Abstract: A device-to-device (hereinafter referred to as “D2D”) discovery for D2D communication and a related security method during the D2D communication are provided when a proximity based service (hereinafter referred to as “ProSe”), ProSe discovery, ProSe communication, and the D2D communication are performed in a mobile communication network, and thus a device for performing communication is capable of carrying out a security method for the ProSe discovery and the ProSe communication.

Abstract: A financial institution computing system associated with a financial institution includes an account management circuit configured to prompt a user via a user device to capture a first image of an identification item of the user and a second image of the user using the user device in response to receiving, over a network via a network interface, an input from the user device regarding establishing a new account at the financial institution. The account management circuit is further configured to receive, over the network via the network interface, the first image and the second image, verify the identity of the user by comparing the first image with the second image, and create the new account for the user by generating an account number for the user and storing the account number in the accounts database in response to the identity of the user being verified.

Abstract: A system comprises an eyewear device that includes a frame, a temple connected to a lateral side of the frame, a fingerprint sensor, and a sensing circuit. The fingerprint sensor includes an input surface to receive input of a finger skin surface. The sensing circuit is configured to track a pattern of fingerprint ridges of the finger skin surface on the input surface. Execution of programming by a processor configures the system to perform functions to track, via the sensing circuit, the pattern of fingerprint ridges of the finger skin surface on the input surface; generate a fingerprint image having the tracked pattern of fingerprint ridges; extract fingerprint features from the fingerprint image; and authorize the user to utilize the eyewear device based on the extracted fingerprint features.

Abstract: Certain aspects of the present disclosure relate to methods and apparatus for providing beam switch latency using communications systems operating according to new radio (NR) technologies. For example, the method generally includes determining a latency associated with a beam switch from a source antenna array module to a target antenna array module when the target module is in a low power mode; and signaling a base station to use the determined latency after sending a command for the beam switch.

Abstract: A processing method and a terminal device are provided. The processing method comprises, provided that a storage device stores an association relationship between a first communication identifier and a first device identifier corresponding to a terminal device, and the terminal device is not connected to the storage device, monitoring whether a predetermined condition is satisfied. The processing method further comprises, in response to monitoring that the predetermined condition is satisfied, performing a corresponding process. After the terminal device and the storage device are connected, the storage device stores an association relationship between a second communication identifier and a device identifier corresponding to the terminal device.

Abstract: A service interface template for an enterprise mobile service of a mobile network may be provided for use by an enterprise. The service interface template may involve an API at an API endpoint for enterprise exposure and control over at least a subset of mobile service functions of the mobile network for use in relation to a plurality of UEs of the enterprise. The API may be defined by API request types to perform operations in relation to resources of a data store. The resources may include a collection of selectable parameter indication elements corresponding to selectable parameter indications for use in provisioning mobile service functions. A backend interface function may be provided for the API endpoint, to cause the provisionable mobile service function to be provisioned and/or executed with provisionable parameters corresponding to a selected one of the selectable parameter indications received via the API endpoint.

Abstract: Disclosed are various examples for remotely restricting client devices. A client device can be placed into a restricted mode in which application switching capabilities of the client device are disabled. Additionally, the client device can transmit screen capture data to a management service, which can provide the ability for an administrator user to monitor data shown on a display associated with the client device. The client device can also be removed from the restricted mode in response to a command sent from the management service to the client device.

Abstract: Methods, systems and computer program products for intrusion detection are provided. Aspects include receiving, by a processor, internet of things (IoT) device data from each of a plurality of IoT devices, wherein the IoT device data comprises operational data and non-operational data associated with each of the plurality of IoT devices. A security model is built for the plurality of IoT devices based at least in part on the IoT device data, wherein the security model comprises one or more IoT device data ranges. The plurality of IoT devices are monitored to identify a potential intrusion in any of the plurality of IoT devices based at least in part on the IoT device data exceeding any of the one or more IoT device data ranges.

