Abstract: This disclosure relates to a privacy preserving machine learning platform. In one aspect, a method includes receiving, from a client device and by a computing system of multiple multi-party computation (MPC) systems, a first request for user group identifiers that identify user groups to which to add a user. The first request includes a model identifier for a centroid model, first user profile data for a user profile of the user, and a threshold distance. For each user group in a set of user groups corresponding to the model identifier, a centroid for the user group that is determined using a centroid model corresponding to the model identifier is identified. The computing system determines a user group result based at least on the first user profile data, the centroids, and the threshold distance. The user group result is indicative of user group(s) to which to add the user.

Abstract: A method may include establishing, by a first service provider and via an application programming interface (API), an agreement with a second entity. The agreement may identify services that can be modified without submission of a new order. The method may also include receiving a first message requesting a change associated with a service and determining, by the first service provider, whether the requested change corresponds to a change that is permitted based on the agreement and whether resources are available in the first network to implement the requested change. The method may further include determining whether the requested change is accepted, sending a second message to the second entity that indicates whether the change is accepted and in response to determining that the change is accepted, automatically implementing the change to the service in the first network.

Abstract: A computer system to track and enhance performance of a virtual workspace system is provided. The computer system receives requests to profile phases of a distributed process executed by hosts coupled to one another via a network. Each of phase includes operations executed by processes hosted by the hosts. Each of phase either starts with receipt of a request via a user interface of a virtualization client or ends with provision of a response to the request via the user interface. The computer system identifies event log entries that each include an identifier of an event marking a start or an end of one of the operations, constructs a performance profile based on the event log entries, and transmits the performance profile to the user interface.

Abstract: A method for synchronizing an identity of a user between a network observer and a third party includes: reading, by the network observer, a connection request sent from the user to the third party, the connection request including a host field having a host part corresponding to the third party and a sub-host part corresponding to identification information of the user; and associating, by the network observer in a database, the identification information of the user derived from the sub-host part with the identity of the user and an identity of the third party.

Abstract: Systems and methods are disclosed herein to provide information to a user based on a communication from a user associated with multiple media assets. Based on the determination that the user has entered input into a user device, one is selected and recommended to the user.

Abstract: A method is provided for the capture of biometric or multi-biometric information using: a standard Internet of Things (IoT) data broker in an efficient and distributed IoT architecture. The MQTT information protocol is used in combination with mobile or fixed devices that manage one or more peripherals for capturing biometric information. An IoT platform is provided that allows information to be viewed in real time along with historical information and statistics regarding the use and operation of the devices to be obtained. The invention provides a method based on standard integration protocols and tools for M2M communication in IoT architectures, which acts as an information bridge, facilitating implementation to capture any type of biometric or multibiometric information, which information can be in any format (biometric templates or images in standard or proprietary formats), so that the captured information can be used in any type of biometric process.

Abstract: An information processing system according to an embodiment includes a conversion proxy that is connected to devices corresponding to a plurality of types of unique standards, and further connected to a common platform server that performs data exchange with applications. The conversion proxy includes an acquisition unit that acquires ontology data described with a data structure corresponding to the unique standards, a device management unit that acquires and manages device information that is unique to devices corresponding to the unique standards, and a common exchange unit that creates a resource in which a data structure common to the plurality of types of unique standards and a data exchange interface corresponding to the unique standards are correlated, on the basis of the ontology data and the device information, and performs data exchange with the common platform server using the resource.

Abstract: Techniques to provide for reducing the time for rendering a web page by efficiently and optimally aggregating various resources transmitted to the browser during the page load (e.g., loading of the web page). Some example implementations include, upon receipt of a request for a web page, identifying a plurality of page features for displaying the web page, where each of the page features being associated with a respective manifest of dependencies on resources. Example implementations may also include aggregating dependencies of said plurality of page features to generate an optimized set of dependencies for the web page, resolving dependencies in accordance with the optimized set of dependencies, and render the web page by rendering the plurality of page features using the resolved dependencies.

