Abstract: The invention relates to a method, a non-transitory computer program product, and an apparatus for encrypting and decrypting physical-address information. The method includes: receiving a first read command requesting of the flash controller for first physical block addresses (PBAs) corresponding to a logical block address (LBA) range from a host side, wherein each first PBA indicates which physical address that user data of a first LBA of the LBA range is physically stored in a flash device; reading the first PBAs corresponding to the LBA range from the flash device; arranging the first PBAs into entries; encrypting content of each entry by using an encryption algorithm with an encryption parameter to obtain an encrypted entry; and delivering the encrypted entries to the host side.

Abstract: Embodiments of the invention include a computer-implemented method that uses a processor to access cryptographic-function constraints associated with an encrypted message. Based on a determination that the cryptographic-function constraints do not include mandatory cryptographic computing resource requirements, first resource-scaling operations are performed that include an analysis of cryptographic metrics associated with a processor. The cryptographic metrics include information associated with the encrypted message, along with performance measurements of cryptographic functions performed by the processor.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for managing data usage. An example method includes monitoring electronic usage of a governed data set in a computing environment, wherein the governed data set comprises a governed business element, and wherein the governed business element comprises a business element and a metadata attribute configured to govern electronic usage of the business element. The example method further includes identifying, via a data compliance bot, transmission of an electronic usage request from a user device, wherein the electronic usage request comprises a request for a user of the user device to electronically use the business element in the computing environment. The example method further includes identifying the metadata attribute based on the business element. Subsequently, the example method includes determining whether electronic use of the business element is allowed.

Abstract: A method for receiving and processing a covert transmission within a TCP/IP protocol stack is described. An IP protocol layer receives a datagram comprising covert data. The datagram is adapted to appear as an error at a TCP layer. The datagram is intercepted at an IP layer routine below the TCP layer. The intercepted datagram is processed by an extension of an IP layer routine.

Abstract: A method and system for providing secure delivery, transport, modification, exchange of digital design and build files that have been bundled into a digital asset within a complex digital supply chain. The system also provides for quality standards when the digital asset is used to manufacture a physical part, and provides for secure feedback to stakeholders for the purpose of digital logistics, data analytics, or liability. The system includes, but is not limited to, manufacturing, licensing, modification and delegation policy, generating authorization certificates, authenticating manufacturing devices and provide qualitative and quantitative file consumption data.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Abstract: Devices, systems, and methods for storing and managing sensitive information in a connected environment are provided. The system comprises a master controller and a sensitive information storage device (“SIS device”). The SIS device has an island that can be activated by user interaction with the SIS device. In general, the island is deactivated by default and when the island is deactivated, sensitive information that is stored on the SIS device cannot be accessed. Only when the island is activated by user interaction can the stored sensitive information be accessed.

Abstract: Methods, systems and computer program products for managing workflows between multiple third-party systems. A content management system stores a workflow that operates over content objects by invoking third-party applications. The content management system invokes these third-party applications, and these applications make modifications to the progression of the workflows as the third-party applications carry-out their specific portions of the workflow. Upon receipt of a workflow variable value from a first third-party application, the content management system determines the semantics of the workflow variable value and caries out a next portion of the workflow. The content management system then invokes a further next portion of the workflow to be carried out by a second third-party application.

Abstract: Various embodiments include a secure access system that provides secure group-based access to sets of digital assets. The system may allow a user to upload digital assets to the system for secure access by other users, and may allow a user to remove digital assets from the system as well. The assets may be associated with a family, and may be stored as a “family album”. The system may issue a secure credential to family members for accessing the family album. A family member may invite another family or individual to view the family album. On acceptance of the invitation, the system may automatically forward the secure credential to the invited family or individual. The invited family or individual may use the secure credential to access the family album with no further action required by the invited family or individual.

Abstract: Systems and methods are disclosed for using a distributed ledger interface system to facilitate background verification of an individual. One method may include, sending, by a server to a first device associated with a first organization, an indication that an individual is ending the membership to the first organization; unlocking access to an individual-specific data structure in a distributed ledger, wherein the individual-specific data structure allows storage of a plurality of data values corresponding to a plurality of background aspects of the individual, and wherein the distributed ledger is shared within a plurality of nodes within a network; providing, to a user device associated with the individual, a digital key to allow permission to access the individual-specific data structure; and granting, to a second computing device associated with a second organization, and based on a permission received from the user device, access to the individual-specific data structure.

