Abstract: In order to solve this problem, the first aspect of the present invention is a system for duplicating (cloning) a physical environment in a virtual environment using CMDB, the system comprising: means for setting a level of confidentiality for attributes of configuration items (CI) of CMDB managing the source hardware information and software information, and means for sending CMDB information including CI having the level of confidentiality set to a virtual environment constructing means connected via a network; the virtual environment constructing means having a means for constructing the source environment in a virtual environment based on sent CMDB information; and the sending means having a means for changing the level of confidentiality of CI attributes having the level of confidentiality set in accordance with a default confidentiality policy.

Abstract: Methods, apparatus and articles of manufacture for protecting virtual machines processing sensitive information are provided herein. A method includes processing a request for uninterrupted virtual machine execution of a designated section of code by a first virtual machine; enabling uninterrupted virtual machine execution of the designated section of code by the first virtual machine on a selected core of a central processing unit based on said request; and disabling said uninterrupted virtual machine execution of the designated section of code by the first virtual machine based on an indication that the first virtual machine completed execution of the designated section of code.

Abstract: Methods, systems and storage media are disclosed for enhanced system boot processing that authenticates boot code based on biometric information of the user before loading the boot code to system memory. For at least some embodiments, the biometric authentication augments authentication of boot code based on a unique platform identifier. The enhanced boot code authentication occurs before loading of the operating system, and may be performed during a Unified Extensible Firmware Interface (UEFI) boot sequence. Other embodiments are described and claimed.

Abstract: An example method of providing simulated control of a third-party database to a client includes receiving, at a simulation control proxy, a query that selects data from a database table stored in a third-party database. The method also includes submitting, over a network, the query to the third-party database. The method further includes loading a set of database records included in an initial result set of the query. The method also includes determining whether a data storage device includes modification data indicating that the initial result set is stale. The method further includes updating the initial result set in accordance with the modification data if the initial result set is stale. The method also includes sending the updated result set of the query to a client. The updated result set of the query is different from the initial result set of the query.

Abstract: A system and non-transitory computer program product for preserving data redundancy in a data deduplication system in a computing environment is provided. A selected data segment, to be written through the data deduplication system, is encrypted such that the selected data segment is not subject to a deduplication operation. Copies of the data segment that are to be precluded from data deduplication are determined and identified. A unique encryption key is used to encrypt the selected data segment to be written through the data deduplication system such that the selected data segment is not subject to a deduplication operation. The data deduplication system is tricked to recognize the encrypted, selected data segment as new, undeduplicated data by the encrypting thereby skipping steps of the deduplication operation that includes fingerprint generation and matching. The encrypted, selected data segment is directly written to a new physical storage location.

Abstract: A controller with enhanced reliability of access to a database system. A programmable logic controller (PLC) accessible to a database accesses a database (DB) server in response to an event in which a user program calls a DB access processing program. The DB access processing program stores status information indicating a status of accesses to the DB server in a nonvolatile memory, in accordance with an instruction of the user program. When a power interruption occurs, the PLC can obtain a status of accesses to the DB server at the timing of the occurrence of the power interruption by referring to the status information. Then, the PLC, for example, re-sends a structured query language (SQL) sentence, depending on the access status.

Abstract: A wide-area network (“WAN”)-based service enables remote data access transactions between participating endpoints within a group of participating endpoints that includes at least one server and at least one portable electronic device. Each participating endpoint is configured for communication via one or more communication networks and stores the same or different data items on behalf of a user. The WAN-based service maintains information about each participating endpoint in the group and its network accessibility, and also maintains one or more catalogs of available data items. The WAN-based service identifies a communication network available to both participating endpoints, and a direct or proxied communication session is established between the portable electronic device and the other participating endpoint via the communication network. Selected data items are downloaded, uploaded, accessed or synchronized via the communication session.

Abstract: A computing facility, including a storage management system belonging to a first trust zone having a first privilege level, a metadata management system belonging to a second trust zone having a second privilege level higher than the first privilege level, and a security management system belonging to a third trust zone having a third privilege level higher than or equal to the second privilege level. The storage management system is and configured to store multiple content entities, and the metadata management system is configured to manage, for each of the multiple content entities, metadata including a respective content encryption key and a respective retention time, each of the content entities being encrypted by its respective content encryption key. The security management system is configured to manage a master encryption key used to create the respective content encryption keys, and to confirm expiration of the respective retention times.

