Abstract: Methods and systems for evaluating customer security preferences are presented. In some embodiments, a computer system may receive, from a customer portal computing platform, a request for a security dashboard user interface for a customer. In response to receiving the request for the security dashboard user interface, the computer system may request, from a security score computing platform, a security score for the customer. Subsequently, the computer system may receive, from the security score computing platform, the security score for the customer. The computer system then may generate, based on the security score for the customer, the security dashboard user interface for the customer. Thereafter, the computer system may provide, to the customer portal computing platform, the generated security dashboard user interface for the customer.

Abstract: Example embodiments disclosed herein relate to managing basic input/output system (BIOS) access. Example embodiments include communicating with a remote directory server in response to an attempt to access a setting of a BIOS module.

Abstract: Methods and systems for generating and using a BIOS security display include determining whether a change in a BIOS user setting is associated with security of an information handling system. When the BIOS user setting is associated with security, a security level for the BIOS may be calculated based on weighted security values for BIOS user settings. Security levels for boot phases may also be individually calculated. The security levels may be displayed in the BIOS to the user when the BIOS user setting is changed.

Abstract: A client device includes a flash chip for storing firmware and a microcontroller for storing an image in read-only memory. The image corresponds to an accurate representation of firmware. When the client device is powered on but before the firmware is executed to boot the client device, the firmware stored on the flash chip is compared to the image. In the event that the firmware does not correspond to the image, the client device is not booted and the firmware is overwritten with the image. The client device may then be booted using the flashed firmware. To update the firmware, the client device may receive a new image from a server. The new image is stored in the read-only memory of the microcontroller. The firmware may then be re-flashed using the new image.

Abstract: Booting a machine in a secure fashion in a potentially unsecure environment. The method includes a target machine beginning a boot process. The method further includes the target machine determining that it needs provisioning data to continue booting. The target machine contacts a secure infrastructure to obtain the provisioning data. The target machine provides an identity claim that can be verified by the secure infrastructure. As a result of the secure infrastructure verifying the identity claim, the target machine receives a request from the secure infrastructure to establish a key sealed to the target machine. The target machine provides the established key to the secure infrastructure. The target machine receives the provisioning data from the secure infrastructure. The provisioning data is encrypted to the established key. The target machine decrypts the encrypted provisioning data, and uses the provisioning data to finish booting.

Abstract: Identifying security vulnerabilities related to inter-process communications by identifying within the instructions of a computer software application an object creation location configured to create an inter-process communications object, identifying within the instructions of the computer software application a location of an inter-process communications method, determining whether a path exists for an inter-process communications object created at the object creation location to propagate to the inter-process communications method, classifying with a classification selected from a plurality of predefined classifications, any of the inter-process communications object, the object creation location, and the location of the inter-process communications method, and reporting as a security vulnerability the classified inter-process communications object, object creation location, or location of the inter-process communications method if the path exists and if the classification is predefined to indicate that re

Abstract: Identifying security vulnerabilities related to inter-process communications by identifying within the instructions of a computer software application an object creation location configured to create an inter-process communications object, identifying within the instructions of the computer software application a location of an inter-process communications method, determining whether a path exists for an inter-process communications object created at the object creation location to propagate to the inter-process communications method, classifying with a classification selected from a plurality of predefined classifications, any of the inter-process communications object, the object creation location, and the location of the inter-process communications method, and reporting as a security vulnerability the classified inter-process communications object, object creation location, or location of the inter-process communications method if the path exists and if the classification is predefined to indicate that re

Abstract: Methods and systems for evaluating customer security preferences are presented. In some embodiments, a computer system may receive, from a security dashboard computing platform, a request for a security score associated with a customer. In response to receiving the request for the security score associated with the customer, the computer system may request, from a customer portal computing platform, one or more security preferences associated with the customer. Subsequently, the computer system may receive, from the customer portal computing platform, the one or more security preferences associated with the customer. The computer system then may determine, based on at least one security score definition file and based on the one or more security preferences associated with the customer, a security score for the customer. Thereafter, the computer system may provide, to the security dashboard computing platform, the determined security score for the customer.

