Abstract: A security policy management solution (such as a Data Loss Prevention (DLP) system) is augmented to enable a user to model and visualize how changes in a security policy may impact (positively or negatively) the effectiveness of a policy configuration as well as the risk associated with its deployment. This technique enables a user (e.g., a security policy administrator) to evolve enterprise information technology (IT) security policies and, in particular, to generate and display “what-if” scenarios by which the user can determine trade-offs between, on the one hand, the effectiveness of a proposed change to a policy, and on the other hand, the risk associated with the proposed change.

Abstract: Respective edge weights are assigned to edges of a plurality of paths in a control flow graph representing a model of data flow of a computer program. Edge weights assigned to each edge are processed to determine a total edge weight for the respective paths, the total edge weight for a respective path being a sum of the edge weights assigned to the respective edges of the path. At least one path in the control flow graph whose total edge weight satisfies a particular total edge weight criteria can be identified, and the control flow graph can be updated to indicate to the user the at least one path in the control flow graph whose total edge weight satisfies the particular total edge weight criteria. The updated control flow graph can be presented to the user.

Abstract: Methods and systems of simulating the effects of an attack seeking fraudulently to modify target code that is interpretable by a processor are disclosed. Various implementations may include means and operations for searching for a set of sensitive instructions in the target code; generating an interpretable “simulation” code having instructions representing the result of said attack on the set of instructions; selecting memory registers that might be accessed during the interpretation of the simulation code; interpreting at least a portion of the simulation code; and storing at least one value of the registers during the interpretation in order to enable the effects of the attack to be analyzed.

Abstract: Disclosed are various embodiments for tracking developer behavior with respect to software analysis tools. In a first embodiment, issues with a first revision of a program are identified with an analysis tool. The configuration of the analysis tool may be updated based at least in part on a status of the issues in the second revision of the program. In a second embodiment, an analysis tool identifies issues with a program. A developer responsible for the issues is identified. A coding characteristic associated with the developer is then determined.

Abstract: Computing devices are disclosed that include functionality for providing a trustworthy indication of software integrity. The computing devices include a hardware trust evaluation device capable of determining the trustworthiness of computer programs executing on the devices. At least one trust indicator is also connected to the hardware trust evaluation device for providing an external indication of the trustworthiness of a computer program. Additional security information regarding the trustworthiness of the computer program may be displayed on the primary display device of the computing device. The display of the security information is triggered by a user of the computing device submitting a request through a secure mechanism, where the request is unobservable and inaccessible to programs executing on the computing device. Additional secure mechanisms, such as a unique user interface for displaying the security information, can be utilized to ensure the authenticity of the displayed security information.

Abstract: A method and apparatus for patch validation via replay and remediation verification is provided.

Abstract: Techniques are provided for decrypting an encrypted file within an enterprise network. The techniques include identifying by a password collecting module a password entered during a file encryption procedure performed at a terminal and storing the password; receiving an encrypted file by a data leakage protection (DLP) module; and attempting to decrypt the encrypted file with the password by the DLP module.

Abstract: Embodiments herein relate to accessing secure information over a network. The secure information is read and/or modified based on a request received over the network, regardless of an operating state of an operating system (OS) of the device and/or a power state of the device.

Abstract: Confidential content within a file is masked for display on a flexible display device. A legend relating the masking to the confidential content is displayed in a hidden area created by bending the flexible display device. The flexible display device monitors secondary users and their gaze towards the flexible display device and the hidden area to determine if unauthorized secondary users can see the display and hidden area of the flexible display device.

Abstract: An online computer system including a database uses an encrypted table that allows for write protection its contents. Middleware logic operating on the system acts as an interface for access to the database, so that any business logic on the system accesses the database through simple procedural calls to the middleware rather than directly to the database itself. The middleware logic abstracts logic that helps implement write protection with the encrypted table. Data to be encrypted that has been traditionally written to other tables is migrated to the encrypted table, where the data encrypted using an authenticated encryption with additional data (AEAD) algorithm. To implement AEAD, the original table, column, and primary key indicating where the data would have otherwise been stored are together used as additional authenticated data (AAD). This tuple of information is also stored in the encrypted table.