Abstract: Aspects of the subject disclosure may include, for example, accessing first information for a first wireless access device associated with a first wireless access network in first communication with a portable communication device and accessing second information for a second wireless access device associated with a second wireless access network. A determination is made according to the first information and the second information, to facilitate second communication between the portable communication device and the second wireless access network via the second wireless access device. A first portion of a first geographic area associated with the second wireless access device is covered via a directional capability responsive to a determination to facilitate the second communication between the portable communication device and the second wireless access network. The directional capability facilitates the second communication between the portable communication device and the second wireless access device.

Abstract: Systems, methods and apparatus are disclosed for improving medical procedures and medical procedure management, and, more particularly, for tracking medical instruments throughout a procedure and assisting medical personnel throughout the procedure or at least at the conclusion of the procedure. In one form, an apparatus for tracking medical instruments throughout a procedure is disclosed having a single camera for tracking movement and/or detecting position of a plurality of medical instruments during a medical procedure as at least one of the plurality of medical instruments is moved between multiple zones at least including a first prep zone and a second procedure zone. The apparatus having a controller connected to and collecting images from the camera, and a display in electrical communication with the controller and/or the camera for displaying medical instrument data pertaining to the movement and/or position of the plurality of medical instruments.

Abstract: The present invention discloses a system and method of preforming integrated mobile number portability (MNP) and remote SIM provisioning (RSP). The method includes: receiving, by a recipient BSS, a subscription request comprising an MNP request indicator from a user equipment; requesting, by the recipient BSS, the subscription request to a recipient Subscription Manager-Data Preparation (SM-DP) to initiate the RSP, creating, by the recipient SM-DP, a recipient MNO profile comprising a recipient MSISDN upon confirmation receipt of the Download Order by the recipient BSS, registering, by the recipient SM-DP, an MNP event in a Subscription Manager-discovery Server (SM-DS) to initiate the MNP, retrieving, by the UE, RSP event details from the SM-DS to execute profile download, and executing, by the UE, the MNP event and the RSP by transferring an eUICC functioning from a donor MNO profile to the recipient MNO profile at porting date and time.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.

Abstract: An embodiment of the present invention relates to a method for performing measurement by a terminal in a wireless communication system, the method comprising the steps of: receiving D2D signals transmitted by a plurality of relay terminals; and performing measurement using at least one signal among the D2D signals, wherein the D2D signal subjected to the measurement is a D2D signal having a valid CRC.

Abstract: Methods, systems, and computer readable media for utilizing predetermined encryption keys in a test simulation environment are disclosed. In one embodiment, a method includes generating, prior to an initiation of an Internet protocol security (IPsec) test session, a private key and a public key at a traffic emulation device and storing the private key and the public key in a local storage associated with the traffic emulation device. The method further includes retrieving, from the local storage, the private key and the public key upon the initiation of the IPsec test session between the traffic emulation device and a device under test (DUT) and generating a shared secret key utilizing the retrieved private key and a DUT public key received from the DUT.

Abstract: Systems and methods for weak authentication data reinforcement are described. In some embodiments, a request to authenticate a user is received. A user password is determined to be a weak password. The user is verified to be human by initiating a human verification process. In response to verifying that the user is human, an option is provided to replace the weak password with a strong password.

Abstract: A node-enabled logistics vehicular system is described having a logistics vehicle with a storage area (having a lockable opening) and a master node. The master node has location circuitry for self-determining its location and an actuator controlling access to the storage area via the lockable opening. The master node, when executing delivery release control code maintained on the master node's memory, is operative to identify an intended delivery location associated with a node-enabled item being shipped in the storage area from the shipping information stored in the memory, cause the location circuitry to detect a current location of the logistics vehicle, and selectively cause the first actuator to change the state of the first lockable opening to an open state to provide delivery access to the item within the first storage area based upon the detected current location of the logistics vehicle and the identified intended delivery location.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A method for communicating by a user equipment with a macro cell base station and a small cell base station in a communication system is provided. The method comprises applying a first base station security key to a first communication link with the macro cell base station; generating a second base station security key to be used for a second communication link with the small cell base station based on the first base station security key; applying the second base station security key to the second communication link with the small cell base station; and communicating through at least one of the first communication link and the second communication link.