Abstract: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes an operation, a target accuracy, and a maximum privacy spend for the query. The system performs the operation to produce a result, then injects the result with noise sampled from a Laplace distribution to produce a differentially private result. The system iteratively calibrates the noise value of the differentially private result using a secondary distribution different from the Laplace distribution and a new fractional privacy spend. The system ceases to iterate when an iteration uses the maximum privacy spend or a relative error of the differentially private result is determined to satisfy the target accuracy, or both. The system sends the differentially private result to the client.

Abstract: Techniques for identity resolution and data enrichment include configuring, at an account of a data consumer, an outbound share. The outbound share is designating a share at an account of a data provider as a receiving share. An identity resolution application is instantiated at the account of the data consumer. An instruction originating from the account of the data provider is decoded at the account of the data consumer. The instruction is generated based on the configuring of the outbound share. The instruction enables the identity resolution application for an identity resolution process. Source data is retrieved from the account of the data provider at the account of the data consumer. The source data is associated with the identity resolution process.

Abstract: Disclosed are various computer implemented devices, methods and readable mediums for security and authentication. In one aspect there is provided a wearable device for authenticating a user, including: one or more sensors for obtaining sensor data related to movement of fingers of the user wearing the wearable device to provide authentication data; and one or more processors configured to: receive the sensor data; interpret the sensor data using one or more classifiers to determine the authentication data; and use the authentication data to access a service.

Abstract: A computer-implemented method comprises linking a private AI model to a public AI model to thereby form a combined AI model comprising the private AI model and the public AI model; and training the combined AI model with private samples while keeping the public AI model fixed so that only the private AI model is trained with the private samples.

Abstract: The present disclosure relates to methods and systems for measuring private information protection across a number of external services. A centralized private information protection service is coupled to external services, accesses data of these external services, aggregates the data and determines a private information protection scoring based upon the aggregated data.

Abstract: A unified data fabric for controlling data lifecycles and data flows between trusted data sources and data clients is described herein. A system can include a data ingestion engine and a data delivery engine. The data ingestion engine and the data delivery engine are connected to a data lifecycle engine that maintains data control policies and access control policies. The data ingestion engine is configured to control ingestion of data elements into the unified data fabric based on the data control policies, and the data delivery engine is configured to control access to data elements in the unified data fabric based on access control policies. Each data element from one or more trusted data sources is associated with a global identifier to provide a comprehensive view of information about a constituent from a variety of disparate data sources.

Abstract: In an example embodiment, a differentially private function is computed via secure computation. Secure computation allows multiple parties to compute a function without learning details about the data. The differentially private function is performed via probability distribution, which then permits computation of a result that is likely to be very close to the actual value without being so exact that it can be used to deduce the underlying data itself.

Abstract: Various embodiments of a hierarchical system or method of identifying sensitive content in data is described. In some embodiments, sensitive data classifiers local to a data storage system can analyze a plurality of data items and classify at least some data items as potentially containing sensitive data. The sensitive data classifiers can provide the classified data items to a separate sensitive data discovery component. The sensitive data discovery component can, in some embodiments, obtain the classified data items, perform a sensitive data location analysis on the classified data items to identify a location of sensitive data within some of the classified data items, and generate location information for the sensitive data within the data items containing sensitive data. The sensitive data discovery component can provide to a destination this information, in some embodiments, where the destination might redact, tokenize, highlight, or perform other actions on the located sensitive data.

Abstract: Methods, systems, and apparatus, including an apparatus for managing user data according to user consent settings are described. In some aspects, a method includes determining that a request for transmission by a client device to a recipient will include user data of a user of the client device. In response determining that the request will include the user data, the method includes requesting, from a consent management module of the client device, current user consent settings specified by the user which define at least one of (i) user data that can be transmitted from the client device, (ii) how user data transmitted from the client device can be used or (iii) which recipients can receive and retain user data from the client device. The method further includes receiving, from the consent management module, the current user consent settings and generating request data according the current user consent settings.

