Abstract: Systems and methods facilitating a framework that provides a core trusted computing base (TCB) of an electronic device with various security capabilities. The framework can include a low-resource device and at least one distributed resource. The low-resource device can be configured to generate sealing keys, migration keys, and attestation keys that are based on a device secret associated with the low-resource device and one or more software modules. The low-resource device can further be configured to use the migration keys and the sealing keys to both verify a software update and migrate secrets from a previous version of the software to a newer version of the software. Additionally, the low-resource device can be configured to generate an attestation statement using the attestation keys and perform attestation using the attestation statement and the at least one distributed resource.

Abstract: In an approach, a secure boot process includes two phases. In the first phase an on premises device generates a data encryption key (DEK) with which to encrypt an operating system image and a key encryption key (KEK) with which to wrap the DEK. The on-premises device then utilizes a key management service to wrap the KEK with an account root key and writes the wrapped DEK and wrapped KEK onto a label of the encrypted operating system image. The encrypted operating system image is then uploaded to a virtual data center and merged with an intermediary guest manager image. When the encrypted machine image is used to generate a virtual machine instance, the intermediary guest manager utilizes the key management service to unwrap the KEK. The unwrapped KEK is then used to unwrap the wrapped DEK which is then used to launch the encrypted guest operating system.

Abstract: Example embodiments disclosed herein relate to modifying execution of an application under test to act as if a user is a power user. The application under test is hosted in a real-time modifier. A security crawl is performed on the application under test logged in as the user. The user is treated as a power user.

Abstract: The invention provides a flash memory which may effectively protect information with a high security level. A flash memory includes a setting part. When the setting part is inputted a specific command, the setting part sets up specific address information to a nonvolatile configuration register, and sets up specific data in a hidden storage region. The flash memory also includes: a comparing part, which compares inputted address information and the specific address information during a reading operation; and a control part, which reads specific data set in the storage region and erases a specific address when two address information are consistent, and reads data stored in a memory array according to the inputted address information when two address information are inconsistent.

Abstract: The present invention describes a system and method for tokenization of data. The system includes a receiver configured to receive a request for tokenization. The request for tokenization comprises an input data to be tokenized. The system also includes a parser configured to determine one or more datatype from the input data. The system further includes a trained artificial neural network to generate a token for the input data based on a tokenization technique corresponding to the datatype of the input data.

Abstract: As disclosed herein a computer system for secure database backup and recovery in a secure database network has N distributed data nodes. The computer system includes program instructions that include instructions to receive a database backup file, fragment the file using a fragment engine, and associate each fragment with one node, where the fragment is not stored on the associated node. The program instructions further include instructions to encrypt each fragment using a first encryption key, and store, randomly, encrypted fragments on the distributed data nodes. The program instructions further include instructions to retrieve the encrypted fragments, decrypt the encrypted fragments using the first encryption key, re-encrypt the decrypted fragments using a different encryption key, and store, randomly, the re-encrypted fragments on the distributed data nodes. A computer program product and method corresponding to the above computer system are also disclosed herein.

Abstract: A security application manages security and reliability of networked applications executing collection of interacting computing elements within a distributed computing architecture. The security application monitors various classes of resources utilized by the collection of nodes within the distributed computing architecture and determine whether utilization of a class of resources is approaching a pre-determined maximum limit. The security application performs a vulnerability scan of a networked application to determine whether the networked application is prone to a risk of intentional or inadvertent breach by an external application. The security application scans a distributed computing architecture for the existence of access control lists (ACLs), and stores ACL configurations and configuration changes in a database.

Abstract: A method for authorizing a service is disclosed. In the embodiment, the method involves receiving a packet carried via a first power signal according to an inductive wireless power transfer communications protocol, the packet received at a power receiver within a mobile device, extracting a password from the received packet, storing the extracted password in memory within the mobile device, transmitting the stored password in a packet via a second power signal according to the inductive wireless transfer communications protocol to authorize a service.

Abstract: Embodiments are described of systems and methods for prevention, detection, mitigation of risk, and such, of unauthorized manipulation, e.g., substitution, of high-value data files (including electronic document files).

