Abstract: A method for securely storing data on a terminal by means of a portable data carrier, wherein an attribute vector and a master key are deposited on the portable data carrier. The method comprises deriving a key from a predicate and the master key by means of a key derivation function, wherein the predicate is a Boolean function of the attribute vector; encrypting the data with the key; and storing the encrypted data together with the predicate on the terminal. Another method comprises: extracting the predicate from the encrypted data and the predicate; applying the predicate to the attribute vector; and if the attribute vector satisfies the predicate, deriving the key from the predicate and the master key by means of the key derivation function and decrypting the encrypted data.

Abstract: Techniques are described for managing creation and/or execution of distributed programs, such as for a group of multiple interrelated programs that are part of a service-oriented architecture or that otherwise interact during execution to provide a desired type of functionality. In at least some situations, the described techniques include performing decentralized choreographed distributed execution of a group of related programs, by using executing supervisor components for some or all such programs to manage execution-related behavior of the programs. The execution-related behavior that is managed by supervisor components for a group of programs may include, for example, managing interactions between the programs, managing run-time dependencies and other relationships between at least some of the programs, managing update strategies for updating some or all of the programs of the group while the group continues to provide functionality (e.g.

Abstract: A method for securing an enterprise application on a computing device includes: defining at least one monitored action, where the monitored action is an access of sensitive information in the enterprise application, defining a maximum number of instances of the at least one monitored action to be allowed while the computing device is not secured by a device-level lock, detecting at least one instance of the at least one monitored action, determining whether the computing device is secured by the device-level lock, and if according to the determining, the computing device is not secured by the device-level lock: displaying a warning message in response to the instances, incrementing a warning counter in response to the detecting, and if the warning counter exceeds the maximum number of the instances, preventing access to the enterprise application.

Abstract: A method includes detecting a peripheral device at a protected node. The method also includes determining whether the peripheral device has been checked-in for use with at least the protected node and determining whether the peripheral device or a device type has been whitelisted or blacklisted. The method further includes granting access to the peripheral device in response to (i) determining that the peripheral device has been checked-in and has not been blacklisted or (ii) determining that the peripheral device or the device type has been whitelisted, even if the peripheral device has not been checked-in. In addition, the method includes blocking access to the peripheral device in response to (i) determining that the peripheral device has not been checked-in and has not been whitelisted or (ii) determining that the peripheral device or the device type has been blacklisted, even if the peripheral device has been checked-in.

Abstract: This patent describes methods which allow the primary owners of sensitive data to retain more access control over the data they share with secondary service providers, even when the secondary service provider electronically stores some form of this information in a service provider maintained database. When these methods are applied by both data owner and service provider the data can only be accessed and used by the service provider during data owner controlled access sessions. This is accomplished through a special set of methods to apply a set of standard encryptions and a special set of methods to manage the associated cryptographic keys. Unencrypted sensitive data need never be permanently stored in a database. Each data owner has their own unique set of cryptographic keys. Critical decryption keys are never permanently stored in service provider databases. Methods are included to allow previously stored data to be recovered even if the data owner loses or forgets the primary password or access key.

Abstract: A method for sending information includes: acquiring an identifier of an APP, the APP being an application having an APP unlock interface; inquiring for information corresponding to the identifier of the APP, the information being information to be promoted and designated by an information promoter with respect to the APP; and sending the information to a target terminal, the information being configured to be shown in the APP unlock interface corresponding to the APP.

Abstract: A method and system are provided that may centralize the management of applications that access the data of social networks via API calls. A central service may generate tokens at a generation rate that permit an application to access an API. The tokens may be distributed to queues associated with certain content types. The relative distribution of tokens to each queue may be determined by rules. A queue may release tokens to applications that function to access the content type associated with the queue. The token generation rate and rules may be selected to prevent violation of the rate limits for the API.

Abstract: An image processing apparatus includes: a central processing unit (CPU) configured to process data; a random access memory (RAM) which includes a first storage area which stores the data processed by the CPU and a second storage area different from the first storage area; and a RAM controller configured to authorize the CPU to access the first storage area and block the CPU from accessing the second storage area so that the data loaded to the second storage area can be prevented from being copied by the CPU.