Abstract: A computer-implemented method may include: receiving, from at least one camera, image data associated with a first user at a public access user computing device; detecting, based on the received image data, by employing a machine learning model trained using a dataset of actions collected from a plurality of previous users, that the first user has moved away from the public access user computing device; automatically encrypting, based upon the detection, a user session associated with the first user, wherein the encrypted user session is configured to be subsequently activated by the first user; and initiating a new generic user session on the public access user computing device for a second user.

Abstract: An individual data unit for enhancing the security of a user data record is provided that includes a processor and a memory configured to store data. The individual data unit is associated with a network and the memory is in communication with the processor. The memory has instructions stored thereon which, when read and executed by the processor cause the individual data unit to perform basic operations only. The basic operations include communicating securely with computing devices, computer systems, and a central user data server. Moreover, the basic operations include receiving a user data record, storing the user data record, retrieving the user data record, and transmitting the user data record. The individual data unit can be located in a geographic location associated with the user which can be different than the geographic locations of the computer systems and the central user data server.

Abstract: Systems and processes for improved processing of biometric data may include a hash controller including a processor, a server, and a registry. The hash controller can receive biometric information, such as a biometric scan, and apply an EGH transformation to convert the biometric information into an irreversible, unlinkable, and revocable EgHash. The EGH transformation can include blending biometric information with non-biometric information and permuting the biometric representation for additional security. The permuted biometric representation can be projected based on a randomly generated matrix and the output permuted to obtain an EgHash. The resultant EgHash can be lossy such that the EGH transform causes an irreversible loss of biometric information between the original biometric information and the EgHash. The EgHash can be compared and retrieved at speed and scale by the processor to support operations including, but not limited to, verification, identification, and database deduplication.

Abstract: Systems and methods for controlling the exposure of data privacy elements are provided. The systems and methods may generate an artificial profile model. The artificial profile model may include a constraint for generating new artificial profiles. A signal may be received indicating that a computing device is requesting access to a network location. One or more data privacy elements associated with the computing device can be detected. An artificial profile can be determined for the computing device. The artificial profile may be usable to identify the computing device. The one or more data privacy elements may be automatically modified according to the constraint included in the artificial profile model. The method may include generating a new artificial profile for the computing device. The new artificial profile may include the modified one or more data privacy elements. The new artificial profile may mask the computing device from being identified.

Abstract: Embodiments of the present disclosure relate to a method, an electronic device, and a computer program product for system feature management. The method for system feature management provided by the embodiments of the present disclosure includes loading a feature item set including multiple feature items, where the multiple feature items respectively correspond to multiple microservices, the feature items each include at least an availability indicator and a status indicator, the availability indicator indicates whether the feature item is available, and the status indicator indicates whether the feature item is enabled while the feature item is available; and disabling a first feature item in the feature item set in response to an availability indicator of the first feature item indicating that the first feature item is unavailable. In this way, software can be made to better adapt to more platforms.

Abstract: A system may include a cryptographic accelerator to generate a first check value based on a payload received in a message, and provide the first check value to a first comparator and to a second comparator. The system may include the first comparator to receive the first check value from the cryptographic accelerator, determine whether the first check value matches a second check value, the second check value being a check value received in the message, and provide a first output indicating whether the first check value matches the second check value. The system may include the second comparator to receive the first check value from the cryptographic accelerator, determine whether the first check value matches the second check value, and provide a second output indicating whether the first check value matches the second check value.

Abstract: A method of and system for gate-level masking of secret data during a cryptographic process is described. A mask share is determined, wherein a first portion of the mask share includes a first number of zero-values and a second number of one-values, and a second portion of the mask share includes the first number of one-values and the second number of zero-values. Masked data values and the first portion of the mask share are input into a first portion of masked gate logic, and the masked data values and the second portion of the mask share are input into a second portion of the masked gate logic. A first output from the first portion of the masked gate logic and a second output from the second portion of the masked gate logic are identified, wherein either the first output or the second output is a zero-value.

Abstract: A converged device including a first subsystem and a second subsystem, configured to operate in multiple operation modes with varying levels of security. One example provides a method for operating the device. The method includes determining, during a startup sequence of the first subsystem and with a first processor of the first subsystem, a last operation mode for the first subsystem. The method includes determining, responsive to detecting that a SIM is installed in the converged device, a network type for the SIM. The method includes controlling, with the first processor, a first communication interface based on the network type and the last operation mode. The method includes determining, during a startup sequence of the second subsystem and with a second processor of the second subsystem, the last operation mode for the first subsystem and controlling, with the second processor, a second communication interface based on the last operation mode.