Abstract: A database access system may protect a field by storing the field as one or more underlying fields within a database. The database engine may not have access to keys used to protect the underlying fields within the database, such as by encryption, while the database access system may have access to the keys. Underlying fields may be used to store protected data and aid in the querying of protected data. The database access system may modify queries to use the underlying fields, which may include encrypting query terms and/or modifying query terms to fit the use of the underlying fields. The database access system may modify query results to match the format of the original query, which may include decrypting protected results and/or removing underlying fields.

Abstract: Methods and systems are provided for decentralizing user data access rights control activities in networked organizations having diverse access control models and file server protocols. A folder management application enables end users of the file system to make requests for access to storage elements, either individually, or by becoming members of a user group having group access privileges. Responsibility for dealing with such requests is distributed to respective group owners and data owners, who may delegate responsibility to authorizers. The application may also consider automatically generated proposals for changes to access privileges. An automatic system continually monitors and analyzes access behavior by users who have been pre-classified into groups having common data access privileges. As the organizational structure changes, these groups are adaptively changed both in composition and in data access rights.

Abstract: A method of transmitting data from an image forming apparatus, the method including: receiving identification information of a destination of the data; determining whether to transmit the data to the destination corresponding to the received identification information based on a security policy of the image forming apparatus; and transmitting the data to the destination in response to the destination being determined to be a destination to where the data is allowed to be transmitted, based on the security policy.

Abstract: The present invention generally relates to systems and methods for document redaction. The disclosed techniques adapt to the needs of different levels of data sensitivity and different needs for disclosure or analysis by using pre-defined templates related to use cases, and mapping those to the relative sensitivity of private data types both in their natural form and after redaction by various redaction types. In this way, data is given the appropriate level of protection within the needs of a given use case.

Abstract: Location, time, and other contextual mobile application policies are disclosed. Access state information associated with a managed set of applications may be determined based at least in part on environmental context data associated with a mobile device and one or more contextual policies associated with the managed set of applications. The access state information may be provided to at least one application included in the managed set of applications, wherein at least one application in the managed set of applications is configured to use the access state information to regulate use of the application in a manner required by the one or more contextual policies.

Abstract: An apparatus, method, and a computer program are provided to secure one or more sections of a document. For example, one or more sections of the document may be converted into secured content. The secured content may then be removed from the document, and replaced with replacement content in the document. This may prevent a viewer with no privileges from viewing secured content.

Abstract: Techniques and technologies for providing limited-access functionality accessible at a “login screen” (or “lock screen”) of a device are described. In at least some embodiments, a system includes a user interface operatively coupled to a processing component; and one or more instructions stored on a memory that, when executed by the processing component, are configured to: (a) generate a login portion displayed on the user interface, the login portion configured to receive at least one user access credential to determine whether to provide access to one or more authorized-access functionalities; and (b) generate a limited-access functionality access portion displayed on the user interface concurrently with the login portion, the limited-access functionality access portion configured to provide access to at least one limited-access functionality without requiring receipt of the at least one user access credential.

Abstract: An approach is provided for applying privacy policies to structured data. A privacy policy management infrastructure receives a request for an exchange of structured data among a plurality of devices. The privacy policy management infrastructure determines one or more elements of the structured data. The privacy policy management infrastructure also determines one or more privacy policies corresponding to the structured data, respective ones of the one or more elements, or a combination thereof. The privacy policy management infrastructure further determines to apply the one or more privacy policies to the structured data, respective ones of the one or more elements, or a combination thereof when initiating the exchange.

