Abstract: Forwarding points in time of a clock over a clock boundary is performed by launching the points in time into a buffer, such as a FIFO, in the first clock domain. The oldest point in time is fed into a FIFO or delay line in the other clock domain, which FIFO or delay line comprises a plurality of received points in time, which are shifted through the FIFO or delay line over time. An estimate of a point in time in the second clock domain is derived from a plurality of the points in time in the delay line/FIFO, such as from a mean value thereof. This point in time may be compensated for a known delay in order for this determined point in time to be identical to or close to an actual point in time of the first clock in the first clock domain.

Abstract: An apparatus and method for use with a shared access communication channel is disclosed. A wireless network device receives signals and recovers data from a first plurality of subscriber units and a second plurality of subscriber units in a time interval. Received signals from the first plurality of subscriber units are distinguishable by having unique pseudo noise (PN) sequence with respect to others of the first plurality of subscriber units. Received signals the second plurality of subscriber units are distinguishable by a unique orthogonal sequence with respect to others of the second plurality of subscriber units. Received signals are distinguished between the first and second plurality of subscriber units based on detection of an orthogonal sequence present only in the received signals from the second plurality of subscriber units.

Abstract: Configuring a node (410, A-I, L-O) of a synchronization network, involves determining information about synchronization sources of a plurality of synchronization trails for passing synchronization information from the synchronization source (A, L, O, PRC) to the node to provide a synchronization reference. After determining automatically (210, 230, 330, 335, 340) synchonization transmission characteristics of trails (EF, FG, GH, HM, MN, OF, FI, IH) which use packet-based communication, the trails are compared automatically (240, 370), using their source information and their synchronization transmission characteristics, for selecting which of these trails to use for providing the synchronization reference for the node (N).

Abstract: A wavelength division multiplexing, WDM, network comprising an apparatus adapted to manage a frequency spectrum in the wavelength division multiplexing, WDM, network, the apparatus comprising an adjustment unit adapted to adjust a frequency offset between carriers for each individual carrier depending on performance characteristics of the individual carriers.

Abstract: A station-side device performs transmission and reception of an optical signal to and from a subscriber-side device, and includes a communication control unit configured to perform optical signal communication using a plurality of wavelengths by wavelength division multiplexing and time division multiplexing; and a registration unit configured to set an acceptance period in at least one wavelength among the plurality of wavelengths, to perform a new registration of a subscriber-side device in response to a registration request of the subscriber-side device received within the acceptance period, and not to set the acceptance period in at least one other wavelength among the plurality of wavelengths.

Abstract: A station-side device of the present invention includes: a wavelength change instruction unit that issues, to a subscriber-side device, a wavelength change instruction to change a transfer-source wavelength assigned to the subscriber-side device to a transfer-target wavelength different from the transfer-source wavelength; a transfer-source port that transmits and receives an optical signal of the transfer-source wavelength; a transfer-target port that transmits and receives an optical signal of the transfer-target wavelength; a transfer-source port monitoring unit that detects a connection between the transfer-source port and the subscriber-side device; a transfer-target port monitoring unit that detects a connection between the transfer-target port and the subscriber-side device; a transfer-source timer that counts, at the transfer-source port, an elapsed time from a predetermined starting time in response to the wavelength change instruction, and ends the counting of the elapsed time in a case where change

Abstract: A method for suppressing a spurious signal in a payload signal supplied by a receiving antenna of a payload of a satellite. The satellite also includes an array of measurement antennas supplying measurement signals. The measurement signals are combined with the payload signal. Reference weighting coefficients for weighting the measurement signals are determined as a function of the combined signals. A reference beam is formed by combining the measurement signals weighted based on the reference weighting coefficients. Anti jamming weighting coefficients for weighting the payload signal and the reference beam are determined. An anti jammed beam is formed by combining the payload signal and the reference beam weighed based on the corresponding anti jamming weighting coefficients.