Abstract: A system and method for defense against cache timing channel attacks using cache management hardware is provided. Sensitive information leakage is a growing security concern exacerbated by shared hardware structures in computer processors. Recent studies have shown how adversaries can exploit cache timing channel attacks to exfiltrate secret information. To effectively guard computing systems against such attacks, embodiments disclosed herein provide practical defense techniques that are readily deployable and introduce only minimal performance overhead. In this regard, a new protection framework against cache timing channel attacks is provided herein by leveraging commercial off-the-shelf (COTS) hardware support in processor caches, including last level caches (LLC), for cache monitoring and partitioning. This framework applies signal processing techniques on per-domain cache occupancy data to identify suspicious application contexts.

Abstract: The present disclosure presents various systems and methods for implementing a physical unclonable function device. One such method comprises providing an integrated circuit having a plurality of set/reset flip flop logic circuits, wherein each of the set/reset flip flop logic circuits enters a metastable state for a particular input sequence. The method includes varying circuit parameters for each of the plurality of set/reset flip flop logic circuits to account for manufacturing variations in the set/reset flip flop logic circuits and enable generating a stable but random output in response to the particular input sequence. Thus, by applying the particular input sequence to the integrated circuit, a unique identifier for the integrated circuit can be derived from an output response of the plurality of set/reset flip flop logic circuits.

Abstract: A cryptographic accelerator (processor) retrieves data blocks for processing from a memory. These data blocks arrive and are stored in an input buffer in the order they were stored in memory (or other known order)—typically sequentially according to memory address (i.e., in-order.) The processor waits until a certain number of data blocks are available in the input buffer and then randomly selects blocks from the input buffer for processing. This randomizes the processing order of the data blocks. The processing order of data blocks may be randomized within sets of data blocks associated with a single read transaction, or across sets of data blocks associated with multiple read transactions.

Abstract: A computing device with a hardware port may include a port meter that is electrically connected to the hardware port and configured to measure an electrical parameter associated with the hardware port. The port meter can be used to determine a value of the electrical parameter associated with the hardware port upon determining that an external device is connected to the hardware port. An operating system of the computing device receives the value measured by the port meter, and processes the value received from the port meter to determine whether an untrusted device is connected to the hardware port. If an untrusted device is connected to a hardware port, an action can be performed by the computing device, the action being aimed at protecting sensitive data otherwise accessible to the computing device.

Abstract: Techniques for tamper detection of a memory module having non-volatile memory devices resident on a printed circuit board (PCB) by circuitry of a controller also resident on the PCB. Examples include determining resistance values of a character pattern sprayed on a side of a cover facing the non-volatile memory devices using conductive ink following first and second boots of the memory module and asserting a bit of a register to indicate tampering of the memory modules based on a comparison of the resistance values. Tamper policy actions may be initiated based on detection of tampering.

Abstract: A robot and a method for controlling the robot detects a theft of the robot based on posture information for a main body of the robot and position information of the robot. Operation of the robot is restricted depending on whether a theft of the robot is detected.

Abstract: A virtual reality system 1 includes a display unit 13 that displays a video 100, a control unit 21 that controls a change of the video 100 displayed on the display unit 13, an origin position setting unit 14 that sets an origin position X, a current position recognition unit 15 that detects and recognizes a current position Y of a user U, and a progress direction setting unit 16 that calculates a direction of the current position Y recognized by the current position recognition unit 15 with respect to the origin position X set by the origin position setting unit 14, and sets a progress direction in the displayed video 100 in accordance with the direction, and the control unit 21 controls a change of the video 100 to cause the video 100 to progress in a progress direction set by the progress direction setting unit 16.

Abstract: In accordance with some embodiments, an exemplary process for controlling representations of virtual objects based on respective user contexts that each correspond to different respective locations in a computer-generated reality (CGR) environment is described.