Abstract: Methods and systems for cache optimization are described. Content items served to client devices of a content distribution network may be associated with a cache value. The cache value for a content item may cause a cache device to cache the content item for a period of time. The cache value for the content item may be updated based on increasing or decreasing popularity. The content item may be encoded at a plurality of bitrates, and cache values may vary across the plurality of bitrates such that multiple copies of the content item may each be cached for varying periods of time depending on a corresponding bitrate.

Abstract: Systems and methods that provide for the pre-fetching of data, including receiving user input data from a user device, and in response, identifying a first set of objects for enabling an application operating on the user device to render a first interface in a sequence of interfaces, and determining a second set of objects for enabling the application to render a second interface in the sequence of interfaces. The first set of objects are transmitted to the user device, as well as instructions for directing the user device to render the first interface in the application using the first set of objects, and receive and store the second set of objects in an information repository associated with the user device. In response to a user input, the second interface is rendered in the application using the second set of objects.

Abstract: Edge server cache techniques are described to prepopulate an edge server cache. The edge servers are configurable to maintain a first set of digital content that is currently made available via content requests to client devices. The edge servers are also configured to maintain a second set of digital content, separately, that is to be launched. The second set of digital content is not made publicly available until launch, but rather is “pre-warmed” in the caches of the respective edge servers. In an implementation, prelaunch access is provided using respective credentials, e.g., to verify operation of the second set of digital content using software and hardware resources at actual edge servers that implement the caches.

Abstract: Methods and apparatus for active queue management in user space networking stacks. Unlike prior art monolithic networking stacks, the exemplary networking stack architecture described hereinafter includes various components that span multiple domains (both in-kernel, and non-kernel). For example, unlike traditional “socket” based communication, disclosed embodiments can transfer data directly between the kernel and user space domains. Additionally, user space networking stacks require a new flow control methodology that is responsive to networking congestion and/or packet loss. For example, embodiments of the present disclosure introduce a flow advisory table that may, for example, utilize an eventing methodology for active queue management in addition to, or alternatively then, legacy active queue management. Exemplary systems can support multiple networking protocol stack instances (including an in-kernel traditional network stack) as well as flow advisory tables (and legacy active queue management).

Abstract: An example method may include receiving, at a device, a first frame over a wireless network and constructing a preliminary data portion of a second frame. The second frame may be configured for transmission over the wireless network. The method may also include in response to the receiving of the first frame at the device, beginning transmission of a header portion of the second frame over the wireless network and after the beginning transmission of the header portion of the second frame, constructing, based on the preliminary data portion, a finalized data portion of the second frame for transmission over the wireless network.

Abstract: A vehicular communication controller includes a microcontroller (MCU) located within a vehicle to publish a newly defined protocol data unit (PDU) including a header and a payload portion to a destination device. The destination device may utilize a first protocol or a second protocol. If the destination device utilizes the first protocol that includes an automotive/embedded communication protocol then the MCU serializes the payload portion of the PDU and binds the PDU to the first protocol. The destination device may then receive the PDU using the first protocol, deserialize the payload portion, and remove the header leaving the payload portion unchanged and recreate, based on the deserialized payload portion, the PDU.

Abstract: This disclosure relates to systems and methods for performing cryptographic operations in connection with the management of electronic content using multiple license services. In some circumstances, a content service may not wish to share unencrypted content keys with a single license service for a variety of security reasons. Embodiments of the disclosed systems and methods may use multi-party cryptographic methods in connection with the management of protected content keys and/or associated licenses and/or the distribution of content keys and/or licenses to authorized users and/or devices. In various embodiments, a content service may split a content key into a plurality of key shares and may transmit the key shares to a plurality of different license services. The license services may coordinate operations to generate a protected content key without revealing unencrypted content key to any of the participating license services.

Abstract: Remote terminals are configured to generate ciphertexts from plaintext polynomials. Each ciphertext corresponds to a plaintext polynomial bound to a message space of a polynomial-based fully homomorphic cryptographic scheme. At least one server is configured to receive ciphertexts via a network from the plurality of remote terminals. The server performs a multiplication operation and an addition operation on the ciphertexts to obtain resultant ciphertexts. The multiplication operation includes performing a bitwise decomposition function on a ciphertext to obtain a bitwise decomposed ciphertext. The bitwise decomposition function maps a multi-bit data type to a sequence of bits. The multiplication operation further includes performing matrix multiplication on the bitwise decomposed ciphertext and a data element belonging to a set of data elements. Message filters, data search engines, and other applications are discussed.