Abstract: A method for processing activity records. The method includes obtaining an activity record, and generating an anonymization dictionary. Generating the anonymization dictionary includes detecting, in the activity record, a set of target entities to be anonymized, making a determination that a resource is associated with a subset of the target entities of the set of target entities, and after making the determination, assigning an anonymized identity to the subset of target entities, and generating an anonymization identifier for each target entity in the subset of target entities to obtain a set of anonymization identifiers, each including the anonymized identity. The method further includes processing the activity record using the anonymization dictionary to obtain an anonymized activity record and storing the anonymized activity record.

Abstract: Digital images are monitored by enabling access to a digital image, receiving a notification associated with the digital image from a first user, and regulating access of the first user to the digital image based on the notification received from the first user.

Abstract: Systems and methods authorizing access to storage system resources are presented herein. A scoped permission assignment can be associated with an operation related to a type of at least one resource. The scoped permission assignment can be assigned to a role; and the role can be associated with user(s). A resource, or one or more resources of a resource group, can be associated with user(s) or user group(s). Further, a user can be authorized to perform the operation on the resource and/or one or more resources based on, at least in part, permission assignments directly granted to the user or granted in a role of the user. In addition, one or more resource flags can be assigned to the one or more resources. Accordingly, the user can be authorized to perform the operation based on, at least in part, the one or more resource flags and the scoped permission assignment.

Abstract: Embodiments provided herein involve connected states between a mobile device and one or more zones in a network media system and different interactions between the mobile device and the network media system involving the connected states. The connected states may be established between the mobile device and the one or more zones such that further actions taken on media items identified in the playlist on the mobile device may also be taken on corresponding media items in a playback queue associated with the one or more zones. The interface on the mobile device may display various graphical representations to indicate the different interactions involving the connected states, including when a connected state is established, when a connected state is lost, and when a reconnected state is reestablished. The interface may further provide selectable icons to allow a user to navigate among the different media playback options involving the connected states.

Abstract: The present invention provides a method for controlling an aggregate server aggregating content information stored in at least one of an aggregated server, requesting, to the aggregate server, an aggregation restriction for content information of a specific aggregated server; and changing an aggregation restriction state variable according to the requesting, wherein the aggregation restriction state variable represents identification information of the specific aggregated server of which the content information is not allowed to be aggregated by the aggregate server.

Abstract: A system and method for providing or exchanging healthcare information (e.g., medical information) to authorized users in a secure manner. The method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions operable to: assign identification information to a plurality of users and a plurality of items; associate the identification information of a user of the plurality of users with one or more items of the plurality of items; set-up security policies including predetermined locations, within predetermined stages within a sequence and during predetermined times; and provide the user access to the one or more items when there is a matching between the identification information of the user and the one or more items, and all of the security policies associated with the user and the one or more of the plurality of items are met.

Abstract: A kernel receives a request to execute a first process instance from an agent. The first process instance is an instance of a first program. The kernel obtains one or more access control rules related to the agent. The kernel permits execution of the first process instances based on the access control rules. The kernel detects the first process instance attempting to access a second process instance during execution of the first process instance. The second process instance is an instance of a second program currently being executed. The kernel determines whether to grant the first process instance permission to access the second process instances based on the access control rules.

Abstract: A method includes receiving at a processor, an indication of a user touching a point on a data entry device, receiving at the processor, an indication of a user gazing in a direction, and comparing via the processor the touched point and the gazing direction to a known touch point and gaze direction to verify the user is an authorized user.

Abstract: The techniques discussed herein facilitate the transmission, storage, and manipulation of data in an encrypted database management system (EDBMS). An untrusted machine is connected to a data store having encrypted records, a client machine that sends encrypted queries, and a trusted machine that receives and decrypts the encrypted records and encrypted queries. The trusted machine processes the query using semantically secure query operators to produce a query result. The trusted machine ensures the size of the query result conforms to an upper bound on the number or records in the query result and returns the query result.

Abstract: In various implementations, a plurality of non-private n-grams that satisfy a privacy criterion may be identified within a search log of private search queries and corresponding post-search activity. A plurality of query patterns may be generated based on the plurality of non-private n-grams. Aggregate search activity statistics associated with each of the plurality of query patterns may be determined from the search log. Aggregate search activity statistics associated with each query pattern may be indicative of search activity associated with a plurality of private search queries in the search log that match the query pattern. In response to a determination that aggregate search activity statistics for a given query pattern satisfy a performance criterion, a methodology for generating data that is presented in response to search queries that match the given query pattern may be altered based on aggregate search activity statistics associated with the given query pattern.