Abstract: When cheering of a distributor avatar by virtual avatars has been detected and the distributor avatar reacts to the cheering, a reaction motion is performed for the virtual avatars that cheered, and a normal motion that is not a reaction motion is performed for the viewer avatars that did not cheer. The motion performed for the virtual avatars that cheered differs from the motion performed for the viewer avatars that did not cheer based on timing indicated by the distributor. Either the motion performed for the virtual avatars that cheered or the motion performed for the viewer avatars that did not cheer is a predetermined motion.

Abstract: A system configured to generate and/or modify three-dimensional scenes comprising animated character(s) based on individual asynchronous motion capture recordings. The system may comprise sensor(s), display(s), and/or processor(s). The system may receive selection of a first character to virtually embody within the virtual space, receive a first request to capture the motion and/or the sound for the first character, and/or record first motion capture information characterizing the motion and/or the sound made by the first user as the first user virtually embodies the first character. The system may receive selection of a second character to virtually embody, receive a second request to capture the motion and/or the sound for the second character, and/or record second motion capture information. The system may generate a compiled virtual reality scene wherein the first character and the second character appear animated within the compiled virtual reality scene contemporaneously.

Abstract: A non-transitory computer readable recording medium having recorded therein a program, the program causes a processor to: cause a display provided on a Head Mounted Display to display a stereoscopic image to which binocular parallax is applied, the stereoscopic image being an image of a virtual space in which optional objects are disposed, and the virtual space being captured by a virtual camera; acquire orientation information on an orientation of the Head Mounted Display; when a predetermined position relationship is established between a virtual line and one optional object from among the optional objects, the virtual line having a direction according to the orientation information and intersecting with the virtual camera, identify the one option image; and when one or more optional objects are identified and a predetermined condition relating to the orientation information is satisfied, select the one or more optional objects.

Abstract: Methods, systems, apparatuses, and computer-readable media are provided for enabling collaboration between physical writers and virtual writers. In one implementation, the computer-readable medium includes instructions to cause a processor to receive, from an image sensor, image data representing a hand of a first physical writer holding a physical marking implement and engaging with a physical surface to create tangible markings. Information based on the image data is transmitted to a computing device associated with a second virtual writer, to thereby enable the second virtual writer to view the tangible markings created by the first physical writer. Annotation data are received from the computing device, and represent additional markings in relative locations with respect to the tangible markings created by the first physical writer. In response to receiving the annotation data, a wearable extended reality appliance overlays the physical surface with virtual markings in the relative locations.

Abstract: A calibration platform may display, via an optical see-through head-mounted display (OST-HMD), a virtual image having at least one feature. The calibration platform may determine, based on information relating to a gaze of a user wearing the OST-HMD, that the user performed a voluntary eye blink to indicate that the at least one feature of the virtual image appears to the user to be aligned with at least one point on the three-dimensional real-world object. The calibration platform may record an alignment measurement based on a position of the at least one point on the three-dimensional real-world object in a real-world coordinate system based on a time when the user performed the voluntary eye blink. Accordingly, the alignment measurement may be used to generate a function providing a mapping between three-dimensional points in the real-world coordinate system and corresponding points in a display space of the OST-HMD.

Abstract: Provided are an eye-tracking device that may rapidly and accurately track an observer's eye and may be made compact, and a display apparatus including the eye-tracking device. The eye-tracking device includes: a light source configured to emit an illumination light; a light guide plate configured to transmit the illumination light emitted from the light source to an observer's eye and transmit the illumination light reflected from the observer's eye in a direction opposite to a propagation direction of the illumination light emitted from the light source; a photodetector array configured to detect the illumination light reflected from the observer's eye; and a signal processor configured to determine an angle of rotation of the observer's eye based on a two-dimensional (2D) intensity distribution of the illumination light detected by the photodetector array.

Abstract: This invention relates to a wearable data input device to be worn on a human hand, comprising: —a base comprising a proximal end and a distal end opposite to the proximal end; a finger support connected to the base to receive a portion of a finger of the hand corresponding to the proximal phalanges in order to allow the corresponding finger support to carry the wearable data input device; at least one sensor arranged at the distal end of the base to interact with fingertips of the hand to allow user input; and an output unit to send data corresponding to the user input to an external device.

