Abstract: Systems and methods for evaluation hierarchical permissions are described herein. In an embodiment, a system identifies a plurality of permission sets for a document that is digitally stored in a data repository system, the data repository system having a hierarchical organization, the plurality of permission sets comprising a first permission set for a first hierarchical level of the data repository system and a second permission set for a second hierarchical level of the data repository system. Using at least the first permission set and the second permission set, the system identifies a plurality of requirement sets, each of the plurality of requirement sets comprising one or more required identifiers to satisfy the requirement set. When the system receives a request to access the document, the system determines whether identifiers corresponding to the request satisfy at least one requirement set of the plurality of requirement sets and, if so, permits access to the document.

Abstract: This disclosure relates generally to autonomous sensor systems, and more particularly to autonomous sensor system with intrinsic asymmetric encryption. In one embodiment, a device for encrypting sensor data is described. The device may include an asymmetric encryption processor, and a controller configured to encrypt the sensor data via the asymmetric encryption processor, sign the encrypted sensor data, and transmit the encrypted sensor data and the attached asymmetric key to an authenticating device.

Abstract: The present invention relates to a communication system and method, an information processing terminal and method, and an information processing device and method which enable simple and secure restricted access. When a PDA 11 is brought close, a reader 2 of a personal computer 1 reads a device ID form an IC tag 12. The personal computer 1 registers device IDs on a connection permission list, and permits only devices registered on the list to connect. When being instructed to perform accessing, the PDA 11 controls a communication unit to access the personal computer 1 and to transmits its device ID. The personal computer 1 determines whether or not the transmitted ID is registered on the connection permission list, and permits the connection when determining that the ID is registered. The present invention can be applied to various information processing devices such as a personal computer and a PDA.

Abstract: A consent receipt management system may, for example, be configured to track data on behalf of an entity that collects and/or processes persona data related to: (1) who consented to the processing or collection of personal data; (2) when the consent was given (e.g., a date and time); (3) what information was provided to the consenter at the time of consent (e.g., a privacy policy, what personal data would be collected following the provision of the consent, for what purpose that personal data would be collected, etc.); (4) how consent was received (e.g., one or more copies of a data capture form, webform, etc. via which consent was provided by the consenter); (5) when consent was withdrawn (e.g., a date and time of consent withdrawal if the consenter withdraws consent); and/or (6) any other suitable data related to receipt or withdrawal of consent.

Abstract: A login processing unit performs a login process of a user. An assignment processing unit assigns an inputting device connected to an information processing apparatus to a user. An assignment processing unit controls an assignment process of the inputting device in response to the number of users who are in a login state and executes an assignment process which is different between a case in which the number of users in a login state is one and another case in which the number of users in a login state is two or more. The assignment processing unit assigns, when the number of users in a login state is one, the inputting device connected to the information processing apparatus to the one user.

Abstract: An apparatus can include a system processor control and a system controller. The system processor can determine a subscriber content price for multimedia content based on a lead-time of electronic delivery of the multimedia content to a customer premises equipment via at least one transport provider servicing the customer premises equipment. The system controller can transmit the subscriber content price to the customer premises equipment and schedule electronic delivery of the multimedia content within the lead-time and in response to a subscriber request to deliver the multimedia content to the customer premises equipment.

Abstract: Methods, systems, and computer-readable media for the exchange of digital assets are generally described. In some embodiments, a digital asset exchange system (the “exchange system”) may generate a catalog of available digital assets stored on a plurality of client logic devices or storage devices. The exchange system may determine a value for the digital assets. A user may request to exchange a digital asset in the catalog with one of their digital assets. The exchange system may process the exchange of the digital assets have an equivalent or substantially equivalent value. If the value of the digital assets is not equivalent, the exchange system may suggest digital assets for the exchange and/or initiate negotiations between the users.

Abstract: A system includes a first computing device having a first non-transitory machine-readable storage medium, first communication circuitry, and at least one first processor in communication with the first non-transitory machine-readable storage medium and the first communication circuitry. The at least one first processor is configured to execute instructions stored in the first non-transitory machine-readable storage medium to cause the first communication circuitry to receive a first signal from a first transmission medium, calculate a first authentication value for an object based on data included in the first signal, and cause the first communication circuitry to transmit a second signal to the first transmission medium. The second signal identifies whether the object is authentic based, at least in part, on the first authentication value.

Abstract: An object of the present invention is to provide an authentication system and method which can reduce a burden on a user while ensuring security by using a combination of a plurality of authentication methods.

