Abstract: The present disclosure relates to application server access methods and terminals. One example method includes in response to a terminal failing to connect to an application server by using an IPv6 address, setting an accessed domain name to a restricted domain name, and, when the accessed domain name is re-accessed later, connecting to the application server by directly using an IPv4 address.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a network node may receive application data for transmission via an additional network node. The network node may provide the application data to the additional network node, the application data having one or more indications of groupings into application data units (ADUs) added before being provided to the additional network node. Numerous other aspects are described.

Abstract: Disclosed is an electronic device including at least one wireless communication circuit configured to provide a first radio access technology (RAT) and a second RAT, at least one processor operatively connected to the at least one wireless communication circuit and configured to provide a first packet data convergence protocol (PDCP) related to the first RAT and a second PDCP related to the second RAT, a volatile memory operatively connected to the at least one processor and including, in at least a partial region thereof, a first buffer, and a nonvolatile memory operatively connected to the at least one processor or coupled to the processor. The electronic device may change a PDCP version of a data packet based on a change of a PDCP version. Besides, other various embodiments recognized through the present disclosure can be made.

Abstract: Proposed are an ultra-low jitter low-power phase-locked loop using a power-gating injection-locked frequency multiplier-based phase detector (PG-ILFM PD) and an operating method thereof. The proposed PG-ILFM PD includes a replica voltage controlled oscillator (R-VCO) configured to cut off the power supply of the R-VCO repeatedly based on a reference signal SREF and a fundamental sampling phase detector (FSPD) configured to receive an output signal SILFM of the R-VCO as a reference signal for sampling and detect a phase error of a main voltage controlled oscillator (M-VCO).

Abstract: An artificial intelligence calculation semiconductor device is provided. The artificial intelligence calculation semiconductor device comprising: a control unit; and a MAC (Multiply and Accumulator) calculator which executes a homomorphic encryption calculation through the control unit, wherein the MAC calculator includes an NTT (Numeric Theoretic Transform)/INTT (Inverse NTT) circuit which generates cipher texts by performing a homomorphic multiplication calculation through transformation or inverse transformation of data, a cipher text multiplier which executes a multiplication calculation between the cipher texts, a cipher text adder/subtractor which executes addition and/or subtraction calculations between the cipher texts, and a rotator which performs a cyclic shift of a slot of the cipher texts.

Abstract: A method includes dividing a plurality of filters in a first layer of a neural network into a first set of filters and a second set of filters, applying each of the first set of filters to an input of the neural network, aggregating, at a second layer of the neural network, a respective one of a first set of outputs with a respective one of a second set of outputs, splitting respective weights of specific neurons activated in each remaining layer, at each specific neuron from each remaining layer, applying a respective filter associated with each specific neuron and a first corresponding weight, obtaining a second set of neuron outputs, for each specific neuron, aggregating one of the first set of neuron outputs with one of a second set of neuron outputs and generating an output of the neural network based on the aggregated neuron outputs.

Abstract: In one example, an apparatus for Advanced Encryption Standard (AES) substitutions box (S-box) encryption includes an S-Box logic function and a MixColumns multiplication operation. The S-box logic function takes as input a state and is an 8-bit to 8-bit logic function, and wherein the S-box logic function is minimized such that an S-box round comprises nine not-and (NAND) levels and duplications of a logical product of the minimized S-box logic function are eliminated. The MixColumns multiplication operation comprises a plurality of factors that are exclusive ORed (XOR) with an output of the S-box round to obtain a scaled 16-byte output.

Abstract: A computer-implemented method for generating a ciphertext may include (1) generating a header for the ciphertext, including data configuring one or more permissions for decrypting the ciphertext; (2) generating instructions for the ciphertext; (3) generating a ciphertext body, which may include receiving data to be encrypted, retrieving at least one encryption value set (which may include a mixing scheme, a bit value, a first matrix size, a second matrix size, an encryption decider, and a decryption decider), generating at least one character matrix based on the data to be encrypted, executing at least one transformation operation on the at least one character matrix to generate the ciphertext body based on the at least one encryption value set, and generating at least one decryption value set based on the at least one encryption value set; and (4) compiling the header, the instructions, and the ciphertext body into the ciphertext.