Abstract: A method and computing system for receiving a plurality of discrete audio signals from a plurality of participants of a synchronous communication session. The plurality of discrete audio signals are combined to form a composite audio signal. At least a portion of the composite audio signal is divided into a plurality of sequential time slices. The plurality of sequential time slices are processed to identify one or more copyright-infringing time slices. The one or more copyright-infringing time slices are associated with a copyright infringing participant chosen from the plurality of participants of the synchronous communication session.

Abstract: Embodiments for secure data storage that include systems and methods that receive, from a second system maintained by a second entity, a data payload to be stored by the system; secure the data payload at a first time; store the secured data payload; receive a request for access to the data payload; and provide certification, corresponding to a second time subsequent to the first time, that the data payload has not been altered since the first time.

Abstract: Redacting material in a user interface is provided. A monitoring agent waits for a change in input or output of user content. A change comparator identifies the change for sensitive material. A type comparator identifies the type of sensitive material. A redaction engine redacts the change according to the identified type of sensitive material.

Abstract: One system includes one or more host computing systems, each host computing system including at least one execution core and a system memory. The system includes a plurality of virtual partitions executing on the one or more host computing systems and including a first partition having at least a portion of the system memory associated with at least one of the one or more host computing systems and configure to store a database therein. The system also includes an interconnect layer communicatively connecting the plurality of virtual partitions, the interconnect layer providing a programming interface by which direct memory access operations between partitions are coordinated. In response to database commands received at the first partition, the data stored in the database is provided to a requesting partition a direct memory access operation.

Abstract: A computer system according to certain aspects uses past ticket usage data indicating a probability that a respective entity would personally use a ticket issued to them based on a history of past ticket usage. A ticket controller can respond to ticket requests by determining whether a ticket should be issued to a requesting entity based on the past ticket usage data associated with the requesting entity's profile, and if so issue a ticket to the requesting entity in electronic form. The system can receive a ticket use notification and update the past ticket usage data associated with the requesting entity's profile based on the ticket use notification, where the updated past ticket usage data conveys whether the requesting entity presented the ticket themselves.

Abstract: Methods and systems for securely storing data in a database are described herein. According to an aspect, a technique may include receiving data to be stored, dividing the data into a plurality of elements, encrypting each element of the plurality of elements with an encryption function, combining the encrypted elements to form a data attribute, and storing the data attribute in the database. According to another aspect, a technique for searching a database having encrypted data attributes may include receiving a search term, encrypting the search term with an encryption function, and searching a database for records having data attributes matching the encrypted search term.

Abstract: Provided is a process of operating a zero-knowledge encrypted database, the process including: obtaining a request for data in a database stored by an untrusted computing system, wherein the database is stored in a graph that includes a plurality of connected nodes, each of the nodes including: an identifier, accessible to the untrusted computing system, that distinguishes the respective node from other nodes in the graph; and an encrypted collection of data stored in encrypted form, wherein: the untrusted computing system does not have access to an encryption key to decrypt the collections of data, the encrypted collections of data in at least some of the plurality of nodes each include a plurality of keys indicating subsets of records in the database accessible via other nodes in the graph and corresponding pointers to identifiers of the other nodes.

Abstract: A method of dynamically determining the access rights of a client to a record comprises receiving an access request from the client with respect to the record, determining one or more contexts relating to the access request, calculating a score for each determined context, calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, and determining the client's access rights according to a comparison of the overall score to the score for each right in the rights policy.

Abstract: A device and a method for online storage, device and method for searching for similar content, a device and a method of transmission and a device and a method. Encrypted data is saved at a provider of online services. With the encrypted data, encrypted hashing data is saved with a public key and the content to save is encrypted with the encrypted hash. This advantageously enables data duplication at the online service provider to be prevented while preserving the private life of the users of the service. In order to search for content similar to reference multimedia data, fingerprints are also saved at the service provider. In order to limit the number of false positives returned, the fingerprint can further contain a search fingerprint, an encrypted selection fingerprint.

