Abstract: The present application provides a method and a device for encryption of a video stream, a communication equipment, and a storage media. The method for encryption of a video stream includes: acquiring a video stream, encrypting a data part of an I frame by using a first encryption algorithm to obtain a first encrypted data, and encrypting an encryption key of the first encrypted data by using a second encryption algorithm to obtain a second encrypted data, and storing the second encrypted data in a frame header of the I frame to obtain an encrypted I frame.

Abstract: Methods, systems, and computer programs are presented for lowering network latency for cloud-based services. Service-delivery edge locations allow customers to improve communication-providers public and private network connectivity for improved performance. One method includes operations for performing, by an edge server, a handshake to establish a communication session between a client and a main server, and for exchanging data between the client and the main server via the edge server. The handshake includes exchanging, by the edge server, communication initiation messages with the client, and validating, by the edge server, authentication credentials for the communication session based on the communication initiation messages.

Abstract: A system and method for maximizing bandwidth in an uplink for a 5G communication system is disclosed. Multiple end devices generate image streams. A gateway is coupled to the end devices. The gateway includes a gateway monitor agent collecting utilization rate data of the gateway and an image inspector collecting inspection data from the received image streams. An edge server is coupled to the gateway. The edge server includes an edge server monitor agent collecting utilization rate data of the edge server. An analytics manager is coupled to the gateway and the edge server. The analytics manager is configured to determine an allocation strategy based on the collected utilization rate data from the gateway and the edge server.

Abstract: Aspects of the subject disclosure may include, for example, obtaining compressed sounding reference signal (SRS) information associated with a user end device from a distributed unit device. The distributed unit device compresses SRS information utilizing a first compression algorithm resulting in the compressed SRS information. Further embodiments include decompressing the compressed SRS information utilizing a first decompression algorithm resulting in the SRS information and determining SRS channel estimation based on the SRS information. Additional embodiments include determining a group of beamforming weights based on the SRS channel estimation, and adjusting an antenna array according to the group of beamforming weights. Other embodiments are disclosed.

Abstract: Systems and methods of embodiments are described of a campaign controller that establishes a model for using a plurality of types of exploits based on at least results of simulated phishing communications using those exploits, and uses the model to communicate a first simulated phishing communication to one or more devices of a user where the type of exploit used for the first simulated phishing communication is selected using the model. The campaign controller applies either artificial intelligence or machine learning to the results of simulated phishing communications to establish the model. The campaign controller selects the exploit by applying either artificial intelligence or machine learning to one or more attributes of the user and/or one or more responses from the user.

Abstract: Systems and methods for restricting content inserted into information resources are provided herein. A computing device can identify a content element included in an information resource. The computing device can identify a bit stream corresponding to the content element included in the information resource. The computing device can hash the identified bit stream to generate an element identifier corresponding to the content element. The computing device can access a restricted content database using the element identifier. The computing device can modify, responsive to finding the element identifier in the restricted content database, the presentation of the content element on the information resource in accordance with the content restriction policy.

Abstract: Systems and methods for mobile connectivity provisioning at an access network are described. The access network has a service connection to a service center that is external to the access network. The method includes receiving, from a mobile vehicle, an indication of a connection request for a device on the mobile vehicle. The connection request identifies the device using a media access control (MAC) address. The method includes generating a globally unique identifier (GUID) associated with the MAC address and transmitting a first message comprising the GUID to a network access terminal on the vehicle. The network access terminal redirects the connection request to the service center via a traffic connection. The redirected connection request includes the GUID. The access network receives an indication of a network service for the device from the service center; the indication identifies the device based on the GUID.

Abstract: Disclosed is a source host including a processor. The processor operates a virtual machine (VM) to communicate network traffic over a communication link. The processor also initiates migration of the VM to a destination host. The processor also suspends the VM during migration of the VM to the destination host. The source host also includes a live migration circuit coupled to the processor. The live migration circuit manages a session associated with the communication link while the VM is suspended during migration. The live migration circuit buffers changes to a session state and transfers the buffered session state changes to the destination host for replay after the VM is reactivated on the destination host. The live migration circuit keeps the sessions alive during migration to alleviate connection losses.

