitioned files from the sender. Decoded contents of the partitioned files can be merged and stored responsive to an indication of successful transmission.

Abstract: The invention relates to a client computer for querying a database stored on a server via a network, the server being coupled to the client computer via the network, wherein the database comprises first data items and suffix items, wherein each suffix item describes a suffix of at least one first data item of the first data items, wherein for each suffix item a first referential connection exists in the database assigning said suffix item to the at least one first data item comprising the suffix of said suffix item, wherein each suffix item is encrypted with a suffix cryptographic key in the database, wherein each first data item is encrypted with a first cryptographic key in the database, wherein the client computer has installed thereon an application program, the application program being operational to: receiving a search request, the search request specifying an infix search expression, said expression comprising a first wildcard term on the left side of a search criterion and a second wildcard term o

Abstract: A system for preventing data remanence in memory is provided. The system includes a computing device, a memory chip coupled to the computing device and including memory, and a heater, the heater configured to prevent data remanence in a memory by providing heat to at least a portion of the memory. The memory includes a plurality of bits configured to electronically store data.

Abstract: A process for decomposing safety software involves the steps of providing a first software module associated with a first logical unit, providing a second software module associated with a second logical unit, instructing the first software module to implement a first safety goal based on a quality management level, and instructing the second software module to implement a second safety goal based on a safety integrity level, where the second software module uses at least one input and at least one output of the second logical unit to determine if the second safety goal is satisfied. Consequently, the second software module uses a result of the first software module to determine if the first safety goal has been completed, and the second software module uses at least one algorithm to verify an operational status of the first logical unit.

Abstract: In one embodiment, a method includes generating, by a computer system, a search-engine query from stored identity-theft nomenclature. The method also includes querying, by the computer system, at least one search engine via the search-engine query. Further, the method includes crawling, by the computer system, at least one computer-network resource identified via the querying. In addition, the method includes collecting, by the computer system, identity-theft information from the at least one computer-network resource. Additionally, the method includes processing, by the computer system, the identity-theft information for compromised personally-identifying information (PII).

Abstract: Context captured with sensors of an information handling system is applied to selectively lock access to currently unlocked information, with conditions for locking access based upon the context. Nervous states enforce locking of selected information based upon the confidence of the security of the information under sensed external conditions. Increased sensitivity for locking access includes reduced timeouts to a lock command, increased response to sensed conditions, and more rapid response where unlocked access is to sensitive information.

Abstract: A storage controller includes a command pointer register. The command pointer register points to a chain of commands in memory, and also includes a security status field to indicate a security status of the first command in the command chain. Each command in the command chain may also include a security status field that indicates the security status of the following command in the chain.

Abstract: Secure communication of user inputs is achieved by isolating part of an endpoint device such that certificates and encryption keys are protected from corruption by malware. Further, the communication is passed through a trusted data relay that is configured to decrypt and/or certify the user inputs encrypted by the isolated part of the endpoint device. The trusted data relay can determine that the user inputs were encrypted or certified by the protected certificates and encryption keys, thus authenticating their origin within the endpoint device. The trusted data relay then forwards the inputs to an intended destination. In some embodiments, the isolated part of the endpoint device is configured to detect input created by auto-completion logic and/or spell checking logic.

Abstract: Secure communication of user inputs is achieved by isolating part of an endpoint device such that certificates and encryption keys are protected from corruption by malware. Further, the communication is passed through a trusted data relay that is configured to decrypt and/or certify the user inputs encrypted by the isolated part of the endpoint device. The trusted data relay can determine that the user inputs were encrypted or certified by the protected certificates and encryption keys, thus authenticating their origin within the endpoint device. The trusted data relay then forwards the inputs to an intended destination. In some embodiments, the isolated part of the endpoint device is configured to detect input created by auto-completion logic and/or spell checking logic.

Abstract: A biometric mobile device is capable of interacting with existing cellular, wireless, and wired telecommunication and other communication networks to support intelligence gathering, human body identification, special operations and other applications. A method of collecting biometric data at an accident or crime scene may comprise, for example, utilizing a camera to photograph the accident scene, collecting key entered data that may not be otherwise obtainable, using a fingerprint scanner to collect, digitize and store fingerprint data, using a lab-on-a-chip DNA profile device for collecting and analyzing a DNA specimen and generating identification and DNA profile data for bar code entry and other means for collecting any known form of biometric data including, but not limited to, vascular facial structure, dental structure, cornea, iris or other data which may be unique or limiting for identification purposes.