Abstract: A computer-implemented method is provided for processing dynamic data in the environment comprising a device to be controlled, a controller generating a control command (u(t)), a decryption module which decrypting an encrypted control command received from the controller, an actuator which operates according to the decrypted control command received from the decryption module, a sensor which detects the output (y(t)) of the device and a homomorphic encryption module which homomorphically encrypts the signal of the sensor.

Abstract: Embodiments of present disclosure relates to and systems to reduce propagation delays in hardware implementation of 3GPP confidentiality or standardized algorithm 128-EEA3 and 3GPP integrity algorithm 128-EIA3 using ZUC module. The reduction of the propagation delays is achieved by improving or optimizing secondary critical paths, which are subsequent to primary critical path, related to the 3GPP confidentiality or standardized algorithm 128-EEA3 and the 3GPP integrity algorithm 128-EIA3. Non-conventional modifications in the hardware implementation are proposed for the improvement or optimization.

Abstract: A method for a key management server to manage encryption for data stored by a cloud provider server includes receiving, by the key management server from the cloud provider server, a request for a drop key. The request includes a hash drop identifier that uniquely identifies a cipher drop, and the cipher drop comprises a unit of data stored by the cloud provider server. The method further includes generating the drop key based on at least the hash drop and the drop identifier and encrypting the drop key. A response comprising the encrypted drop key is sent to the cloud provider server.

Abstract: Technologies for processing network packets by a host interface of a network interface controller (NIC) of a compute device. The host interface is configured to retrieve, by a symmetric multi-purpose (SMP) array of the host interface, a message from a message queue of the host interface and process, by a processor core of a plurality of processor cores of the SMP array, the message to identify a long-latency operation to be performed on at least a portion of a network packet associated with the message. The host interface is further configured to generate another message which includes an indication of the identified long-latency operation and a next step to be performed upon completion. Additionally, the host interface is configured to transmit the other message to a corresponding hardware unit scheduler as a function of the subsequent long-latency operation to be performed. Other embodiments are described herein.

Abstract: A secure cartridge-based storage system includes a set of read/write control electronics on a control board adapted to removably couple with each of a plurality of storage cartridges. The read/write control electronics are adapted to transmit a public key to a target storage cartridge in response to a read/write command received from a host device. The target storage cartridge includes and encryption circuit that authenticates the transmitted public key against a stored public key, accesses a locally-stored encryption key responsive to successful authentication of the public key; and utilizes the locally-stored encryption key to encrypt or decrypt data of the read/write command that is in transit between the storage media and the control board.

Abstract: The invention relates to a secure entity, a trusted execution hardware environment (TEE) comprising a secure processing circuit and suitable for implementing a contract-execution architecture, such as a Wallet Node for executing a contract-type program, wherein said program can be loaded into an execution memory in response to a program identifier contained in a message that reaches the entity via a channel for communication with other entities, and a secure device for interaction with the physical environment of the entity, such as a sensor and/or actuator module, which can supply input data for the execution of the contract and/or receive data generated by the execution of the contract, the secure device containing its own secret key for securing exchanges within the framework of the execution of the program.

Abstract: Groups of devices may be prevented from accessing content by encrypting the content. A plurality of secrets associated with a decryption key may be generated using a secret sharing algorithm. The plurality of secrets may be sent to one or more groups of devices to derive the decryption key. A non-restricted subset of the groups of devices may receive one or more secrets. Devices within the non-restricted subset of the groups may be able to use one or more secrets to determine the decryption key for the content. Groups that do not receive one or more secrets may be unable to determine the decryption key for the content.

Abstract: A method is disclosed. The method includes receiving, by a computer node in a network including a plurality of computer nodes, a plurality of data values from the plurality of computer nodes. Each computer node can create a data value based on a time that the computer node in the plurality of computer nodes takes to perform a function. The computer node can then provide the data values or derivatives thereof as random values to an entropy pool of random values. The computer node can then select a random value from the entropy pool and initiate use of the random value in an operation.