Abstract: A system includes one or more protected nodes within a protected system, where each protected node is configured to be coupled to a storage device. The system also includes a server configured to perform a check-in process so that one or more files on the storage device are (i) accessible by the one or more protected nodes within the protected system and (ii) not accessible by nodes outside of the protected system while the storage device is checked-in. The server is also configured to perform a check-out process so that the one or more files on the storage device are (i) accessible by the nodes outside of the protected system and (ii) not accessible by the one or more protected nodes within the protected system while the storage device is checked-out. The server could be configured to modify a file system of the storage device during the check-in process.

Abstract: Various embodiments provide a customized cosmetics recommendation for a specific user. In one embodiment a method comprises capturing an image that includes the face of the specific user, producing a set of hyperspectral images from the image, analyzing the hyperspectral images to determine a set of spectral components of the face, and providing a recommendation for one or more cosmetics customized for the specific user based on the set of spectral components and cosmetician expert judgement. The image may be captured using a hyperspectral imaging camera. The set of spectral components is compared to a plurality of previous sets of spectral components to find a match and one or more cosmetics mapped to the match are provided as the recommendation. Additionally, a set of conditional options may be received and one or more cosmetics mapped to the set of conditional options and the set of spectral components are provided as the recommendation.

Abstract: An information processing apparatus includes first and second staring units, a receiving unit, and a remove unit, a specifying unit. The first storing unit stores shared data which is to be shared and used by plural persons, and specific information for specifying the shared data. The receiving unit receives a removal instruction to remove the shared data. The remove unit removes from the first storing unit the shared data corresponding to the removal instruction received by the receiving unit. The specifying unit specifies a transmitter of operation history information which is received by the receiving unit, by using the specific information. If after the shared data is removed by the remove unit, the received operation history information for the removed shared data is specified by the specifying unit, the second storing unit stores the operation history information as operation history information for the removed shared data.

Abstract: A machine tool is configured so that a working area in which a workpiece is worked using a tool can be monitored, and includes a cover that is provided to cover the working area, and isolates the inside of the machine tool that includes the working area from the outside, at least one camera that is provided to the inner side of the cover, and captures the inside of the machine tool, and a touch panel that is provided to the cover, wherein the touch panel includes a display panel and an input operation panel, and the display panel displays an image of the inside of the machine tool that has been captured by the at least one camera.

Abstract: Systems and methods are provided in the field of online advertising and malicious software. In some embodiments, a method for determining a degree of deceptiveness for a session is provided, the session having one or more relationships between one or more properties of interactions with an online advertisement, the method comprising: extracting one or more characteristics associated with each of the one or more relationships; applying one or more models to each of the one or more relationships to determine a degree of deceptiveness for each of the one or more relationships; aggregating the degree of deceptiveness for each of the one or more relationships to generate the degree of deceptiveness for the session.

Abstract: A system and method for managing action items over a network comprises a wearable computing device, a first communication device and a second communication device. The wearable computing device displays a plurality of action groups wherein each action group comprises a plurality of action items. The second communication device is configured to allow a user to send an action item associated to an action group to the first communication device. A processor installed with an action management application enables the user to access, manage and update the action item associated to the action group. A user interface controller in communication with the display unit and the processor is configured to allow the user to approve and reject the action item associated to the action group and press the screen with a small amount of force to activate a context menu to approve and reject all action items simultaneously.

Abstract: An online system and software application and method for transmitting and transporting patient medical records at the discretion of the user between the user's personal health records cloud-based system and point of care physician for the express purpose of receiving medical consultation. Additionally, the system provides the ability to capture, retrieve, transport medical records from point of care physician for return to the cloud based personal records based system with automatic self-parsing and population into the user medical records system. The present invention provides total interoperability of patient medical records information between all present EHR/EMH electronic medical records based systems.

Abstract: A portable electronic device for automatically rating a music track comprised in a set of music tracks and a method therein are provided. The portable electronic device detects at least one user interaction during performance of the music track. Next, the portable electronic device adjusts a rating of the music track based on the detected at least one user interaction, thereby automatically rating the music track.

Abstract: Various embodiments concern obtaining mobile device data and generating activity logs. More specifically, mobile device data such as data indicating the location and time of a mobile device is obtained. The time and location may be automatically obtained and recorded using location service APIs on the mobile device. The obtained data is then used to generate a report including the time, duration, and location of activities associated with the user of the mobile device. Thus, an activity log is automatically generated using the time and location data.

Abstract: Techniques for making personalized provider recommendations in related categories include identifying a first entity category from a plurality of entity categories based on context information. A first category relationship is identified from a plurality of category relationships based on the first entity category. The first category relationship indicates that the first entity category and a second entity category are related. A first provider specific profile is identified from a plurality of provider specific profiles based on user profile data associated with a user account. The first provider specific profile is associated with the first entity category. A second provider specific profile associated with the second entity category is identified from the plurality of provider specific profiles based on the user profile data.