Abstract: In accordance with disclosed embodiments, there are provided methods, systems, and apparatuses for implementing data masking via compression dictionaries including, for example, means for receiving customer data at the host organization; compressing the customer data using dictionary based compression and a compression dictionary; storing the compressed customer data in a database of the host organization; retrieving the compressed customer data from the database of the host organization; and de-compressing the compressed customer data via a masked compression dictionary, in which the masked compression dictionary de-compresses the customer data into masked customer data. Other related embodiments are disclosed.

Abstract: The present disclosure includes a method comprising encrypting sensitive data, generating a token comprising a data identifier, tokenizing the encrypted sensitive data, and/or storing the encrypted sensitive data in association with the token to a token vault. Tokenizing may comprise mapping the encrypted sensitive data to the token. The method may further comprise storing the token to a cloud application, wherein the cloud application comprises a software application that functions within a cloud computing environment.

Abstract: In accordance with some embodiments, a protected execution environment may be defined for a graphics processing unit. This framework not only protects the workloads from malware running on the graphics processing unit but also protects those workloads from malware running on the central processing unit. In addition, the trust framework may facilitate proof of secure execution by measuring the code and data structures used to execute the workload. If a part of the trusted computing base of this framework or protected execution environment is compromised, that part can be patched remotely and the patching can be proven remotely throughout attestation in some embodiments.

Abstract: A domain-specific hardwired symbolic machine is disclosed that processes information via the flexible formation and hardwired mapping of symbols from one or more domains onto other such domains, computing and communicating with improved security because it has no CPU, no Random Access Memory (RAM), no instruction registers, no Instruction Set Architecture (ISA), no operating system (OS) and no applications programming. The machine may learn, e.g. from its users, via hardwired analysis of domain faults with associated recovery. The machine may modify itself according to interaction with its authorized authenticated users with self-modification via learning within application-specific, user-specific constraints hardwired into the original machine, eliminating configuration management and computer programming.

Abstract: Execution of an obfuscation application may cause a computing device to translate bits of a hashed value according to a sparse bit selection pattern, the sparse bit pattern including a translation of bits of the hashed value into reordered bit unit groupings sized according to a numeric base of a digit cypher; and generate an obfuscated value using the translated bit unit groupings of the hashed value as indices into the digit cypher, the digit cypher including a mapping of the indices to output values in the numeric base. The obfuscation application may further cause the device to receive a target value to be obfuscated in data records received from a data source, hash the target value using a hashing module to create the hashed value, in some cases truncate the hashed value, and replace the target value in the data records with the obfuscated value.

Abstract: A domain-specific hardwired symbolic web server machine is described that processes information via the hardwired mapping of symbols from one or more domains onto other such domains, computing and communicating with improved security and reduced power consumption because it has no CPU, no Random Access Memory (RAM), no instruction registers, no Instruction Set Architecture (ISA), no operating system (OS) and no applications programming. The machine provides web services by recognizing legal requests such as HTTP GET request and responding with an HTML web page. In some embodiments, the machine has no unconstrained RAM into which malware may insert itself and needs no anti-virus software.

Abstract: Encryption/authentication circuitry includes an authentication portion operating on a plurality of lanes of encrypted data spanning a number of channels, and including hash constant storage for a predetermined maximum number of channels, and partial hash selection circuitry for determining, for each respective lane, a respective hash index into the hash constant storage. Wind-down mode detection circuitry also is described, as well as a method of operating such circuitry also is provided.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: Systems, apparatuses and methods for associating flexible Internet based information with physical objects is described. An example system includes a database server configured to generate a tag responsive to receiving a request from a requesting device. The tag is encoded with a uniform resource locator. The database server is further configured to associate a tag type of a plurality of tag types with the tag. The tag type indicates an intended use of the tag. The system further includes a memory configured to store data corresponding to the tag. The data may include the uniform resource locator and the tag type.