Abstract: The present disclosure involves a method. A request is received from a user to participate in an electronic social network. In response to the receiving of the request, a user is prompted to upload a digital picture that is representative of the user. An uploaded digital picture is uploaded in response to the prompting. The uploaded digital picture of the user is scanned for human faces. The user is prompted to upload a different digital picture that is representative of the user if the scanning indicates that the uploaded digital picture contains no human faces. The user is prompted to identify the human face belonging to the user if the scanning indicates that the uploaded digital picture contains a plurality of human faces.

Abstract: A digital file is associated with a security attribute related to watermarking criteria. The digital file content is encrypted, and may not be decrypted by a receiving computer unless the watermarking criteria is met. The receiving computer may decrypt only the encrypted portion of the security attribute unless the watermarking criteria are continuously met at the receiving computer. Improved security and reduction of pirating of the digital content is therefore provided.

Abstract: Some embodiments include a method for processing a scan chain in an integrated circuit, the method comprising receiving, in the integrated circuit, the scan chain, wherein the scan chain includes a secret key pattern; separating the secret key pattern from the scan chain; storing the scan chain in a first plurality of latches; storing the secret key pattern in a second plurality of latches; comparing the secret key pattern to a reference key pattern, the reference key pattern stored in a third plurality of latches; determining, based on the comparing the secret key pattern to the reference key pattern, that the secret key pattern does not match the reference key pattern; and generating a signal indicating that the secret key pattern does not match the reference key pattern.

Abstract: A method and system for processing information. An apparatus divides target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>K. The apparatus is an information processing device or an external storage device. The apparatus selects M pieces from the N pieces (K<M<N). After selecting the M pieces, the M pieces are stored in the external storage device which limits a totality of pieces of the N pieces being stored on the external storage device to the M pieces. After storing the M pieces, the target information is restored from at least K pieces of the N pieces after which D pieces of the M pieces in the external storage device are destroyed (D>M?K).

Abstract: A method, computer program product, and system to implement access control from a master device to a slave device over an inter-integrated circuit (I2C) interface are described. The method includes generating, using a processor, a control block defining the access control to the slave device over the I2C interface. The generating the control block is performed by the trusted code layer and the generating the control block is prohibited by the user-modifiable code layer. The method also includes controlling a command over the I2C interface to the slave device based on a generated command from the trusted code layer and the user-modifiable code layer in accordance with the control block.

Abstract: Reading apparatus for objects each bearing at least one RFID tag, said objects being placed in a cassette that can also be furnished with an RFID tag, said system comprising at least one element in the form of a tunnel in which said cassette can be placed, said element comprising at least one antenna and one RFID reader, said antenna comprising at least two coils composed of several turns, said coils being distributed along and around said tunnel.

Abstract: An RFID system capable of freely installing a plurality of communication devices and designing a desirable communication area, and a communication device configured to implement the system. In the RFID system, a first communication device configured to communicate with a control device includes a command receiver configured to receive a command from the control device, a first communication processing unit configured to perform communication with an IC tag in order to read/write tag information of the IC tag based on the received command, an instruction output unit configured to output a communication instruction to another communication device in response to a first communication result obtained by the first communication processing unit, and a response processing unit configured to generate response information to the control device based on the first communication result and a second communication result obtained by a second communication device.

Abstract: This invention is a comprehensive “Dynamic Security Code” (“DSC”) System (“DSC System”) that can change the security code of a prepaid, debit, or credit card (“Payment Card”). In an effort to thwart Card-Not-Present (“CNP”) fraud, the DSC System provides dynamic security code values (“DSC Values”) that have a limited use. The DSC Values provided by this DSC System can be calculated by various methodologies and can be used within existing standard payment card infrastructures. The DSC System can also be used with other form factors and in other environments not related to payments such as balance inquiries. The DSC Values can be calculated by a DSC Generator Server or on the card itself.