Abstract: Systems, methods, and non-transitory media are provided for using a wearable ring device for extended reality (XR) functionalities. An example wearable device can include a structure defining a receiving space configured to receive a finger associated with a user, the structure including a first surface configured to contact the finger received via the receiving space; one or more sensors integrated into the structure, the one or more sensors being configured to detect a rotation of at least a portion of the structure about a longitudinal axis of the receiving space; and a wireless transmitter configured to send, to an electronic device, data based on the rotation.

Abstract: Provided is a computer system for providing a tactile interface for a real-time two-dimensional (2D) tactile input/output interaction of a visually impaired person and an operating method thereof. The computer system may be configured to generate a tactile output corresponding to 2D visual information for a first body surface of a user through a tactile output module that is in contact with the first body surface, sense a tactile input for a second body surface of the user through a tactile input module, and generate a control signal for the 2D visual information based on the tactile input. Here, one of the first body surface and the second body surface may be a ventral surface of one body portion of the user, and the other one of the first surface and the second body surface may be a dorsal surface corresponding to the ventral surface in the one body portion.

Abstract: The present invention provides a tactile-sensation providing device that reduces the transmission of vibration to the base part. The tactile-sensation providing device has: a vibrating body; a vibration-target object that is elastically connected with the vibrating body and vibrated in accordance with vibration of the vibrating body; and a base part that is elastically connected with the vibration-target object, the tactile-sensation providing device providing a tactile sensation to a living body based on vibration of the vibration-target object, the base part is spaced apart from the vibrating body, and a resonance frequency of a first vibrating system including the base part and the vibration-target object is ? or less of a resonance frequency of a second vibrating system including the vibration-target object and the vibrating body.

Abstract: Systems and methods for radial gesture navigation are provided. In example embodiments, user input data is received from a user device. The user input data indicates a continuous physical user interaction associated with a display screen of the user device. An initial point and a current point are detected from the user input data. A radius distance for a circle that includes the current point and is centered about the initial point is determined. An action is selected from among multiple actions based on the radius distance being within a particular range among successive ranges along a straight line that starts at the initial point and extends through the circle. Each range among the successive ranges corresponds to a particular action among the multiple actions. The selected action is performed in response to detecting a completion of the continuous physical user interaction.

Abstract: A system and method for capturing media are disclosed. In a first aspect, the system comprises a wristband device that includes at least one sensor and a camera coupled to the wristband device. The camera is controlled by at least one gesture determined using the at least one sensor. In a second aspect, the method comprises providing a wristband device that includes at least one sensor, coupling a camera to the wristband device, determining at least one gesture using the at least one sensor, and controlling the camera by using the at least one gesture.

Abstract: Example systems, devices, media, and methods are described for controlling one or more virtual elements on a display in response to hand gestures detected by an eyewear device that is capturing frames of video data with its camera system. An image processing system detects a hand and presents a menu icon on the display in accordance with a detected current hand location. The image processing system detects a series of hand shapes in the captured frames of video data and determines whether the detected hand shapes match any of a plurality of predefined hand gestures stored in a hand gesture library. In response to a match, the method includes executing an action in accordance with the matching hand gesture. In response to an opening gesture, an element animation system presents one or more graphical elements incrementally moving along a path extending away from the menu icon. A closing hand gesture causes the elements to retreat along the path toward the menu icon.

Abstract: A local perspective method and device of a virtual reality equipment and a virtual reality equipment are disclosed. The method comprises: identifying a user's hand action; triggering a local perspective function of the virtual reality equipment if the user's hand action satisfies a preset trigger action; and under the local perspective function, determining a local perspective display area in a virtual scene according to a position of the user's hand action, so as to display a real scene in the local perspective display area. The local perspective method of the virtual reality equipment according to the present disclosure can determine the range of the area to be perspectively displayed by using the user's hand action. Compared with the conventional global perspective solution, it can be applicable to more and richer application scenarios, and can greatly improve the user's use experience.

Abstract: A wearable device includes a device housing configured to be worn on a first surface of a user, a set of one or more SMI sensors, and a processor. The set of one or more SMI sensors is mounted within the device housing and configured to emit a set of one or more beams of electromagnetic radiation, with each beam emitted in a different direction extending away from the first surface. The set of one or more SMI sensors is also configured to generate a set of one or more SMI signals containing information about a relationship between the device housing and a second surface. The processor is configured to extract the relationship between the device housing and the second surface from digitized samples of the set of one or more SMI signals.