Abstract: A content delivery network includes an overlay network having a plurality of cache servers. Each cache server configured to receive a request from a personal content server to register with the content delivery network, receive a request from a mobile capture device to establish communication with the personal content server, and establish a communication path through the overlay network between the mobile capture device and the personal content server. Each cache server is further configured to transfer content from the mobile capture device along the communication path to the personal content server.

Abstract: A method includes receiving an identification of a first item to be purchased, entering the first item into an electronic shopping cart facilitating an on-line transaction, providing a method of payment for a value of the first item to the shopping cart, and sending the value of the first item and a description of the item to a recipient with at least the following electronic options from which the recipient may choose: accepting the first item with payment made and modifying the transaction in accordance with the value of the first item.

Abstract: A system and method for enabling global and remote flash sale or daily deal commerce through unsecured electronic channels are provided. The system provides an innovative and new standard that not only enhances consumer convenience but also solves a large shortcoming by providing customers an alternative to online electronic purchasing for these types of offers. The system and method allows customers to receive and instantly purchase special offers in an entirely off-line fashion.

Abstract: The resolution of the problem is achieved by performing a first determination process in which when request information is received, validity of the request information is determined on the basis of identification information of the interface included in the request information and a second determination process in which validity of the request information is determined on the basis of key information or authentication token information for an interface included in the request information and that permits a user who made the application to utilize the interface or the authentication token information that determines the validity of the user; and transmitting to a transmission source of the request information and regardless of a result of the first determination process, error information indicating that an access is not allowed when the request information is determined to be not valid as a result of the second determination process.

Abstract: An example method can include monitoring a network to identify flows between nodes in the network. Once flows have been identified, the flows can be tagged and labelled according to the type of traffic they represent. If a flow represents malicious or otherwise undesirable traffic, it can be tagged accordingly. A request can then be made for a reputation score of an entity which can identify one or more nodes of the network.

Abstract: A system may provide hardware acceleration for corrective blockchain-based record entry. Blockchain management circuitry (BMC) may receive a correction to a record entry. The BMC may access a consensus operating procedure. The BMC may apply the consensus operating procedure to the record entry to determine a corrective indicator. After completing the consensus operating procedure, the BMC may append a corrective block generated based on the record entry and corrective indicator to the blockchain. Accordingly, the system may ensure that corrective blocks added to the blockchain were generated in compliance with the consensus operating procedure.

Abstract: Examination stations may be dynamically reconfigured in response to detecting a fault condition. Specifically, a state of the workflow for the document issuing authority may be determined and a fault condition within the workflow for the document issuing authority may be identified. A processor identifies a dynamically reconfigurable workstation within the document issuing authority in the able to respond to the fault condition; and generates a reconfiguration instruction for the dynamically reconfigurable workstation, the reconfiguration instructions associated with a condition that was specified based upon identifying the fault condition.

Abstract: Systems and methods comprise a platform including a processor coupled to a database. Risk engines are coupled to the platform and receive event data and risk data from data sources. The event data comprises data of actions taken in a target account during electronic access of the account, and the risk data comprises data of actions taken in a accounts different from the target account. The risk engines, using the event data and the risk data, dynamically generate an account model that corresponds to the target account, and use the account model to generate a risk score. The risk score represents a relative likelihood an action taken in the target account is fraud. A risk application coupled to the platform includes an analytical user interface that displays for the actions in the target account at least one of the risk score and event data of any event in the account.

Abstract: Multi-blend fingerprinting may be detected. First, a video sample may be received. Next, frames of the received video sample may be step iteratively through until a probability value corresponding to a current frame indicates a match. Deciding that the probability value indicates the match may comprise creating an augmented frame, determining the probability value corresponding to the created augmented frame, and determining that the probability value indicates the match. Then a fingerprint from the created augmented frame may be extracted.

Abstract: Systems and methods for managing public key certificates and supporting the users thereof. The certificates are cryptographically encapsulated objects that bind the identities of their owners to public keys and provide digital signature mechanisms for other users to verify the binding and correctness of other attributes of the certificate. Certificates include double links that reflect their validation and position in a public certificates ledger, thereby preventing insertion or removal of certificates in the ledger. Certificate protocols of the system include requesting issuance of certificates, issuing and returning certificates to their requesting users, storing certificates in the certificates ledger, requesting and distributing certificates to transaction partners, verification of certificates by transaction partners, and revoking certificates by their owners. These protocols are performed as direct peer-to-peer transactions between the members of the system.

