Abstract: Methods and systems are provided in this disclosure for operating an electronic device that includes a user interface, a microphone, and an electronic processor. The microphone captures an audio stream and the electronic processor analyzes the audio stream to identify spoken words captured by the microphone. The electronic processor detects a violation of a user assistance restriction for the current functional operation of the electronic device based at least in part on a correlation between one or more of the identified spoken words captured by the microphone and a current functional operation of the electronic device involving a manual text entry through the user interface of the electronic device. The electronic processor adjusts one or more operations of the electronic device in response to detecting the violation of the user assistance restriction.

Abstract: Methods, systems, and computer storage media for a wearable device are presented. The wearable device includes a wearable housing and a transceiver attached to the wearable housing and configured to receive a first data item. The first data item is contact information or an event identifier. The transceiver is further configured to transmit a second data item. The second data item is contact information. The transceiver has an effective range of less than one meter. The transceiver is able to receive the first data item and transmit the second data item in less than three seconds. The wearable device also includes a memory configured to store the first data item and the second data item.

Abstract: The present image processing apparatus stores setting information for whether to force setting of authentication information for each user. Furthermore, upon accepting a login request from a user, in a case where the stored setting information indicates forcing setting of authentication information, the image processing apparatus displays on a display unit a setting screen for setting authentication information to allow the user to set authentication information. In addition, the image processing apparatus executes login processing in accordance with a setting status of authentication information for the user.

Abstract: Technology described herein includes a method that includes obtaining a set of color-coded sequences, each of which includes a sequence of colors. Each color-coded sequence has auto-correlation properties characterized by a merit factor larger than a first predetermined threshold, and cross-correlation properties among the color-coded sequences characterized by a demerit factor lower than a second predetermined threshold. A color-coded sequence is randomly selected from the set of color-coded sequences. A subject is illuminated in accordance with the sequence of colors in the selected color-coded sequence. A sequence of images of the subject are captured, and are temporally synchronized with illumination by the color-coded sequence. A filtered response image is generated from the sequence of images by a matched filtering process. Based on the filtered response image, it is determined that the subject is an alternative representation of a live person. In response, access to a secure system is prevented.

Abstract: A display device includes a display panel that includes an upper surface, a first side surface portion that extends from a first side of the upper surface, and a second side surface portion that extends from a second side connected to the first side, a first force sensor disposed in the first side surface portion and a second force sensor disposed in the second side surface portion, and a controller that determines a type and a state of an application being executed when a first input signal is sensed through the first force sensor and execute an operation corresponding to the type of the application and the state of the application being executed when a second input signal is sensed through the second force sensor within a preset time from an interruption of the first input signal.

Abstract: The present disclosure is generally directed a system to detect activation phrases within input audio signals transmitted over a low-bandwidth network. The system can use a two-stage activation phrase detection process. First a sensing device, which can include a plurality of microphones for detecting an input audio signal, can detect an input audio signal that includes a candidate activation phrase. Second, the sensing device can transmit the recordings of the input audio signal to a client device for confirmation that the input audio signal includes the activation phrase.

Abstract: When a device is successfully unlock using a facial recognition authentication process, feature vectors generated from images obtained during the facial recognition authentication process may be stored as temporary templates on the device. After a period of time, one of the temporary templates may be selected to be used as a “virtual” template for the device. For example, a median temporary template in the temporary templates may be selected as the virtual template. The performance of the virtual template may then be assessed over time and compared to the performance of templates generated from an enrollment process to determine if and how the virtual template is implemented on the device.

Abstract: An embodiment system includes: a first motion sensor configured to generate first sensor data indicative of a first type of movement of an electronic device; a first feature detection circuit configured to determine at least one orientation-independent feature based on the first sensor data; and a classifying circuit configured to determine whether or not the electronic device is located on a stationary surface based on the at least one orientation-independent feature.