Abstract: Embodiments of the present invention provide methods, systems, apparatuses, and computer program products for predicting property damage restoration estimates.

Abstract: Modulating packetized audio signals in a voice activated data packet based computer network environment is provided. A system can receive audio signals detected by a microphone of a device. The system can parse the audio signal to identify trigger keyword and request, and generate a first action data structure. The system can identify a content item object based on the trigger keyword, and generate an output signal comprising a first portion corresponding to the first action data structure and a second portion corresponding to the content item object. The system can apply a modulation to the first or second portion of the output signal, and transmit the modulated output signal to the device.

Abstract: According to one embodiment, a semiconductor memory device includes a first string including a first memory cell transistor and a second memory cell transistor which are coupled in series, a first switch element, a first latch circuit coupled in series between a first end of the first string and a first end of the first switch element, and a second switch element and a third switch element coupled in parallel between a second end of the first switch element and a data bus.

Abstract: Advertisement user feedback data may be collected and provided to an advertisement decision engine. Advertisements may be presented to users via various electronic media such as digital television, Internet, software, etc., and advertisement feedback user interfaces may be provided to users in connection with such advertisements. An advertisement feedback user interface may be provided via the same electronic medium and device as the corresponding advertisements, or via a different electronic medium and/or device. User feedback data regarding electronic advertisements, as well as additional related data, may be received and provided to one or more advertisement decision engines. An advertisement decision engine may use the advertisement user feedback data to determine a future advertisement to be presented to one or more users at an advertisement insertion opportunity identified in one or more various electronic media.

Abstract: An authorization credential migration method includes: sending, by a first terminal device, an authorization credential immigration request for a trusted application to a service server; receiving an entered second authorization verification code of the trusted application; sending, by the first terminal device, the second authorization verification code to the service server, to instruct the service server to perform authorization authentication; and receiving, by the first terminal device, an authorization credential of the trusted application that is sent by the service server.

Abstract: Modulating packetized audio signals in a voice activated data packet based computer network environment is provided. A system can receive audio signals detected by a microphone of a device. The system can parse the audio signal to identify trigger keyword and request, and generate a first action data structure. The system can identify a content item object based on the trigger keyword, and generate an output signal comprising a first portion corresponding to the first action data structure and a second portion corresponding to the content item object. The system can apply a modulation to the first or second portion of the output signal, and transmit the modulated output signal to the device.

Abstract: Example embodiments of a product authentication method may include triggering a first authentication process in response to sensing a conductive ink in proximity to a computing device having a set of sensors and performing a second authentication process. The first authentication process may include initiating an application on the computing device when the set of sensors senses the conductive ink. And the second authentication process may be performed by the application on the computing device and may include sending a code to a remote server and receiving a validity determination from the remote server.

Abstract: An electronic apparatus for controlling reproduction of content on display apparatuses according to a format optimized for reproduction and consistency.

Abstract: Certain embodiments described herein are generally directed to performing receive side scaling at a virtual network interface card for encapsulated encrypted data packets based on an security parameter index value of the encapsulated encrypted data packets.

Abstract: One embodiment can provide a system for authenticating an object. During operation, the system configures an environment surrounding the object according to one or more target environmental factors, captures at least a first image of the object while the object is exposed to the target environmental factors, and determines Fan authenticity of the object based on the captured first image and the target environmental factors.

Abstract: This method for reading a video stream comprises a step of comparing a datum characteristic of a behavior of a user with a set of predetermined thresholds, each of which, when it is crossed, characterizes an abnormal behavior of the user, a step of signaling an abnormal behavior if at least one predetermined part of these thresholds is crossed, and, otherwise, the absence of this signaling of an abnormal behavior, and a step of executing a counter-measure which makes it more difficult or impossible to access the set of information items contained in a first baseband video stream on the basis of various proofs of a second baseband video stream composed by a first terminal, this execution step being triggered automatically in response to the signaling of an abnormal behavior and not being triggered in the absence of this signaling of an abnormal behavior.

