Abstract: In some embodiments, a method may be performed by a computing device that involves displaying an identifier indicative of a file, the display of the identifier being readable by a second device, receiving first data from the second device in response to the identifier being read by the second device, and enabling performance of at least one action with respect to the file with use of the first data. In some embodiments, the method may further involve receiving a first encryption fragment associated with the file, receiving, from the second device, a second encryption fragment associated with the file, reconstructing, using at least the first encryption fragment and the second encryption fragment, an encryption key enabling viewing of the file, and viewing the file using the encryption key.

Abstract: A network gateway apparatus monitors Quic user datagram protocol (UDP) Internet Connection (QUIC) packets between a first device and a second device, extracts a version of the QUIC protocol and a connection identification from an unprotected portion of the protected header in response to detecting a QUIC packet having a protected header in use, determines a salt used in encryption of the protected header based on the version of the QUIC protocol, calculates a client initial secret based on the salt and the connection identification, determines an unprotected payload of the QUIC packet based on the client initial secret, a protected payload of the QUIC packet and the unprotected portion of the protected header, and extracts a server name indication (SNI) from the unprotected payload.

Abstract: Methods of half-duplex communication systems or full-duplex communication systems are provided. The half-duplex communication system includes n number user units-including a transmitting unit of transmitting units, wherein the transmitting unit including a channel estimation module, an identity update module and a modulation module; a receiving unit of receiving units including a demodulation module, a post-processing module and a reconciliation and verification module; a memory unit for storing prime identities, data to be transmitted and shared secret key; a control unit; an antenna connected to each of the transmitting units and each of the receiving units; and the methods are used for realizing a generation of shared secret keys, and an integrated identity verification and a data transmission using the half-duplex communication systems and the full-duplex communication systems.

Abstract: Systems and methods for managing keys in a computer memory are described. In some embodiments, location addresses are determined for two key elements. A periodic time interval that is based on a time duration for performing a transaction involving a distance between the key elements is determined. One key element may be stored at a location address and then relocated to another location address after the periodic time interval has passed. In some embodiments, areas the computer memory may remain static during relocation of the key element.

Abstract: A secure digital communications method is provided in which a Certificate Authority generates an improved RSA key pair having a modulus, a public key exponent, a public key, and a private key. The public key exponent can contain descriptive attributes and a digital signature. The digital signature can be responsive to the descriptive attributes and the modulus. A secure session can be established between a first system and a second system, within a secure digital communication protocol. The second system can verify the digital signature to authenticate the public key.

Abstract: Provided are embodiments for a circuit comprising for performing hardware acceleration for elliptic curve cryptography (ECC). The circuit includes a code array comprising instructions for performing complex modular arithmetic; and a data array storing values corresponding to one or more complex numbers. The modular arithmetic unit includes a first multiplier and a first accumulation unit, a second multiplier and a second accumulation unit, and a third multiplier and a third accumulation unit, wherein the first, second, and third multiplier and accumulation units are cascaded and configured to perform hardware computation of complex modular operations. Also provided are embodiments of a computer program product and a method for performing the hardware acceleration of super-singular isogeny key encryption (SIKE) operations.

Abstract: A distributed secure communication system includes a first System Control Processor (SCP) subsystem coupled to second and third SCP subsystems via a network. The first SCP subsystem identifies the second SCP subsystem, signs a first SCP authentication communication with a first private key to provide a first signed SCP authentication communication that it transmits to the second SCP subsystem. The first SCP subsystem receives a second signed SCP authentication communication from the second SCP subsystem, authenticates the second signed SCP authentication communication using a second public key associated with the second SCP subsystem and, in response, establishes a first secure communication channel with the second SCP subsystem.

Abstract: A processor may receive, from two or more nodes in the blockchain, respective consideration from each of the two or more nodes at a first time. The processor may receive respective updates from each of the two or more nodes at a second time. The processor may determine whether a single node of the two or more nodes is available after the respective updates. The processor may designate the single node as the block generator node.