Abstract: A function resource configuration method and device relate to the field of communications technologies, where the configuration method includes receiving, by a wearable device, a distribution request from a first terminal, where the distribution request requests the wearable device to distribute a first function resource of the wearable device to the first terminal, and the first function resource is already occupied by a second terminal, determining, by the wearable device based on the distribution request, whether to allow the first terminal to use the first function resource, and sending, by the wearable device, a notification message to the first terminal instructing the first terminal to use the first function resource when the wearable device allows the first terminal to use the first function resource.

Abstract: Methods and systems for secure device action initiation using a remote device are described herein. The techniques described herein enable, among other actions, users to send a play chirp request to a lost or misplaced device, such as to one or both buds of a truly wireless earbud set. In the case of truly wireless earbuds, a shared secret known by both of the buds can be used to securely initiate the action over an unencrypted link (e.g., an unencrypted BLE link). This can be achieved by using the shared secret to sign an authentication challenge to prove that a remote device that also has access to the shared secret is authorized to initiate the action, thereby providing a secure process. In some implementations, the shared secret is an Identity Resolving Key (IRK), which may be randomly generated by the buds.

Abstract: The disclosure details the implementation of an apparatus, method, and system comprising a portable device configured to communicate with a terminal and a network server, and execute stored program code in response to user interaction with an interactive user interface. The portable device contains stored program code configured to render an interactive user interface on a terminal output component to enable the user the control processing activity on the portable device and access data and programs from the portable device and a network server.

Abstract: A message-processing resource receives location information indicating a current location of a mobile device in a network. A user of the mobile device subscribes to use of the network. The message-processing resource maps an identity of the user to a subscriber account and candidate messages associated with the user. The message-processing resource utilizes the location information to identify a message pertinent to the user and the current location of the mobile device. The message-processing resource selects the message from the candidate messages and provides notification of the selected message to the user of the mobile device.

Abstract: An electronic apparatus and a control method of the electronic apparatus are provided. The electronic apparatus includes: a receiver configured to receive a voice command of a user; and a processor configured to determine a switching probability from a first state corresponding to a current point of time over to a second state corresponding to the voice command, based on the switching probability previously set between a plurality of states related to the electronic apparatus, and selectively perform an operation corresponding to the voice command in accordance with the determined switching probability.

Abstract: The disclosure details the implementation of an apparatus, method, and system comprising a portable device configured to communicate with a terminal and a network server, and execute stored program code in response to user interaction with an interactive user interface. The portable device contains stored program code configured to render an interactive user interface on a terminal output component to enable the user the control processing activity on the portable device and access data and programs from the portable device and a network server.

Abstract: Features are disclosed for controlling monitoring devices during unattended delivery of an item. The systems and methods described ensure the monitoring devices are monitoring a delivery location at a specified level before granting unattended access to the delivery location. Access may also be conditioned on user specified “do not disturb” rules indicating when remote access is authorized.

Abstract: An approach is provided that receives, at a smartglasses device, a set of image data from a digital camera that is external to the smartglasses device. The approach further displays an image at the smartglasses based on the set of image data.

Abstract: A system and method for monitoring and protecting sensitive data that includes identifying sensitive data and statically tracking sensitive data using data flow analysis across a code base, monitoring flow of the data during application runtime, and responding to vulnerabilities according to a sensitive data characterization of the data. Identifying sensitive data includes processing a semantic description of the data in the application code and characterizing the sensitive data. Monitoring flow of the data includes: identifying and characterizing sensitive data through data usage, updating the characterization for the sensitive data through data usage, and enforcing security measures on the data according to the sensitive data characterization of the data.

Abstract: The traditional authentication mechanism of using a public username and a constant secret password needs to be improved upon. A framework and a method is described which allows for much more secure authentication compared to the traditional username/password method. The method is useful for first party authentication as well as non-repudiation of digital information. The non-repudiation is achieved as a by-product of high entropy of the authentication method. The method relies on generation of high entropy tokens (called flakes) as a by-product of authentication. Since these tokens do not exist before being created, and their creation relies on user input, they are non-persisted proofs of user presence.