Abstract: Described are techniques for associating messages with a particular portion of media content. A message received from a first device, associated with a portion of media content stored on the first device, may be provided to a second device and stored in association with a corresponding portion of media content on the second device. Content consumption data associated with the second device may indicate whether the second device has previously accessed the portion of the media content. The message may be suppressed from presentation if the second device has not previously accessed the corresponding portion of the media content. The message may be presented to the second device when the corresponding portion of the media content is accessed.

Abstract: A method for secure portable operating system interface (POSIX) directory traversing for opening and accessing files by inode number. The method includes receiving, by a process executed by a processor, a request for a ticket for traversing a file system. The process generates a secure key for a unique handle object based on the request for the ticket. An authentication code is generated for the ticket using a numeric file identifier and the secure key. In response to reading a directory with POSIX x and r permissions according to directory permission bits or an access control list (ACL), the ticket is returned including ticket information including the numeric file identifier, generation information and the authentication code. In response to a request to open a directory, the ticket information is validated based on the secure key. A directory is opened for reading using the validated ticket information and the unique handle.

Abstract: A method protects care information in a care provider terminal. The method includes detecting if there is a network disconnection between the care provider terminal and an authorized access point (AP), operating the care provider terminal in an offline mode until a first predetermined time is over after the network disconnection is detected, activating an alarm operation when the first predetermined time is over, and deleting the care information when a second predetermined time is over after the alarm operation is activated. The method may further include determining whether or not the care provider terminal is connected to an unauthorized AP while counting the first predetermined time or the second predetermined time, and deleting the care information if it is determined that the care provider terminal is connected to the unauthorized AP.

Abstract: Web session security techniques which protect displayed sensitive information. In one example embodiment, the method includes setting, by a processor, a timer following a last user action during use of a web application; determining, by the processor, that a threshold time period since the last user action exceeds a predetermined time period; and making, by the processor, displayed sensitive information unreadable.

Abstract: A system for anonymizing and aggregating protected information (PI) from a plurality of data sources includes a master index server coupled to a data repository. The master index server receives an anonymized records associated with an individual from a plurality of data hashing appliances. The system includes a cluster matching engine that applies a plurality of rules to hashed data elements of the received record for comparing hashed data elements of the record with hashed data elements of a plurality of clusters of anonymized records associated with different individuals stored in the data repository to determine whether the individual associated with the received record corresponds to an individual associated with one of the clusters of anonymized records. When a match is found, the cluster matching engine adds the received record to the cluster of anonymized records associated with that individual.

Abstract: A method for providing audience-based redaction of sensitive information in an electronic document may include receiving a request from a computing device to access an electronic document, retrieving the electronic document, identifying the user(s) associated with the computing device, determining an access level for each user associated with the computing device, determining the lowest access level for the user(s) associated with the computing device, generating a rendering of the electronic document for display on the computing device based on the lowest access level for the user(s) associated with the computing device, and providing the rendering of the electronic document to the computing device for display. When generating the rendering of the electronic document for display, sensitive information in the electronic document is typically redacted based on the lowest access level for the user(s) associated with the computing device.

Abstract: A computer-implemented method, the method includes identifying a piece of data to be served from a server system to a client device that is remote from the server system; creating a plurality of expressions that, when executed, provide a result that corresponds to the piece of data; and providing the plurality of expressions to the client device with code for executing the plurality of expressions.

Abstract: A system for and method of securely provisioning a module with cryptographic parameters, such as cryptographic keys and key tables, is presented. Such modules may be used to enable encrypted communications between mobile phones to which they are coupled. The system and method prevent a malevolent individual involved in manufacturing the modules from compromising the security of the module. In particular, the modules are provisioned by an entity different from the manufacturer.

Abstract: A method and an apparatus for using a memory device are provided. A host device includes a transmitter that transmits data; a receiver that receives data; and a controller configured to receive configuration information of the memory device including the information related to the data stored in the one or more slots determined according to each vendor of the memory device, identify information related to predetermined data in the configuration data of the memory device, and receive the predetermined data from the memory device.