Abstract: In accordance with some embodiments, a system facilitates the generation of a customized fundraising campaign on behalf of a third party organization by providing mechanisms via which an organizer of the third party organization can set terms of the fundraising campaign and allow participants of the campaign to create customized avatars for use in promoting the campaign.

Abstract: In some embodiments, a compromised data exchange system may include an interface configured to couple to a network, a processor, and a memory accessible to the processor. The memory may be configured to store instructions that, when executed, cause the processor to extract data from one or more websites using a crawler, detect portions within the data that resemble personally identifying information (PII) data based on PII data patterns using a risk assessment module, and to compare a detected portion to data within a database of disassociated compromised PII data to determine a match using the risk assessment module. The instructions may further cause the processor to selectively assign a risk score to a data item within the database in response to determining the match using a risk scoring module.

Abstract: An answerer extraction system includes a receiving unit that receives a question from an asker, a recording unit that records a reference history of the asker's referencing past questions or answers, and an extraction unit that extracts an answerer who is to answer the question on the basis of the reference history of the asker.

Abstract: This disclosure relates to enabling a user to access a game hosted on a game platform without registering a platform account. In implementations, a game provider may set a game trigger based on an instance of a game. In response to a determination that the game trigger is met, instructions effectuating presentation of a platform registration request to a user may be transmitted to a platform provider.

Abstract: A reception apparatus includes receiver and processing circuitry. The receiving circuitry is configured to receive a broadcast stream. The processing circuitry is configured to extract a service list table (SLT) from the broadcast stream. The SLT includes service information for each of a plurality of services in the broadcast stream. The processing circuitry is configured to determine whether the broadcast stream includes a digital rights management (DRM) service that is supported by the reception apparatus based on service category information in the service information for the plurality of services in the broadcast stream. The processing circuitry is configured to acquire DRM-related information, which is associated with the reception apparatus and delivered in the DRM service, based on a determination that the broadcast stream includes the DRM service that is supported by the reception apparatus.

Abstract: A content source comprising a processor configured to generate a media presentation description (MPD) file, wherein the MPD file designates a dependent media content part to be assigned to at least one depended media content part, and wherein the MPD file indicates the dependent media content part is to be accessed by a client device when an access condition for the dependent media content part is satisfied, and a transmitter operably coupled to the processor and configured to transmit the MPD file to at least one of a content server, a control server, and the client device.

Abstract: A method of network configuration of personal identification number (PIN) pads includes obtaining a PIN pad configuration hash value for a current configuration of the PIN pad, comparing the obtained PIN pad configuration hash to a locally stored PIN pad configuration hash, upon determining that the obtained PIN pad configuration hash and the locally stored PIN pad configuration hash do not match, performing additional operations, which include requesting a new PIN pad configuration, receiving the new PIN pad configuration, receiving a new PIN pad configuration hash, and storing the PIN pad configuration hash.

Abstract: Certain embodiments of the disclosed technology include systems and methods for increasing efficiency in the detection of identity-based fraud indicators. A method is provided that includes: receiving entity-supplied information comprising at least a name, a social security number (SSN), and a street address associated with a request for a payment or a benefit; querying one or more databases with the entity-supplied information; receiving a plurality of information in response to the querying; determining a validity indication of the entity supplied information; creating disambiguated entity records; determining relationships among the disambiguated records; scoring, based at least in part on determining the relationships among the disambiguated entity records, at least one parameter of the entity-supplied information; determining one or more indicators of fraud based on the scoring; and outputting, for display, one or more indicators of fraud.

Abstract: A system and method for analyzing media requests and evaluating the authenticity of geographic data associated with the media requests. A mobile device may use media requests to retrieve media items that are displayed to a user. A media request may include geographic data with latitude and longitude information and entity data identifying a user, application, mobile device, or combination thereof. The system may analyze the geographic data to identify locations and may analyze the entity information to identify user activity. The user activity may be internet activity of an application running on another device (e.g., user's desktop). The system may then correlate the user activity (e.g., accessing a venue web site) with the geographic locations (e.g., venue locations) to evaluate the authenticity of the geographic data associated with the mobile requests.

Abstract: A system verifies the location of a first person during a specified period by sending random alerts to the smart phone of the first person. A user must respond to the alerts. A second person defines acceptable locations. The smart phone has location measuring capability, such as a GPS or connection to a WAN. The identity of the user can be verified by requiring the input of a security code that also gives the user access to confidential information of the first person.