Abstract: Methods and systems for validating intent to actuate an electronic lock are provided, using comparative gesture processing. One method includes obtaining motion signals representative of physical motion of the mobile device detected by a motion sensor of the mobile device and at an electronic lock. The method includes performing a similarity correlation between the first motion signals and the second motion signals, and, based on the similarity correlation determining that the first motion signals and second motion signals are correlated. Based on the correlation and authentication, the wireless electronic lockset is actuated.

Abstract: A surveillance monitoring system may use a camera to detect any viewing faces visible within viewing sight of a monitor and determine whether the detected viewing faces belong to authorized individuals who are authorized to view video surveillance footage on the monitor or if any of the detected viewing faces belong to individuals who are not authorized to view video surveillance footage on the monitor. When the detected viewing faces belong only to authorized individuals, the surveillance monitoring system continues to display the video surveillance footage that includes identifiable faces without anonymizing the identifiable faces. When the detected viewing faces also include unauthorized individuals, the surveillance monitoring system may continue to display the video surveillance footage, but the surveillance monitoring system may automatically anonymize one or more of the identifiable faces seen in the video surveillance footage.

Abstract: A method is used in monitoring strength of passwords. A a request is received from a user to use a user password. A password score is determined for the user password. The password score indicates quality of the user password. Based on the password score, the strength of the user password is evaluated in a privacy preserving manner. The privacy preserving manner indicates avoiding storing information regarding the user password after strength of the user password has been evaluated.

Abstract: The present application discloses a switching method, a terminal device and a network device. The method includes: a first terminal device acquires measurement results of links, where the links include a link between the first terminal device and a first network device and a link between the first network device and a second terminal device; and the first terminal device determines a first switching scheme for the first terminal device and/or a second switching scheme for the second terminal device according to the measurement results. Therefore, after cell switching is performed between a relay terminal and a remote terminal, an effective relay transmission continues between a relay terminal device and a remote terminal device.

Abstract: A full-screen electronic device with a fingerprint sensing function and a fingerprint sensing method are provided. The full-screen electronic device includes a panel module, a plurality of fingerprint sensors and a control unit. The plurality of fingerprint sensors are aligned with the panel module and distributed into a plurality of scan regions in an array. The fingerprint sensing method includes the following steps. Firstly, a concerned information about a concerned position of the display panel is generated. After the control unit receives the concerned information, the control unit defines the scan regions of the concerned position as a first scan set according to the concerned information. Then, the control unit controls the fingerprint sensors corresponding to the first scan set according to a first scan strategy.

Abstract: A system provides intelligent gallery management for biometrics. A first gallery is obtained that includes biometric and/or other information on a population of people. An application is identified. A subset of the population of people is identified based on the application. A second gallery is derived from the first gallery by pulling the information for the subset of the population of people without pulling the information for the population of people not in the subset. Biometric identification (such as facial recognition) for the application may then be performed using the second gallery rather than the first gallery. In this way, the system is improved as less time is required for biometric identification, fewer device resources are used, and so on.

Abstract: Password information and password input pattern information for a user may be obtained. The password information may define a password submitted by the user. The password input pattern information may define an input pattern with which the password was inputted by the user. The password may be compared with a predefined password for the user. The input pattern may be compared with a predefined input pattern for the user. The password may be authenticated based on a first match between the password and the predefined password and a second match between the input pattern and the predefined input pattern.

Abstract: A decision tree based processing system implements a decision tree data structure to process publicly available files, such as websites suspected to contain data generated by a data transaction processing system which may be constantly fluctuating and varying. The data transaction processing system generates the data based on processing electronic data transaction request messages received over a network.

Abstract: Systems and methods are disclosed for implementing an educational mode on a portable computing device, such as a tablet computer, that is a single-user system, used serially by multiple users. Each user can have a separate user storage that may be encrypted. The computing device boots as a system user to a login screen. A first student user enters user credentials into the login screen. The computing device can reboot the user-space processes, while leaving the kernel running, rebooting the computing device as the first student user. When the first student user logs out, data to be synchronized to, e.g., the cloud, can be synchronized for the first student user while a second student user is logged into the device.