Abstract: An example operation may include one or more of receiving a request to certify a digital record, retrieving a first hashed data value of the digital record from a data block included among a first hash-linked chain of blocks on a first blockchain, retrieving a second hashed data value of the digital record from a second data block included among a second hash-linked chain of blocks on a second blockchain which is different from the first blockchain, determining whether the digital record is valid based on a cross-validation of the first hashed data value and the second hashed data value, and storing the determination of the validity of the digital record in a data block among a third hash-linked chain of blocks.

Abstract: A crypto processor, a method of operating a crypto processor, and an electronic device including a crypto processor. A method of operating a crypto processor for performing a polynomial multiplication of lattice-based texts includes transferring coefficients of polynomials for the polynomial multiplication to multipliers, performing multiplications for a portion of the coefficients in parallel using the multipliers, performing an addition for a portion of results of the multiplications using an adder, and determining a result of the polynomial multiplication based on another portion of the results of the multiplications and a result of the addition.

Abstract: A method, system, and digital recording medium provides for convenient and trustworthy user authentication with a computing device combining four authentication factors through use of a remote authentication system (RAS). An identity token (Device-ID) cryptographically bound to the user's computing device is generated as a first authentication factor. A password known only to the user is a second factor. Cryptographic signatures generated from the user's biometric minutiae is a third factor. A random challenge received from the RAS is a fourth factor.

Abstract: A processing device is configured to process an initial set of command types. A command extension module and a digital signature are received. The digital signature is generated based on the command extension module using a private key of a key pair. The command extension module, once installed by the processing device, enables the processing device to process a new command type that is not included in the initial set of command types. The digital signature is verified using a public key of the key pair. Based on a successful verification of the digital signature, the command extension module is temporarily installed by loading the command extension module in a volatile memory device.

Abstract: A first intermediate key management system (KMS) server of a distributed KMS receives a key lookup service (KLS) query from a KMS client for determining an identity of KMS server(s) that are capable of performing a first operation with a first managed key. The first intermediate KMS server is one of the intermediate KMS servers of the distributed KMS. The first KMS server determines the identity of one or more of the KMS servers that are capable of performing the first operation with the first managed key. The first KMS server transmits a KLS response to the KMS client that includes the identity of the KMS server(s) that are capable of performing the first operation with the first managed key.

Abstract: A network device may establish a media access control security (MACsec) key agreement (MKA) session with another network device via a MACsec communication link; establish a fast heartbeat session via the MACsec communication link, between a first packet processing engine of the network device and a second packet processing engine of the other network device, where the fast heartbeat session is to permit the first packet processing engine and the second packet processing engine to exchange fast heartbeat messages via the fast heartbeat session and the MACsec communication link; place an MKA protocol of the MKA session in a pause state until the first packet processing engine detects a rekey event; determine that a key for the MKA session is to be regenerated based on detection of the rekey event; and perform an action based on the rekey event for the MKA session.

Abstract: A network node operates a Session Management Function (SMF) in a control plane of a core network of a wireless network. The network node authenticates a User Equipment (UE) with an Extensible Authentication Protocol (EAP) server in a secondary authentication process that uses the SMF as an EAP authenticator. The EAP server is outside of the core network and the UE is separately authenticated with a further network node in the control plane of the core network via a primary authentication process. Authenticating the UE in the secondary authentication process comprises exchanging EAP messages between the SMF and the UE and between the SMF and the EAP server. The SMF authorizes a data session between the UE and the external network through a user plane of the core network based on the UE having successfully authenticated via both the primary authentication process and the secondary authentication process.

Abstract: An information processing apparatus comprises a partial modular exponentiation calculating part and a partial modular exponentiation synthesizing part. The partial modular exponentiation calculating part is given a base in plaintext and a modulo in plaintext and shared exponents and calculates a partial modular exponentiation that equals a set of shared values according to a modular exponentiation of the base raised by the shared exponent. The partial modular exponentiation synthesizing part calculates shared values of the modular exponentiation from the partial modular exponentiation that equals shared values relating to the modular exponentiation of a sum of shared exponents.