Abstract: Calibrating extrinsic parameters of an imaging system in an automated data reading system includes obtaining, from the imaging system, image data representing an imaged portion of a planar calibration target. The target is coupled to a housing of the automated data reading system and superimposed on a surface thereof. For example, the calibration target is placed on a conveyer surface, or it is printed on the housing of the automated data reading system. The imaged portion of the planar calibration target includes spaced-apart optical codes disposed at positions that coincide with predetermined locations of the automated data reading system to define known calibration-control points for the surface. Optical codes represented in the image data are decoded to obtain observed calibration-control points used for calibrating the extrinsic parameters based on differences between the known and observed locations of the calibration-control points.

Abstract: Method and system for reading radio frequency identification (RFID) tags in a portal system comprises performing a first detection and a second detection of the RFID tags in a portal zone. The method further involves performing a first and second sampling of the RFID tags in the portal zone. Thereafter, based on the first detection, second detection, first sampling and second sampling, an occurrence is determined of at least one of the RFID tags transitioning between a first physical space on one side of the portal system and a second physical space on an opposing side of the portal system.

Abstract: A method for managing a sphere of wireless tags, the method comprises programming, by a wireless reader, a group of wireless tags to belong to the sphere of wireless tags; sending by the wireless reader sphere beacons aimed to the wireless tags of the sphere; detecting a loss of a wireless tag of the sphere if the wireless tag did not respond to a predetermined number of sphere beacons; and responding to the detecting of the loss of the wireless tag.

Abstract: A radio frequency identification (RFID) transceiver may be associated with an identification proximity to identify an RFID tag associated with a component. A control may determine proper inflation of component based on the RFID tag being identified.

Abstract: A portable data terminal that includes a housing and an environmentally responsive device for collecting data about the environment surrounding the housing. The portable data terminal also includes an encoded information reader unit with one or more data collection hardware devices, which can capture data encoded in decodable indicia, e.g., bar codes. In one embodiment, the portable data terminal is configured to operate in a mode that processes the decodable indicia, and the environmental data so as to correlate the information decoded in the decodable indicia with the environmental data.

Abstract: An optical indicia reading terminal can comprise a microprocessor, a memory, and an image sensor integrated circuit for decoding decodable indicia. The image sensor integrated circuit can be configured to output a plurality of digital signals, each digital signal being representative of light incident on at least one pixel of the two-dimensional image sensor. The optical indicia reading terminal can be configured to selectively acquire a plurality of luminance signals from the plurality of digital signals. Whether the output image data from the sensor is digitally stored as YUV data or YCBCR data, the terminal parses out the luminance signal, Y, in the data matrix to store a monochrome image for decoding. The optical indicia reading terminal can be configured to process the frame of image data for decoding decodable indicia.

Abstract: An optical code scanner is presented that includes multiple scanning windows for reading an optical code where each scanning window can be optimized for reading optical codes presented in either printed or electronic form. The optical code scanner supports multiple scanning modes where each scanning mode is based on a different method of reading optical codes and each method offers different advantages. Each of the multiple scanning windows is assigned to use one of the scanning modes. The scanning mode for a window can also be reassigned at any time to a different mode.

Abstract: After capturing a barcode image, generate at least one sample line accordingly, acquire sample data of the at least one sample line, generate a first and a second reference lines, generate an upper bound and a lower bound according to the first and the second reference lines, generate a first curve by interpolating all sample points, generate a plurality of effective sample shapes of the first curve according to the upper bound and the lower bound, identify an internal point of each effective sample shape, generate a second curve by interpolating all internal points, and digitize the barcode image to binary data by comparing sample data with the second curve.

Abstract: A method of capturing biometric data is provided that includes activating a security application in a device. The security application is activated by an operator of the device and is configured to cause the device to display an outline image. Moreover, the method includes displaying the outline image in a stationary position on a display of the device, positioning desired biometric data proximate the device such that the desired biometric data appears as a biometric image on the device display, and monitoring the outline and biometric images shown on the device display. Furthermore, the method includes positioning the device and the desired biometric data to better align the outline and biometric images when the outline and biometric images do not align and capturing the desired biometric data from an individual after approximately aligning the outline image with the biometric image.