Abstract: A mobile telephone or tablet or the like (40) for viewing commercial television programmes has a display screen (41), a firewall (70), and behind the firewall a first, sealed data storage section (42) which stores personal attributes of a viewer, such as a child, supplied on a token (32) from a trusted third party (10), a second, unsealed data storage section (44) to which the personal attributes are copied, the second section having a flag (48) which is set when the data in the second section has been modified by the viewer, and a third data storage section (46) in which personal preferences can be stored by the viewer. Adverts from advertisers (50) targeted on the data in the second and third sections are sent to the device (40), headers in the adverts are checked against the data in the first section, and adverts are rejected if they are unsuitable for the viewer.

Abstract: A method and system for certification and authentication of objects is disclosed herein. The method and system use multiple attestations along with digital ledger technology to provide a digital certificate of authenticity for an object such as a work of art, collectible, or the like. QR codes attached to the collectible object and recorded at a central database provide a further degree of confidence in the authenticity of the object.

Abstract: An example secure circuit device includes a logic layer with a logic circuit, first and second memory layers, and connectors between the logic layer and the memory layers. The logic circuit executes logic operations in response to being in an unlocked state and does not execute logic operations in response to being in a locked state. The logic circuit is in the unlocked state in response to a security key being accessible and in the locked state when the security key is inaccessible. The first memory layer is disposed over a second memory layer with the first and second memory layers being disposed over the logic layer in a monolithic structure. The security key includes a first security key portion disposed in the first memory layer and a second security key portion disposed in the second memory layer.

Abstract: An example display device for securing graphics outputs includes: a checker to check whether a secure output marker is located in a pre-determined position in graphical information of a digital image; a verifier to verify whether first data in the secure output marker matches actual data in a trusted output area of the digital image; and autonomous indicator control logic to activate a hardware-based trusted output indicator when the first data matches the actual data, the autonomous indicator control logic not accessible by computing applications executing on a system in communication with the display device.

Abstract: A short-range payment system according to an embodiment of the present invention may include: a user terminal configured to transmit and receive a card information sound wave signal, which is a sound wave signal including card information, during operation in payment mode; a magnetic field converter configured to, when receiving the card information sound wave signal, extract the card information from the card information sound wave signal and generate a magnetic field that matches the extracted card information; and an MST payment device configured to perform payment processing by using the magnetic field generated by the magnetic field converter.

Abstract: Methods and systems for facilitating photo-based estimation are described. In an aspect, a server is configured to receive, via a communications module from a remote computing device, a signal comprising image data obtained by the remote computing device through activation of a submission application. The server may obtain verification data that includes at least one of policy data obtained from at least one of the stored profiles or sensor data received from the remote computing device. The server may evaluate the image data based on the verification data to determine whether the image data is valid. The server may, upon determining that the image data is not valid, generate an error.

Abstract: Systems and methods are provided for obtaining data to be secured based on a secret sharing technique, the data being associated with a file identifier and a split specification that includes at least a number of splits n and a minimum number of splits m required for reconstructing the data, and an RRSG scheme. An RRSG state can be initialized based at least in part on a given data transformation key to provide repeatable sequence of random bytes. For every m bytes of data: a polynomial whose coefficients are determined based at least in part on m bytes of the data and a portion of the repeatable sequence of random bytes can be determined; the polynomial can be evaluated at n unique values determined by a portion of repeatable sequence of random bytes to generate n bytes. Each byte can be stored into one of the n split stores.

Abstract: Disclosed is a method for providing an advertisement reporting service, the method includes acquiring inventory information corresponding to an advertising unit area of an advertising medium; providing an advertising code being issued from an advertising provider in response to the inventory information to the advertising medium; analyzing real-time impression information for the advertising unit area using traffic information generated according to a provision of the advertising code; and reporting the real-time impression information corresponding to the advertising unit area through the advertising medium.