Abstract: Inventive concepts relates to a system-on-chip using a dynamic voltage frequency scaling and a method of operating the same. The method of operating the system-on-chip may include learning a correlation between network throughput of a network input/output device receiving data packets and processing performance of a central processing unit processing the data packets, estimating a data transmission rate of the data packets based on a learning result of the correlation, dynamically changing setting information of a dynamic voltage frequency scaling algorithm based on the estimated data transmission rate, and controlling an operation frequency of the central processing unit according to the dynamic voltage frequency scaling algorithm. According to example embodiments of inventive concepts, the dynamic voltage frequency scaling algorithm may dynamically be applied considering the data transmission rate of the data packets being received.

Abstract: A new lower density parity check (LDPC) tone mapper is proposed when DCM is applied for a given resource unit (RU) when LDPC is used as the channel control coding. For HE PPDU transmission with DCM, LDPC encoded streams are first modulated by a DCM constellation mapper. The modulated symbols of the lower half of the frequency segment and the modulated symbols of the upper half of the frequency segment are modulated using the same LDPC encoded bits using DCM mapping. The modulated symbols of the lower half of the frequency segment are mapped to lower half of the data subcarriers using DCM LDPC tone mapper. The modulated symbols of the upper half of the frequency segment are mapped to upper half of the data subcarriers using the same DCM LDPC tone mapper. Maximum frequency diversity for DCM can be achieved.

Abstract: Provided is a receiver which includes at least one processor configured to control or execute: a first Bit-Interleaved Coded Modulation (BICM) decoder configured to generate a first output signal corresponding to an upper layer signal by processing a first input signal which includes a superposition coding signal generated at a transmitter by superimposing the upper layer signal and a lower layer signal; a parity generator configured to generate at least one parity based on a result of the processing of the first input signal by the first BICM decoder; and a second BICM decoder configured to generate a second output signal corresponding to the lower layer signal by processing a second input signal which is generated using the parity generated by the parity generator.

Abstract: Approaches for recovering one or more media datagrams. A plurality of media datagrams, a plurality of row forward error correction (FEC) datagrams, and a plurality of column FEC datagrams are received. The plurality of media datagrams is logically arranged in rows and columns of media datagrams. Each row FEC datagram corresponds to one of the rows of the media datagrams and each column FEC datagram corresponds to one of the columns of media datagrams. Each received datagram is stored in a buffer. Upon determining that a particular media datagram is missing, it is determined whether a particular row FEC datagram or a particular column FEC datagram covering the particular media datagram has been received and is missing only a single media datagram for which it covers. If so, then, the particular media datagram is recovered using the particular row FEC datagram or the particular column FEC datagram.

Abstract: Embodiments of the present invention provide a decoding method and apparatus. The method includes: receiving K user signals by using N subcarriers, where one user signal is carried on at least two subcarriers of the N subcarriers, one subcarrier carries at least two user signals of the K user signals, and 2?N<K; determining, from the N subcarriers, at least two target subcarriers that carry a target user signal, and performing initialization calculation on the target subcarriers, to obtain initialization calculation results; and determining, in a logarithm domain, a probability of each codeword in a codebook of the target user signal according to the initialization calculation results, to decode the target user signal. According to this method, decoding can be performed in the logarithm domain with low complexity.

Abstract: A method for receiving a signal by integer forcing in a wireless communication system is provided. The method includes receiving one or more signals through a plurality of antennas, filtering the received one or more signals using a forcing matrix, generating codewords by remapping the filtered one or more signals, acquiring a summed codeword by performing a modulo operation on the codewords, decoding the summed codeword, and acquiring original codewords by performing an inversion operation on the decoded summed codeword.

Abstract: Certain aspects of the present disclosure relate to methods and apparatus for implementing one or more antenna diversity schemes using communications systems operating according to 5G technologies. For example, techniques and apparatus may be provided for employing Alamouti encoding in a time domain for one or more portions of a plurality of modulated symbols associated with a first signal to be transmitted by a first antenna or a second signal to be transmitted by a second antenna to create a first plurality of encoded symbols or a second plurality of encoded symbols with tone-wise Alamouti in the frequency domain.