Abstract: Methods and systems for activating a display security application and initiating a privacy measure on a computing device are provided. A user opens and turns on an application on the computing device, which monitors the security of the screen. The security feature recognizes when an unauthorized user is within viewing range of the display of the computing device. The user is prompted to initiate a privacy measure or ignore the unauthorized user. If the user initiates the privacy measure, the unauthorized user is prevented from seeing the content on the display. The user may terminate the privacy measure when the unauthorized user is no longer within viewing range of the display.

Abstract: A storage location of a device that can be configured to act as a master in a particular security mode, such as a Direct Memory Access (DMA) having one or more channels, can be programmed to indicate a security indicator to be provided when configured to operate as a master device.

Abstract: A runtime classifier hardware circuit is incorporated into an electronic device for implementing hardware security by storing a support vector model in memory which is derived from pre-silicon verification data to define secure behavior for a first circuit on the electronic device; monitoring input and/or output signals associated with the first circuit using the runtime classifier hardware circuit which compares the input and/or output signals to the support vector model to detect an outlier input signal and/or outlier output signal for the first circuit; and blocking the outlier input and/or output signal from being input to or output from the first circuit.

Abstract: A system, method, and computer-usable medium are disclosed for providing multifactor authentication with a wearable user authentication factor. A multi-factor authentication module is implemented to use a plurality of authentication factors, including a unique tag identifier associated with an electronic tag embedded within a wearable article, such as a ring or watch, for the authentication of a user. A user of a wearable user authentication factor approaches a multi-factor terminal, which detects the electronic tag and reads its unique identifier. The user is then requested to provide a predetermined biometric feature, such as a fingerprint, to a biometric reader. The biometric feature is processed to generate a unique biometric identifier. The unique identifier of the electronic tag and the unique biometric identifier is then submitted to a multi-factor authentication module, which compares it to authentication information associated with the user.

Abstract: Methods, systems and devices for providing an interrogation signal from a handheld deactivation device for identifying a security tag. Identifying the security tag includes initiating an interrogation signal, wherein the interrogation signal includes plurality of transmission bursts and a plurality of random time periods to wait between transmission bursts such that a unique time period elapses between each of the plurality of transmission bursts. The interrogation signal is then transmitted by transmitting each of the plurality of transmission bursts for a portion of a duty cycle and interrupting transmission between each of the plurality of transmission bursts for one of the plurality of random time periods such that a unique and random time period elapses between each of the plurality of transmission bursts. The period transmission of the interrogation signal provides for improved battery life of a handheld scanning and deactivation device.

Abstract: Disclosed is an RFID tag configured to store a plurality of data and selectively provide a predetermined data of the plurality of data to an RFID reader. The RFID tag includes a radio frequency (RF) interface, a memory, an input unit, and a control unit. The RF interface include an antenna for communication with an RFID reader. The memory is configured to store a plurality of data. The input unit is configured to receive a selection for provision data to be provided to the RFID reader among the plurality of data stored in the memory. The control unit is configured to control the selected data to be provided to the RFID reader through the RF interface when a request for data is received from the RFID reader.

Abstract: Embodiments herein describe RFID systems that include multiple RFID tag readers that each use a different frequency to communicate with an RFID tag. For example, each of the tag readers may transmit a tag query command using different modulated frequencies. In one embodiment, the RFID tag includes multiple receivers each tuned to one of the different frequencies generated by the tag readers. For example, one receiver in the tag is tuned to receive 200 MHz signals while another receiver is tuned to receive 900 MHz signals. To provide location information, the RFID tag compares power values associated with the received signals to determine which of the RFID tag readers is closest to the tag. The RFID tag conveys this location information to the tag readers by selecting one of the frequencies of the tag readers to use when generating a reply message.

Abstract: Methods and apparatuses are described for proximity-based and user-based access control using wearable devices. A short-range frequency reader coupled to a target device detects a plurality of wearable devices in proximity to the reader, each wearable device comprising a short-range frequency antenna. The reader identifies, for each wearable device, a user wearing the wearable device. The reader determines, for each wearable device, a distance from the reader and an orientation in relation to the target device. The reader determines a level of access available to the target device based upon the identity of each user, the distance of each wearable device from the reader, the orientation of each wearable device in relation to the target device, and the distance of the wearable devices from each other in a three-dimensional space.