Abstract: An apparatus and method for selectively revealing user data. User data may be stored on an immutable sequential listing and accessed through the immutable sequential listing. Processor of apparatus is configured to receive user-associated data to be stored in a resource data storage system. Processor is configured to sort the user-associated data into data sets and assigned an identifier to each data set. Identifier may be related to job history, education history, volunteer history, or the like. Processor is configured to receive a request to reveal data from a third-party and transmit data set to the requestor. Third party and data in data sets may be verified and validated.

Abstract: The instant disclosure illustrates how the privacy and security of activities occurring on distributed ledger-based networks (DLNs) can be enhanced with the use of zero-knowledge proofs (ZKPs) that can be used to verify the validity of at least some aspects of the activities without private information related to the activities necessarily being revealed publicly. Methods and systems that are directed at facilitating the tracking and recovery of assets stolen on ZKP-enabled DLNs while preserving the confidentiality of the tokens are presented herein.

Abstract: The instant disclosure illustrates how the privacy and security of activities occurring on distributed ledger-based networks (DLNs) can be enhanced with the use of zero-knowledge proofs (ZKPs) that can be used to verify the validity of at least some aspects of the activities without private information related to the activities necessarily being revealed publicly. Methods and systems that are directed at facilitating the tracking and recovery of assets stolen on ZKP-enabled DLNs while preserving the confidentiality of the tokens are presented herein.

Abstract: A system for credential authentication include an interface configured to receive a create indication to create a location aware credential, wherein the location aware credential specifies visit location data and receive a check in indication to check in from an authentication device, wherein the authentication device provides the check in indication to check in in response to determining that a detected location is within a geographic boundary designated in the visit location data of the location aware credential, and a processor configured to provide a proof request, receive a proof response, validate the proof response using a distributed ledger, and provide a success indication of successful check in.

Abstract: Embodiments of the present invention are directed to an improved system and method of producing, recording and reporting boot integrity measurements of an Internet of Things (“IoT”) computing device to resource (such as an on-chip software module, an external software module, a printer, a network router, or a server), so the resource can confirm that the IoT computing device can be trusted before access to the resource is granted. Embodiments provide a new and less expensive architecture for reliably collecting and relaying device state information to support trust-sensitive applications. Embodiments leverage crypto-acceleration modules found on many existing microprocessors and microcontroller-based IoT devices, while introducing little additional overhead or additional circuitry.

Abstract: Systems and methods are provided for authenticating an identity of a user requesting a resource or service from an entity. In some embodiments, a system may include at least one processor; and a non-transitory medium containing instructions that cause the system to perform operations. The operations may include receiving credential information associated with the remote user, and receiving, from the server associated with the entity, first hash information. The operations may also include generating second hash information based on information associated with the user, comparing the first hash information with the second hash information, and transmitting an indication based on the comparison to the server associated with the entity.

Abstract: Methods, systems, and devices that support determining whether media data has been altered are described. Captured media data may be segmented into one or more subsets, and cryptographic representations (e.g., hashes) based on the subsets may be written to an immutable ledger, possibly along with metadata and other related data. A block of a blockchain may be created for each entry in the immutable ledger. A set of media data may be validated, if a corresponding immutable ledger exists, based on segmenting the set of media data into one or more subsets in accordance with the segmenting upon capture, creating candidate cryptographic representations (e.g., hashes) based on the subsets, and comparing the candidate cryptographic representations with contents of the corresponding immutable ledger.

Abstract: A user device implements a certificate authority for issuing digital certificates that extend to other computing devices a level of trust to a particular user paired with the user device. The user device may obtain user persona information, generate a user key, and combine the user key with a device key for the generation of a digital certificate. The computing device may further transmit the digital certificate to a certificate management system, which manages interactions between other computing devices and the user device or authorizes operation of other computing devices by the particular user based on the digital certificate.

Abstract: A method, a computer program product, and a system for embedding a message in a random value. The method includes generating a random value and applying a hash function to the random value to produce a hash value. Starting with the hash value, the method further includes reapplying the hash function in an iterative or recursive manner, with a new hash value produced by the hash function acting as an initial value that is applied to the hash function for a next iteration, until a bit sequence representing a message is produced in a message hash value. The method further includes utilizing the message hash value as a new random value that can be used by an encryption algorithm.

