Abstract: The embodiments of the disclosure provide a method for maintaining multi-SIM (Subscriber Identity Module) configuration and user equipment (UE). The method includes: receiving, by the UE, a first multi-SIM support information from a first cell, wherein the first multi-SIM support information is generated and transmitted from a second cell to the first cell via an inter-node signaling from the second cell to the first cell, and the first cell and the second cell belong to a first network; transmitting, by the UE, a multi-SIM assistance information message to the second cell, wherein the multi-SIM assistance information message is determined based on the first multi-SIM support information.

Abstract: A user interface method is provided by an SDK embedded in a third party resource running on a portable device including a camera and a display. The method includes receiving an API call to display an image processing user interface and in response, displaying a first user interface comprising a list of selectable graphical items corresponding to a group of available image modification features. If user selection of a desired graphical item from the list of selectable graphical items is received, image modification features corresponding to the desired graphical item are applied to an image received from the camera, generating a modified image. A second user interface including the modified image is then displayed on the display.

Abstract: A method and apparatus for handling dynamic group creation in a vehicle to everything (V2X) system is provided. The method includes assigning, by a first server, a link layer identifier corresponding to a dynamic group information, sending, by the first server, a push request including the link layer identifier corresponding to the dynamic group information to a first V2X user equipment (UE) from a plurality of V2X UEs, receiving, by the first V2X UE, the link layer identifier corresponding to the dynamic group information, storing, by the first V2X UE, the link layer identifier corresponding to the dynamic group information.

Abstract: A system for facilitating sending and receiving of security alerts may include a processor communicatively coupled to a memory and a network interface, the network interface communicatively coupled to a network. A fixed location manager and a roving location manager may be communicatively coupled to the network interface and the network and may be configured to: (i) receive security messages from a plurality of user mobile devices coupled with the network, (ii) create a fixed forum security message and a roving forum security message, each of which is associated with a geographic location of one of the security messages, and (iii) send the fixed forum security message and the roving forum security message to all of the plurality of user mobile devices that comprise a fixed alert area or a roving alert area associate with the geographic location.

Abstract: Certain aspects of the present disclosure provide techniques for processing computing resource access requests from users of an application service. An example method generally includes measuring computing resource access metrics over a time window for a user of a computing system. The measured computing access metrics for the user of the computing system are determined to exceed a threshold. Based on determining that the measured computing access metrics for the user of the computing system exceeds the threshold, computing resource access requests from the user of the computing system are migrated from a first queue to a second queue, wherein the first queue comprises a rate-unlimited queue and the second queue comprises a rate-controlled queue having a defined rate for processing received requests. Computing resource access requests from the user of the computing system are processed based on the defined rate for processing received requests.

Abstract: A system and method for automatically transitioning between carrier and IP messaging that can include receiving client application registration updates; receiving a messaging request directed to at least one destination endpoint; retrieving client status of the destination endpoint from the client application registration database; evaluating the client status for use of a client application destination; in response to the destination endpoint having an inactive client status, transmitting content of the messaging request to the destination endpoint; and in response to the destination endpoint having an active client status, transmitting content of the messaging request to a client application endpoint mapped to the destination point.

Abstract: A method includes receiving a Bluetooth Low Energy (BLE) advertising message from a user interface (UI) device. The method includes, responsive to a receipt of the BLE advertising message from the UI device: waking up an application module of the first wireless device and authorizing the UI device to remotely control media presentation as presented by the application module. The method includes determining a first determination of whether the first wireless device is paired or is in a current cabled connection with an electronic device that is distinct from the UI device; and in accordance with the first determination being a determination that the first wireless device is not paired with the electronic device and is not in a current cabled connection with the electronic device, automatically terminating the authorization of the UI device to remotely control media presentation as presented by the application module.

Abstract: A method and apparatus for discovering and selecting a network that provides connectivity for transmitting user subscription data is provided. A user equipment (UE) in a wireless communication system includes a transceiver and at least one processor configured to identify preconfigured first information comprising a first list, the first list comprising at least one identifier (ID) of at least one network group providing an initial access to a non-public network (NPN), receive, from at least one base station via the transceiver, second information comprising at least one second list, the at least one second list comprising at least one ID of at least one network group which is supported by the at least one base station and provides an initial access to the NPN, and select a network to be initially accessed from a network group corresponding to at least one ID included in the first list and the at least one second list, based on the first information and the second information.