Abstract: An electrical activity sensor attachable to a power cable of an electrical device for detecting an impulse generated in the power cable in response to a change in electrical power state of the electrical device, the electrical activity sensor comprising an antenna assembly comprising an antenna element operable to magnetically couple with an electrical pulse generated in the power cable to induce an electrical signal in response to a change in electrical power state of the electrical device; and at least one dipole type antenna configured operate as a half wave dipole in the operating frequency range of the antenna element and to magnetically couple to the antenna element wherein the dipole type conductor is operable to wirelessly transmit data representative of the power state change of the electrical device to a remote reader.

Abstract: A system for determining a location within an area defined by a grid of radio-frequency (RF) tag circuits includes RF exciters that are configured to emit unmodulated RF energy. The grid of the RF tag circuits are configured to receive the unmodulated RF energy from one or more of the RF exciters and to emit modulated RF energy. Each RF tag circuit may store information associated with a location of the RF tag circuit within the area and the modulated RF energy emitted from each RF tag circuit may carry the information.

Abstract: Device testing using radio-frequency identification (RFID) is described herein. The testing uses one or more RFID readers that interrogate an RFID tag on a mobile device and, in response to the interrogation, receive data from the RFID tag. The one or more RFID readers, in response to receipt of the data from the RFID tag, transmit a command to execute a test program on the mobile device. The results of the test program are then provided by the mobile device.

Abstract: A method and structure for a radio frequency identification (RFID) sensor that may be used to monitor various environmental conditions. The environmental condition measured depends on a sensor material used in the RFID sensor. The sensor material is selected based on a flux in electrical conductivity relative to its saturation of the environmental condition being monitored. The sensor material is placed between adjacent electrically conductive structures of the RFID sensor. Upon a change in the environmental condition being measure, the electrical conductivity of the sensor material changes, thereby increasing or decreasing an amplitude of a response by the RFID sensor to an interrogation by an RFID reader.

Abstract: An aperture sensing structure for lighting fingerprint which is applied in the field of the fingerprint identification optical system mainly includes a circuit board, a base, a light source device, and a sensing device are arranged on the circuit board. A lighting ring is arranged and covered on the circuit board so as to make a light source of the light source device evenly distribute on the base and the sensing device. The present invention may not only effectively shield the interference of the stray lights, but also the light source may be provided evenly for lighting the finger to effectively identify the fingerprint after the light source of the light source device is guided by the lighting ring.

Abstract: A biometric sensing system includes discrete ultrasonic transducers, a first electrode layer disposed over a first surface of the discrete ultrasonic transducers, and a second electrode layer disposed over a second surface of the discrete ultrasonic transducers. The first electrode layer may be a sheet of conductive material that is a common ground connection for the discrete ultrasonic transducers. Alternatively, the first electrode layer can be formed with discrete electrode elements, with a discrete electrode element disposed over the first surface of a discrete ultrasonic transducer. The second electrode layer may be formed with discrete electrode elements, with a discrete electrode element disposed over the second surface of one ultrasonic transducer. At least one integrated circuit can be attached and connected to one of the electrode layers. The integrated circuit includes drive circuits and sense circuits for the discrete ultrasonic transducers.

Abstract: A method for manufacturing a plurality of fingerprint identification modules simultaneously is provided. A first thin film and a second thin film are formed on a first transfer base and a second transfer base respectively. The first thin film and the second thin film are cut respectively to form a plurality of first thin film units and a plurality of second thin film units. The first transfer base and the second transfer base are adhered on opposite surfaces of a substrate. The first thin film units and the second thin film units are cut respectively to form a plurality of the first piezoelectric layers and a plurality of the second piezoelectric layers. A plurality of first slits and a plurality of second slits are formed on opposite surfaces of the substrate for breaking the mother base into the fingerprint identification modules.

Abstract: An optical module includes a housing with a lighting mechanism, an aperture formed therein, and a window that frames a transparent surface adapted to contact a skin surface of a person, for example, a fingertip. The lighting mechanism provides light to illuminate the skin surface placed upon the transparent surface. A prism has a first side facing the lighting mechanism, a second side at the window, and a third side through which a dactylographic image exits the prism. One or more light reflecting surfaces are disposed within the housing to reflect the dactylographic image towards the housing aperture. The optical module is coupled to a mobile device having a camera, with the aperture of the housing aligning with a lens of the camera. The camera acquires the dactylographic image, and the mobile device adjusts this dactylographic image to produce a dactylographic image suitable for biometric matching.