Abstract: Systems and methods for adaptive attack resistant distributed symmetric cryptography are disclosed. A client computer may communicate with a number of cryptographic devices in order to encrypt or decrypt data. Each cryptographic device may possess multiple secret shares corresponding to distinct secret values, which may be used in the process of encrypting or decrypting data. The client computer may generate multiple commitments and transmit those commitments to the cryptographic devices. Each cryptographic device may generate a partial computation based on the commitments and their respective secret shares. The partial computations may be transmitted to the client computer. The client computer may use the partial computations to generate a cryptographic key. The client computer may use the cryptographic key to encrypt a message or decrypt ciphertext.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for quantum entanglement authentication (QEA). An example method includes generating, at a first computing device, a first number based on a subset of a first set of entangled quantum particles associated with the first computing device. Each entangled quantum particle in the first set of entangled quantum particles may be entangled with a respective entangled quantum particle in a second set of entangled quantum particles associated with a second computing device. The example method further includes transmitting an electronic identification of the subset of the first set of entangled quantum particles to the second computing device. In some instances, the example method may further include receiving a second number from the second computing device and authenticating a session between the first computing device and the second computing device in an instance in which the second number corresponds, or is identical, to the first number.

Abstract: Embodiments are disclosed for a quantum key distribution (QKD) enabled intra-datacenter network. An example system includes a first QKD device and a second QKD device. The first QKD device includes a first quantum-enabled port and a first network port. The second QKD device includes a second quantum-enabled port and a second network port. The first quantum-enabled port of the first QKD device is communicatively coupled to the second quantum-enabled port of the second QKD device via a QKD link associated with quantum communication. Furthermore, the first network port of the first QKD device is communicatively coupled to a first network switch via a first classical link associated with classical network communication. The second network port of the second QKD device is communicatively coupled to a second network switch via a second classical link associated with classical network communication.

Abstract: A node may receive, from a quantum key-distribution (QKD) device, a first message that includes an identifier associated with a key. The node may send, to another node, a second message that includes the identifier and a request to perform at least one task. A node may receive, from the other node, a third message that includes information associated with performance of the at least one task by the other node and information indicating a time of performance. The node may receive, from the QKD device, a fourth message that includes the key and information indicating a time window associated with the quantum key; wherein the fourth message is received after expiration of the time window. The node may process, based on the fourth message, the third message to determine whether the third message is valid and thereby cause one or more actions to be performed.

Abstract: A system for tracking clusters in an immutable sequential listing is disclosed. The system includes at least a processor and a memory communicatively connected to the at least a processor, the memory containing instructions configuring the processor to receive a new record, obtain a sub-listing of an immutable sequential listing, wherein the sub-listing comprises a biological extraction cluster description posting of a biological extraction cluster and a cluster key, update the biological extraction cluster description posting using the new record, generate a new sub-listing and update the new sub-listing to the immutable sequential listing.

Abstract: A device which can be implemented on a single packaged integrated circuit or a multichip module comprises a plurality of non-volatile memory cells, and logic to use a physical unclonable function to produce a key and to store the key in a set of non-volatile memory cells in the plurality of non-volatile memory cells. The physical unclonable function can use entropy derived from non-volatile memory cells in the plurality of non-volatile memory cells to produce a key. Logic is described to disable changes to data in the set of non-volatile memory cells, and thereby freeze the key after it is stored in the set.

Abstract: Various embodiments of the present application set forth a computer-implemented method that includes generating, based on a resource file stored at an endpoint device, a credential data packet for authenticating with a first application executing in a first network, where the resource file includes a set of encryption keys associated with a plurality of applications including the first application, and where the credential data packet is encrypted with a device key signed by the endpoint device, and the credential data packet is signed by an endpoint device management (EDM) key extracted from the set of encryptions keys included in the resource file, sending, by the endpoint device, the credential data packet to the first application via a trusted communication channel, and receiving, by the endpoint device and in response to the credential data packet, an authorization packet from the first application via the trusted communication channel.

Abstract: A system and method for using digitally signed web tokens to securely share sensitive data includes identifying an API request that includes an authorization header comprising authentication data; assessing the authentication data of the API request against a corpus of valid authentication data; identifying the authentication data as valid authentication data and a target entity that corresponds to the authentication data; obtaining a set of permissions associated with the target entity; generating a digitally signed protobuf web token that includes a representation of the target entity and a representation of the set of permissions associated with the target entity; and based on the generation of the digitally signed protobuf web token: adapting the API request to an adapted API request that includes a header component comprising the digitally signed protobuf web token; and transmitting the adapted API request to a target API-processing service.