Abstract: A method enables prefix search of cloud stored encrypted files that are encrypted using an order preserving encryption (OPE) algorithm. The encrypted text prefix search method generates a minimum possible plaintext string and a maximum possible plaintext string of the same character length including the search term as the prefix. The minimum and maximum possible plaintext strings are encrypted using the same order preserving encryption algorithm for the encrypted text. The method determines from the minimum ciphertext and the maximum ciphertext a set of common leading digits. The set of common leading digits is used as an OPE encrypted prefix search term and provided to a cloud storage service to search in the cloud stored encrypted files for encrypted text matching the OPE encrypted prefix search term.

Abstract: A method and apparatus are provided that include a security camera of a security system within a residence capturing a sequence of images of a secured area of the residence, a programmed processor of the security system determining that an authorized person is present within the residence, a programmed processor detecting a detected person within the sequence of images, and a programmed processor blurring or reducing a picture quality of an area immediately around the detected person based upon a presence of the authorized person.

Abstract: A system for storing and controlling access to data representing personal behavior, the system comprising an ID retrieval apparatus to receive identifying information revealing the identity of an individual, to submit a request corresponding to the received identifying information to an ID generation apparatus, to receive an anonymized user ID in return, and to output the user ID to the individual; a data engine comprising a data store and an access controller, the store being inaccessible to the ID retrieval apparatus and configured to receive and store personalized behavioral data, access to the stored behavioral data being controlled by the controller, the behavioral data representing behavior of the individual, which data are anonymously personalized with the user ID; the controller controlling access to the data by requiring that access requests from service providers specify the user ID with which the behavioral data are personalized to access the data.

Abstract: Disclosed is a system for configuring a terminal by intercepting requests, such as Input/Output (IO) requests or registry requests, evaluating rules based on the intercepted requests during runtime, and performing actions based on the rule evaluations, such as passing the request through, redirecting the request, modifying the request, hiding resources, or performing other actions. The system can be implemented in one or more of the terminal's file system filter drivers and registry filter drivers.

Abstract: A portable storage system. The portable storage system comprises a portable storage device having a flash memory element and a loss-prevention unit. The portable storage system further comprises Master and Slave proximity elements. One of the proximity elements is physically connected with the portable storage device, while the other is physically connected with the loss-prevention unit. The Master proximity element is configured to wirelessly determine the presence of the Slave proximity element within a predefined range.

Abstract: A display information protection system includes a management system that stores a plurality of display information protection policies and that may provide any of the display information protection policies through a network. An endpoint device is coupled to the management system through the network and stores a display information protection policy that may have been automatically populated or received from the management system. The endpoint device displays a plurality of information and may determine that a first subset of the plurality of information that has been provided for display is defined by the display information protection policy. In response to detecting the first display information protection event and determining that the first subset of a plurality of information is defined by the display information protection policy, the endpoint device obfuscates the display of the first subset of the plurality of information on the endpoint device.

Abstract: An RFID tag is equipped with an energy sensor for receiving an appropriate energy signal or registering an appropriate temperature/environmental level. The RFID tag only responds to a query from an RFID reader if the sensor receives the appropriate stimulation.

Abstract: In embodiments of the present invention improved capabilities are described for a wireless computing device, comprising an antenna; an analog block for receiving and transmitting an RF signal through the antenna, wherein the energy from the received RF signal provides power to the wireless computing device; and a data processing and controller block for data management, wherein the data processing and controller block comprises: (i) a first program memory adapted to store a first set of instructions comprising a system call adapted to perform at least one function, and (ii) a second program memory adapted to store a second set of instructions comprising an instruction to call the system call, wherein the data processing and controller block is adapted to execute the first set of instructions and the second set of instructions, wherein the antenna, analog block, and data processing and controller block are mounted on a single substrate.

Abstract: An interrogation device includes an interrogation unit that interrogates an RF tag in a contactless manner, and a controller that controls the interrogation unit. The controller obtains a signal strength value and an interrogation success rate from a reception signal received by the interrogation unit when controlling the interrogation unit to transmit a signal with transmission power that is being changed in stages, determines changed transmission power corresponding to a signal strength value and an interrogation success rate that are not less than a threshold selectively from a signal strength value and an interrogation success rate obtained in each stage of the transmission power, and outputs information about the determined transmission power.