Abstract: A secure 5-D user identification system using 3-D facial recognition plus micro-expression recognition and head gait analysis, and method for a body-worn sensor to increase security for users and thereby decrease security circumvention for illegitimate reproduction purposes.

Abstract: A method for a server performing a wireless payment transaction is disclosed. The method comprises providing a server web page or native application including options for a user selecting a role as payer or payee; requesting information from the payee including a transaction ID provided by the server; requesting information from the payer including the transaction ID; initiating an authorization of the transaction on a credit or debit account of the payer; initiating a transaction to credit the payee's account; and completing the transaction with the payer by initiating the offline clearing of the transaction.

Abstract: This disclosure describes systems, methods, and computer-readable media related to phishing and brand protection via copycat detection. In some embodiments, a temporary page profile associated with a webpage may be generated. The temporary page profile may include an image component, a geometry component, a style component, and a link component. One or more baseline page profiles may be retrieved. The temporary page profile and the one or more baseline page profiles may be compared. It may be determined that the temporary page profile does not match the one or more baseline page profiles. An alert may be generated to display to a user indicating that fraud has been detected for the webpage.

Abstract: The present invention provides a data processing method, including: acquiring historical data, where the historical data belongs to a first level and a second level, and data corresponding to the first level comprises data corresponding to the second level; generating, from the historical data, a first-granularity data set according to a first granularity, and generating, from the historical data, a second-granularity data set according to a second granularity, where the first granularity and the second granularity respectively correspond to the first level and the second level; performing modeling for a second-granularity forecasting model according to the first-granularity data set and the second-granularity data set; and performing forecasting by using the second-granularity forecasting model to obtain second-granularity forecast data. The present invention enables obtained forecast data of different granularities to be consistent.

Abstract: Detecting malicious PDF documents is disclosed. A PDF document is received. The PDF is classified using a classifier. The classifier is trained at least in part by using one of the following: (1) a feature associated with embedded script code; (2) a feature associated with a PDF action; and (3) a feature associated with a PDF structure.

Abstract: When a communication unit receives a connection request from a device, a selection screen generating unit provides a selection screen for selecting a registered user. A login user storage unit separately stores information identifying a primary user who logged in first and information identifying one or more secondary users who logged in second or thereafter. Specifically, the login user storage unit stores the information identifying the primary user in association with information indicating initial login. An application startup unit starts an application upon receipt of a start instruction from the device used by the primary user but does not start the application when given the start instruction from the device used by the secondary user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for identifying documents related to a person, deriving behavior and personality trait metrics from analyzing the documents for information relevant to assessing behavior and personality of the person, and determine a trustworthiness score or compatibility score of the person based on the behavior and personality trait metrics using a scoring system.

Abstract: An example of information processing system includes a storage device; and an information processing device for performing near field communication with the storage device. The storage device includes a storage unit storing application data usable in a predetermined application program and shared data usable in an application program regardless of whether the application program is the predetermined application program. The information processing system receives an instruction regarding data read and/or data write from/to the storage device from an application program to be executed by the information processing device. Under the condition that the instruction is from the predetermined application program, the application data is passed to the predetermined application program. Regardless of whether the instruction is from the predetermined application program, the shared data is passed to the application program that issued the instruction.

Abstract: An apparatus, method, system, and program product are disclosed for customizing input device operation. In one example, an apparatus includes an interface module that receives an input click pattern from an input device. The apparatus also includes a comparison module that compares the input click pattern to a user defined click pattern. The apparatus includes an execution module that performs a user defined action corresponding to the user defined click pattern in response to the input click pattern matching the user defined click pattern.

Abstract: A terminal device includes a first communication unit that performs communication via a first short-range wireless communication method, and a second communication unit that performs communication via a second short-range wireless communication method different from the first short-range wireless communication method. The terminal device further includes an obtaining unit that obtains payment information including information on a monetary amount for goods or a service by using the first communication unit, a confirmation unit that accepts input of information indicating payment approval for the obtained payment information, and a transmission unit that, in response to acceptance of input of the information indicating the payment approval, transmits the obtained payment information to an information terminal by using the second communication unit. The information terminal communicates with a payment server via a network.

Abstract: The present disclosure is applicable to the technical field of fingerprint identification, and provides a fingerprint decryption method and device. The method includes the following steps: receiving N input fingerprints, N being an integer greater than or equal to 2; and decrypting a to-be-decrypted object according to the N input fingerprints, the to-be-decrypted object being encrypted by using N preset fingerprints. According to the present disclosure, the to-be-decrypted object is decrypted by using an input fingerprint combination of two or more fingerprints, which improves data security of the mobile terminal.