Abstract: A data security system, including a security manager computer making network API calls to a service that performs data-exchange transactions for end users, the API calls remotely controlling the service so that the security manager computer accesses an outgoing transaction that has already entered the cloud-based service, by generating one or more security platform rules that are applied by the service and cause the service to automatically transmit the outgoing transaction to an inspection location prior to transmission of the outgoing transaction to a destination, and a data inspector operative to inspect data of the outgoing transaction in the inspection location for data leakage, wherein the security manager computer further controls the service so as to transmit the outgoing transaction to the destinations when the data inspector clears the data, and to perform a remedial action regarding the outgoing transaction when the data inspector does not clear the data.

Abstract: A verification system for verifying attribute information included in attribute-information-added information includes circuitry to acquire attribute verification data from the attribute information, the attribute verification data to be used for verifying the attribute information, acquire public information, to be used for verifying the attribute information, from an external service provider, generate verification-target information to be used for verifying the attribute information based on the attribute information and the attribute verification data, and determine reliability of the attribute information by comparing verification-use information calculated from the acquired public information and the verification-target information.

Abstract: A method includes detecting a storage device and determining whether the storage device has been checked-in for use with at least a protected node. The method also includes granting access to the storage device in response to determining that the storage device has been checked-in for use with at least the protected node. The method further includes storing data identifying file activity involving the storage device on the storage device. The data could identify all files copied to or from the storage device and all file activity that is blocked from occurring on the storage device. The method may also include copying one or more log files stored at the protected node onto the storage device, and storing the data identifying the file activity may include appending data identifying details of the file activity to the one or more log files.

Abstract: In at least some embodiments, a system comprises a processor and a direct memory access (DMA) subsystem coupled to the processor. The system further comprises a component coupled to the DMA subsystem via an interconnect employing security rules, wherein, if the component requests a DMA channel, the DMA subsystem restricts usage of the DMA channel based on the security rules.

Abstract: An extended hardware security module (“HSM”) possessing additional security properties relative to conventional HSMs and methods for initializing, deploying, and managing such extended HSMs in a networked environment. In the preferred embodiment, an extended HSM includes additional hardware and software components that configure it to run sensitive client tasks on demand inside a cloud-hosted, anti-tamper HSM housing so as to ensure sensitive data is encrypted when stored or processed outside the housing. Methods for initializing, deploying, and managing provide a framework through which extended HSMs may be secured from their initial assembly through their availing for use and actual use over a network by one or more clients. Such use often entails repeated discrete sequential secure sessions and concurrent discrete secure sessions.

Abstract: A card reader may include a card passage; a shutter member to close the card passage; a magnetic head on a rear side of the shutter member reads or records data in a magnetic strip of a card; an electrostatic capacitance sensor on the rear side or the shutter member; a first guide member which structures at least a part of a face on a first direction side of the card passage when one side in a thickness direction of the card passing the card passage is referred to as a first direction; and a second guide member which structures at least a part of a face on a second direction side of the card passage. The first guide member may include insulating material and the second guide member may include conductive material. The electrostatic capacitance sensor may be attached to the first guide member.

Abstract: Systems for encoding and reading RFID tags on a collection of items are shown. One embodiment of the invention includes a plurality of items, where each item possesses an item identifier string, and a plurality of RFID tags, where an RFID tag is affixed to each of the items and each RFID tag is encoded with a code word element generated using at least all of the item identifier strings. In many embodiments, the collection is a plurality of goods contained within a case, pallet, container or storage area.

Abstract: Embodiments of the present invention may provide the capability to identify a specific object being interacted with that may be cheaply and easily included in mass-produced objects. In an embodiment, a computer-implemented method for object identification may comprise receiving a signal produced by a physical interaction with an object to be identified, the signal produced by an identification structure coupled to the object during physical interaction with the object, processing the signal to form digital data identifying the object, and accessing a database using the digital data to retrieve additional information identifying or describing properties of the object identified.