Abstract: Methods and apparatus for dynamic sharing of resources such as radio frequency (RF) spectrum in a wireless system. In one embodiment, the sharing is conducted among a number of base stations (e.g., eNodeBs or Access Points (APs)), or among different radio access technologies (RATs). In one implementation, the sharing is accomplished through reservation of new RF carriers, and temporary assignment (and release) of one or more RF carriers to the multi-carrier enabled radio access systems or base stations. Such dynamic spectrum sharing allows opportunistic use of additional RF carriers in a multi•carrier system as opposed to permanent availability to the eNodeB or AP regardless of their effective usage.

Abstract: A device configured to receive a connection request that includes device authentication credentials and to determine the user device passes authentication in response to identifying a device profile associated with the device authentication credentials. The device is further configured to receive user credentials for a first user and identify a first user identity that corresponds with the user credentials. The device is further configured to establish a first network connection with the user device, to send a token request to the user device, and to receive a token via the first network connection. The device is further configured to identify a second user identity based on the token, to determine the first user identifier matches the second user identifier, and to establish a second network connection for the user device, wherein the network connection enables the user device to access the network.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for receiving, from one of two or more sensors of a device that independently determine whether an aircraft takeoff has likely occurred, an indication that the aircraft takeoff has likely occurred; activating, based on receiving the indication that the aircraft takeoff has likely occurred, an airplane mode of the device; receiving, while the device is in the airplane mode and from one of two or more other sensors of the device that independently determine that an aircraft flight is likely not occurring, an indication that the aircraft flight is likely not occurring; and deactivating, based on receiving the indication that the aircraft flight is likely not occurring, the airplane mode of the device. The indication that the aircraft takeoff has likely occurred may include acceleration data indicating an acceleration of the device in three dimensions.

Abstract: According to one embodiment, a system includes a base station including a first communication port configured to create a wireless connection to a first mobile telephone via Bluetooth; and a second communication port configured to create a voice over internet protocol (VOIP) connection to a first telephone network; wherein the base station is configured to retrieve a first contact list from the first mobile telephone, and is configured to send information from the first contact list to a memory.

Abstract: System and methods that improve the use of network functions on edge data networks are disclosed. A mechanism that supports edge-assisted UE context and trigger collection is described herein, where a UE can actively send its context information and/or any trigger (e.g. a request for a network function/service to be deployed in edge data networks, etc.) to an edge enabler server, which processes the received context and triggers from its UEs. The edge enabler server may also forward UE context and triggers to 5G core network (5GC) upon receiving a solicitation request from the 5GC, or if the 5GC has already made a subscription for getting notification on UE context and triggers. A network repository function is provided as a new network function collect, store, and manage edge data network information.

Abstract: An electronic device discussed herein may include radio frequency communication circuitry for communication on a radio frequency network according to a communication configuration, a processor, and memory. The memory may store instructions that, when executed by the processor, cause the electronic device to perform operations including receiving, a first muting configuration indicating when the radio frequency communication circuitry is to communicate using a first type of communication on a first frequency band and when the radio frequency communication circuitry is to communicate using a second type of communication on a second frequency band, where the first frequency band may overlap with the second frequency band. The memory may store instructions that, when executed by the processor, cause the electronic device to perform operations including transmitting or receiving a data packet using the radio frequency communication circuitry according to the communication configuration.

Abstract: Aspects of the disclosure relate to a system that includes a memory storing a queue for arranging tasks, a plurality of self-driving systems for controlling an autonomous vehicle, and one or more processors. The one or more processors may receive a non-passenger task request with a priority level of the non-passenger task request. When the non-passenger task request is accepted, the one or more processors may insert the task in the queue based on the priority level of the task request. Then, the one or more processors may provide instructions to one or more self-driving systems according to the non-passenger task request. Having received updates of the status of the autonomous vehicle, the one or more processors may determine that the task is completed based on the updates. After determining that the task is completed, the one or more processors may remove the task from the queue.

Abstract: This disclosure describes, in part, techniques for establishing network-based data communications (e.g., voice calls, video calls, etc.) between a user device of a user and a remote device of another user, and transitioning the data communications to a different user device of the user based on various types of information. In some examples, the user devices may be located in one or more environments of the user, and the data communications may be transitioned between the user devices based, at least in part, on a location of the user in the environment(s) relative to the multiple devices. For instance, if a user device is performing data communications with the remote device, but it is determined that the user has moved into a closer proximity to another user device, the performance of the data communications may be transitioned to the other user device to which the user is in closer proximity.