Abstract: One embodiment of the present invention sets forth a technique for efficiently interconnecting RFID interrogator elements. Each interrogator element is configured to function as both an RFID interrogator and an RFID tag. The RFID interrogator function enables one interrogator element to perform a read or write data operation to a second interrogator element functioning as an RFID tag. Two-way communications between interrogator elements is facilitated by read and write operations. A data backhaul network may be advantageously implemented as a wireless mesh network, comprising a plurality of interrogator elements, to transmit data from each interrogator element to a server for processing.

Abstract: A wireless communication module includes an antenna on a first conductive wall among the conductive walls enclosing a closed space; a tag reader connected with the antenna to read an RFID tag in the closed space; and a reflective part having a thin film or plate shape between the first and second conductive walls facing each other. The reflective part partitions the closed space into first and second spaces. The antenna radiates a radio wave that is reflected by the reflective part to become a first reflected wave in the first space. The radio wave also transmits through the reflective part, reflected by the second conductive wall, and transmits through the reflective part to become a second reflected wave in the first space. The position of the reflective part is determined so that the first and second reflected waves are canceled by each other.

Abstract: A method of addressing one or more RFID devices within a group of RFID devices includes transmitting a command to respond to the group at a first modulation depth. The method further includes receiving a response from a first sub-group of RFID devices in the group that have a minimum modulation depth less than or equal to the first modulation depth. The method further includes transmitting the command to respond to the group at a second modulation depth higher than the first modulation depth. The method further includes receiving a response from a second sub-group of RFID devices within the group that have a minimum modulation depth less than or equal to the second modulation depth. The method is also directed to authenticating RFIDs by comparing a measured minimum modulation depth to a known minimum modulation depth.

Abstract: A food freshness card emits energy tuned to the natural frequency of fresh foods. The card may include a material programmed using scalar waves. The material may be a hologram. Information is embedded into the material via a setup that uses a wave function generator to produce resonant frequencies for the application and drive wave information from a transmitting electrode to a receiving electrode. The scalar waves between the electrodes may be subjected to a wave or field source modulating the resultant wave information received at the receiving electrode. A material placed on a receiving coil at the receiving electrode receives the resultant wave information programming the material to emit energy tuned to the natural frequencies of fresh foods. Food or liquid placed within an effective radius of the card is kept fresher by exposure to the energetic information emitted by the material.

Abstract: An RFID system includes an antenna of a reader/writer and an antenna of an RFID tag. Transmission and reception of a high-frequency signal of a UHF band is performed between the antenna of the reader/writer and the antenna of the RFID tag that are arranged so as to be adjacent to each other. A loop antenna including a loop conductor is used as the antenna of the reader/writer, and coil antennas including a plurality of laminated coil conductors are used as the antenna of an RFID tag. In addition, the conductor width of the loop conductor in the loop antenna is greater than the conductor widths of the coil conductors in the coil antennas.

Abstract: A chip card reading arrangement is provided including a chip card reading device including a data processing circuit and a reader antenna coupled to the data processing circuit arranged at a surface of the chip card reading device for placing a chip card to communicate with the chip card reading device via the reader antenna. The data processing circuit is configured to process at least one of signals received via the reader antenna and signals to be transmitted via the reader antenna. The chip card reading arrangement further includes an antenna structure including an antenna body, a first antenna and a second antenna coupled to the first antenna and surrounded by the first antenna. The antenna structure is arranged on and fixed to the surface of the chip card reading device such that the reader antenna surrounds the second antenna.

Abstract: Embodiments of a method for clock synchronization in a radio frequency identification (RFID) equipped device, an RFID equipped device, and a hand-held communications device are described. In one embodiment, a method for clock synchronization in an RFID equipped device involves measuring a difference between a field clock frequency generated from an external clock and an internal clock frequency generated from an internal clock and generating outgoing bits in the RFID equipped device in response to the measured difference. Generating the outgoing bits involves adjusting the bit length of at least one of the outgoing bits in response to the measured difference. Other embodiments are also described.