Abstract: An image processing apparatus includes a camera, an image reading unit, and a controller. The camera is configured to capture an image of a face of a person. The image reading unit is configured to read a document and to output a document image. The controller is configured to perform control to permit certain processing on the document image if the image of the face captured by the camera matches a face image extracted from the document image.

Abstract: A network monitoring apparatus, and a remote encryption and remote activation method, device and system thereof are provided. The method includes the following steps: receiving an encrypted activation password sent by a client terminal; decrypting the encrypted activation password to obtain an original activation password; determining whether the original activation password meets a predetermined password strength requirement; when the original activation password meets the predetermined password strength requirement, activating the network monitoring apparatus and setting the original activation password as an administrator password; and returning information indicating that the network monitoring apparatus is successfully activated to the client terminal. A network monitoring apparatus, an encryption method of a network monitoring apparatus based on a client terminal, a client terminal, and a remote activation system based on a network monitoring apparatus are also provided.

Abstract: System for authenticating a user's identity and facilitating execution of embedded software and access to specific hardware modules according to an authorization level, comprising: •a communication interface, enabling a user to interface the system; •an authentication module, configured to authenticate user's identity; •an authorization module, configured to determine authorization level and access privileges associated with user; •at least one Software Execution Environment (SEE); and •at least one hardware switch, controllable by said authorization module and configured to physically enable or disable data transfer over a data path between the user and SEE, whereupon successful authentication of the user will cause the authorization module to allocate hardware resources at the SEE for the user, and configure the hardware switch to enable data transfer between the user and the SEE, and enable the user to execute embedded code on the SEE according to the authorization level.

Abstract: A determination apparatus and method for gaze angle are provided. The apparatus analyzes an image to generate a plurality of facial triaxial positioning values and a plurality of facial landmark points. The apparatus obtains a plurality of specific facial landmark points from the facial landmark points to generate a heatmap, and compares the heatmap with a standard heatmap to generate an image compensation value. The apparatus performs a facial correcting process based on the image and the image compensation value to generate a virtual corrected image. The apparatus analyzes the virtual corrected image to obtain a displacement of pupil. The apparatus determines a gaze angle of a user according to a determination model for gaze angle, the facial triaxial positioning values and the displacement of pupil.

Abstract: An authentication process is activated by a processor receiving an access request for user access to a user device. One or more biometric sensor module captures imaging data or other sensor data within a field of view encompassing the head of the user, or encompassing a head region including the head of the user. The processor carries out biometric recognition methods on the captured imaging data. Biometric recognition methods may include head-limb gesture recognition (including hand-to-face, and limb-near-head, gestures); head recognition; ocular recognition; facial recognition; and combinations of these methods. Upon successful match of captured sensor data with one or more user credential records stored for an authorized user of the user device, the processor authorizes the access request, providing access to the operating environment of the user device on start-up, or to one or more of a system setting, an application program, a data, and a hardware resource.

Abstract: A secure medical device includes: a hardware storage; a lock coupled to the hardware storage; a data storage and a medical record residing within the hardware storage, the data storage storing a destination location including a first geophysical location; one or more processors; and a non-transitory computer readable medium comprising programming instructions. When the programming instructions are executed by the one or more processors, the one or more processors: (a) receive an access request from a requester to access the medical record; (b) obtain a current location of the secure medical device, the current location comprising a second geophysical location; (c) compare the first geophysical location to the second geophysical location; and (d) upon determining that the second geophysical location matches the first geophysical location, send a command to unlock the lock to allow access to the medical record residing within the hardware storage.

Abstract: A storage device includes: a controller; a storage medium coupled to the controller; and a data security bridge comprising a security module and a key management module; wherein the security module is configured to perform data encryption and/or data decryption; and wherein the key management module is configured to obtain a first security key stored in the storage device, obtain a second security key received by the storage device, and perform a user authentication based on the first security key and the second security key.