Abstract: Systems and methods for payload encoding and decoding are disclosed. Example instructions cause one or more processors to at least determine encoding data corresponding to a message to be encoded into audio data by an encoding device; generate a license file including the encoding data; and cause transmission of the license file to a decoding device to enable the decoding device to decode the message from the audio data based on the license file.

Abstract: Systems, methods, and devices that relate to an automated auditing system of the network conditions are disclosed. In one example aspect, a network device in a core network for wireless communication include one or more processors that are configured to determine an expected network state based on predefined configuration information of one or more network resources, receive measurement results reported by one or more wireless devices via at least one radio access node, estimate an actual network state based on the measurement results reported by one or more wireless devices, and detect a discrepancy between the expected network state and the actual network state.

Abstract: Register banks are used to allow for fast beam switching in a phased array system. Each beam forming channel is associated with a register bank containing M register sets for configuring such things as gain/amplitude and phase parameters of the beam forming channel. The register banks for all beam forming channels can be pre-programmed and then fast beam switching circuitry allows all beam forming channels across the array to be switched to use the same register set from its corresponding register bank at substantially the same time, thereby allowing the phased array system to be quickly switched between various beam patterns and orientations. Active power control circuitry may be used to control the amount of electrical power provided to or consumed by one or more individual beam forming channels such as to reduce DC power consumption of the array and/or to selectively change the effective directivity of the array.

Abstract: A method and system for distributing electronic vehicle accident status information over a network to a remote subscriber portable computing device during and after a vehicle accident may include transmitting a downloadable client application over a communications network to a portable computing device (PCD) for running on the portable computing device and for communicating with the server over the communications network. The server may receive profile information about a person and at least one vehicle from the communications network via the client application. The client application may then receive an accident report name with the client application and then display on the PCD a check-list of actions for completion in order to complete the accident report associated with the accident report name. At least one action controls a camera function of the PCD.

Abstract: Various embodiments of a system and method for capturing changes in trade information that impact trade authorization and for updating a chain state on a distributed chain database that is used to authorize trades are disclosed herein. In some embodiments, the system comprises: a trade controller configured to obtain a current state from a local database; a rules engine configured to be invoked by the trade controller to apply a ruleset to data extracted from the local database to generate an updated state; an operation auto detector configured to generate a plan to update a chain state on the distributed chain database based at least in part on the updated state; and an execution engine configured to execute the plan and to generate an updated chain state that is used to authorize trades.

Abstract: Systems and methods are described for providing recommendations for a user experience in online meetings. A recommendation engine can aggregate data from user devices to make recommendations before, during and after online meetings. Before a meeting, the recommendation engine can recommend which of a user's devices to use for the meeting. During the meeting, the recommendation engine can identify current or anticipated issues and recommend changes the user can make to correct or prevent the issue. After meetings, the recommendation engine can aggregate data and identify an ongoing issue for one or multiple users. The recommendation engine can identify the cause of the issue and make recommendations to the user or an administrator accordingly.

Abstract: A method of wireless communication performed by a user equipment (UE), the method including: determining to operate in a Dual SIM Dual Active (DSDA) mode or a Dual SIM Dual Standby (DSDS) mode, the UE having a first subscriber identity module (SIM) and a second SIM; and selecting a discontinuous reception (DRX) parameter value based at least in part on the DSDA mode or the DSDS mode.

Abstract: An operating method of the display device includes detecting, through at least one sensor, at least one sensing value corresponding to the at least one sensor, identifying a touch area on the display device that is touched by a mobile device, based on the at least one sensing value, receiving status information about an operation that is being executed by the mobile device, from the mobile device, and performing a function corresponding to the identified touch area, based on the received status information.

Abstract: In one example, a recorded voicemail is first converted from speech to text, and a proposed action to be performed by the user is extracted from the voice message. For example, in the voicemail “this is John, call me at 650.987.0987 at 9 am tomorrow,” the action is to call John. At least one action parameter for undertaking the action is determined. For example, the action parameters may include the 650.987.0987 telephone number and the 9 am time the following morning, The at least one action parameter may be extracted from the voicemail message or it may be determined by other means, e.g., from a user's contact book. Finally, the user is presented with a prompt to facilitate undertaking the action using the at least one the parameter. For example, the user may be given the option to set a reminder to call John the following morning at 9 am.