Abstract: A video coder may generate a predictor block using an intra prediction mode. As part of generating the predictor block, the video coder may, for each respective sample in a set of samples in the predictor block, determine, based on an initial value of the first weight and a distance between the respective sample and a first boundary of the predictor block, a value of the first weight for the respective sample. Additionally, the video coder may determine, based on the initial value of the second weight and a distance between the respective sample and a second boundary of the predictor block, a value of the second weight for the respective sample. The video coder may also determine a primary value for the respective sample. The video coder may then determine a secondary value for the respective sample based on the first weight, second weight, and the primary value.

Abstract: Embodiments are disclosed for automated performance tuning of a data modeling platform. An example method includes ingesting, using a tuning template, a set of records from one or more data sources into one or more stage tables in a staging layer of the data modeling platform. This example method further includes generating, using the one or more stage tables, a data integration layer of the data modeling platform for modeling data represented by the set of records ingested into the one or more stage tables. This example method further includes estimating an anticipated performance of the data modeling platform and generating an optimized tuning template based on the estimated anticipated performance. Finally, this example method further includes automatically executing a performance tuning operation on the data modeling platform. Corresponding apparatuses and computer program products are also provided.

Abstract: A method includes receiving, at a server associated with a network operator, a plurality of uniform resource locators (URLs) associated with a media stream provided to a client device. The method includes processing, at the server, the plurality of URLs to determine a quality of experience metric. Processing the plurality of URLs includes extracting first URL data from a first URL and second URL data from a second URL of the plurality of URLs. The first URL data includes a first segment identifier associated with a first segment of a media content item and a first bit rate identifier. The second URL data includes a second segment identifier associated with a second segment of the media content item and a second bit rate identifier. A quality of experience metric may be determined based at least in part on the first URL data and the second URL data.

Abstract: The disclosure provides an approach for decentralizing control plane operations in a network environment that includes transport nodes configured to implement a logical overlay network. A method includes transmitting a global list of transport nodes to each of the plurality of transport nodes from a management plane, the global list including an ordered list of the plurality of transport nodes. The method also includes transmitting a neighbor index value to each of the plurality of transport nodes, where the transport nodes each compute a corresponding list of neighbor transport nodes based on the neighbor index value and the global list of transport nodes. The method also includes, based on determining an update to a state of the logical overlay network has occurred by a first transport node, transmitting an update message from the first transport node to each transport node in the first transport node's list of neighbor transport nodes.

Abstract: The present invention relates to a method for transmitting an encrypted message at a transmission device, the method comprising: if a first user input to run a message application is detected, displaying a keyboard supporting a security mode; detecting a second user input to select the security mode; switching to the security mode in response to the second user input, and then receiving a message input by a user and temporarily storing the message; if a writing completion instruction of the message is detected on the keyboard, encrypting the message; and transmitting, to a reception device, the encrypted message.

Abstract: Systems and methods for controlling record relationship changes in a content management system. The content management system may have several layers of access controls, which may include a layer of access control at the object level, a layer of access control at the row level and a layer of access control at the field level. Access may be controlled at the object level by a user's security profile, at the object record level (or row level) by the user's role, and/or at the object field level by the user's role or a state in a document lifecycle. A secure inbound relationship attribute may be used to control record relationship changes. Actions for creating, deleting and reassigning are permitted only when the inbound relationship is editable according to the secure inbound relationship attribute.

Abstract: Embodiments of the present systems and methods may provide data watermarking without reliance on error-tolerant fields, thereby providing for the incorporation of watermarks in data that was not considered suitable for watermarking. For example, in an embodiment, a computer-implemented method for watermarking data may comprise inserting watermark data into a field that requires format-preserving encryption.