Abstract: An orthogonal frequency division multiple access (OFDMA) frame tone allocation includes a 256 tone payload consisting of 228 data and pilot tones and 28 null tones. The 28 null tones consist of guard tones and at least one direct current (DC) tone. In one example, the 256 tone payload consists of 224 data tones, 4 common pilot tones, and 28 null tones. In another example, the 256 tone payload consists of 222 data tones, 6 common pilot tones, and 28 null tones. In yet another example, the 256 tone payload may consist of 220 data tones, 8 common pilot tones, and 28 null tones. The OFDMA frame may be a downlink OFDMA frame or an uplink OFDMA frame.

Abstract: Methods, systems, and devices for wireless communication are described. A base station may communicate with a user equipment (UE) using frequency resources (e.g., subcarriers) with scalable channel spacing and time resources (e.g., slots) with variable slot durations. The individual slots may include multiple symbols, and each symbol may be allocated for communication in a specific link direction (e.g., uplink, downlink, or sidelink). For UEs configured to operate in a half-duplex mode, the base station may allocate sufficient time for the UE to transition between uplink and downlink configurations. In other cases, for carrier aggregation, the base station may coordinate with the UE to prevent conflicting communications (e.g., simultaneous uplink and downlink transmissions). UEs or other devices may communicate directly with one another in a device-to-device configuration using the same or a similar scheme to allow for half-duplex devices to transition between sending and receiving.

Abstract: A wireless communication system includes distributed units communicating with a terminal device and a central unit connected to the distributed units and receiving and processing signals from the distributed units. The central unit includes a host function unit to pre-notify the distributed units if a received signal from the terminal device is a target of coordination between distributed units, hard/soft determination units configured to separate received signals from the distributed units into a hard decision value and a soft decision value based on presence or absence of coordination between the distributed units, transmit the hard decision value to the host function unit as is, and transmit the soft decision value to a signal combining unit, the signal combining unit combines soft decision values output from the hard/soft determination units and outputs a combined soft decision value, and a decoding unit performs decoding using the soft decision value output from the signal combining unit.

Abstract: A simultaneous information and energy transfer method and system with a guard interval signal are provided. The method comprises the steps of generating, by a transmitting terminal, a controllable guard interval signal according to the current energy demand and environment conditions for channel transmission. The system comprises a transmitting terminal configured to generate a controllable guard interval signal. In the system and method, the guard interval time is fully utilized to transfer a guard interval signal with controllable amount of energy, which not only prevents intersymbol interference, but also provides controllable energy signals within the guard interval time at the same time, thus improving the energy transfer performance of the system and reducing the probability that the receiving terminal is unable to operate normally due to energy shortage. The present invention can be widely applied to a variety of simultaneous wireless information and energy transfer systems.

Abstract: A method for transmitting information, a station, and an access point in a MU-MIMO system includes: determining, by a first station, multiple to-be-sent first long training sequences, where the multiple first long training sequences include at least one pilot for phase tracking; and sending, by the first station, the multiple first long training sequences to an access point on multiple symbols, where a second station sends multiple second long training sequences to the access point on the multiple symbols, the multiple second long training sequences include at least one pilot for phase tracking, and a first pilot for phase tracking and a second pilot for phase tracking occupy different time-frequency resources, where the at least one pilot for phase tracking included in the multiple first long training sequences includes the first pilot for phase tracking.

Abstract: Provided is a radio communication device which can separate propagation paths of antenna ports and improve a channel estimation accuracy even when using virtual antennas. The device includes: a mapping unit which maps a data signal after modulation to a virtual antenna and a virtual antenna; a phase inversion unit which inverts the phase of S0 transmitted from an antenna port in synchronization with a phase inversion unit between the odd-number slot and the even-number slot; the phase inversion unit which inverts the phase of R0 transmitted from the antenna port; a phase inversion unit which inverts the phase of S1 transmitted from an antenna port in synchronization with a phase inversion unit; and the phase inversion unit which inverts the phase of R1 transmitted from an antenna port.