Abstract: A selectively handsfree communications module for use in high speed pursuits includes first and second switches, which are operationally engageable to a control panel of a first radio mounted in a first vehicle and to the first radio, respectively. The first radio is equipped for two-way communication with one or both of a base station and at least one second radio of a second vehicle. The second switch is engageable to a floorboard of the first vehicle and can be actuated by a foot of an operator. Programming code, which is selectively positionable on a microprocessor of the first radio, enables the microprocessor to accept signals from the first and second switches. Switching of the first switch signals the microprocessor to operate the first radio in a handsfree operational mode, wherein a microphone and a transceiver of the first radio are actuated upon actuation of the second switch.

Abstract: A method of wireless communication performed by a user equipment (UE) includes: operating in a Dual SIM Dual Active (DSDA) mode or a Dual SIM Dual Standby (DSDS) mode in which a first subscriber identity module (SIM) is designated as a default data subscription (DDS); determining a recommendation to change the DDS from the first SIM to a second SIM at a modem, informing a user of the recommendation to change the DDS; changing the DDS in response to, at least in part, the recommendation an input from the user; updating a first state variable to indicate a state of the DDS; and routing internet data to the second SIM.

Abstract: Devices, systems, and methods are provided for performing secured analytics using encrypted data. The method may include receiving first data and second data, the first data and the second data being homomorphically encrypted, the first data associated with a first type of data, and the second data associated with a second type of data. The method may include retrieving third data associated with the first type of data, and retrieving fourth data associated with the second type of data. The method may include determining a first proximity between the first data and the third data, and determining a second proximity between the second data and the fourth data. The method may include determining, based on the first proximity and the second proximity, a risk score, and determining, based on the risk score, a fraudulent action associated with the first data and the second data.

Abstract: Rate limiting of cloud account change events and state management is described herein. One embodiment includes instructions to process each of a first stream of change events received from a cloud provider and associated with any assets of a particular public cloud account, determine that the first stream of change events exceeds a rate threshold, discard each of a second stream of change events received from the public cloud provider and associated with any assets of the particular public cloud account, query the cloud provider to perform a collection on all the assets of the particular public cloud account after a particular delay period, and process each of a third stream of change events received from the cloud provider and associated with any assets of the particular public cloud account responsive to a completion of the collection.

Abstract: Various embodiments generally relate to systems and methods for creation of voice memos while an electronic device is in a driving mode. In some embodiments, a triggering event can be used to indicate that the electronic device is within a car or about to be within a car and that text communications should be translated (e.g., via an application or a conversion platform) into a voice memo that can be played via a speaker. These triggering events can include a manual selection or an automatic selection based on a set of transition criteria (e.g., electronic device moving above a certain speed, following a roadway, approaching a location in a map of a marked car, etc.).

Abstract: A device for managing update of a vehicle includes a communication device in communication with at least one control device of the vehicle and in communication with an OTA (Over The Air) server for software update of the at least one control device, and a controller that relays communication between the at least one control device and the OTA server, and controls the at least one control device.

Abstract: Methods, apparatuses, and computing systems are provided for integrating logic services with a group communication service. In an implementation, a method may include receiving a spoken message from a communication node in a communication group and determining that the spoken message relates to a logic service and transferring the spoken message to a voice assistant service with an indication that the spoken message relates to the logic service. The method also includes receiving status information from the logic service indicative of a status of a networked device associated with the logic service. The further method includes sending an audible announcement to the communication nodes in the commutation group expressive of the status of the networked device.

Abstract: Location-based anomaly detection based on geotagged digital photographs. In some embodiments, a method may include identifying a completed transaction associated with a user. The method may also include determining a transaction geographic location associated with the completed transaction. The method may further include identifying a mobile device associated with the user. The method may also include identifying one or more geotagged digital photographs taken by the mobile device. The method may further include extracting one or more photograph geographic locations from the one or more geotagged digital photographs. The method may also include, in response to determining that the transaction geographic location is not within a threshold distance of any of the one or more photograph geographic locations, identifying the completed transaction as a suspicious transaction and performing a remedial action.