Abstract: An all-flat sensor includes a coupling substrate; a sensing chip, which is disposed on the coupling substrate, has first electrodes arranged in an array and a first dielectric layer covering over the first electrodes, and is electrically connected to the coupling substrate; and a second dielectric layer covering over the sensing chip and providing an outlook color. An electronic device using the all-flat sensor is also provided.

Abstract: The present disclosure applies to the field of biometric identification technologies and provides a method and an apparatus for fingerprint identification. The method includes: extracting a minutia of the input fingerprint image by using a statistical method; performing fingerprint matching according to the extracted minutia to obtain a fingerprint identification result. According to the method provides in embodiments of the present disclosure, the direction of the minutia is calculated by using statistical information, a descriptor with statistical significance is added for the minutia, and during the matching process, calculation of the similarity of the minutia by using the descriptor and region matching by using information of the direction field and the gradient field of the overlapping region are added, therefore, instability and weak specificity of expression of fingerprint characteristics in a conventional algorithm are avoided, and accuracy of the fingerprint identification is improved.

Abstract: The present invention relates to a device and a method for microscopy (100) of a plurality of samples (102), wherein the device comprises:—a first optical detector (106, 108), which is designed to consecutively adopt a plurality of measuring positions and to detect first image data (200) of a sample (104) with a first spatial resolution at each measuring position;—an image data analyser device which is designed to determine for each sample (202) a region (204) of the sample to be examined represented within the first image data (200) in each case;—a second optical detector (110, 112), which is coupled to the first optical detector (106, 108) in such a manner that the second optical detector (110, 112) tracks the first optical detector (106, 108) and therefore the second optical detector (110, 112) adopts measuring positions which the first optical detector (106, 108) had previously adopted.

Abstract: Embodiments described herein can be used to detect holes in a subset of pixels of a depth image that has been specified as corresponding to a user, and to fill such detected holes. Additionally, embodiments described herein can be used to produce a low resolution version of a subset of pixels that has been specified as corresponding to a user, so that when an image including a representation of the user is displayed, the image respects the shape of the user, yet is not a mirror image of the user. Further, embodiments described herein can be used to identify pixels, of a subset of pixels specified as corresponding to the user, that likely correspond to a floor supporting the user. This enables the removal of the pixels, identified as likely corresponding to the floor, from the subset of pixels specified as corresponding to the user.

Abstract: A method of face detection to be performed by an apparatus including an image pickup module includes: obtaining a first image including image information of an object that is in focus; obtaining a pseudo distance between the image pickup module and the object when the first image is obtained by the obtaining; determining a first ratio of a plurality of ratios as a scaling value based on the pseudo distance; and performing face detection of the first image by changing the scaling value based on the first ratio.

Abstract: Systems and methods are described for determining laterality-adjusted attraction compatibility from digitized images of human faces in relaxed and smiling states. A plurality of distances between sets of data points of interest are identified, and used to determine in a consistent manner one or more biometric indices associated with each of the faces, and determine attraction compatibility between humans based upon a selected proximity of the computed biometric indices, dependent on the condition of laterality.

Abstract: The present invention proposes a method for processing an image with depth information and a computer program product thereof, wherein a filtering template is used to extract a gesture region and filter the image, and wherein the hue values of the pixels of the current gesture region are used to modify the self-adaptive thresholds of the filtering template, and wherein the size of the filtering template at the next time point is modified according to the depth at the current time point and the depth at the former time point.

Abstract: Motion capture system with a motion capture element that uses two or more sensors to measure a single physical quantity, for example to obtain both wide measurement range and high measurement precision. For example, a system may combine a low-range, high precision accelerometer having a range of ?24 g to +24 g with a high-range accelerometer having a range of ?400 g to +400 g. Data from the multiple sensors is transmitted to a computer that combines the individual sensor estimates into a single estimate for the physical quantity. Various methods may be used to combine individual estimates into a combined estimate, including for example weighting individual estimates by the inverse of the measurement variance of each sensor. Data may be extrapolated beyond the measurement range of a low-range sensor, using polynomial curves for example, and combined with data from a high-range sensor to form a combined estimate.