Abstract: A method of operating an indicia reader includes reading at least one indicia, the indicia having an encoded executable software program; storing the encoded executable software program into memory of the indicia reader; and running the encoded executable software program.

Abstract: A hand mount for a mobile scanner includes an elongated body having an upper surface, a lower surface opposite the upper surface, a scanner receiving cradle disposed on the upper surface that removably receives a mobile scanner, a scanning end, and an opposite securing end; a hook extends outward from the lower surface of the body, adjacent the scanning end, and bends towards the securing end; and a conformable wrist wrap is positioned adjacent the securing end of the body, with the body being positionable on a back area of a wearer's hand whereby the hook is received between a thumb and index finger of the hand and the conformable wrist wrap is wrapped around a wrist area.

Abstract: A processing channel is operatively connected to a biometric device. The processing channel includes an analog-to-digital converter (ADC) connected to at least one of an amplifier and an offset circuit. Biometric signals representing captured biometric data, such as a fingerprint image, are controllably fitted into an input range of the ADC. The ADC input range can include one or more removed ranges and one or more adjustable allowed input ranges. One or more channel parameters are adjusted until a desired number of biometric signals are included in the one or more removed ranges.

Abstract: A touch device with fingerprint identification function includes a glass substrate having a first and a second face, a first electrode layer having multiple first electrodes, an insulation layer, a second electrode layer having multiple second electrodes, a wiring layer, a film layer covering the second electrode layer and the wiring layer, and a fingerprint identification sensation layer having multiple fingerprint identification chips and multiple transmission leads. The first face is defined with a touch section and a non-touch section. The first electrode layer is disposed on the second face. One face of the insulation layer covers the first electrode layer. The second electrode layer is disposed on the other face of the insulation layer. The wiring layer is disposed at the non-touch section and selectively electrically connected to the first and second electrode layers. The touch device is able to lower manufacturing cost and enhance fingerprint identification precision.

Abstract: A contact image sensor having an illumination source; a first SBG array device; a transmission grating; a second SBG array device; a waveguiding layer including a multiplicity of waveguide cores separated by cladding material; an upper clad layer; and a platen. The sensor further includes: an input element for coupling light from the illumination source into the first SBG array; a coupling element for coupling light out of the cores into output optical paths coupled to a detector having at least one photosensitive element.

Abstract: To extract a fingerprint core for alignment of a fingerprint image for fingerprint matching. The present invention comprises: a core extraction unit which has an endpoint processing function of generating an endpoint image by extracting bifurcations in skeleton image and subjecting the respective bifurcations to endpoint processing; and a skeleton image generation/extraction unit which extracts skeletons of a density-inverted image formed by inverting the density colors of the generated end point image from white to black and vice versa, and performs processing for generating the skeleton image, the core extraction unit being provided with a core determination function of specifying a skeleton pixel having the highest value of a loop score indicating the degree of a bend in a skeleton shape in the density-inverted image, and defining this skeleton pixel as the finger print core.

Abstract: Methods, systems, and programming for user identification and authentication are presented. In one example, an apparatus for user authentication is disclosed. The apparatus comprises: a surface on which an object is placed; a light source configured for providing light illuminating a first portion of the surface; a brightness measuring unit configured for measuring brightness distribution in a second portion of the surface, wherein the brightness distribution is caused by the object that spreads the light from the first portion to the second portion; and a determiner configured for determining whether the object is an organic body part based on the brightness distribution.

Abstract: A system, article, and method of curved object recognition using image matching for image processing.

Abstract: The description relates to estimating object orientation. One example includes determining a first estimate of object orientation using a first technique and image data. In this example, a second estimate of the object orientation can be determined using a second technique and the image data. The first estimate can be corrected with the second estimate to generate a corrected object orientation estimate which can be output.