Abstract: Systems and methods for verifying an identity of a user. A method includes generating a tokenized biometric sample by tokenizing a biometric sample associated with the user by a computing system. The method further includes generating a digitally-signed tokenized biometric sample by digitally signing the tokenized biometric sample with a private key associated with the user by the computing system. The method further includes, responsive to a biometric reference template matching a signing party biometric sample associated with a signing party and a record, determining that the user matches the signing party by the computing system. The biometric reference template is based on biometric data extracted from the biometric sample. Authenticity and data integrity of the record is determined based on each of the record, the tokenized biometric sample, and a public key of a public/private key pair comprising the private key.

Abstract: In IaaS (Infrastructure as a Service), when it is desirable to delegate the authority to a user outside a system, a recipient of an access token is designated, thereby preventing illegal distribution of the access token. There is provided an access token system including a generator and a verifier. The generator generates, using secret information of a recipient, a recipient-designated access token for which the recipient is designated, and provides the recipient-designated access token to a user. The verifier verifies that the user who makes access using the recipient-designated access token is the designated recipient.

Abstract: A driver assistance apparatus and method for a driver assistance apparatus for verifying the safe operation of the apparatus. It is important to verify that operating instructions that dictate the operation of a driver assistance system are verified. The apparatus includes a safety electronic control unit and the safety electronic control unit includes operating instructions stored thereon that dictate the operation of the safety electronic control unit. The safety electronic control unit further includes a verified hash storage for storing a verified hash value of at least a portion of the operating instructions. The safety electronic control unit is configured to implement a verification routine, which includes calculating, using a hash function, a test hash value of the at least a portion of the operating instructions; comparing the test hash value with the verified hash value, and if the test hash value is not equal to the verified hash value, performing a safety routine.

Abstract: A blockchain network includes a service sub-network, a consensus sub-network, and a routing layer configured to isolate the service sub-network from the consensus sub-network. A data processing method in the blockchain network includes: receiving a data processing request transmitted by a service node in the service sub-network; performing identity verification on the service node according to the data processing request; obtaining a running load of each consensus node in the consensus sub-network when the verification succeeds; determining, from the consensus sub-network according to the running load, a target consensus node configured to process the data processing request; and forwarding the data processing request to the target consensus node, and performing corresponding data processing on the data processing request by using the target consensus node.

Abstract: A method for data transfer and storage is provided. The method may include: encrypting data generated by a terminal device; storing duplicated copies of the encrypted data respectively in a first storage device and a second storage device, which are removably inserted into the terminal device; generating, with the terminal device, a message authentication code associated with the encrypted data; transmitting the message authentication code to a first server; physically transporting the first storage device to a remote location of the first server, and upon the first storage device being inserted into the first server, determining whether the encrypted data stored in the first storage device are damaged using the message authentication code; and in response to a determination that the encrypted data stored in the first storage device are not damaged, transmitting the encrypted data from the first storage device to the first server.

Abstract: An information handling system includes a BIOS and a service processor. The BIOS may generate, during a POST, a secret key that includes a symmetric key and a HMAC key and transmits the secret key to the service processor via an high-speed communication interface. After the POST, the BIOS transmits an SMI message that includes an encrypted message and a first hash value of the encrypted message. The encrypted message is encrypted using the symmetric key and the first hash value of the encrypted message is calculated using the HMAC key. The service processor calculate a second hash value of encrypted message based on the HMAC key and verify the encrypted message by comparing the first hash value and the second hash value. After a successful verification, the service processor decrypts the encrypted message and transmits a response to the BIOS.

Abstract: There is provided an information processing apparatus including a memory and a processor configured to generate and hold connection information necessary for accessing document data to be signed, which is stored in the memory, via a network, transmit approval request information including connection information corresponding to the document data to a terminal device used by an approver, authenticate the approver by collating the connection information transmitted from the terminal device with the held connection information, and then perform connection to the terminal device via the network, cut off the network connection in a case where the approver finishes electronically signing the document data, and discard the connection information corresponding to the document data.