Abstract: Power offset signaling techniques for network-assisted interference cancellation and suppression (NAICS) receivers are described. In one embodiment, for example, user equipment (UE) may comprise at least one radio frequency (RF) transceiver, at least one RF antenna, and logic, at least a portion of which is in hardware, the logic to receive a radio resource control (RRC) connection control message comprising a RadioResourceConfigDedicated field and perform a radio resource configuration procedure in response to receipt of the RRC connection control message, the RRC connection control message to comprise network-assisted interference cancellation and suppression (NAICS) assistance information that identifies a power offset value for one or more transmissions to the UE over a physical downlink shared channel (PDSCH) of a serving cell of the UE. Other embodiments are described and claimed.

Abstract: A method and system for sending transmission acknowledgement information are disclosed, which relate to the wireless communication field; and solves the problem that full-duplex communication cannot be performed smoothly. The method includes: when a sender completes to send a radio frame to a receiver and needs the receiver to reply transmission acknowledgement information, if the receiver is sending a radio frame to the sender, the receiver replies the transmission acknowledgement information to the sender according to a determined mode for the transmission acknowledgement information. The above technical scheme applies to the WLAN, which achieves a timely data transmission acknowledgement mechanism.

Abstract: A method and an apparatus for allocating ACKnowledgement (ACK)/Non-ACKnowledgement (NACK) channel resources and processing confirmation information are disclosed. The method includes: The network side determines one physical channel area among multiple physical channel areas to be used by an ACK/NACK channel, and notifies the determined physical channel area to a User Equipment (UE) so as to enable the UE to determine a channel for receiving or sending ACK/NACK information in the determined physical channel area according to a mapping rule. Moreover, the network side may send or receive ACK/NACK information on the physical channel area that includes the ACK/NACK channel. The method and apparatus improve the utilization ratio and flexibility of the ACK/NACK channel, and reduce the probability of conflict generated by the ACK/NACK channel.

Abstract: A method of generating Acknowledgement/Negative Acknowledgement (ACK/NACK) information by a user equipment (UE) in a wireless communication system supporting carrier aggregation, the method including receiving, by the UE from a base station (BS), a plurality of codewords through a plurality of downlink frequency bands corresponding to a plurality of downlink carriers, wherein each of the plurality of downlink frequency bands operates in a 1-codeword mode or a 2-codeword mode, and a number of supported codewords according to the 1-codeword mode or the 2-codeword mode is independently configured for each of the downlink frequency bands, determining, by the UE, a total number of ACK/NACK bits, wherein the total number of ACK/NACK bits is determined based on a total number of the plurality of downlink carriers and the number of supported codewords according to the 1-codeword mode or the 2-codeword mode and generating, by the UE, a sequence of the ACK/NACK bits according to the total number of the ACK/NACK bits.

Abstract: Methods and apparatuses for CSI reporting mechanisms are provided. A user equipment (UE) includes a transceiver and a processor operably connected to the transceiver. The transceiver is configured to receive channel state information (CSI) process configuration information including at least one beamformed type associated with a plurality of non-zero-power (NZP) CSI reference signal (CSI-RS) resource configurations and receive a CSI-RS resource index (CRI) reporting configuration. The processor is configured to calculate, in response to receipt of the configuration information, a CRI and a channel quality indicator (CQI). The transceiver is further configured to report the CRI and the CQI by transmitting the CRI and the CQI on an uplink channel.

Abstract: An apparatus includes a first transceiver, at least two antennas coupled to the first transceiver to exchange one or more keys and phase data with a second transceiver via a plurality of rounds of phase data exchange, each round including: a first pilot signal sent from a first of the antennas of the first transceiver to the second transceiver, a second pilot signal received from the second transceiver, the second pilot signal modulated using a measured first phase of the first pilot signal, a third pilot signal received from the second transceiver; a fourth pilot signal sent from a second of the antennas of the first transceiver to the second transceiver, the fourth pilot signal modulated using a measured second phase of the third pilot signal, and wherein between the plurality of rounds of phase exchange, the first transceiver perturbs a radio frequency (RF) environment surrounding the at least two antennas.