Abstract: At a network element, a first TEID is determined that is associated with a default bearer between a UE and a first APN. A determination is made whether a tunnel discovery procedure should be performed to discover a second TEID associated with a dummy bearer. The dummy bearer is associated with the UE and a second APN. The tunnel discovery procedure is performed to discover the second TEID, and the dummy bearer is set up between the network element and the UE. Data arriving at the network element from the core network and toward the UE is routed over one of the default bearer, using the first TEID, or the dummy bearer, using the second TEID. Data arriving at the network element from the UE and toward the core network is routed over only over the default bearer. Apparatus, methods, and computer programs and products are disclosed.

Abstract: One example method of operation may include identifying one or more call parameters associated with each of a number of calls received over a fixed period of time, assigning scores to each of the calls based on the one or more identified call parameters for each of the plurality of calls, assigning one or more of the calls to a scam call category based on the assigned scores, and responsive to the assigning of the one or more of the calls to a scam call category, determining whether a number of remaining calls of the calls, which are not assigned to the scam call category, have increased or decreased beyond a deviation margin of a target percentage of calls.

Abstract: A method and a device for integrity protection are provided in the present disclosure, wherein the method for integrity protection applied to a base station includes: the base station sending configuration information for integrity protection to a terminal by a radio resource control (RRC) layer message, wherein the configuration information for integrity protection is used for configuring an integrity protection function for at least one transmission resource used by the terminal in the transmission of service data.

Abstract: A wireless device determines a location, identifies a mobile network operator (MNO), and/or experiences a network event. In some instances, the wireless device recognizes a base station as being operated by the MNO. Based on the location, the MNO and/or the network event, the wireless device determines a security action. The security action can include one or more of: (i) ignoring a network command associated with the network event, (ii) providing an alert notification via a user interface of the wireless device alerting a user of a security risk associated with the location, MNO, and/or network event, or (iii) ignoring communication from the base station temporarily or for an indefinite period of time. In some instances, the security action includes proceeding with normal communication with the base station at the location using network services of the MNO.

Abstract: The present invention discloses, inter alia, a computerized system for building a multisensory location map, the system comprising an interface for receiving multiple multisensory data vectors acquired by multiple mobile devices at multiple locations and accelerometer readings obtained upon movement of at least one device carried by at least one user between the multiple locations; at least a portion of said movement being walking; at least a majority of the multiple locations are located within an area in which an accuracy of global positioning system (GPS) based navigation is below an allowable threshold; and a processor, interconnected with said interface, with accelerometers, a magnetometer and a map calculator, configured for: extracting, out of accelerometer readings, accelerometer information related to multiple walking phases of the walking; for at least two of said multiple walking phases, real-time correcting a currently measured Z vector, and a pitch angle and a roll angle thereof, thereby compensa

Abstract: A method of a User Equipment, UE, in a 3rd Generation Partnership Project, 3GPP, compliant mobile communications network supporting dual connectivity, and a corresponding UE. The method comprises detecting a signalled reconfiguration procedure of a Data Radio Bearer, DRB, having or changing to a DRB type in which downlink, DL, data is received from only serving cells of a Secondary Cell Group, SCG, connected to a Secondary eNB, SeNB, via an SCG DRB, or in which DL data is received from a SCG and also from serving cells of a Master Cell Group, MCG, connected to a Master eNB, MeNB, via a split DRB.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in content searching, hosting and/or providing systems supported by or configured with devices, servers and/or platforms. The disclosed systems and methods provide a novel framework for providing users with electronic retrieval capabilities that are activated upon the users' determined locations respective to real-world locations associated with a message providing entity. The disclosed technology combines the previously separate systems of mail extraction, geo-fencing and content delivery (e.g., notification) into a single system that efficiently manages a user's inbox in order to provide the user with content the user has expressly indicated is of interest to that user.

Abstract: A security registry and tracking system (SRTS) is described that aims to address a need for security by helping law enforcement identify individuals through tracking of movement of mobile devices, such as cellular phones. A computing device is directed to communicate with a mobile networking and tracking system configured to identify a mobile device entering a premise of a subscriber network; obtain an identification number of the mobile device; store the identification number of the mobile device and forward the identification number to at least one governmental authority system; and receive authentication data from the at least one governmental authority system. Further, the computing device can generate population records and identification databases based at least in part on the location information and the data transferred between the mobile networking and tracking provider and the security registry.