Abstract: A system and method for verifying that a document is included in a document management system is disclosed. This system and method includes scanning of a scan track of a document, generating document data dependently upon the scanning, comparing the generated document data to stored document data, the stored document data generated dependently upon a prior scanning of the scan track of the document, and outputting an indication of the document being included in the document management system as determined by the comparing.

Abstract: A card reader device is configured to carry out communication with a contactless readable card according to standard ISO/IEC 14443 type B. In order to provide that a modulation index, which self-adjusts in close range in a presence of a contactless readable card, corresponds to a desired specified modulation index, the magnetic field is received and evaluated via a reception antenna of the card reader device. The modulation index is controlled or regulated accordingly in case of deviations between a measured modulation index and a specified value for the modulation index in order to approximate the measured modulation index to the specified value.

Abstract: A method of communication of an active smart RFID label with a user interrogator and a professional interrogator, said professional interrogator enabling a service provider to fully control said active smart RFID label and by means of which interrogator a content and a form of an extract of data, which are collected by a sensor, which is comprised of in the label, as well as a location within the label as location of said extract of data being collected by said label sensor, said location being accessible by the user interrogator are determined. A service user gets concisely acquainted with the service provided by the label by means of a widely used interrogator, whereat he cannot influence the data contained in the label or even its functioning neither needs any additional knowledge to communicate with said label.

Abstract: A system for reading code symbols includes a camera, a user interface system, and a processor communicatively coupled to the camera and the user interface system. The user interface system includes a visual display. The processor is configured for (i) capturing an image including a code symbol, (ii) displaying the image on the visual display, (iii) determining whether the code symbol in the image is readable by the processor, and (iv) displaying on the visual display a positive indicator overlaying the code symbol in the image when the processor determines that the code symbol in the image is readable by the processor. The processor is further configured for reading the code symbol in the image in response to a selection input received from the user interface system.

Abstract: A method for configuring a first near-field communication device according to a modulation type transmitted by a second device, wherein: a decoder of the first device is configured to decode a type-A modulation; a signal received during a first time slot corresponding to the duration of a first type-A symbol is decoded; and the first device is configured according to the value of the decoded symbol to determine the modulation type.

Abstract: Disclosed is a communication device of a system for monitoring wheels of a vehicle (C), the wheels (R) being equipped with a tire comprising an electronic chip (200), the tire comprising a metal structure (S), remarkable in that it comprises an electronic module (110) housed in the wheel (R) of the vehicle (C), the electronic module (110) transmitting waves (O) over a frequency range established so as to enable the waves to be reflected on the metal structure (S), so that the waves (O) can reach the chip (200) whatever the position thereof with respect to the module (110) so that the module (110) can correspond with the chip (200) for the purposes of activation and/or transmission of data for writing and/or reading. Also disclosed is a communication method. Applications: monitoring of tires.

Abstract: An inventory system can include radio frequency identification (RFID) tags and RFID tuners that can be brought into interacting proximity with one another to provide input or other information about the location or other condition of movable elements within the inventory system. For example, a closed or at least partially open state of a drawer can be determined based on signals from an RFID tag when the RFID tag and a corresponding RFID tuner are mounted on opposing faces of the drawer and a compartment that receives the drawer.

Abstract: A terminal for decoding decodable indicia includes a plenoptic imaging subsystem comprising an image sensor array and plenoptic imaging optics operable to project a plenoptic image of a space containing the decodable indicia onto the image sensor array, a hand held housing encapsulating a least a portion of the plenoptic imaging subsystem, a trigger for initiating operation of the plenoptic imaging subsystem to obtain plenoptic image data of the decodable indicia, and an illumination source for projecting illumination onto the decodable indicia; an aimer for projecting an aimer pattern onto the decodable indicia. The terminal is operable, responsive to detecting that the trigger has been actuated by an operator, to obtain plenoptic image data from the image sensor array, to obtain first rendered image data based on at least a portion of the plenoptic image data, and to attempt to decode the decodable indicia represented in the rendered image data.