Abstract: Systems and methods are described that include a plurality of devices triggered to be configured with a portable user account to synchronize account events to a distributed log. The plurality of devices includes at least one device configured to trigger a query to determine access rights for the at least one other device. In response to receiving an approval response to the query, the at least one device assigns a provision status to the at least one other device, provides, for the at least one other device, access to at least a subset of the portable user account according to the assigned provision status, and updates the distributed log to include the at least one other device based on the provision status.

Abstract: The present disclosure relates to a problem management method for a user system. A method may include detecting an error in the user system. A signed package may be provided in accordance with the detected error, wherein the package comprises at least a script. The user system may verify the authenticity of the package using a signature of the package, and may execute the script if the package is authentic.

Abstract: An example operation may include one or more of receiving, by a certificate issuer node, an asset certification request from an asset producer node over a blockchain, generating, by the certificate issuer node, a digital certificate linked to the asset certification request and assigned to the asset producer node, linking, by the certificate issuer node, the digital certificate to an authority of the certificate issuer node, and signing, by the certificate issuer node, the digital certificate to ensure origin and integrity of the asset.

Abstract: Methods are provided for minting and distributing quantities of cryptographically generated data based on the quality of received biological datasets. Computer readable media, computing apparatuses, and systems are also provided.

Abstract: In embodiments, an authentication server interfaces between a user device with a self-signed certificate and a verifying computer that accepts a user name and password. The user device generates a self-signed certificate signed by a private key on the user device. The self-signed certificate is transmitted to a verifying party computer over a network. The verifying party stores the self-signed certificate with user identification data. The user migrates trust to another device by providing the root certificate and intermediate certificate as a certificate chain to a second device, which then adds a new intermediate certificate to create a longer certificate chain with the same root certificate. In subsequent communications, the verifying party receives a certificate chain including the self-signed certificate from the second user device, and matches that with the user identification data stored in a database.

Abstract: A method for representing certificate expiration includes obtaining, from a root certificate authority, a root digital certificate and generating a chain of intermediate certificate authorities. Each intermediate certificate authority includes a respective intermediate certificate digitally signed by the intermediate certificate authority that is immediately higher in the chain and a respective validation time period indicating a range of times when the intermediate certificate authority is permitted to digitally sign certificates. The respective validation time period includes the validation time period of each intermediate certificate authority that is lower in the chain. The method includes generating a certificate revocation list and generating, from the lowest intermediate certificate authority in the chain, a plurality of end entity certificates.

Abstract: With the popularity of Blockchain comes grave security-related concerns. Achieving privacy and traceability simultaneously remains an open question. Efforts have been made to address the issues, while they may subject to specific scenarios. The present disclosure proposes a method, a system, and a device for maintaining privacy and traceability of a Blockchain-based system. The method includes: registering in a Blockchain-based system; transmitting a message from a transmitter T to a receiver R via an anonymous network, after a registration request of the transmitter T has been approved and storing message transmission data generated during a message transmission process in a Blockchain; and performing an identity disclosure by using the message transmission data when the message is detected to be false. The anonymous network may transmit the message by onion routing. The solution proposed by the present disclosure can achieve traceability and privacy for a Blockchain-based system simultaneously.

Abstract: In one embodiment, a method includes transmitting power in a power and data distribution system comprising at least two pairs of wires, negotiating a power level between Power Sourcing Equipment (PSE) and a Powered Device (PD) in the power and data distribution system, transmitting the power at a power level greater than 100 watts, periodically checking each of the wires for a fault, and checking for an electrical imbalance at the wires.