Abstract: Method for generating haptic feedback responses starts with processor causing communication interface for communication session to be displayed on first user interface and on a second user interface. Processor detects first touch input on first user interface and second touch input on second user interface. Processor monitors location of the first touch input on the first user interface and location of the second touch input on the second user interface. Processor determines distance between location of first touch input on first user interface and location on first user interface corresponding to location of second touch input on second user interface. Processor causes the first user interface and the second user interface to generate a haptic feedback response based on the distance. The haptic feedback response increases in intensity or speed as the distance decreases and decreases in intensity or speed as the distance increases. Other embodiments are described herein.

Abstract: Systems and methods for triggering emergency mass notifications include an EMNS activation service, a plurality of activation premises devices, a plurality of EMNS provider services, and a plurality of event personnel devices. The EMNS activation service includes a universal translator module that receives an event trigger signal relating to an emergency event from one of the activation premises devices. The universal translator module translates the event trigger signal to event-specific EMNS protocols of the EMNS providers. The EMNS activation service communicates the event-specific EMNS protocols to the EMNS providers, and communicates event data to event personnel devices based on a list of event personnel devices to be notified of an emergency event. An activation premises device includes a housing event with trigger controls for creating the event trigger signal, wherein these event trigger controls are inaccessible to users in the absence of an authorized access or an emergency access.

Abstract: Systems and methods for providing a service experience score at a merchant physical location include a system provider device that determines, through communication at least one of a plurality of beacon devices located at the merchant physical location and a user device, a start of a user service experience. The system provider device also determines, through the at least one of the plurality of beacon devices and the user device, an end of the user service experience. A service experience score that is based at least partly on the start of the user service experience and the end of the user service experience is generated. The service experience score is stored in a database in association with a merchant that is associated with the merchant physical location. Subsets of the service experience score may be associated with different locations of the merchant physical location.

Abstract: A vehicle safety system operating on a driver's cellphone and comprising selective blocking apparatus, controlled by a processor, for blocking specified functionalities of the cellphone only when the cellphone is in a moving vehicle; and communication functionality operative to receive from a remote server and feed to said processor, updates which determine which specified functionalities to block.

Abstract: An automated method is provided for enabling and implementing a beacon-based service location application in a user device having a beacon monitoring application. A service location facilitation server establishes service need criteria for a user of the user device and estimates a service need state for the user. The service need state includes information indicative of a relative need for a desired service. The service location facilitation server then determines whether the service need state meets the service need criteria, and, if so, transmits an instruction to the user device to transition the beacon monitoring application from an inactive state to an active monitoring state.

Abstract: Methods and systems are provided. One example method includes providing a connection to the Internet for a vehicle via wireless connection circuitry associated with an on-board computer of the vehicle. The connection is used to communicate with a service, and a user account is assigned to a user and the user account is associated with settings of the user. The method includes providing communication, by the on-board computer, with a mobile device. The communication provides for pairing the mobile device with the on-board computer using credentials associated with the user account of the user. The method includes accessing, using the on-board computer, data from a mobile device application of the mobile device for rendering content to a display screen of the vehicle. At least some data accessed from the mobile device application is used to render said content to the display screen of the vehicle.

Abstract: Embodiments of the present invention provide a computer-implemented method of generating contact recommendations for a vehicle communication apparatus, comprising determining (110) a plurality of vehicle contact events associated with a communication device, determining (120) a distance between one or more current parameters and one or more parameters associated with each of the vehicle contact events, and generating (130) one or more contact recommendations according to the distance.

Abstract: A processor of an electronic device connects a first short-range wireless communication circuit with a peripheral device, forms a cluster including the electronic device and at least one external electronic device, wherein the electronic device and the at least one external electronic device are registered to a same user account, transmits information associated with the peripheral device to the at least one external device included in the cluster through the second short-range wireless communication, selects an external electronic device responding to the transmitted information, from among the at least one device included in the cluster, establishes a wireless data communication path with the selected external electronic device, receives input information from the peripheral device through the short-range wireless communication circuit, and transmits the received input information or control information corresponding to the received input information to the external electronic device through the wireless da

Abstract: Described is a data gathering zone system. The system includes a server having a memory for storing area information and a user computing device coupled to the server. The system may operate to allow a user to define a zone around a geographic area to establish a data zone. Mobile device signals that occur within the data zone are collected and aggregated by the server. The server may generate for display the gathered data within the geofenced zone for analysis.