Abstract: Systems, methods, apparatuses, and computer readable media are disclosed for providing variable blink rate ultra-wideband (UWB) communications. Some embodiments may provide for a radio frequency (RF) tag including a motion sensor, processing circuitry, and a UWB transmitter. The motion sensor may be configured to generate one or more motion data values indicating motion of the RF tag. The UWB transmitter may be configured to transmit blink data at variable blink rates. The processing circuitry may be configured to receive the one or more motion data values from the motion sensor, determine a blink rate for the UWB transmitter based on the one or more motion data values, and control the UWB transmitter to wirelessly transmit the blink data at the blink rate. In some embodiments, the RF tag may include a UWB receiver and the blink rate may be controlled remotely by a system.

Abstract: Systems, methods, apparatuses, and computer readable media are disclosed for providing variable blink rate ultra-wideband (UWB) communications. Some embodiments may provide for a radio frequency (RF) tag including a motion sensor, processing circuitry, and a UWB transmitter. The motion sensor may be configured to generate one or more motion data values indicating motion of the RF tag. The UWB transmitter may be configured to transmit blink data at variable blink rates. The processing circuitry may be configured to receive the one or more motion data values from the motion sensor, determine a blink rate for the UWB transmitter based on the one or more motion data values, and control the UWB transmitter to wirelessly transmit the blink data at the blink rate. In some embodiments, the RF tag may include a UWB receiver and the blink rate may be controlled remotely by a system.

Abstract: A mobile RFID container, such as a case, cargo container, vehicle, etc., includes an RFID detector configured to conduct an RFID scan to generate scan data concerning the items carried in the mobile RFID container, and location determining circuitry for generating location data concerning the location of the mobile RFID container. A method for distributing RFID-tagged items using the mobile RFID container includes placing a plurality of RFID-tagged items in the mobile RFID container, conducting one or more RFID scans to generate scan data concerning the contents of the RFID container, and processing the scan data and location data to determine the location of the mobile RFID container at times when the contents of the RFID container have changed.

Abstract: A system comprising a server configured to store a plurality of storage formats associated with one or more auto-identification technologies transponders; and a mobile device comprising: a plurality of application configured to handle auto-identification data, a communication interface, a reader circuit configured to implement at least one auto-identification protocol, a processor configured to implement operating system instructions, the operating system instructions configured to cause the processor to: receive context data, receive auto-identification data from the reader circuit, send at least some of the auto-identification data and the context data to the server via the communication link, receive one of the plurality of storage formats via the communication link that was selected based on the auto-identification data and the context data, and identify and launch one of the plurality of applications based on the received storage format.

Abstract: Example implementations relate to using an auxiliary image to identify an image analysis mechanism associated with a main image. For example, a computing device may include a processor and an image capture device. The processor may capture with the image capture device a representation of a combined image. The combined image may include a main image and an auxiliary image. The processor may also identify the auxiliary image in the representation of the combined image and decode the identified auxiliary image via an auxiliary image decoding mechanism to determine image analysis mechanism identification information associated with the main image. The processor may further determine, based on the image analysis mechanism identification information, a main image analysis mechanism useable to determine an identifier associated with the main image. The auxiliary image decoding mechanism is different than the main image analysis mechanism.

Abstract: On the basis of the physical principle that a capacitance value is inversely proportional to the distance between capacitive electrodes, the spatial structure of the surface of an object can be imaged by measuring a coupling capacitance between the surface of measured object and the electrode arrays on a surface of a sensor; for example, imaging may be performed to uneven spaces between ridge lines and valley lines of fingerprints. The present application provides a C-Q-T type capacitive fingerprint sensor. Firstly, coupling capacitance differences between the fingerprints and the electrodes of the sensor are converted into charge quantity differences, then the charge quantity differences are converted into time differences, and edge signals carrying the time differences are output. Fingerprint sensors are grouped into an array, reading and data combination may be performed to the edge signals, and imaging may be performed to fingerprints.