Abstract: The present invention generally relates to a method for removing disturbances in an image captured by a fingerprint sensor, and specifically to reduction of noise in an acquired fingerprint image by incorporating the sensing principle into the applied method for noise reduction, wherein the noise reduced image is used for determining a representation of a fingerprint pattern. Advantages with the invention include enhanced determination of fingerprint patterns from fingerprint images captured using a fingerprint sensor. The invention also relates to a corresponding electronic device and to a computer program product.

Abstract: A method of authenticating users is provided that includes capturing biometric authentication data of a user and processing the captured biometric data into an image. Moreover, the method includes determining a region of interest of the image and a gray scale image from the image, determining an optimum transformation parameter set within the region of interest, and aligning the gray scale image with an enrollment gray scale image generated during enrollment of the user using results of the optimum transformation parameter set determination. Furthermore, the method includes extracting biometric feature data from the gray scale image and verifying an identity of the user with extracted biometric feature data included in a region of agreement.

Abstract: A method of capturing biometric data is provided that includes activating a security application in a device. The security application is activated by an operator of the device and is configured to cause the device to display an outline image. Moreover, the method includes displaying the outline image in a stationary position on a display of the device, positioning desired biometric data proximate the device such that the desired biometric data appears as a biometric image on the device display, and monitoring the outline and biometric images shown on the device display. Furthermore, the method includes positioning the device and the desired biometric data to better align the outline and biometric images when the outline and biometric images do not align and capturing the desired biometric data from an individual after approximately aligning the outline image with the biometric image.

Abstract: A determination method for determining reliability of a selective binding amount of a substance to be examined obtained as detection intensity of a label when a labeled substance to be examined binds to a selective binding substance fixed as a spot on a carrier includes: determining a position of the spot in image data obtained by imaging the detection intensity in the carrier and extracting a pixel group corresponding to the spot; calculating a ratio or a difference between a median value of the detection intensity of the pixel group extracted at the determining and a median value of the detection intensity of the pixel group excluding a certain top proportion of and/or a certain bottom proportion of pixels; and determining quality of the reliability based on the ratio or the difference calculated at the calculating and a certain reference value.

Abstract: In a technique for quantifying the spatial distribution of cells or sub-cellular structures, image data representing a spatial map of biomarkers is processed to obtain a set of coordinates. Each of the coordinates in the set denotes the location of a cell or sub-cellular structure represented by a biomarker or combination of biomarkers. The set of coordinates is processed into a two-dimensional symmetric (2N?1)×(2N?1) or 2N×2N matrix. The resulting matrix may be used for various purposes, such as assigning subjects clinical characteristics, and/or forming and/or testing scientific hypotheses for interventions, for example. Also described herein is an apparatus for performing the described technique.

Abstract: The invention relates to a method for enabling the authentication or identification of a person (1) using a first electronic device (2) comprising an image-capturing unit and a data-transmission unit, the method including a step of registering said person in a verification system (3). The registration step includes the steps of: capturing, using the image-capturing unit of said electronic device, a first image (h) of at least one object (O) of any kind that is secretly selected by the person; and transmitting said first image to the verification system by means of said data transmission device of said first electronic device.

Abstract: An access permission level for a first individual may be calculated by utilizing repositories of social network databases. The facial image of a first individual may be captured and compared with a repository of pre-categorized individuals. In response to the facial image of the first individual being absent from the repository of pre-categorized individuals, the repositories of social network databases may be crawled to collect facial images of non-categorized individuals. The first facial image may be compared with the facial images of non-categorized individuals, and a second individual may be identified. In response to identifying, categorization data associated with the second individual may be collected. Utilizing the categorization data, the second individual may be sorted into one of a plurality of categories. Based upon an image match score and the category which the second individual is sorted into, an access permission level may be determined and provided to a user.

Abstract: A computer-implemented method of grouping faces in large user account for creating an image product includes adding the face images obtained from an image album in a user's account into a first chunk; if the chunk size of the first chuck is smaller than a maximum chuck value, keeping the face images from the image album into the first chunk; otherwise, automatically separating the face images from the image album into a first portion and one or more second portions; keeping the first portion in the first chunk; automatically moving the second portions to subsequent chunks; automatically grouping face images in the first chunk to form face groups; assigning the face groups to known face models associated with the user account; and creating a design for an image-based product based on the face images in the first chunk associated with the face models.