Abstract: There is disclosed in one example a computing apparatus, including: a hardware platform including a processor and a memory; a whitelist; an updater, the updater being an executable object authorized to modify files within the whitelist and to launch one or more child processes; and instructions encoded within the memory to provide a system management agent to: maintain a chain of trust between the one or more child processes and the updater, wherein the one or more child processes inherit whitelist permissions associated with the updater; and track the chain of trust across a system reboot, including granting a child process the chain of trust after a reboot only if the child process has associated with it a valid certificate.

Abstract: Systems, methods, and devices for managing predetermined functions on a mobile device within a moving vehicle, the mobile device having an operating system (OS) that includes an event API installed therein that is configured for two-way communication with an external control device, the control device being installed within the vehicle and further configured to communicate with a software application installed and running in memory resident on the mobile device. In response to initiation of a predetermined function on the mobile device, a notification message is transmitted by the event API to the control device. The control device then communicates with the software application to determine a desired action for the mobile device to take with respect to the predetermined function. The control device then instructs the mobile device on the action to take on the predetermined function by transmitting an action message to the event API.

Abstract: Systems and methods for enhancing the security of an account by reducing the ability of an attacker to determine that an account includes multiple passcodes for accessing the account. An example method may comprise: accessing an account that comprises a first passcode providing constrained access to a set of computing resources and a second passcode providing unconstrained access to the set of computing resources; associating the account with a randomized resource limit that restricts a quantity of passcodes associated with the account; receiving a request to create a third passcode for the account; and denying the creation of the third passcode for the account in view of the randomized resource limit.

Abstract: Embodiments of the invention are directed to a system, method, or computer program product for resource optimization allocation via an interactive resource interface. In this way, the invention provides a comprehensive integrated platform for identification, continual monitoring and optimal allocation of resources on a mobile device. The invention enables identification of existing resources. In one aspect, the system identifies inflow resource transfers associated with a first resource. The system then determines if the inflow resource transfers are required for processing of critical tasks. Consequently, the system initiates a resource transfer, comprising at least a portion of the inflow resource transfer, from the first resource to a second user resource. Typically, the second resource is configured to promote resource accumulation. In another aspect of the invention, the system identifies a third user resource that is configured to foster resource growth, that is then linked with the second resource.

Abstract: A key generating method includes obtaining a first error correcting code (ECC) for original data, obtaining read data from a cell array of a memory comprising the original data, generating a second ECC for the read data, obtaining a location of a cell in which an error occurs from the cell array of the memory in response to the second ECC being different from the first ECC, and generating a key for the memory based on the location of the cell in which the error occurs.

Abstract: A multi-dimensional approach can be used to verify a password. In addition to requiring the input of the correct password, the timing at which the characters of the password are input can be determined and compared to stored timing values. Even if the correct password is input, authentication can still fail if the characters of the password are not input in accordance with a required timing.

Abstract: An electronic device is provided. The electronic device includes a display device to output a user interface, a memory, a communication interface to support a first wireless communication scheme and a second wireless communication scheme, and a processor electrically connected with the display device, the memory, and the communication interface. The processor outputs a user interface for performing a pairing with the external device, by using at least one of a history of a pairing with the external device, whether the second wireless communication scheme is activated, or user account information.

Abstract: A biometric information measurement device intermittently measures biometric information from a living body. The device includes an attachment and detachment determining section which determines whether the device is in an attached state where the device is attached to the living body or an unattached state where the device is detached from the living body, a personal identifying section which, in the attached state, determines whether a user attached with the device is a registered user who is registered in advance and stores a result of the determination, and a storage controller which, when a determination result indicating that the user is the registered user is stored, stores information indicating the registered user while being associated with the measured biometric information. The personal identifying section deletes the determination result when a time period in which the device is determined to be in the unattached state exceeds a predetermined time period.

Abstract: A system includes an intellectual property circuit; a general purpose input/output circuit coupled to the intellectual property circuit via a data path; and a switch coupled to the data path. The switch is activatable via a switch enable signal propagated on a switch enable path having a first end coupled to the intellectual property circuit and a second end coupled to the general purpose input/output circuit. The system further includes a secure link circuit coupled between the intellectual property circuit and the general purpose input/output circuit along the switch enable path. The secure link circuit is sensitive to security statuses of the intellectual property circuit and the general purpose input/output circuit, the secure link circuit being configured to admit propagation of the switch enable signal on the switch enable path in response to the intellectual property circuit and the general purpose input/output circuit having identical security statuses.