Abstract: When a terminal switches from a downlink subframe to an adjacent uplink subframe, generating a first guard period, where that the terminal does not process any signal in the first guard period is defined, that is, the terminal neither receives downlink data nor sends an uplink signal in the first guard period, and therefore uncertainty of a terminal behavior during a downlink-to-uplink switching process of the terminal is avoided, and successful sending of the uplink subframe can be ensured; and when the terminal switches from an uplink subframe to a downlink subframe, generating a second guard period, where the second guard period overlaps the uplink subframe or the downlink subframe, and that the terminal does not process any signal in the second guard period is defined, and therefore uncertainty of a terminal behavior during an uplink-to-downlink switching process of the terminal is avoided.

Abstract: A method for transmitting and receiving a signal by a terminal in a wireless communication system is disclosed in the present invention. More particularly, the method comprises the steps of: receiving an indicator for changing the usage of a specific subframe corresponding to a sub-component carrier from a network; determining whether near-end crosstalk between the sub-component carrier and another component carrier occurs if the usage of the subframe is changed according to the indicator; and transmitting and receiving a signal to and from the network through the sub-component carrier according to the changed usage if it is determined that the near-end crosstalk does not occur.

Abstract: Embodiments of the present invention disclose a signal processing method, apparatus, and system, where the method includes: receiving a downlink signal that carries an uplink signal; and performing first interference cancellation on the uplink signal by using an estimated self-interference signal, so that a remaining amount of interference of the uplink signal is less than a first interference threshold, thereby minimizing out-of-band interference of the uplink signal on the downlink signal without using a plurality of radio frequency front-ends or without using a duplexer on a same radio frequency front-end. In the embodiments of the present invention, no duplexer is adopted, and therefore, difficulty and a cost of base station and system layout can be reduced, and extra energy consumption of a mobile terminal can also be reduced.

Abstract: A method and arrangement for the coordinated, distributed, and linearly ordered collection and publication of event streams (i.e. time series data) includes features that harden it against internal errors, network partitions, data loss/corruption, and adversaries who wish to tamper with or interrupt its operation. Two modes of operation are described, one in which events are processed in aggregate (batching), and another in which updates occur continuously across the system.

Abstract: The present disclosure is directed to systems and methods for communicating between rack mounted devices disposed in the same or different racks separated by distances of less than a meter to a few tens of meters. The system includes a CMOS first mm-wave engine that includes mm-wave transceiver circuitry, mm-wave MODEM circuitry, power distribution and control circuitry, and a mm-wave waveguide connector. The CMOS first mm-wave engine communicably couples to a CMOS second mm-wave engine that also includes mm-wave transceiver circuitry, mm-wave MODEM circuitry, power distribution and control circuitry, and a mm-wave waveguide connector. In some implementations, at least a portion of the mm-wave transceiver circuitry may be fabricated using III-V semiconductor manufacturing methods. The use of mm-wave communication techniques beneficially improves data integrity and increases achievable datarates, and reduces power costs.

Abstract: A system or a network may include an optoelectronic module that includes an optical transmitter optically coupled with an optical fiber, and a controller communicatively coupled to the optical transmitter. The controller may be configured to operate the optical transmitter to transmit data signals through the optical fiber. The optoelectronic module may be configured to transmit time synchronization signals through the optical fiber along with the data signals.

Abstract: A clock and data recovery circuit (CDR) includes a digitally controlled oscillator (DCO). A data sampler is coupled to receive a clock signal from the DCO. A deserializer includes an input coupled to an output of the data sampler. A first phase detector is coupled between a first output of the deserializer and a first input of the DCO. A second phase detector is coupled to a second output of the deserializer. An accumulator is coupled between an output of the second phase detector and a second input of the DCO. A frequency lock detection block is coupled to an output of the accumulator. An eye monitor is coupled to an input of the data sampler. The first phase detector controls a delay of the DCO and the accumulator controls a frequency of the DCO. An edge mute signal is coupled to the deserializer.