Abstract: An information processing system includes a first device, a second device, and a notification unit. The first device includes a position sensor and a communication unit. The second device includes a position sensor and a communication unit. The notification unit transmits, in a case where a relative distance between the first device and the second device calculated based on positional information detected by the position sensors exceeds a limit value, an alert to at least one of the first device and the second device.

Abstract: Embodiments of an authentication system and a method for authentication using ciphers are described. In the system and method, cryptographic calculations of an encryption algorithm are executed at a base station, in a determined secure environment, to produce a pre-calculated cipher for a subsequent authentication process. The pre-calculated cipher is then used to transmit an authentication request message from the base station and validation of an authentication response message for the subsequent authentication.

Abstract: A process for handling wireless service and wireless device transaction and information requests includes storing in a database wireless service information responses, wireless service transaction responses, wireless device information responses, and wireless device transaction responses. The process including receiving and analyzing a keyword, obtaining a response, based at least on the keyword, and transmitting the response.

Abstract: Provided is a wireless communication terminal that wirelessly communicates with a base wireless communication terminal. The wireless communication terminal includes: a transceiver; and a processor. The processor is configured to receive trigger information and data from the base wireless communication terminal by using the transceiver, and transmits ACK information indicating whether the data is received to the base wireless communication terminal based on the trigger information. The trigger information is information for triggering transmission of the wireless communication terminal.

Abstract: A fraud detection system for detecting fraudulent acts related to account takeover in digital transactions is disclosed. In some embodiments, the fraud detection system is programmed to detect occurrences of triggering events for account takeover fraud. The triggering events generally include changes related to the taken-over account, such access patterns, account data, or linked transactional data. In response to detecting the occurrence of one triggering event, the fraud detection system is programmed to determine whether the triggering event corresponds to potential fraud by analyzing historical triggering events and triggering events involving similar accounts. In response to identifying potential fraud, the fraud detection system is programmed to send a notification of the potential fraud to a device associated with the taken-over account before the triggering event or a device associated with an affected account engaged in a transaction with the taken-over account.

Abstract: Vehicle profiles allow drivers of vehicles to select any vehicle they desire to simulate. A graphical dashboard may be reconfigured to assume a graphical interface of any vehicle. A prospective buyer of an electric vehicle may configure the dashboard of a conventional, internal combustion vehicle to visually simulate an electric vehicle.

Abstract: A wireless device handles area update reports. The wireless device initiates a radio network area update, RNAU, responsive to detecting that the wireless device has entered a cell not belonging to a radio network area, RNA, configured for the wireless device. The wireless device receives, from the wireless network, a message indicating that the wireless device's attempt to perform the RNAU has been rejected. The message includes or is accompanied by an indication that a wait time value is applicable. Responsive to the message, the wireless device sets a reject wait timer to the wait time value and performs the RNAU upon expiry of the reject wait timer. In some embodiments, the wireless device sets a periodic RNAU timer to the wait time value, responsive to the message, and performs the RNAU upon expiry of the reject wait timer and the periodic RNAU timer.

Abstract: At least one of a measure of trust or a measure of spoofing risk associated with a sender of a message is determined. A measure of similarity between an identifier of the sender of the message and an identifier of at least one trusted contact of a recipient of the message is determined. The measure of similarity is combined with at least one of the measure of trust or the measure of spoofing risk to at least in part determine a combined measure of risk associated with the message. The sender of the message is not included in the at least one trusted contact of the recipient of the message. Based at least in part on the combined measure of risk associated with the message, the message is modified to alter content of a data field that includes an identification of the sender of the message.

Abstract: A vehicle network system is configured to detect unauthorized intrusions by a passenger-owned device, and to identify the passenger-owned device based at least in part on stored information representative of network communications. The vehicle network system can be further configured to determine a position of the intruding passenger-owned device within a passenger area of the vehicle and to obtain a name and/or camera image of a passenger associated with the device. The position of the intruding device can be identified based at least in part on communications between the intruding device and one or more network-access devices distributed throughout the passenger area.