Abstract: A policy control function receives, from a mission critical video (MCVideo) application function, a DIAMETER AA-Request (AAR) command comprising an attribute value pair (AVP) comprising an MCVideo-identifier identifying an MCVideo service. The policy control function sends, to a network function, a Diameter command comprising one or more QoS policies based on the MCVideo-identifier.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and method for updating element properties based on distances between elements in a virtual conference. The program and method provide, in association with designing a room, an interface for specifying how a first element in the room affects at least one property value of a second element, based on distance between the two elements; receive user selection of parameter values specifying how the first element affects the at least one property value of the second element based on the distance; provide a virtual conference between plural participants within the room including the first and second elements; update the at least one property value of the second element based on a change in distance between the first and second elements, and on the parameter values; and provide for updated display of the second element.

Abstract: An apparatus and method to automatically determine the location of unknown media devices is disclosed. An example apparatus includes a media device detector to detect an unknown media device identified in monitoring data collected by an audience measurement device at a location determined to have an “on” status, a media transmission detector to detect a media transmission associated with a device address and an association storer to store an association of the device address, the unknown media device and the location. A probability determiner determines a probability that the unknown media device is located at the location.

Abstract: Systems and methods for dynamically adjusting a MAP advance time for a MAP message sent from a CCAP core to an RPD, the MAP message allocating bandwidth for the RPD during an interval beginning at a start time specified in the MAP message.

Abstract: A method may include receiving a menu set selection including a plurality of predetermined dish options at a registered user device and transmitting the menu set selection to an unregistered user device. The method may further include receiving a recipe selection of one or more of the plurality of predetermined dish options from the unregistered user device and directing a cooking operation at the cooking appliance based on the received recipe selection.

Abstract: A communication control device includes: a processor configured to: acquire identification information of a communication terminal from the communication terminal that is authenticated by communication via a wide area communication network; and when the identification information is included in a storage storing an information set in which associated are (i) the identification information of the communication terminal and (ii) specific connection unit information indicating a specific connection unit that is predetermined for the communication terminal in a narrow area communication network different from the wide area communication network, perform control such that the communication terminal is connected to the specific connection unit as a connection destination of the communication terminal, based on the specific connection unit information of the information set including the acquired identification information.

Abstract: A vehicle master device is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU). The vehicle master device includes a distribution frequency specifying unit that is configured to specify a distribution frequency of the update data to the rewrite target ECU based on a correspondence relationship between a predetermined vehicle power supply state and transmission restriction information related to distribution of the update data and a vehicle power supply state during updating, and a distribution control unit that is configured to control distribution of the update data according to the distribution frequency specified by the distribution frequency specifying unit.

Abstract: A method for operating a first network device of a communications network, wherein the method comprises: determining or receiving, by means of an ingress interface, an ingress data stream comprising payload data to be transmitted towards a second network device; determining or receiving, by means of a correlation observer, at least one correlation value for a plurality of communication paths between the first network device and the second network device, wherein each of the plurality of communication paths comprises a different one of a plurality of physical channels; determining, by means of a multi-connectivity controller, a plurality of egress data streams in dependence on the at least one correlation value and in dependence on the ingress data stream; and transmitting, via a respective one of a plurality of egress queues, wherein each egress data stream is associated with a different one of the plurality of paths.

Abstract: A distributed system includes a plurality of compute nodes configured to process messages. The compute nodes each process messages corresponding an assigned value of a common parameter of the messages. The values are assigned to the compute nodes such that two or more compute nodes are available to process each message. The values can be assigned to the compute nodes in a grouping configuration or a striping configuration. The compute nodes also circulate one or more tokens among nodes, and perform a self-maintenance operation during a given state of possession of the token. During a self-maintenance operation, the values assigned to the compute node can be reassigned to other compute nodes to ensure processing of corresponding messages.

Abstract: A method can include receiving, from communicatively coupled mesh nodes of the mesh distribution network, data indicating whether respective mesh nodes of the mesh nodes are acting as gateways and an amount of traffic being served by the mesh nodes, determining, based on the received data, a first mesh node of the mesh nodes to put into an inactive state, and providing a communication to the first mesh node that causes the first mesh node to enter the inactive state.