Abstract: A biometric recognition apparatus with deflection electrode includes a substrate, a multi-function electrode layer including a plurality of sensing electrodes, a plurality of deflection electrodes and at least one suppressing electrode. Each of the sensing electrodes is at least partially surrounded by a corresponding deflection electrode and each of the deflection electrodes is at least partially surrounded by the suppressing electrode. The biometric recognition apparatus further includes a switching circuit layer having a plurality of selection switches and conductive wires, at least a part of the selection switches and the conductive wires are electrically connected to the sensing electrodes. By above arrangement of the sensing electrodes, the deflection electrodes and the suppressing electrode, the sensing sensibility and signal to noise ratio can be enhanced, thus increasing the sensing distance between sensing electrode and user finger.

Abstract: An arrangement of individually addressable nanostructures (200) in an array format on a substrate (100) (non-conducting, flexible or rigid) with electrical portions (conducing) in the substrate where the electrical portions form electrical contacts with the nanostructures is utilized to form individually addressable nanostructures. The said nanostructures can be 1-1,000,000 nm in base size and range from 1-1,000,000 nm in height. The distance between the said nanostructures in the array can also range from 10-1,000,000 nm. The said nanostructures are covered in a dielectric material (300) (air, polymer, ceramic) that is at least 5-500,000 nm thicker than the height of the said nanostructures. The dielectric properties of the dielectric material are an important component in determining the capacitance/supercapacitance properties of the fingerprint device. A top electrode (400) is placed on the face of dielectric film opposite to the face in contact with the substrate where nanostructures are arranged.

Abstract: The present disclosure, related to the technical field of fingerprint identification, discloses a ramp wave generation circuit, a digital-to-analog conversion circuit, and a fingerprint identification system. The ramp wave generation circuit comprises: an integrating circuit, configured to output a ramp wave signal; a signal regulation circuit, comprising a feedback control loop and a transconductance amplifier connected in series, wherein the feedback control loop monitors the ramp wave signal output by the integrating circuit, and outputs a regulation control signal to the transconductance amplifier, the transconductance amplifier corrects, according to the regulation control signal, a ramp wave signal output by the integrating circuit within a next period; and a voltage generation circuit, configured to respectively output a reference voltage signal to the integrating circuit and the signal regulation circuit.

Abstract: A fingerprint sensing system comprising a device connection interface including a device reference potential input, a sensing arrangement, and sensing reference potential providing circuitry. The sensing arrangement includes multiple sensing structures and read-out circuitry connected to each of the sensing structures.

Abstract: An acoustic biometric touch scanner device and method is disclosed. In one aspect, an acoustic fingerprint sensing device includes an array of ultrasonic transducers configured to transmit an ultrasound signal having a frequency in a range from 50 megahertz (MHz) to 500 MHz. The acoustic fingerprint ultrasonic transducers include a piezoelectric film. The acoustic fingerprint sensing device further includes a receiving surface configured to receive a finger. The acoustic fingerprint sensing device further includes a processor configured to generate an image of at least a portion of a fingerprint of the finger based on a reflection of the ultrasound signal from the finger.

Abstract: A fingerprint sensor package includes a substrate, a fingerprint sensor chip, and a flexible printed circuit board (FPC). The substrate includes a first portion and a second portion. A line layer is disposed on the first portion. The fingerprint sensor chip is disposed on the substrate. The fingerprint sensor chip is electrically connected to the FPC by the line layer. The package is simple, reliable, and easy for manufacturing process, reducing materials and processing costs.

Abstract: A biometric authentication device performing an authentication based on a similarity between a biometric image that is an object of comparing and an enrolled biometric image, includes: a storage configured to store a plurality of model images generated by changing a bending angle of a joint of a biometric model and correction information of each of the plurality of model images; a biometric sensor configured to capture a biometric image that is an object of comparing; and a processor configured to execute a process, the process including: determining similarities between the biometric image captured by the biometric sensor and the plurality of model images; selecting a model image based on the similarities; reading correction information corresponding to the model image that is selected, from the storage; and correcting one of the biometric image captured by the biometric sensor or the enrolled biometric image based on the correction information.

Abstract: The present invention discloses a method for detecting whether cells are infected with human papillomavirus (HPV), and the method includes: (a) capturing a contour of a cell of a cell image, wherein the contour has a contour pixel thereon; (b) identifying a tangent of the contour pixel on the contour to define in relation to the tangent a first side and a second side opposite to the first side, wherein the first side indicates the intracellular region of the cell and the second side indicates the extracellular region of the cell; (c) calculating an optical parameter average of the plurality of pixels on both of the first side and the second side; and (d) determining whether the cell is infected with HPV based on whether the optical parameter average on the first side is smaller than that on the second side.