Abstract: A method operative at an identity provider enforces a digital rights management (DRM) scheme associated with a piece of content. The identity provider is an entity that participates in a “federation” with one or more other entities including, for example, an service provider (e.g., a content provider), a DRM privileges provider, and a DRM policy provider. In one embodiment, the method begins by having the identity provider obtain and evaluate against a DRM policy a set of DRM privileges associated with the end user requesting access to the piece of content. Based on the evaluation, the identity provider generates a single sign on (SSO) message that includes a reference to the set of DRM privileges. The message is then forward to the service provider entity, which provides the end user a response.

Abstract: Approaches presented herein enable restricting access to a locked computing resource in a web browser with a user-tailored CAPTCHA. More specifically, a request for a CAPTCHA is obtained from a web browser of a user attempting to access a resource. A set of terms associated with the user are selected from a pool of terms collected from an environment of the user within a pre-determined time period. A familiarity value of the selected terms indicating a recognizability of the terms by the user is determined. A CAPTCHA of the selected set of terms is generated having a level of graphic noise corresponding to the familiarity value. The generated CAPTCHA is then sent to the web browser. When a response to the CAPTCHA is received from the web browser, it is analyzed to determine whether the response matches the selected set of terms. If so, the web browser is instructed to grant the user access to the resource.

Abstract: A network resource and a user device include secure connection applications that share one or more keys and a key selection criterion. A communication is received from the user utilizing a key selected from the one or more keys. The network resource selects a key based on the key selection criterion. If the keys match, then the user device is authorized and the user is allowed to access data of the network resource. The keys may further be selected and used to encrypt and decrypt data. Different key selections provide security to communications.

Abstract: Methods and apparatus for real-time security monitoring on a computing device are presented. A system may define privileges to access hardware interfaces for each process of a plurality of processes executing on a computing device. The privileges may be defined in a privileged operating system level that controls root access to an operating system. In response to a determination that a process is attempting to access a hardware interface, the system may determine whether the process is privileged to access the hardware interface by checking the privileges. In response to determining that the process is not privileged to access the hardware interface, the intrusion detection agent may terminate the process.

Abstract: A mobile terminal that includes a processor, a NFC circuit, a wireless network circuit. The processor executes a payment application in a memory to generate transaction data relating to a financial transaction. The NFC circuit receives the transaction data and encrypts the transaction data to output NFC encrypted transaction data. The wireless network circuit establishes a wireless network link with an accessory device that is separate from the mobile terminal, encrypts the NFC encrypted transaction data to output combined wireless network+NFC encrypted transaction data, and transmits the combined wireless network+NFC encrypted transaction data through the Bluetooth link to the accessory device for relay to a financial transaction terminal. Related accessory devices are disclosed for proxy encrypted data between the mobile terminal and a financial transaction terminal.

Abstract: Methods and systems for key generation and device management are disclosed. A root key can be stored on a component which can be integrated with a device, and the component can store a product class identifier. The product class identifier can define a class of products, devices, features, hardware components, or other entities. One or more keys can be generated and stored on the devices based on the product class identifier and the root key. A network operator or service provider can then provide services to a class of devices that includes the device, or perform and manage other functions. The services can be authorized or otherwise implemented based on the one or more new keys stored at the devices within the class of devices.

Abstract: A user device may strengthen the protection level of a digital content by dividing the security and normal modes and performing an operation. In order to further strengthen the protection level of the digital content, the user device may determine whether the main operating system is hacked or not, and blocks the operation in the secure mode. Otherwise, the device authorization information indicating the device security level of the user device is authorized by the content service server, and the user device blocks the operation in the secure mode according to the result.

Abstract: Unlocking digital content embodied in digital readable form on a digital media carrier is described. Unlocking the digital content includes evaluating a code provided by a user scanning a tag attached to a printed, physical copy of the digital content; and if the code corresponds to an authorized code, unlocking the digital content.