Abstract: The present disclosure discloses a virtual reality (VR) scene-based authentication method, a VR device, and a storage medium. The method includes: receiving an authentication request in a VR scene; collecting to-be-authenticated fingerprint information by using a fingerprint collection device in a physical scene; sending the to-be-authenticated fingerprint information to an authenticator in the physical scene; and receiving, in the VR scene, authentication result information sent by the authenticator, where the authentication result information is used to indicate whether the to-be-authenticated fingerprint information has passed the authentication.

Abstract: Techniques for communicating particular information from a user, using a sensing device, to a touch device by way of a touch event is provided. Sensors that are operatively coupled to a sensing device sense an input from the user which conveys particular information. This input is then converted by the sensing device into another signal that is then transmitted from the sensing device to the touch device. When the user uses the sensing device to interact with the touch device, the interaction causes a touch event on the touch device. A touch event occurs when the sensors within the touch device receive a touch-signal from the sensing device. The touch-signal is based, at least in part, on detected biometric information of the user. The touch device then decodes the touch-signal to both (a) determine the location of the touch event on the touch device and (b) obtain the sensing device signal embedded in the touch signal to extract the particular information related to the user.

Abstract: Computer-implemented methods, computer-readable media and apparatuses for testing executable code in sensitive-information domains are provided. A synthetic data set is received, where the synthetic data set includes generated subjects and corresponding information associated with the generated subjects. An active data set is received, where the active data set includes active subjects and corresponding information associated with the active subjects. The corresponding information associated with the active subjects includes sensitive information requiring privacy protection. The synthetic data set and the active data set are compared using an algorithm to identify the generated subjects that produce decisioning outcomes similar to decisioning outcomes of the active data set. A testing data set is generated by selecting the generated subjects identified using the algorithm and corresponding information associated with the identified generated subjects.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a processor and a non-transitory computer-readable medium having stored thereon a program of instructions executable by the processor. The program of instructions may be configured to, when read and executed by the processor, receive an initial password, the initial password comprising a string of characters to be entered by a user of the information handling system for accessing the information handling system, separate the initial password into a plurality of compartments, select a random order of the plurality of compartments, generate a key based on the initial password as rearranged in accordance with the random order of the plurality of compartments, and store a key sequence representative of the random order of the plurality of compartments.

Abstract: Systems and methods are provided which allow for motion-based authentication of a user using magnified motion. Very small or imperceptible motions of a user may be captured and magnified to determine characteristics of the motions that may be used as a motion-based credential for user authentication. The motions, which may be very small and imperceptible to an observer, may be difficult for potential attackers to observe and copy, but may be useful when magnified.

Abstract: A device includes a processing component, a user interface component, a locking component, a biometric parameter unlock component, a detecting component and a sleep bypass component. The processing component performs a processing function. The user interface component instructs the processing component to perform the processing function. The locking component prevents the user interface component from instructing the processing component to perform the processing function. The biometric parameter unlock component detects a biometric parameter of the user and disables the locking component to enable the user interface component to instruct the processing component to perform the processing function. The detecting component generates a sleep signal based on a detected sleeping parameter of the user indicating that the user is asleep. The sleep bypass component disables biometric parameter unlock component based on the sleep signal.

Abstract: A method of communicating via a vehicle communication network includes providing an electronic control unit (ECU), the ECU including a main processing unit and a security processing unit, the security processing unit including a symmetric security key, attempting a secure boot of the main processing unit, providing use of the symmetric security key to the main processing unit if the secure boot of the main processing unit is successful, preventing use of the symmetric security key by the main processing unit if the secure boot of the main processing unit is not successful, conducting, via an attestation processing unit, a remote attestation of the main processing unit, and determining, via the attestation processing unit, whether the secure boot of the main processing unit was successful according to the remote attestation.