Abstract: Wearable scanners or readers may be mounted to and operated from at least one extension of the human body, such as a portion of a hand or wrist of a user. The wearable scanners or readers may include one or more manual or automatic actuators for initiating a scanning or reading of a marking on an object. Such actuators may be worn about the portion of the hand or wrist of the user, including within a palm of the hand, or in a ring-like device surrounding at least one finger of the hand. Additionally, the wearable scanners or readers may include optical elements configured to capture images in one or more directions or along one or more axes, and may further include any type of display elements (e.g., touchscreens, LED or LCD displays, or electrophoretic displays) formed in substantially flat or curved shapes.

Abstract: An image generating method performed by a computer, includes extracting data corresponding to a first coded image from first image data including the first coded image; generating a second coded image corresponding to the extracted data, wherein a size of a configuration element included in the second coded image is an integral multiple of a dot size of the first image data; and generating second image data indicating an image including an image indicated by the first image data and the generated second coded image.

Abstract: A barcode reader for capturing a barcode connected to a moving carrier is proposed having at least one optical barcode detector for at least one-dimensional capture of information modules of the barcode. The barcode reader furthermore comprises at least one optical clock track detector for capturing clock track modules of a clock track of the barcode and at least one optical reference detector for capturing at least one item of reference information of the barcode. The barcode reader is configured to determine a direction of movement of the carrier from at least one signal from the clock track detector and at least one signal from the reference detector.

Abstract: There is provided a signal processing device for remedying an error in reading bar-codes derived from a defect of the bar-code printed on a label, a way to hold the bar-code reader's sensor to the bar-code and so forth. The signal processing device comprises: a variable amplifier configured to output a signal, as an output signal thereof, corresponding to an input signal, an offset and a gain of the variable amplifier being able to be adjusted; a comparing means configured to compare a level of the output signal of the variable amplifier with a plurality of thresholds; a detecting means configured to detect either or both of a shift of the offset of the variable amplifier and an excess or deficiency of the gain of the variable amplifier based on the result of the comparison executed in the comparing means; and an adjusting means configured to adjust either or both of the offset and the gain of the variable amplifier based on the result of the detection executed in the detecting means.

Abstract: A method for performing user authentication by using a fingerprint in an electronic device is provided. The method includes obtaining fingerprint image and fingerprint position information corresponding to an area of the user's finger, comparing the fingerprint image obtained by using fingerprint position information with a pre-registered fingerprint image corresponding to the position of the area to thereby perform the user authentication, and pairing the fingerprint image corresponding to the area of the user's finger with the fingerprint position information to be thereby stored in the memory.

Abstract: An integrated leadframe and bezel structure includes a planar carrier frame, a plurality of bonding leads, a die pad region, and a bezel structure. The bezel structure includes a bending portion shaped and disposed to facilitate a portion of said bezel structure being bent out of the plane of said carrier frame. A sensor IC may be secured to the die pad region, and wire bonds made to permit external connection to the sensor IC. The bezel structure includes portions which are bent such that their upper extent is in or above a sensing surface. The assembly is encapsulated, exposing on the top surface part of the bezel portions and the upper surface of the sensor IC, and on the bottom surface the contact pads. Two or more bezel portions may be provided, one or more on each side of the sensor IC.

Abstract: Handwriting verification methods and related computer systems, and handwriting-based user authentication methods and related computer systems are disclosed. A handwriting verification method comprises obtaining a handwriting test sample containing a plurality of available parameters, extracting geometric parameters, deriving geometric features comprising an x-position value and a y-position value for each of a plurality of feature points in the test sample, performing feature matching between geometric features of the test sample and a reference sample, determining a handwriting verification result based at least in part on the feature matching, and outputting the handwriting verification result. The geometric features may further comprise values derived from the geometric parameters, such as direction and curvature values. The handwriting verification result can be further based on a count of unlinked feature points.