Abstract: Some embodiments of the invention provide a method for cloning a set of one or more applications implemented by a first set of machines connected through a first logical network that defines a virtual private cloud (VPC) in a set of one or more datacenters. The method detects that the first logical network does not have sufficient resources to process a set of network traffic destined for the set of one or more applications implemented by the first set of machines. Based on said detecting, the method uses a set of network configuration data that configures a set of logical forwarding elements (LFEs) of the first logical network to define a cloned, second logical network for connecting a cloned, second set of machines that implement a second set of one or more applications. The method uses the cloned, second logical network to process at least a subset of the network traffic destined to the set of applications.

Abstract: Transmitters and communication systems are disclosed. In one example, a transmitter includes first to third serializers that generate first to third serial signals; a first output section configured to set a voltage of a first output terminal; a first output control circuit configured to control an operation of the first output section on the basis of the first serial signal and the second serial signal; a second output section configured to set a voltage of a second output terminal; a second output control circuit configured to control an operation of the second output section on the basis of the third serial signal and the first serial signal; a third output section configured to set a voltage of a third output terminal; and a third output control circuit configured to control an operation of the third output section on the basis of the second serial signal and the third serial signal.

Abstract: Methods and apparatus for providing a demapping system with phase compensation to demap uplink transmissions. In an embodiment, a method is provided that includes detecting a processing type associated with a received uplink transmission, and when the detected processing type is a first processing type then performing the following operations: removing resource elements containing reference signals from the uplink transmission; layer demapping remaining resource elements of the uplink transmission into two or more layers; phase compensating all layers to generate phase compensated layers; and soft-demapping all phase compensated layers to produce phase compensated soft-demapped bits.

Abstract: This application is directed to transferring data over a data link coupled between two electronic devices. The data link includes a retimer having a full data path and a bit level data path that are coupled in parallel. The data link is initiated with the full data path and a first sequence of data packets is transferred via the full data path in accordance with a low data rate setting. While transferring the first sequence of data packets, the first sequence of data packets is manipulated in the full data path to establish a connection of the data link, and in response to establishing the connection of the data link, the data link is switched from the full data path to the bit level data path.

Abstract: A system and method for recovering encoded data from a modulated baseband signal is disclosed. Aspects and embodiments of the system and method include receiving an analog input signal representing a modulated baseband signal, counting clock cycles of a reference clock, detecting a first transition and a second transition of the analog input signal indicating a first change and a second change in the modulated baseband signal, storing a first counter value corresponding to an amount of clock cycles elapsed between the first transition and the second transition, and determining a binary-valued bit sequence corresponding to the first counter value.

Abstract: A multi-PAM equalizer receives an input signal distorted by inter-symbol interference (ISI) and expressing a series of symbols each representing one of four pulse amplitudes to convey two binary bits of data per symbol. High-order circuitry resolves the most-significant bit (MSB) of each two-bit symbol, whereas low-order circuitry 115 resolves the immediate least-significant bit (LSB). The MSB is used without the LSB for timing recovery and to calculate tap values for both MSB and LSB evaluation.

Abstract: An OFDM modulation device includes a communication use specifying unit to specify a communication use of a communication frame, a header generating unit to generate a header of the communication frame in which communication use specifying information indicating the communication use specified by the communication use specifying unit is stored, a payload generating unit to generate a payload of the communication frame, and an inverse fast Fourier transform unit to generate a communication frame of time domain by executing an inverse fast Fourier transform of a size corresponding to the communication use specified by the communication use specifying unit on data of frequency domain including the header generated by the header generating unit and the payload generated by the payload generating unit.

Abstract: Methods, systems, and devices for wireless communication are described. Methods, systems, and devices provide for different tone spacing schemes for different channels. Methods, systems, and devices also provide for different tone spacing schemes for different stages of communication between a UE and a base station. The base station may indicate, to the UE, the tone spacing scheme in a control channel, a synchronization signal, or a reference signal and the tone spacing scheme may be selected by the base station from available tone spacing schemes for communication. Tone spacing schemes may also be referred to as numerologies.