Abstract: The invention relates to a method for transmitting data between a first unit which accumulates data that has been generated with a first frequency and a second unit which requests the accumulated data with a second frequency. The method has the steps of requesting a first total increment and a first value, which represents a time increment belonging to the first total increment, from the first unit, said first total increment being the data content of the accumulated data block provided at the request time in the first unit; generating a second total increment from the first total increment using the first value, the second total increment being the data content of a data block adapted to a nominal time increment of the second frequency; and transmitting the second total increment to the second unit.

Abstract: An encryption apparatus includes a setting generator configured to generate a public key and a secret key necessary for encryption; and an encryptor configured to generate a homomorphic ciphertext which allows multiplication operation by using the generated public key and a plaintext.

Abstract: The subject disclosure is directed towards secure computations of encrypted data over a network. In response to user desired security settings with respect to the encrypted data, software/hardware library components automatically select parameter data for configuring a fully homomorphic encryption scheme to secure the encrypted data items while executing a set of computational operations. A client initiates the set of computational operations via the library components and if requested, receives secure computation results in return.

Abstract: Systems and methods for hash authenticated data are described. In one embodiment, the storage device includes a storage drive and/or a controller. In some embodiments, the controller is configured to identify data to be authenticated, compute a first hash of the data using a hash function, detect a trigger event associated with the storage drive, and authenticate, after the trigger event, the data based at least in part on the first hash of the data.

Abstract: A security module securely manages keys. The security module is usable to implement a cryptography service that includes a request processing component. The request processing component responds to requests by causing the security module to perform cryptographic operations that the request processing component cannot perform due to a lack of access to appropriate keys. The security module may be a member of a group of security modules that securely manage keys. Techniques for passing secret information from one security module to the other prevent unauthorized access to secret information.

Abstract: Systems and methods are provided for the detection and prevention of intrusions in data at rest systems such as file systems and web servers. The systems and methods regulate access to sensitive data with minimal dependency on a communications network. Data access is quantitatively limited to minimize the data breaches resulting from, e.g., a stolen laptop or hard drive.

Abstract: A system and method for cryptographically securing a device includes initializing a cryptographic processing circuit which includes provisioning a cryptographic key store associated with the cryptographic processing circuit with cryptographic key material; and establishing a first cryptographically secured connection between a main central processing unit of the autonomous device and the cryptographic processing circuit of the device; and implementing a cryptographic validation of resident firmware of the main central processing unit by validating a cryptographic digital signature ascribed to the resident firmware against an up-to-date cryptographic digital signature used for installing and/or updating the resident firmware of the main central processing circuit.

Abstract: The subject matter discloses a method for decrypting ciphertext, comprising obtaining multiple shares of a vector representing a secret key in multiple computerized entities, receiving a request to decrypt a ciphertext from an application server, each entity of the multiple computerized entities computes a linear function, the linear function receives as input a share of the vector stored in each entity of the multiple computerized entities and a ciphertext accessible to the entity, performing a plaintext multi-party computation (MPC) process by the multiple computerized entities using the output of the computation performed by each entity independently, computing an output of the linear function receiving the secret key and the ciphertext as input, wherein none of the multiple computerized entities have access to the share stored in another computerized entity.

Abstract: Disclosed herein is a method for generating a high entropy password using a low entropy password and low-entropy login data comprising supplying the low entropy password to a system comprising a generating client and/or a recovery client; and at least n servers; submitting request data derived, at least in part, from the user's low entropy password, where the request data includes authentication data; engaging in a distributed protocol with at least t servers to generate high-entropy values based on stored cryptographic information and a set of authentication information stored on the at least n servers which is checked against the authentication data provided by the user and/or the generating client and/or a recovery client; and generating the high entropy password.