Abstract: A method for identifying individuals using inertial sensor based gait biometrics. A method for identifying individual persons using orientation and pace invariant gait dynamics images (GDIs). A method of biometric authentication using i-vectors for GDIs.

Abstract: A handwriting input apparatus and method are provided. The handwriting input apparatus includes: a touch screen configured to display a handwriting corresponding to a touch input; and a processor configured to generate a skeleton for the handwriting by performing text recognition with respect to the handwriting, correct a style of the handwriting based on the generated skeleton, apply a beautification effect to the corrected style of the handwriting, and control the touch screen to display the beautified handwriting.

Abstract: A method for image processing, including: obtaining an image including a writing board and a background external to the writing board; detecting a plurality of lines within the image; determining, based on the plurality of lines, a plurality of corners of the writing board within the image; and correcting a perspective of the writing board by applying a transformation to the image based on the plurality of corners.

Abstract: The present invention provides a method of validating a media item, the method comprising receiving image data corresponding to a plurality of digital images of a media item to be validated, wherein each image is associated with a respective one of a plurality of different channels of an illumination source for illuminating the media item, selecting image data corresponding to two of the plurality of images, dividing a common parameter of the selected image data associated with corresponding locations of the two selected images to create ratio image data representing a ratio image for two different channels of the illumination source, extracting feature information associated with the ratio image, and classifying the extracted feature information with at least one classifier of a validation template to determine whether or not the media item is valid. A computer program and a Self-Service Terminal for validating a media item, such as a banknote, are also provided.

Abstract: Technologies are described herein for interpreting character arrangements. An image including an arrangement of characters may be received or captured by a computing device. Techniques described herein generate data representative of the characters. Characteristics and other information interpreted from the image may be processed to determine a data type. The data representative of the characters may be arranged into a data structure based on the data type, an arrangement type and/or other information interpreted from the image. The data type may indicate one or more attributes of the arranged data such as a format, font, date, language, or currency. The data type may also indicate how data is used in a process, equation or calculation. In addition, the data type may identify an anchor that may be used to merge data generated from the image with other data generated from another image.

Abstract: A method for receipt processing using optical character recognition (OCR). The method includes detecting, within a receipt image, a pre-determined characteristic of the receipt, obtaining an OCR receipt template based on the pre-determined characteristic of the receipt, extracting, based on at least the OCR receipt template, a vendor attribute from the receipt image corresponding to a pre-defined field of the receipt, verifying, based on matching the vendor attribute to a vendor associated with the OCR receipt template, that the receipt is generated by the vendor and that the OCR receipt template is applicable to perform the OCR of the receipt image, and generating, in response to the verifying, a textual content of the receipt by processing the receipt image based at least on the OCR receipt template.

Abstract: An adaptable eye artifact identification and correction method is disclosed. Eye artifacts are identified and classified based on color, severity, shape, eye location, and cause. Based on this classification, an eye artifact correction algorithm is selected from a series of eye artifact correction techniques. For minor artifacts, simple color correction techniques are deployed to restore the iris color and to drive the pupil to once again appear black. For severe eye artifacts face detection and metadata analysis are utilized to search the user's image collection for recent images of the subject without the eye artifact condition. Once located, these images provide eye color and shape information for use to replace the pixels expressing the eye artifact condition. The non-artifact eye images are used to provide the appropriate eye color and shape to correct the eye artifact condition for more severe eye artifacts.

Abstract: An iris recognition camera system for mobile device includes a sensor and associated circuit, a lens and lighting sources including a lighting source element, a displaying light source element and IR LED light source elements, wherein the lighting sources are installed around the center of a camera lens with a certain clearance, and the lighting sources are attached on an FPCB and arranged on the four sides of the center of the camera lens and equipped with an FPCB cover for protection and a guiding mirror so that a user may conveniently acquire an image of his or her iris watching the image of his or her iris so as to identify and process only a living iris.

Abstract: An image processing system includes: an analysis unit configured to obtain information indicating a degree of curvature of a retina from a tomographic image of an eye to be examined; and an obtaining unit configured to obtain a category of the eye to be examined based on an analysis result.