Abstract: Methods, systems, and computer program products for creating a personalized, automated receptionist are provided herein. A method for providing an automated receptionist for a host user includes obtaining one or more images of a work environment of the host user; processing the one or more images to determine if at least one visitor is present in the work environment; and if the at least one visitor is determined to be present in the work environment, notifying the host user that the at least one visitor is present in the work environment, wherein at least one of the steps are performed by at least one hardware device. The method may be initiated, for example, when the host user is not present in the work environment. The automated receptionist can optionally (i) provide a greeting to the at least one visitor; (ii) enable communication between the at least one visitor and the host user; and/or (iii) provide one or more information items to the at least one visitor when the host user is not present.

Abstract: A system may receive image data and capture motion with respect to a target in a physical space and recognize a gesture from the captured motion. It may be desirable to isolate aspects of captured motion to differentiate random and extraneous motions. For example, a gesture may comprise motion of a user's right arm, and it may be desirable to isolate the motion of the user's right arm and exclude an interpretation of any other motion. Thus, the isolated aspect may be the focus of the received data for gesture recognition. Alternately, the isolated aspects may be an aspect of the captured motion that is removed from consideration when identifying a gesture from the captured motion. For example, gesture filters may be modified to correspond to the user's natural lean to eliminate the effect the lean has on the registry of a motion with a gesture filter.

Abstract: An image processing system comprises a generating unit that reads documents and generates a read image including document images; an extracting unit that extracts each of the document images; a character recognizing unit that performs character recognition processing on each the document images; a determining unit that determines whether first information and second information have a pair relationship, the first information being any one of recognition results obtained on one side of the document images, and the second information being any one of recognition results obtained on the other side of the document images; and a registering unit that registers pieces of information for the recognition results corresponding to the one side and to the other side respectively including the first information and the second information which are determined that both pieces of information have the pair relationship, as information for a piece of the documents, in a storage unit.

Abstract: An ophthalmic image processing method includes: acquiring information about characteristics of an examinee's eye including corneal information about the corneal anterior surface shape of the examinee's eye, and refractivity information about refraction of the examinees eye as a whole; generating a simulation image of a target image formed at fundus of the examinee's eye using the refractivity information; and simultaneously displaying an eyeball model image showing an eyeball structure, the simulation image, and a corneal information image associated with the cornea on the eyeball model image and corresponding to the corneal information.

Abstract: A method for detecting a generalized passerby includes: acquiring an input image; determining whether a preset common feature of a wheel exists in the input image; selecting an image window at left side or right side or upper side of a center of a region where the preset common feature of the wheel is located in a case that the preset common feature of the wheel exists in the input image; inputting the selected image window into a preset upper-body classifier; detecting whether an upper body of a passerby exists in the selected image window and outputting a first detection result.

Abstract: A parking camera system and a method of driving the same includes a plurality of cameras equipped with a vehicle, an image synthesizer for synthesizing images photographed by the plurality of cameras, and an estimated travel trajectory generating and overlaying processor for generating an estimated travel trajectory of the vehicle by receiving steering angle information of the vehicle, and synthesizing the estimated travel trajectory of the vehicle with the images synthesized by the image synthesizer.

Abstract: A lane detection method includes acquiring an image in front of a vehicle using a photographing unit provided in the vehicle, detecting, from the acquired image, a positive edge (P.E.) in which a right pixel has a higher brightness value than a brightness value of a left pixel, detecting, from the acquired image, a negative edge (N.E.) in which a left pixel has a higher brightness value than a brightness value of a right pixel, generating a first expansion image by expanding a pixel by a length corresponding to a width of a lane on a right side of the positive edge (P.E.), generating a second expansion image by expanding the pixel by the length corresponding to the width of the lane on a left side of the negative edge (N.E.), and detecting the lane by combining the first expansion image and the second expansion image.