Abstract: In one embodiment, a card reader device includes: a read head configured to generate a signal indicative of data stored on a magnetic stripe of a card, an output plug, adapted to be inserted into a headset jack of a mobile host device, configured to communicate an output signal indicative of data stored on the magnetic stripe to a microphone input of the headset jack of the mobile host device; and circuitry configured to set the amplitude, which includes attenuation by at least a resistor, of a signal communicating said data included in the signal indicative of data stored on the magnetic stripe generated by the read head resulting in the output signal indicative of data stored on the magnetic stripe. In one embodiment, the circuitry includes decoding circuitry configured to decode the signal indicative of the data stored on the magnetic stripe.

Abstract: Provided are a multi-function card that has a non-contact IC card function, a magnetic stripe card function, and a function of generating a magnetic card signal and an NFC signal, a Bluetooth function capable of transmitting a signal to devices such as smartphones, includes a metallic frame, and is robust against bending or breakage, a transmission/reception sensor system used for the multi-function card or the like, and a wearable device, and the transmission/reception sensor system includes a magnetic sensor 10 including a coil 2 wound around a magnetic sensor core 1, an NFC coil 12 formed in a planar shape, and a metallic frame 13a of a loop shape which is installed along the NFC coil 12 and includes one or more cut portions.

Abstract: Some embodiments are directed to a method and a system allowing moving tags to be discriminated from stationary tags, which can be used in the field of tracking merchandise or objects provided with RFID tags.

Abstract: Disclosed is a system for electromagnetic interrogation of RFID transponders including at least one RFID transponder, at least one so-called repeater RFID device and at least one RFID terminal, the at least one RFID terminal is configured to emit an interrogation signal towards the at least one repeater at a frequency F1, the at least one repeater is configured to repeat the interrogation signal with frequency F1 towards the at least one RFID transponder at a frequency F2 and the at least one RFID transponder is configured to emit a backscattered response signal at a frequency F3, the system being characterised in that the at least one repeater is configured to perform an exclusively analog frequency transposition from the frequency F1 to the frequency F2.

Abstract: A jewelry article, and systems and methods for accessing human readable information printed or etched on the jewelry article are disclosed. The printed or etched human readable information included in the jewelry article cannot be viewed without a visual aid. The jewelry article includes a wireless or optical tag corresponding to the printed or etched human readable information. The wireless or optical tag is associated with an electronic file corresponding to the printed or etched human readable information. The wireless or optical tag is configured to be readable by an external reader connected to an external database that stores the electronic file corresponding to the printed or etched human readable information. The external reader is configured to read the wireless or optical tag to access the associated electronic file stored in the external database. Information included in the electronic file may be displayed on a display.

Abstract: The present invention provides an induction-based data identification system characterized by real-time response, including: a plurality of mobile identity terminals that can be carried, a gateway system and a background computer. The system configuration and method process of the invention are reasonable; it has both the features of recording any update status data of the objects and real-time response without affected by large amount of information; in addition, the mobile identity terminal has a low power consumption, suitable for the occasions of long-time use, such as anti-theft systems of shopping malls, places of detention, warehouse management, etc.

Abstract: There are provided systems and methods for a smart harbor device for intelligent updating and selection for use of transaction processing terminal devices. A smart harbor device may be used to provide updating, servicing, and other maintenance of transaction processing terminal devices, such as EMV terminals used in retail transaction processing. The smart harbor device may include a port where the transaction processing terminal devices may be places, and the smart harbor device may connect to each of the transaction processing terminal devices. Once connected, the smart harbor device may run diagnostics to determine the statuses and conditions for each of the transaction processing terminal devices and maintenance the transaction processing terminal devices. The maintenance may be performed at times where the transaction processing terminal devices are not required for use. Additionally, the smart harbor device may intelligently select one based on statuses and device capabilities.