Abstract: Devices, systems, and methods enabling parties with little trust or no trust in each other to enter into and enforce value transfer agreements conditioned on input from or participation of a third party, over arbitrary distances, without special technical knowledge of the underlying transfer mechanism(s), optionally affording participation of third-party mediators, substitution of transferors and transferees, term substitution, revision, or reformation, etc. Such value transfers can occur reliably without involving costly third-party intermediaries who traditionally may otherwise be required, and without traditional exposure to counterparty risk.

Abstract: A system and method for a distributed security model that may be used to achieve one or more of the following: authenticate system components; securely transport messages between system components; establish a secure communications channel over a constrained link; authenticate message content; authorize actions; and distribute authorizations and configuration data amongst users' system components in a device-as-a-key system.

Abstract: One or more implementations of the present specification provide a data processing method and apparatus for a blockchain member node, where the blockchain member node includes a plurality of service servers, and at least one authentication module runs on each service server; and a public key of an authentication module of the at least one authentication module is authenticated by the blockchain.

Abstract: A method at a network element for processing a first message destined for an intelligent transportation system station, the method including receiving from a sending entity, or generating, the first message at the network element; based on a source or contents of the first message, performing one of: discarding the first message; or modifying the first message to provide an indication to the intelligent transportation system station of checks the intelligent transportation system does not need to perform, thereby creating a second message; and forwarding the second message to the intelligent transportation system station.

Abstract: To revoke a digital certificate, activation of the digital certificate is blocked by withholding an activation code from the certificate user. The certificates are generated by a plurality of entities in a robust process that preserves user privacy (e.g. anonymity) even in case of collusion of some of the entities. The process is suitable for connected vehicles, e.g. as an improvement for Security Credential Management System (SCMS).

Abstract: A verifier device of an authentication system comprises physical layer circuitry and processing circuitry coupled to the physical layer circuitry. The processing circuitry is configured to encode an authentication command for sending to a credential device; decode a response communication received from the credential device, wherein the response communication includes a first random number; encrypt the first random number, a second random number, and verifier keying material for sending to the credential device; decrypt encrypted information received from the credential device, wherein the encrypted information includes the first random number, the second random number, and receiver keying material; and calculate a session encryption key using the verifier keying material and the receiver keying material.

Abstract: A method, controller, and non-transitory computer-readable medium of a distributed crypto-ledger network, including receiving an instruction to perform an operation between a first user and a second user, the first user corresponding to a first entity that is a member of the distributed crypto-ledger network, the instruction comprising a destination address corresponding to the second user, querying a top-level name registry with the destination address to determine a second entity associated with the destination address, the second entity being a different member of the crypto-ledger network, and executing the operation between the first user and the second user by transmitting execution instructions to the first entity and the second entity, the execution instructions causing a first entity controller to modify data stored on a first distributed crypto-ledger of the first entity, and causing a second entity controller to modify data stored on the second distributed crypto-ledger of the second entity.

Abstract: According to various embodiments of the disclosure, an electronic device may comprise: a first housing including a first insulating portion, a second housing including a second insulating portion adjacent to the first insulating portion, a hinge connecting the first housing and the second housing to be pivotable from a folded state to an unfolded state with respect to a pivot shaft, a hinge cover exposed to an outside and covering the hinge in the folded state and including a third insulating portion in at least a partial area thereof, a flexible display configured to be deformable in response to relative motion of the second housing with respect to the first housing, and an antenna structure including an antenna circuit board disposed in at least a partial area of the hinge and a plurality of antenna elements comprising at least one antenna forming an array on or in the antenna circuit board.

Abstract: A mobile terminal device including: an ultraviolet LED unit for irradiating an object with ultraviolet rays of a wavelength between 200 nm or more and less than 400 nm; an image sensor unit for capturing, as a ultraviolet irradiation region, the ultraviolet rays irradiated from the ultraviolet LED unit, an image sensor part for converting into image data the ultraviolet irradiation region captured by the image sensor unit; and a display and touch panel unit for displaying, as image information, the ultraviolet irradiation region converted into image data by the image sensor part.