Abstract: A system including: a storage; and a processor configured to: receive a data packet; and process the data packet without an instruction input to perform a definite task. The data packet may be encrypted. The processor may be configured to process the data packet based on a decryption mechanism required to decrypt the data packet.

Abstract: The present disclosure relates to technology that performs encrypted communication via a network or a bus, and a communication method using a security key between nodes connected via a network or a bus includes setting a critical cluster among multiple nodes, selecting a primary message shared between the set critical clusters, and encrypting a message using a key generated to be valid for a preset period to enable communication between the critical clusters, wherein each of the critical clusters stores the primary message for the preset period according to a same key generation scheme to generate a block, and generates and possesses a new key based on the generated block and a currently used key, so that information about a previous message and a previous key is sequentially accumulated in the new key.

Abstract: Example embodiments of systems and methods for data transmission between a contactless card and a server are provided. The card may include an applet, a counter, and a plurality of encryption keys. The applet may rotate the plurality of keys based on a predetermined key rotation, select one or more keys for a cryptographic operation, perform the operation using the selected keys and the counter to generate a cryptographic result, and transmit the result and the counter to the server. Upon receipt of the result, a server, in communication with the card and containing the plurality of encryption keys, may rotate the plurality of keys based on the predetermined key rotation, select one or more keys for decryption, wherein the keys selected by the server matches the keys selected by the applet, and perform the decryption on the result.

Abstract: Systems and methods for providing exception failover augmented, homomorphic encrypted (HE) distributing, end-to-endpoint persistent encryption, and distributed HE domain non-decrypting, privacy-protective biometric processing are provided. Some configurations may include generating HE biometric feature data, based on homomorphic encrypting the biometric feature data. Some configurations determine an exception status of the HE biometric feature data between exception and non-exception. Systems and methods may include performing a HE domain, non-decrypting biometric classifying of the HE biometric feature data.

Abstract: Example embodiments of systems and methods for data transmission between a contactless card, a client device, and one or more servers are provided. The contactless card may include one or more processors and memory, which may include one or more applets. The client device may include one or more processors and memory. The client device may be in data communication with the contactless card. One or more servers may be in data communication with the client device. A first set of information may be transmitted from the contactless card to the client device. The first set of information may include one or more links to activate the contactless card via a designated email program. Upon validation of the first set of information by the one or more servers, the contactless card may be activated.

Abstract: A non-transitory computer-readable recording medium stores a generation program for causing a computer to execute a process including: dividing a target content into a plurality of blocks so that head information of the target content is distributed to the blocks different from each other, according to a predetermined rule; generating a hash value corresponding to each of the plurality of divided blocks; generating an aggregation hash value by aggregating the generated hash values; and outputting the generated aggregation hash value.

Abstract: A processor-implemented method is disclosed. The method includes: generating a secure data object associated with a request for transfer of resources, the secure data object indicating one or more resource transfer parameters including account information for a transferee account at a resource account management system, wherein the secure data object includes a first hash computed based on the one or more resource transfer parameters; signing the secure data object using a private key associated with the resource account management system; and sending the secure data object to a messaging address associated with a transferor of the requested resources.

Abstract: In one example, a cloud printing server may include a processor and a memory coupled to the processor. The memory may include a blockchain management component to register an image forming apparatus with a blockchain associated with multiple entities of a blockchain network, create a distributed ledger relating to the blockchain, create a ledger entry including information indicating operational state and configuration data of the image forming apparatus in the distributed ledger, and transmit an instance of the distributed ledger to the multiple entities including the image forming apparatus.

Abstract: The present application relates to ensuring data consistency between a modular device and an external system. Techniques are described for ensuring data consistency between devices at a control device using configuration signatures. A control device can receive and store a baseline configuration signature for a first modular device. Upon initialization of the first modular device, the control device can receive a current configuration signature from the first modular device. The control device can compare the current configuration signature with the baseline configuration signature and, if a mismatch is found, generate a notification indicating that data subsequently received from the first modular device is of uncertain integrity.