Abstract: Aspects of the present disclosure include methods, apparatuses, and computer readable media for receiving a medium access control (MAC) control element (CE) comprising at least a set of guard symbol values associated with a mobile termination (MT) and a distributed unit (DU), transitioning from first communication via one or more MT cells associated with the MT to second communication via one or more DU cells associated with the DU or from the second communication via the one or more DU cells associated with the DU to the first communication via the one or more MT cells associated with the MT during at least a guard symbol signaled by a guard symbol value of the set of guard symbol values; and transmitting or receiving information via the transitioned one or more MT cells or the transitioned one or more DU cells.

Abstract: Various embodiments of the present disclosure relate to a next-generation wireless communication system for supporting a higher data transmission rate beyond a 4th generation (4G) wireless communication system. According to various embodiments of the present disclosure, a method for transmitting/receiving a signal in a wireless communication system and a device supporting same may be provided.

Abstract: An apparatus of a transmitter may include, for example, a Golay builder to build modulated Golay sequences for at least a non-EDMG Short Training Field (L-STF), and a non-EDMG Channel Estimation Field (L-CEF) of a PPDU; a scrambler to generate scrambled bits by scrambling bits of a non-EDMG header (L-header) and a data field of the PPDU; an encoder to encode the scrambled bits into encoded bits according to a low-density parity-check (LDDC) code; a constellation mapper to map the encoded bits into a stream of constellation points according to a constellation scheme; a spreader to spread the stream of constellation points according to a Golay sequence; and a transmit chain mapper to map a bit stream output from the Golay builder and the spreader to a plurality of transmit chains by applying a spatial expansion with relative cyclic shift over the plurality of transmit chains.

Abstract: A method and an apparatus for transmitting an EHT PPDU to a WLAN system are proposed. Specifically, a transmitter generates and transmits an EHT PPDU to a receiver through a 320 MHz band from which an 80 MHz band is punctured. The EHT PPDU includes a legacy preamble and an EHT field. The legacy preamble includes an L-STF and an L-LTF. The legacy preamble is generated by applying a first phase rotation value. The first phase rotation value is obtained on the basis of a second phase rotation value and a third phase rotation value. The second phase rotation value is a phase rotation value that repeats a phase rotation value defined for the 80 MHz band in an 802.11ax system. The third phase rotation value is a phase rotation value defined in unit of the 80 MHz band in the 320 MHz band on the basis of an optimal PAPR of the L-STF and L-LTF. The first phase rotation value is [1 1 ?1 ?1 ?j ?j j j 1 1 ?1 ?1 ?j ?j j j].

Abstract: Autonomous management of resources by an administrative node network is disclosed, including: receiving, at a first node of a plurality of nodes associated with an administrative node network, a resource request directed to the administrative node network, wherein the administrative node network is associated with managing a set of resources; obtaining a first proposal with respect to the resource request; obtaining a second proposal with respect to the resource request from a second node of the plurality of nodes associated with the administrative node network; and determining a processing consensus associated with the resource request based at least in part on the first proposal and the second proposal.

Abstract: Systems and methods for managing a network are described. A view of current state of the network is maintained where the current state of the network characterizes network topology and network constituents, including network entities and network elements residing in or on the network. Events are announced that correspond to changes in the state of the network and one or more network elements can be configured accordingly. Methods for managing network traffic are described that ensure forwarding and other actions taken by network elements implement globally declared network policy and refer to high-level names, independently of network topology and the location of network constituents. Methods for discovering network constituents are described, whereby are automatically configured. Routing may be performed using ACL and packets can be intercepted to permit host to continue in sleep mode. The methods are applicable to virtual environments.

Abstract: A method for operating an access node includes generating a configuration message including information specifying a set of reference signals of a first reference signal type and a set of reference signals of a second reference signal type used to identify a new beam, and information specifying random access channel resources allocated for transmitting preamble sequences, wherein each random access channel resource is associated with a reference signal of the first reference signal type, sending, to one or more user equipments (UEs), the configuration message, receiving, from a UE, a preamble sequence on one of the random access channel resources, and determining an identity of the UE in accordance with the preamble sequence and the one of the random access channel resources.