Abstract: A method for generating a secret key shared by a group of at least three terminals from characteristics of wireless communication channels connecting the terminals in twos, including, at each of the terminals of the group, the implementation of the following steps of: acquiring signals from wireless communication channels, known as adjacent channels, connected to the terminal and generating a representation of each adjacent channel; for at least one wireless communication channel, known as a non-adjacent channel, not connected to the terminal, acquiring at least one image signal of the non-adjacent channel and generating a representation of the non-adjacent channel, determining the secret key from a combination of the representations of the adjacent channels and at least one representation of non-adjacent channel.

Abstract: A processor-based method for secret sharing in a computing system is provided. The method includes encrypting shares of a new secret, using a previous secret and distributing unencrypted shares of the new secret and the encrypted shares of the new secret, to members of the computing system. The method includes decrypting at least a subset of the encrypted shares of the new secret, using the previous secret and regenerating the new secret from at least a subset of a combination of the unencrypted shares of the new secret and the decrypted shares of the new secret.

Abstract: A domain authority 13 for use in a hierarchy of domain authorities in a hierarchical cryptographic system. The domain authority 13 comprises a user secret key generator 21 for generating a user secret key based on a domain secret key and one or more attribute representations, to obtain a user secret key associated with a set of attributes corresponding to the attribute representations, and wherein the domain secret key is based on a domain secret key of a parent domain authority or a root secret key of a root authority of the hierarchy of domain authorities, and wherein the attribute representations are independent of the hierarchy. A decrypter makes use of the user secret key. An encrypter generates ciphertext decryptable by the decrypter.

Abstract: Generally described, physical computing devices in a virtual network can be configured to host a number of virtual machine instances. The physical computing devices can be operably coupled with offload devices. In accordance with an aspect of the present disclosure, a security component can be incorporated into an offload device. The security component can be a physical device including a microprocessor and storage. The security component can include a set of instructions configured to validate an operational configuration of the offload device or the physical computing device to establish that they are configured in accordance with a secure or trusted configuration. In one example, a first security component on the offload device can validate the operational computing environment on the offload device and a second security component on the physical computing device can validate the operational computing environment on the physical computing device.

Abstract: A collation system includes first through third nodes N1-N3. N1 includes: an evaluation formula generation unit generating an evaluation formula evaluating a distance with authentication data; an encryption unit encrypting coefficients of the evaluation formula by a public key and transmitting the encrypted coefficients to N3; and an evaluation value generation unit acquiring the encrypted coefficients from N3 when authentication target data to be collated with the authentication data is received, generating an evaluation value collating the authentication target data with the authentication data based on the authentication target data and the encrypted coefficients, and transmitting the evaluation value to N2. N2 includes: a key generation unit generating a public/secret key pair and transmitting the public key to N1; and a collation unit decrypting the evaluation value using the secret key, thereby collating the authentication target data with the authentication data.

Abstract: A system and methods are provided herein for verifying proof of transit of traffic through a plurality of network nodes in a network. In one embodiment, a method is provided in which information is obtained about a packet at a network node in a network. The information includes in-band metadata. Verification information is read from the in-band metadata. The verification information for use in verifying a path of the packet in the network. Updated verification information is generated from the verification information read from the packet. The updated verification information is written to the in-band metadata of the packet, and the packet is forwarded from the network node in the network.

Abstract: A personal digital ID device provides a digital identifier to a service for a predetermined duration in response to user interaction. The user interaction may include a button press. The personal digital ID device may be in the form of a bracelet, a key fob, or other form factor. The service may be provided by a mobile device, in the cloud, or elsewhere.

Abstract: Providing secure graphics outputs by performing at least the following: receive secure output data corresponding to a digital image, obtain one or more security keys, create a secure output marker for the secure output data, wherein the secure output marker comprises location information corresponding to a trusted output area of the digital image and data information that represents data content found within the trusted output area of the digital image, encrypt the secure output marker using the one or more security keys, embed the secure output marker within the graphics image to create a trusted graphics image; and render the trusted graphics image for exposure onto the display device.