Abstract: The disclosed technology is generally directed to embedded device updates. In one example of the technology, a request for a nonce from a device is received. The nonce is sent in response to the request. An authentication request that includes the nonce, a set of measurements associated with the device, and a cryptographic signature generated from a private key associated with the device is received. The device is validated based on the authentication request. In response to successful validation of the device, a short-term certificate is generated for the device.

Abstract: Techniques are disclosed to automate TLS certificate rotation. For example, a certificate rotation event may be detected from a certificate management tool. The certificate rotation event may be associated with a first certificate and may indicate that the first certificate is to be updated with a second certificate. An application server that is running on a host and to which the first certificate is bound may be identified. A certificate identifier for the second certificate may be provided to one or more agents running on the host. A distribution service may obtain certificate information, e.g., a public key, a private key, or a certificate identifier for the second certificate, from the certificate rotation tool. Some or all of the certificate information for the second certificate may be obtained by the one or more agents running on the host. The one or more agents may instruct the application server to bind the second certificate.

Abstract: As part of a factory provisioning of an Information Handling System (IHS), a signed replaceable hardware certificate is stored that identifies any replaceable hardware components coupled to the IHS during the factory provisioning. Upon a transfer of control or ownership of the IHS, replaceable hardware components that are coupled to the IHS are detected, and the replaceable hardware certificate is utilized to validate that the identified replaceable hardware components detected as coupled to the IHS are the same replaceable hardware components coupled to the IHS during the factory provisioning. A security processor of the IHS may support boot code operations for generating additional replaceable hardware certificates that can be used to validate the integrity of any changes the replaceable hardware of the IHS, such as upon its next power cycle.

Abstract: The present disclosure relates to a PUF apparatus for generating a persistent, random number. The random number is determined by selecting one or more PUF cells, each of which comprise a matched pair of capacitors that are of identical design, and determining a value that is accurately and reliably indicative of a random manufacturing difference between them, based in which the random number is generated. The random manufacturing differences between the capacitors creates the randomness in the generated random number. Furthermore, because the random manufacturing difference should be relatively stable over time, the generated random number should be persistent.

Abstract: A data store to store and access digital records is provided, and a key object record is initialized in the data store to store data associated with a physical key object. A digital fingerprint of the physical key object is stored in the key object record. Another digital record is created in the data store that is not the key object record. The digital record is linked to the digital fingerprint of the physical key object. The linking is arranged to provide secure control access to the linked digital record. A tendered access key is received via a programmatic interface or user interface, and the data store is queried based on the tendered access key to identify a matching digital fingerprint of a key object. In a case that the querying identifies the matching digital fingerprint of the key object within a prescribed level of confidence, access to the linked digital record secured by the key object is granted.

Abstract: A foldable electronic device is provided. The foldable electronic device includes a central body, a linkage unit, a plurality of operating mechanisms, and a plurality of panel bodies. The linkage unit includes a plurality of driving shafts. Each of the operating mechanism has a wing rod, a lifting plate, and a connecting rod. The wing rod is fixed to the lifting plate. The wing rod and the connecting rod pivotally connecting to the central body and the driving shaft respectively. When the panel bodies are in a folded status, a flexible screen is bent, and the wing rod, the lifting plate, and the central body collectively define a yielding space for accommodating a flexible section of the flexible section.

Abstract: A display apparatus includes a display module having a display panel configured to display an image; a sound generating device on a rear surface of the display panel and including a first side and a second side perpendicular to the first side and an adhesive member in a partial region of the sound generating device, the adhesive member having a size smaller than one of the first side and the second side of the sound generating device.

Abstract: This application provides an address book-based device discovery method, an audio and video communication method, and related electronic devices. In the method, a personal device of a user is registered with a communication account system by using a phone number, and the communication account system is responsible for maintaining a binding relationship between the device and the phone number for capability discovery and query. A list of devices that meets a privacy policy is queried based on the phone number of the user, and a list of devices that can perform audio and video communication is displayed in an address book. Then, a Another user can reach different personal devices when calling the phone number.