Abstract: A method of detecting, controlling and managing transmission of a transmitting device within a facility is disclosed. The method involves transmitting information to the transmission device, detecting a response transmission from the transmission device by a least one transmission detection facility, extracting identification information associated with the transmission device in response to the transmitted information; and determining a location of the transmission device based on the response transmission received by the at least one received transmission detection facility, wherein the response transmissions are sorted by the identification information, determining an allowability of the located transmission device within the set area and reducing a power level of a transmitted signal for a predetermined period of time, when allowability is indicated.

Abstract: Aspects of the disclosure relate to multicomputer processing of data from social media service computing platforms and other sources with centralized event control. A first computing platform may receive a request to authorize an event from a first device as well as information from one or more social media service computing platforms. The first computing platform may determine whether or not to authorize the event and may request authorization for the event from a second device. Subsequently, the first computing platform may command a second computing platform to authorize or not authorize the event accordingly. The rules and conditions evaluated by the first computing platform in determining whether or not to authorize the event may be determined or altered by a machine learning engine of the first computing platform.

Abstract: Systems and methods are disclosed for determining whether or not an apparatus, such as a mobile device, is being handled or otherwise used within a vehicle. The apparatus may comprise an accelerometer configured to measure acceleration and a gyroscope configured to measure orientation. The apparatus may determine an axis of gravity of the apparatus based on acceleration measurements made by the accelerometer over a period of time. The apparatus may also determine a rotation vector of the apparatus based on orientation measurements made by the gyroscope. Using the axis of gravity of the apparatus and the rotation vector of the apparatus, the apparatus may determine a rate of rotation of the apparatus perpendicular to the axis of gravity. If the rate of rotation of the apparatus perpendicular to the axis of gravity exceeds a threshold, the apparatus may determine that it is being handled or otherwise used within the vehicle.

Abstract: A method of accessing a partition on a mobile communication device may include the steps of receiving data specifying a partition, receiving an identification code from an identification module in or associated with the device, determining, based on both the data specifying a partition and the identification code, whether access to the specified partition is to be allowed, and allowing or denying access to the specified partition accordingly.

Abstract: A unique session is obtained and an anonymous session is generated that maps to the session. The anonymous session is passed to a selected advertisement service, and the selected advertisement service provides, in response thereto, an interface, which is proxied together with an existing interface of a device (associated with the unique session) during the unique session for a consumer to interact with the proxied interface on the device.

Abstract: A relay device includes: a memory; and a hardware processor coupled to the memory. The hardware processor: receives data from a sensor; backs up the data from the sensor, in the memory, to store data failed to be transmitted to a server on a network; determines, based on a server communication status representing a state of data transmission to the server, a priority for data to be transmitted to the server among the data from the sensor and the backed-up data; transmits, to the server, data determined to have a highest priority among the data from the sensor and the backed-up data; and determines the server communication status based on whether communication with the server fails.

Abstract: A security capability negotiation method is provided that is applicable to perform security capability negotiation during a mobile network handover. Moreover, a security capability negotiation system is also provided. Consistent with the provided system and method, it may be unnecessary for the MME to know the security capability of the corresponding eNB in a certain manner during a handover from a 2G/3G network to an LTE network. Meanwhile, during the handover from the LTE network to the 3G network, the SGSN does not need to introduce new requirements.

Abstract: An energy detection method includes the following steps: controlling a communication device to enter a sleep mode during a first time interval; intermittently turning on and turning off a part of receiving functions of the communication device during a second time interval, in which the second time interval is after the first time interval, and when the part of receiving functions of the communication device are turned on, the communication device is controlled to receive a signal; and determining if a beacon signal is present according to energy of the signal received by the communication device. The first time interval and the second time interval form a detection period. First average power consumption of the communication device during the second time interval is smaller than second average power consumption of the communication device, in which the second average power consumption corresponds to enabling all receiving functions of the communication device.