Abstract: Disclosed is an electronic device including an inertia sensor, an atmospheric pressure sensor, a processor operatively connected to the inertia sensor, the atmospheric pressure sensor, and a memory operatively connected to the processor, wherein the memory is configured to store instructions which, when executed, cause the processor to acquire acceleration sensing data from the inertia sensor and atmospheric pressure sensing data from the atmospheric pressure sensor, sense whether the electronic device has fallen based on the acceleration sensing data and the atmospheric pressure sensing data, and determine whether a user has fallen, based on the acceleration sensing data, when it is determined that the electronic device has fallen.

Abstract: This application relates to the field of communications technologies, and provides ambient light and optical proximity detection methods, a photographing method, and a terminal, so that an entire display screen of the terminal is used to display a user interface, and this improves user experience. The method specifically includes: controlling, by a terminal, some areas of a display screen to display a black picture for a plurality of times; and when the areas display the black picture, obtaining approaching data of the external object detected by an optical proximity sensor to control turning on or off of the display screen.

Abstract: According to one configuration, a mobile communication device is in communication with a network. During operation, the mobile communication device executes a monitor application associated with embedded SIM (Subscriber Identity Module) information downloaded to programmable hardware of the mobile communication device. The monitor application is received as a portion of the embedded SIM information. Via the executed monitor application: the monitor application monitors a status of the embedded SIM information and then communicates the status over a network to a remote communication management resource.

Abstract: A device, such as Network Microphone Device or a playback device, receives an indication of a track change associated with a playback queue output by a media playback system. In response, an input detection window is opened for a given time period. During the given time period the device is arranged to receive an input sound data stream representing sound detected by a microphone. The input sound data stream is analyzed for a plurality of command keywords and/or a wake-word for a Voice Assistant Service (VAS) and, based on the analysis, it is determined that the input sound data stream includes voice input data comprising a command keyword or a wake-word for a VAS. In response, the device takes appropriate action such as causing the media playback system to perform a command corresponding to the command keyword or sending at least part of the input sound data stream to the VAS.

Abstract: A method including while receiving a live digital audio stream from one or more remote servers and outputting the live digital audio stream via a speaker of a client device, receiving the updated content schedule from the one or more remote servers, generating and displaying a real-time programming guide user-interface including the updated content schedule and least one content segment component corresponding to at least one of the content segment data in the updated content schedule. The method further includes transmitting a content segment digital audio signal request to the one or more remote servers for a prior portion of the live digital audio stream corresponding to the content segment data; and, in response to receiving the prior portion of the live digital audio stream, ceasing outputting the live digital audio stream and outputting the prior portion of the live digital audio stream corresponding to the content segment data.

Abstract: An electronic device and a method for controlling the electronic device are provided. The method for controlling the electronic device includes, based on an occurrence of an event for outputting information being determined, obtaining data for determining a context corresponding to the electronic device, inputting the obtained data to a first model trained by an artificial intelligence algorithm and obtaining information about a person located in a vicinity of the electronic device, inputting the obtained information about the person and information about the event to a second model trained by an artificial intelligence algorithm and obtaining output information corresponding to the event, and providing the obtained output information.

Abstract: In accordance with a first aspect of the present disclosure, a method is conceived for determining the position of at least one node in a communication network, wherein the communication network comprises a localization system that includes a processing unit, a primary anchor and at least one secondary anchor, the method comprising: the primary anchor transmits a poll message to the node and to the secondary anchor; the primary anchor receives a response message from the node; the secondary anchor receives said poll message from the primary anchor and said response message from the node; the processing unit calculates the position of the node using position information and timing information, wherein said position information is position information of the primary anchor and of the secondary anchor, and wherein said timing information is timing information of the poll message transmission by the primary anchor, of the poll message reception by the node and the secondary anchor, of the response message transmi

Abstract: Techniques for providing data security services with respect to cloud-based services are described. Examples include a security service provider (“SSP”) configured to perform or provide one or more security-related services or functions with respect to or on behalf of some other system or service. The other system or service may be, for example, a cloud-based system that provides network-accessible services. The SSP allows a user of the cloud-based service to provide and manage one or more security-related services, such as data storage, encryption, decryption, key management, and the like. By using and controlling the SSP, the user can be confident that his or her data is being securely represented and stored, even though it is being operated upon by a cloud-based service that is not under the user's control.