Abstract: An apparatus, system and method (500) is disclosed. The method includes receiving (501) an identification of a called party and an identification of a first user equipment (UE) device (102a) of a calling party for establishing a communication between the calling party and the called party. The method includes based on the identification of the first UE device of the calling party, receiving (502) a list including a plurality of MSISDNs. The method includes selecting (503), based on the identification of the called party, a MSISDN of the plurality of MSISDNs as a caller-id for displaying on a second UE device (102b) associated with the called party. The method can further include displaying (504) the selected MSISDNs.

Abstract: To provide a mobile phone which can be used without hampering convenience in a condition where functions of the mobile phone are switched and can improve operability. The mobile phone includes an optical sensor, a display element, a pixel circuit portion where a plurality of pixels having a plurality of transistors are arranged in matrix, an optical sensor control circuit which is connected to an optical sensor driver circuit for driving the optical sensor and reads a signal from the optical sensor, a display portion control circuit which is connected to a display element driver circuit for driving the display element and outputs an image signal for displaying an image on a display portion, a gradient detection portion for outputting a signal in accordance with a gradient of the mobile phone, and an arithmetic circuit for performing display in the pixel circuit portion by switching image signals output to the display portion control circuit with a signal from the gradient detection portion.

Abstract: A terminal includes a camera and a sensor, where the sensor is configured to detect a status of holding the terminal by a user; the terminal displays a first interface, and displays a first photographing control on the first interface in response to detecting that a current status of holding the terminal by the user undergoes a change satisfying a preset condition, where the first interface is not a viewfinder interface of the terminal; and the terminal displays a second interface in response to an operation of the user on the first photographing control, where the second interface is a viewfinder interface of the terminal.

Abstract: A translation method includes: a first electronic device establishes a call connection to a second electronic device and then displays a call interface; after receiving a first operation of a first user, the first electronic device switches from displaying the call to displaying a translation interface; when receiving a first speech of the first user in a first language, the translation interface sequentially displays at least a first text and a second text, where the first text is obtained by recognizing the first speech, and the second text is obtained by translating the first speech into a target language; and the first electronic device sends a machine speech in the target language to the second electronic device.

Abstract: Embodiments of the disclosure provide a method of operating a contact center. In some embodiments, the method includes receiving a call from a customer communication device, transitioning the call from a voice domain into a digital domain, and enabling the contact center to interact with the customer communication device in at least the digital domain after the call has been transitioned from the voice domain into the digital domain.

Abstract: Implementations are directed to utilizing an assistant to automatically navigate an interactive voice response (IVR) tree to arrive at a target state during an assisted telephone call. The assistant can receive input to initiate the assisted telephone call, identify an entity to engage with, on behalf of the user, and during the assisted telephone call, based on the input, and identify an IVR tree stored in association with the entity. In various implementations, navigation of the IVR tree can be modified based on interaction(s) detected at a client device subsequent to initiating the assisted telephone call. In various implementations, the assisted telephone call can be initiated from a search interface, and the target state can be associated with a given search result. In various implementations, the IVR tree can be dynamic in that only a subset of candidate state(s) of the IVR tree may be available as the target state.

Abstract: Certain aspects of the disclosure are directed to apparatuses and methods for analyzing customer-interaction metrics from digital voice data in a data-communication system. An example method includes accessing digital voice data indicative of transcribed audio conversations between a plurality of agents and customers of a remotely-situated client entity, the digital voice data including keywords and speech characteristic parameters associated with outcomes of the transcribed audio conversations.

Abstract: In the field of government engagement management, an agent guide or script-flow in an employee desktop web client is implemented. In such a system and method, when agents create interactions with clients they can follow a script-flow which will guide the agent through the interaction through a series of menu selections and automated sets of instructions. This feature of the government engagement management system allows existing customer investment from the rich desktop client or non-web client in developing specific scripts, that can also now function in the web client atmosphere. This system and method also enables an agent to handle calls with the web client more efficiently, and allows agents on the web client to automatically classify.

Abstract: A terminal supports two cards the primary card and the secondary card, the primary card supports a data service, and the secondary card supports transmission of a voice service using a data service, or the secondary card supports concurrent transmission of a voice service and a data service. The method includes, when the terminal performs the data service using the primary card, if the terminal performs the voice service using the secondary card, switching, by the terminal, the data service performed using the primary card to the secondary card, and performing the data service using the secondary card.