Abstract: Computer-implemented methods and systems reliant on establishing a common session key between an electronic device and a computer server are disclosed. The method and systems may be for processing de-tokenization requests in payment transaction processing and for preparing an electronic device to perform payment transactions. During such a transaction, the server may perform a method that includes receiving a de-tokenization request including a payment token and a cryptogram generated by the electronic device using a session key generated by the electronic device based on a fingerprint of the electronic device, a secret value previously shared with the electronic device, the payment token, and a transaction counter; retrieving the fingerprint, the secret value, and the transaction counter and generating the session key based on the same; verifying the cryptogram using the session key; retrieving an associated account number; and sending response to the request including the account number.

Abstract: A transaction method includes: receiving, by a secure function module of a transaction terminal, a first transaction message sent by a transaction application module, where the first transaction message includes a first identifier and/or a secure transaction data requirement parameter; obtaining, by the secure function module, secure transaction data according to the first transaction message, or the first transaction message and a second identifier, where the second identifier is used to uniquely identify the secure function module; sending, by the secure function module, the secure transaction data to the transaction application module; and sending, by the transaction application module, a second transaction message to an acquiring terminal, where the second transaction message includes the secure transaction data, the first identifier, and a third identifier, and the third identifier is used to identify the transaction terminal.

Abstract: Systems and methods of managing enrollment of digital identities (e.g., for aeronautical communication) can involve a line-replaceable unit (LRU) in an aircraft establishing a digital identity with a ground-based server by requesting a public certificate from the ground-based server. The LRU may receive a public certificate from the ground-based server. The LRU may validate the public certificate. The LRU may generate, based on validating the public certificate, an enrollment status message indicative of at least one status code from a plurality of predefined status codes associated with a plurality of corresponding actions for the ground-based server. The LRU may transmit the enrollment status message including the at least one status code to the ground-based server, to cause the ground-based server to perform a corresponding action based on the at least one status code.

Abstract: A system and method according to the principles of the invention identifies mobile phone aliases. The system processes mobile location data and call event data to generate mobility profiles. The profiles indicate a mobile's geographic zone history over a specified time. To produce a mobility profile, the system aggregates location data into zones and associates the zones with times of day, week or month. Particular zones for different mobiles can be compared according to weighting algorithms to provide data indicating whether the mobiles belong to the same user.

Abstract: Agencies oftentimes desire to monitor personnel in the field during the course of their duties. To provide flexible monitoring capabilities to agencies, a common mobile device such as a mobile phone is converted for use as a radio-based listening system to collect and transmit audio data. Phone features and accessories are leveraged to collect additional data for transmission. Collected data is streamed or otherwise transmitted to monitoring devices at the agency or in the field for operational oversight and recordation.

Abstract: Example implementations relate to application access based on a network. For example, a computing device may include a processor. The processor may detect that the computing device is connected to a particular network and may identify an identifier associated with the particular network. The processor may access settings indicating a subset of applications associated with the identifier of the particular network, where the subset of applications is part of a set of applications available on the computing device. The processor may restrict access to the subset of applications based on the settings.

Abstract: A method for updating a predictive model of a variable representing the operation of a mobile terminal connected to a communication network by packets is described. A first predictive model is configured to estimate a value of the variable as a function of the value of predictors, linked to the variable by a common operating context. The method can be implemented by the mobile terminal and can include generating a feed message, comprising at least the measured value and the values of the predictors, if the difference between the measured value and the estimated value is greater than or equal to a determined threshold, called the feed threshold, the method can further include transmitting the at least one feed message generated, to an update server connected to the network, receiving an update message, comprising a second predictive model updated on the basis of at least the feed message, coming from the update server, and replacing the first predictive model with the second predictive model.

Abstract: Devices, servers, systems and methods for content protection are provided. Disclosed embodiments improve temporal granularity of controlling access to the protected content and increase resilience against attacks attempting to prevent re-evaluation of conditions of access. Enforcement of re-evaluation may be based on the receipt and/or verification of tokens. In some embodiments, re-evaluation is enforced by periodically rendering content keys required for content decryption unuseable and/or clearing content keys already in use.