Abstract: Described herein are systems, methods, and apparatus for automatically identifying and recovering individual cells of interest from a sample of biological matter, e.g., a biological fluid. Also described are methods of enriching a cell type of interest. These systems, methods, and apparatus allow for coordinated performance of two or more of the following, e.g., all with the same device, thereby enabling high throughput: cell enrichment, cell identification, and individual cell recovery for further analysis (e.g., sequencing) of individual recovered cells.

Abstract: Devices, systems, and methods provide for improved facial detection and facial recognition in vehicle interior inspections. In various embodiments, one or more high-resolution cameras having one or more lens and filter attachments operate in conjunction with one or more auxiliary illumination devices and a related computer system. According to various embodiments, an auxiliary illumination device can be synchronized to one or more cameras, and configured to supply auxiliary illumination to facilitate capture of accurate and usable images. The filter(s) and advanced image processing solutions assist with facial detection and identifying individuals inside a vehicle, removing light glare and undesired reflections from a window surface, and capturing an image through a tinted window, among other things. Further, embodiments can compare a captured image to an authenticated image from a database, in order to confirm the identity of a vehicle occupant.

Abstract: An image recognition apparatus, method and non-transitory computer-readable storage medium are disclosed. An image recognition apparatus may include a memory storing instructions, and at least one processor configured to process the instructions to, determine an occlusion pattern of a face in a facial image representing the face by comparing the facial image with a standard facial image representing a standard face, and identify the facial image using a region determined by the occlusion pattern in the facial image.

Abstract: The present disclosure relates to an album display method, an album display apparatus and a storage medium, which pertain to the graphics and image technical field. The method includes: uploading a plurality of photographs stored in the smart device to a server, receiving face identification information for at least two of the plurality of photographs from the server, wherein the at least two photographs are identified to include faces by the server using a face recognition algorithm, the face identification information includes a photograph identifier and an album identifier for one of a plurality of face albums, and the plurality of face albums are generated by grouping the at least two photographs based on faces identified in the at least two photographs, adding the at least two photographs to their corresponding face albums based on the face identification information, and displaying the plurality of face albums.

Abstract: A system and method providing a capture device autonomously determining its own operational window in the presence of other such devices. The capture device includes an imaging sensor having a field of view and an illumination source. A processor includes code instructing the processor to scan the field of view another illumination source operating in a recurring window of time proximate to the capture device. If illumination occurs from another source within the recurring window, an operational window for the second illumination source is determined an a new a new operational window within the recurring window established for the capture device.

Abstract: A gaze direction determining system and method is provided. A two-camera system may detect the face from a fixed, wide-angle camera, estimates a rough location for the eye region using an eye detector based on topographic features, and directs another active pan-tilt-zoom camera to focus in on this eye region. A eye gaze estimation approach employs point-of-regard (PoG) tracking on a large viewing screen. To allow for greater head pose freedom, a calibration approach is provided to find the 3D eyeball location, eyeball radius, and fovea position. Both the iris center and iris contour points are mapped to the eyeball sphere (creating a 3D iris disk) to get the optical axis; then the fovea rotated accordingly and the final, visual axis gaze direction computed.

Abstract: A method, system and non-transitory computer readable medium are disclosed for recognizing gestures, the method includes capturing at least one three-dimensional (3D) video stream of data on a subject; extracting a time-series of skeletal data from the at least one 3D video stream of data; isolating a plurality of points of abrupt content change called temporal cuts, the plurality of temporal cuts defining a set of non-overlapping adjacent segments partitioning the time-series of skeletal data; identifying among the plurality of temporal cuts, temporal cuts of the time-series of skeletal data having a positive acceleration; and classifying each of the one or more pair of consecutive cuts with the positive acceleration as a gesture boundary.

Abstract: Systems, methods, and computer-readable media are provided for performing actions in response to gestures made by a user in captured images. In accordance with one implementation, a computer-implemented system is provided that includes an image capture device that captures at least one image, a memory device that stores instructions, and at least one processor that executes the instructions stored in the memory device. In some implementations, the processor receives, from the image capture device, at least one image including a gesture made by a user and analyzes the at least one image to identify the gesture made by the user. In some implementations, the processor also determines, based on the identified gesture, one or more actions to perform on the at least one image.