Abstract: An information processing device includes: an image acquirer acquiring a shot image of a user; a registered user information holder holding face identification data of a registered user; a face authentication carrying out authentication of a face image in the shot image by using the face identification data held in the registered user information holder; an information processing section executing information processing on a basis of an authentication result by the face authentication section; a face identification data registration section updating the face identification data on a basis of a face image extracted from the shot image; and a provisionally-registered data holder temporarily holding data relating to the face image when the face image satisfies a predetermined condition. The face identification data registration section determines whether or not to update the face identification data on the basis of the face image by evaluating the data.

Abstract: A method, non-transitory computer readable medium and apparatus that provides feedback to a user for interacting continuously without any disconnect. It gives real time visual clues and gestures based on application need. This solves the problem of a disconnected user found in current system and applications as user will be continuously aware whether and how much he is being tracked by the application that will allow him to continuously interact with the application. The requirements from various applications like FBT (Full body Tracking), HBT (Half Body Tracking), LTO (Leg Tracking Only), HTO (Hand Tracking Only), STO (Specific Tracking only) is sent to the CFBTE (Continuous Full Body Tracking Engine). The CFBTE process the requirements and generates the visual clues and gesture events. In visual clues the tracking level/intensity is continuously displayed, which will guide the user on system readiness and effectiveness for interaction.

Abstract: A motion information processing apparatus according to an embodiment includes processing circuitry. The processing circuitry obtains pieces of motion information of a subject acquired from mutually-different positions with respect to the subject performing a predetermined motion. The processing circuitry calculates association information used for bringing the pieces of motion information obtained into association with one another. The processing circuitry exercises control so as to cause an output circuitry to output such output information in which the pieces of motion information are kept in association with one another on the basis of the association information calculated.

Abstract: A pedestrian detecting system includes a depth capturing unit, an image capturing unit and a composite processing unit. The depth capturing unit is configured to detect and obtain spatial information of a target object. The image capturing unit is configured to capture an image of the target object and recognize the image, thereby obtaining image feature information of the target object. The composite processing unit is electrically connected to the depth capturing unit and the image capturing unit, wherein the composite processing unit is configured to receive the spatial information and the image feature information and to perform a scoring scheme to detect and determine if the target object is a pedestrian. The scoring scheme performs weighted scoring on a spatial confidence and an appearance confidence to obtain a composite scoring value to determine if the target object is the pedestrian.

Abstract: Embodiments of systems and methods for directly reading and verifying characters on a personalized document, are provided. A surface of the personalized document is illuminated independently or simultaneously by first and second light sources. The first light source has a ring shape, surrounds the personalized document in 360 degree, and transmits a grazing incident light to illuminate the surface of the personalized document. An incident light from the second light source is reflected by a beam splitter and illuminates the surface of the personalized document in a direction generally perpendicular to the surface. Light reflected from the surface of the personalized document in a direction generally perpendicular to the surface thereof is collected by a camera.

Abstract: A computer product including a data structure for organizing of a plurality of documents, and capable of being utilized by a processor for manipulating data of the data structure and capable of displaying selected data on a display unit. The data structure includes a plurality of directionally interlinked nodes, each node being associated with one or more documents having a header and body text. All the documents are associated with a given node and have identical normalized body text. All documents that have identical normalized body text are associated with the same node. One or more of the nodes is associated with more than one document. For any node that is a descendent of another node, the normalized body text of each document associated with the node is inclusive of the normalized body text of a document that is associated with the other node.

Abstract: An iris recognition system may include an optical system having an intentional amount of spherical aberration that results in an extended depth of field. A raw image of an iris captured by the optical system may be normalized. In some embodiments, the normalized raw image may be processed to enhance the MTF of the normalized iris image. An iris code may be generated from the normalized raw image or the enhanced normalized raw image. The iris code may be compared to known iris codes to determine if there is a match.

Abstract: A system for vector extraction comprising a vector extraction engine stored and operating on a network-connected computing device that loads raster images from a database stored and operating on a network-connected computing device, identifies features in the raster images, and computes a vector based on the features, and methods for feature and vector extraction.