Abstract: Rate control techniques are provided for encoding an input video sequence into a compressed coded bitstream with multiple coding passes. The final coding pass may comprise final splices with non-overlapping frames that do not extend into neighboring final splices. A final splice in the final coding pass may correspond to at least one non-final splice in a non-final coding pass. A non-final splice may have overlapping frames that extend into neighboring final splices in the final coding pass. The overlapping frames in the non-final splice may be used to derive complexity information about the neighboring final splices. The complexity information about the neighboring final splices, as derived from the overlapping frames, may be used to allocate or improve rate control related budgets in encoding the final splice into the compressed coded bitstream in the final coding pass.

Abstract: A rights-based system is described in which vouchers are employed for creating, managing, distributing, and redeeming rights in digital contexts. A voucher is a digital, possession-based rights representation. An authorization component of the system validates the vouchers and issues corresponding tokens. Access to digital resources is provided in response to presentation of the tokens which are validated by matching voucher refresh values to corresponding values maintained by the system. New refresh values are generated and inserted in the vouchers each time they are redeemed.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a process that includes providing a pairing key to a communication device, wherein the pairing key is encrypted and is associated with a software application associated with a group of services. The communication device is enabled to utilize the software application based on the pairing key and a service of the group of services is requested from a first media resource center for use with a media device. Responsive to a detection of a communication zone associated with a second media resource center, the pairing key is provided to the second media resource center to enable the service to be used in the communication zone. The software application is not fully enabled until it is determined to be in compliance with a service provider policy. Other embodiments are disclosed.

Abstract: Embodiments described herein provide systems and methods for managing quality level of video transmission and storage. In a particular embodiment, a method provides receiving a video at a received quality level in a video storage system and determining a characteristic of the video. The method further provides determining whether the characteristic satisfies a criteria and, if the characteristic satisfies the criteria, storing the video at a quality level associated with the criteria.

Abstract: Methods and systems for generating and storing a vehicle based notification record including evidentiary License Plate Recognition (LPR) information are presented herein. A vehicle based notification record includes evidentiary images generated by an LPR imaging system, a portable imaging system, or a combination thereof. The vehicle based notification record includes the collected evidentiary images in their native format including metadata. The collected images and metadata are preserved in their original format during communication, storage, and retrieval operations. In some embodiments, the geographic location of image capture is appended to the image metadata. In some embodiments, the images are digitally signed after capture and the digital signature is appended to the metadata of each respective image. In some embodiments, a clock of the LPR imaging system and a clock of the portable imaging system are synchronized with a network time server and time of image capture is appended to image metadata.

Abstract: Systems, apparatuses, and methods for implementing digital rights management using a GPU are disclosed. In one embodiment, a system includes at least a GPU, a security processor, and a memory. The GPU is configured to execute a first portion of a binary and detect that a second portion of the binary is encrypted. The second portion of the binary includes enhanced content that is available for purchase. If the user purchases the enhanced content, a license server generates a token specific to the security processor of the system and conveys the token to the system. Next, the security processor decrypts the second portion of the binary using the token and stores the decrypted second portion of the binary at a memory location accessible by the first processor. Then, the first processor executes the second portion of the binary.

Abstract: Methods for assessing a condition of property for insurance purposes include determining a concentration of a molecular constituent at the insured property. The molecular constituent may be a byproduct or residual product of anthropogenic fire accelerants or anthropogenic sources of ignition or explosion. In some embodiments, the concentration of the molecular constituent at the insured property is determined using spectral imaging technology. Radiative transfer computer models may be used to determine the concentration of the molecular constituent based on spectral images.

Abstract: According to one embodiment, a management device includes a management tree storage and one or more processors. The management tree storage stores therein a binary tree including a plurality of nodes that are assigned with respective node keys. The processors update at least one of the node keys. The processors selects at least one of a first subtree and a second subtree, the first subtree and the second subtree being subtrees including leaf nodes of the binary tree, the leaf nodes corresponding to respective communication devices included in a group, the first subtree including only leaf nodes with the respective node keys assigned thereto not having been updated, the second subtree including only leaf nodes with the respective node keys assigned thereto having been updated. The processors transmit a group key encrypted using a node key assigned to a root node of the selected subtree.