Abstract: System and method for collecting object identification data from a plurality of objects that interact with a vehicle during operation of the vehicle, where the vehicle interacts with specific objects at specific geographical positions. An identification sensor is coupled to a geographical position sensor, and whenever an object is identified a record is generated, the record including the identification of the object, the position of the vehicle when the interaction between the object and the vehicle occurs, and the time of the interaction. Exemplary objects include passengers, containers, and documents. Exemplary interactions include loading/unloading an object from the vehicle, boarding a passenger, unloading a passenger, transferring a bulk material from the vehicle into a specific container, and/or transferring a bulk material from a specific container to the vehicle. The record may also include additional data about a parameter of the object (such as the object's weight, volume, or temperature).

Abstract: An apparatus for measuring dimension and weight is provided. In one implementation, the apparatus comprises a dimensioner, a force sensing device, and a portable control module. The dimensioner, which is mounted on headgear or body wear to be worn on the head or body of a user, is configured to determine dimensions of an object. The force sensing device, which is incorporated into footwear to be worn on at least one foot of the user, is configured to measure a force acting on a bottom portion of the footwear. The portable control unit includes a dimension input module configured to receive signals from the dimensioner indicative of the dimensions of the object and further includes a weight input module configured to receive signals from the force sensing device indicative of the weight of the object.

Abstract: Systems and methods for use with a handheld mark reader that reduce the time between activation of the reader's trigger and the reader returning a successful decode response. Image processing may be performed prior to the user actuating the trigger and thus obtaining a decodable image with reduced delay. Separate pre-trigger and post-trigger parameters may be used for image decoding. A feedback loop may be incorporated for repeated parameter updates. An adjustable lens may be utilized either with illumination OFF or ON.

Abstract: A color image of a target is captured by a color sensor in an imaging reader. A color image processing pipeline processes the captured color image with a plurality of color image processing components to display the image of a target with high fidelity. One or more of the components are bypassed to decode the image of a symbol target to prevent degradation of reader performance.

Abstract: One method for estimating the extracorporeal blood volume in a portion of a physical sample includes: extracting a feature from a portion of an image of the sample; tagging the portion of the image of the sample with a blood volume indicator according to the extracted feature; and estimating the extracorporeal blood volume in at least the portion of the physical sample, associated with the portion of the image of the sample, according to the blood volume indicator.

Abstract: There is provided a capacitive fingerprint sensing device for sensing a fingerprint pattern of a finger, said capacitive fingerprint sensing device comprising: a protective top layer to be touched by said finger; a first metal layer comprising a two-dimensional array of sensing structures arranged underneath said top layer; a second metal layer, arranged underneath said first metal layer, comprising a plurality of conductive structures a dielectric layer arranged between the first and second metal layers to electrically insulate the first metal layer from the second metal layer, the dielectric layer comprising a low-k material; and readout circuitry arranged underneath said second metal layer and coupled to each of the electrically conductive sensing structures by means of via connections to receive a sensing signal indicative of a distance between said finger and said sensing structure. There is also provided a method for manufacturing such a device.

Abstract: Electronic devices having fingerprint authentication, and methods for controlling a fingerprint authentication on the electronic devices are provided. In one aspect, a method includes acquiring, using a first sensor on the electronic device, a first signal produced by an object positioned in proximity to the electronic device, and acquiring a second signal using a fingerprint sensor on the electronic device. The method also includes controlling a fingerprint authentication on the electronic device based on at least one of the first signal and the second signal.

Abstract: Techniques for multi-phase scanning based on pseudo-random sequences in capacitive fingerprint applications are described herein. In an example embodiment, a method performed by a processing device comprises: receiving measurements that are representative of a portion of a finger on a capacitive fingerprint sensor array, where the measurements are obtained from sensor elements of the capacitive fingerprint sensor array that are scanned in a multi-phase mode based on an excitation vector generated from a pseudo-random sequence; and generating a fingerprint image for the portion of the finger based on the measurements.