Abstract: An electronic device includes a display panel having non-folding regions arranged along a first direction and a folding region disposed between the non-folding regions. The folding region is foldable along a virtual folding axis extending along a second direction crossing the first direction. The electronic device further includes a support plate disposed on a lower portion of the display panel and having first support lines extending in the first direction, and second support lines extending in the second direction and crossing the first support lines. In the non-folding regions, the first support lines and the second support lines cross each other to define first openings, and in the folding region, the first support lines and the second support lines cross each other to define second openings. An area of each of the first openings is different from an area of each of the second openings.

Abstract: A system comprising a housing, the housing comprising an opening through which a display of an electronic device is accessible by a user, peripheral device(s) connected to the housing and controllable by the electronic device, and a hub contained within the housing. The hub comprises a first interface to couple the hub with the electronic device, a second interface for coupling the peripheral device(s), a processor, and a non-transitory memory having instructions stored thereon that, when executed by the processor cause the processor to perform operations. The operations comprising receiving first input data from the electronic device and sending first output data from the hub to the one or more peripheral devices based on the first input data. The operations further comprising receiving second input data from the peripheral device(s) and sending second output data from the hub to the electronic device based on the second input data.

Abstract: A communication system and method usable to facilitate communication between a hearing user and an assisted user. In particular, the system employs a wireless portable tablet or other portable electronic computing device linked to a captioning enabled phone as a remote interface for that phone, thereby providing an assisted user with more options, more freedom, and improved usability of the system.

Abstract: A teleconferencing device with an easily removable support stand allows users to easily change the angle of the device on a desk. Wall-mounts hidden within the removable stand allow the device to be mounted easily to a wall.

Abstract: Systems, methods, and computer program products for delivery/read receipts for electronic messaging are disclosed. During one-on-one electronic messaging sessions in a conversation view format, only a single read receipt is shown only for the most recent message transmitted in the conversation. In some implementations, a delivery receipt is shown which then can be replaced or morphed into a read receipt. In a group conversation, a read receipt can be displayed for the recipient who most recently caught up in the ongoing conversation.

Abstract: A system for customizing modifiable videos of a multimedia messaging application (MMA) is provided. In one example embodiment, the system includes at least one processor and a memory storing processor-executable codes, wherein the at least one processor is configured to analyze recent messages of a user to determine a context of the recent messages; determine, based on the context, a customized feature; select, based on the context, a list of relevant modifiable videos from a database configured to store modifiable videos, the modifiable videos being associated with a preset modifiable feature; replace the preset modifiable feature in the relevant modifiable videos with the customized feature; and render a modifiable video from the list of relevant modifiable videos for viewing by the user, the rendering including displaying the customized feature in the relevant modifiable videos.

Abstract: Examples that relate to calling on a computing device are disclosed. One example provides a computing device, comprising, a first display a second display, a sensor system a logic subsystem and a storage subsystem comprising instructions executable by the logic subsystem to output, via one or both of the first display and the second display, a notification of an incoming phone call at the computing device, and based on output from the sensor system indicating a relative angle between the first display and the second display being changed to an angle greater than a predetermined angle, answer the incoming phone call.

Abstract: A calling system for a personal watercraft includes processing circuitry. The processing circuitry is configured to: obtain a specific state signal indicating that the personal watercraft is in a given specific state; and wirelessly transmit a calling signal based on the specific state signal.

Abstract: A method, computer system, and a computer program product for interpreting conference call interruptions is provided. The present invention may include analyzing a conference call including at least two participants. The present invention may also include identifying at least one interrupted segment in the analyzed conference call. The present invention may further include reconstructing the identified at least one interrupted segment of the analyzed conference call and integrating it with the uninterrupted (heard) portion of the conference call.

Abstract: Embodiments described herein provide for a fraud detection engine for detecting various types of fraud at a call center and a fraud importance engine for tailoring the fraud detection operations to relative importance of fraud events. Fraud importance engine determines which fraud events are comparative more important than others. The fraud detection engine comprises machine-learning models that consume contact data and fraud importance information for various anti-fraud processes. The fraud importance engine calculates importance scores for fraud events based on user-customized attributes, such as fraud-type or fraud activity. The fraud importance scores are used in various processes, such as model training, model selection, and selecting weights or hyper-parameters for the ML models, among others. The fraud detection engine uses the importance scores to prioritize fraud alerts for review.