Abstract: The present technique relates to an image processing device and an image processing method that enable generation of high-quality color images and depth images of the viewpoints other than the reference point on the receiving end even if the precision of the reference-point depth image is low when the occlusion regions of color images and depth images of the viewpoints other than the reference point are transmitted. A warping unit performs a foreground-prioritized warping operation toward the left viewpoint on the reference-point depth image. Using the reference-point depth image of the left viewpoint obtained as a result of the warping operation, an occlusion determining unit detects a left-viewpoint occlusion region that appears when a viewpoint is converted from the reference point to the left viewpoint. The present technique can be applied to 3D image processing devices, for example.

Abstract: A system for providing real-time alerts or actions comprises an image capturing device and a processor and a memory. The image capturing device is for capturing an image during vehicle operation and of an expected driver location. The processor is configured to: 1) detect a face of a driver in the image; 2) determine a set of face data from the image; and 3) determine authentication based at least in part on the set of face data. The memory is coupled to the processor and configured to provide the processor with instructions.

Abstract: According to one embodiment, a person image processing apparatus includes: an input processor configured to input a plurality of pieces of image data captured at different times by an image capture module; an extraction module configured to extract a person display area showing a same person from each of the pieces of image data captured at the different times; a feature detector configured to detect a feature point showing a feature of a part of a person from the person display area extracted from each of the pieces of image data and acquire reliability of the part shown in the feature point; and a correction module configured to, when correcting the person display area subjected to input processing by the input processor, perform weighting based on the reliability of the feature point included in the person display area.

Abstract: A machine-learning engine is disclosed that is configured to recognize and learn behaviors, as well as to identify and distinguish between normal and abnormal behavior within a scene, by analyzing movements and/or activities (or absence of such) over time. The machine-learning engine may be configured to evaluate a sequence of primitive events and associated kinematic data generated for an object depicted in a sequence of video frames and a related vector representation. The vector representation is generated from a primitive event symbol stream and a phase space symbol stream, and the streams describe actions of the objects depicted in the sequence of video frames.

Abstract: A method for processing data includes receiving a temporal sequence of depth maps of a scene containing a humanoid form having a head. The depth maps include a matrix of pixels having respective pixel depth values. A digital processor processes at least one of the depth maps so as to find a location of the head and estimates dimensions of the humanoid form based on the location. The processor tracks movements of the humanoid form over the sequence using the estimated dimensions.

Abstract: A person region information extraction unit (101) detects a person region where a person appearing in a video belongs, and generates person region information describing information of the person region. An accompanying person determination unit (102) identifies at least one accompanying person accompanying a tracking target person among persons included in the person region information based on the person region information and information specifying a tracking target person, and generates accompanying person information describing the accompanying person. A distinctive person selection unit (103) selects a distinctive person having a salient feature using the person region information among the accompanying person specified by the accompanying person information, and generates distinctive person information describing the distinctive person. A person tracking unit (104) calculates a tracking result for the distinctive person based on the person region information and the distinctive person information.

Abstract: A method for removing horizontal and vertical lines in a document image while preserving integrity of the character strokes that intersect the lines. For each detected horizontal line, a vertical run length profile is calculated. Areas of the run length profile having two adjacent peaks with a valley in between are detected, which correspond to intersections of the horizontal line with non-vertical lines. A first derivative curve may be used to detect such peaks and valleys. Areas of the run length profile with large run length value for consecutive pixel locations are also detected, which corresponds to intersections of the horizontal line with near vertical lines. The horizontal line is removed in areas outside of the intersection areas, while preserving pixels within the intersection areas. Vertical line removal may be done similarly. This template-free method can remove lines in tables, forms, and underline and extract handwriting or printed characters.

Abstract: A technique is described for table grid detection and separation during the analysis and recognition of documents containing table contents. The technique includes the steps of table detection, grid separation, and table cell extraction. The technique is characterized by the steps of detecting the grid lines of a table using, for example, inverse cell detection, separating noise and touching text from the grid lines, and extracting the cell contents for OCR recognition.

Abstract: A system that identifies and recognizes text that offers reduced the computational complexity for processing complex images. Widths of scan line segments within candidate text regions are determined, with the shortest segments selected as being representative of stroke width. Statistical features of the stroke widths are used as part of the process to classify each region as containing or not containing a text character or glyph.