Abstract: A fingerprint and palmprint image collector with a honeycomb structure and a terminal device are provided. The image collector includes a light guide plate, and a light source for emitting at least part of light into the light guide plate. A surface of the light guide plate is provided with a honeycomb plate. A plurality of vias parallel to each other are densely disposed on the honeycomb plate. The diameter of each via is in a range from 0.5 micrometer to 50 micrometers, and the size of an acquired fingerprint or palmprint is equal to the size of an acquired image. The thickness of the honeycomb plate is more than five times of the diameter of the via. The distance between centers of adjacent vias is less than or equal to 50.8 micrometers. The other surface of the honeycomb plate is provided with an image sensor. The image collector can be integrated into the terminal device.

Abstract: There is provided a vehicle safety system including a sensing unit, a processing unit, a control unit and a display unit. The sensing unit is configured to capture an image frame containing an eyeball image from a predetermined distance. The processing unit is configured to calculate a pupil position of the eyeball image in the image frame and generate a drive signal corresponding to the pupil position. The control unit is configured to trigger a vehicle device associated with the pupil position according to the drive signal. The display unit is configured to show information of the vehicle device.

Abstract: An unmanned photographing device and method thereof is provided which includes establishing a wireless connection with an external electronic device using a communication device, receiving a first signal at a first three-dimensional (3D) position from the external electronic device through the wireless connection, the first signal comprising data associated with a first image comprising a first object, determining a second 3D position based on at least part of the data and the first 3D position, controlling the unmanned photographing device to fly to or near the second 3D position, tracking a second object corresponding to the first object using a camera, and capturing a second image comprising the second object at or near the second 3D position such that the second image corresponds to the first image.

Abstract: Disclosed is a fingerprint recognition sensor including: a backlight unit including a base layer positioned on one surface of a substrate and including a transparent material and a light source irradiating light to the inside of the base layer on one side of the base layer, in which light in which an incident angle on a surface facing the substrate is larger than a critical angle is transmitted toward the substrate; a cover layer spaced apart from the substrate and facing the other surface of the substrate; multiple sensor pixels defined by multiple scan lines and multiple data readout lines on the other surface of the substrate and positioned between the substrate and the cover layer; and multiple photo sensors positioned in the respective sensor pixels and sensing light transmitted on the base layer toward the substrate and total-reflected on a surface contacting a fingerprint of a user on the cover layer.

Abstract: An apparatus comprises a fingerprint sensor having a set of capacitive elements configured for capacitively coupling to a user fingerprint. The fingerprint sensor may be disposed under a control button or display element of an electronic device, for example one or more of a control button and a display component. A responsive element is responsive to proximity of the user fingerprint, for example one or both of a first circuit responsive to motion of the control button, and a second circuit responsive to a coupling between the fingerprint and a surface of the display element. The fingerprint sensor is disposed closer to the fingerprint than the responsive element. The control button or display component may include an anisotropic dielectric material, for example sapphire.

Abstract: A novel system, device and method of validation is provided for sensing a biometric such as a fingerprint, where biometric data corresponding to the biometric entity such as a fingerprint is then transmitted to a host configured to perform a plurality of authentication processes to authenticate the biometric data. At least one of the plurality of authentication steps is then validated. Alternatively, a portion of the biometric data may be retained, where biometric data corresponding to the biometric is then transmitted to a host configured to perform a plurality of authentication steps to authenticate the biometric data. At least one of the plurality of authentication steps is then validated.

Abstract: An information processing apparatus includes a circuitry configured to provide a slide image including a sample image and a label image which are obtained by shooting a slide, generate a first image that a specific area of the slide image is concealed, output a thumbnail image, wherein the thumbnail image is one of the slide image and the first image.

Abstract: One embodiment provides a method comprising receiving a first input image and a second input image. Each input image comprises a facial image of an individual. For each input image, a first set of facial regions of the facial image is distinguished from a second set of facial regions of the facial image based on a learning based model. The first set of facial regions comprises age-invariant facial features, and the second set of facial regions comprises age-sensitive facial features. The method further comprises determining whether the first input image and the second input images comprise facial images of the same individual by performing face verification based on the first set of facial regions of each input image.

Abstract: In surveillance camera system 10, face detection is performed with Cam-A or Cam-F and in a case where there is a match with the face image of a specific person as a result of collation of face images, appearance feature information is transmitted from tracking client (30) to other Cam-B to Cam-E grouped in association with Cam-A or Cam-F. Upon detecting the appearance feature information, the other Cam-B to Cam-E transmit the person discovery information to a tracking client (30).

Abstract: According to an example, a face capture and matching system may include a memory storing machine readable instructions to receive captured images of an area monitored by an image capture device, and detect one or more faces in the captured images. The memory may further store machine readable instructions to track movement of the one or more detected faces in the area monitored by the image capture device, and based on the one or more tracked detected faces, select one or more images from the captured images to be used for identifying the one or more tracked detected faces. The memory may further store machine readable instructions to select one or more fusion techniques to identify the one or more tracked detected faces using the one or more selected images. The face capture and matching system may further include a processor to implement the machine readable instructions.

Abstract: Disclosed are a portable electronic device and an operation method thereof. The built-in image sensor of the portable electronic device continually captures a first image, detects whether there is a face image information in the first image, and accordingly determines whether to turn on a camera of the portable electronic device to capture a second image having a higher resolution. After that, the recognition module of the portable electronic device recognizes at least one facial feature in the second image.

Abstract: An augmented reality device (ARD) can present virtual content which can provide enhanced experiences with the user's physical environment. For example, the ARD can detect a linkage between a person in the FOV of the ARD and a physical object (e.g., a document presented by the person) or detect linkages between the documents. The linkages may be used in identity verification or document verification.

Abstract: An automatic body movement recognition and association system that includes a preprocessing component and a “live testing” engine component. The system further includes a transition posture detector module and a recording module. The system uses three dimensional (3D) skeletal joint information from a stand-alone depth-sensing capture device that detects the body movements of a user. The transition posture detector module detects the occurrence of a transition posture and the recording module stores a segment of body movement data between occurrences of the transition posture. The preprocessing component processes the segments into a preprocessed movement that is used by a classifier component in the engine component to produce text or speech associated with the preprocessed movement.

Abstract: A system and method for computer vision based control of a device include a processor to track a human throughout a sequence of images of a space, to a location in the space, determine an identity of the human at the location in the space and if the human is at a predetermined location in the space, personalize operation of the device according to the identity of the human.

Abstract: An information processing system includes circuitry that receives position information of first stroke information and second stroke information drawn on a display at different timing, adds additional information indicating a relationship of the received first stroke information and the received second stroke information to the received first stroke information, and generates, based on the position information of the received first stroke information, the position information of the received second stroke information and the added additional information, consecutive data used for displaying (playing) information drawn on the display as the first stroke information and the second stroke information, and a memory that stores the generated consecutive data.

Abstract: A system and method for invoice field detection and parsing includes the steps of extracting character bounding blocks using optical character recognition (OCR) or digital character extraction (DCE), enhancing the image quality, analyzing the document layout based on imaging techniques, detecting the invoice field based on the machine learning techniques, and parsing the invoice field value based on the content information.

Abstract: A method and device for automatically classifying document hardcopy images by using document hardcopy image descriptors are provided.

Abstract: A computer program product includes program instructions configured to cause a processor, to: perform optical character recognition (OCR) on an image of a document; extract an identifier of the document from the image based at least in part on the OCR; compare at least portions of the identifier with content from one or more reference data sources; and determine whether the identifier is valid based at least in part on the comparison. The content comprises global address information; while the content from the reference is derived from geographic information. Deriving the content from the geographic information includes: obtaining the geographic information; and parsing the geographic information according to a set of predefined heuristic rules, where the heuristic rules are configured to normalize the global address information obtained from the one or more sources according to a single convention for representing address information.

Abstract: A device for verifying a content of an analog document is provided. The device includes a scanning unit being configured to generate a scan information by scanning the analog document and to store the scan information in a storing element being provided on the analog document, and a verification unit being configured to verify the content of the analog document using the stored scan information. Further, a corresponding method for verifying a content of an analog document is provided. Using the provided device for verifying the content of an analog document, it can be ensured that the content of the analog document is not changed by an attacker. If the content is changed, the verification would fail.