Abstract: The disclosure relates to software that provides fine-grained user control over when and how a software-based privacy filter is used to reduce clarity and/or visibility associated with content rendered on a display screen. For example, according to various aspects, the software may have access to the display screen and various other components that can be used to detect and/or track a current context associated with information displayed on the screen. As such, based on the current context, the software may determine an area displayed on a screen having current interest to one or more authorized users and activate a software-based privacy filter configured to reduce the clarity and/or visibility associated with information displayed on the screen outside the area having the current interest to the one or more authorized users as needed (e.g., based on a sensitivity level associated with the displayed information, sensor-based inputs indicating a sensitive context, etc.).

Abstract: An electronic device and theme applying method thereof are provided. The electronic device includes a user authentication module configured to acquire user authentication information, a display configured to output a page, a memory configured to store at least one theme data applicable to the page, and a processor configured to apply theme data, corresponding to the acquired user authentication information, to the output page.

Abstract: In one aspect, a device includes a processor and memory accessible to the processor. The memory bears instructions executable by the processor to receive input from at least one electromyograph, and based at least in part on the input, determine whether a user is authorized to manipulate the device to execute at least one function.

Abstract: Techniques for obtaining compartmentalized authenticated access to a feature on an electronic mobile device comprising a camera are presented. The techniques may include obtaining data representing a printable authentication pattern, wherein the printable authentication pattern encodes access information, storing in electronic persistent memory the access information in association with data representing the feature, receiving, at the mobile telephone, a user request to access the feature, capturing, using a camera of the mobile device, an image of an input pattern printed on to a substrate, decoding the input pattern to obtain captured information, determining, by retrieving the access information, that the captured information matches the access information, and providing access to the feature on the mobile device as a consequence of at least the determining.

Abstract: A capacitive fingerprint sensing device and method therein for noise detection are disclosed. The capacitive fingerprint sensing device comprises a plurality of sensing elements, each comprising a sensing structure and configured to sense a capacitive coupling between the sensing structure and a finger. The fingerprint sensing device further comprises sensing circuitry and timing circuitry configured to control a timing of a drive signal. The fingerprint sensing device is controllable to operate in a noise-detection mode and in a fingerprint mode. In the noise-detection mode, the fingerprint sensing device is configured to control the timing circuitry such that no drive signal is provided. The fingerprint sensing device senses a capacitive coupling between the finger and at least one sensing structure and provides a sensing signal indicative of the capacitive coupling between the finger and the sensing structures by means of said sensing circuitry.

Abstract: An encryption method for data includes acquiring data to be encrypted and user information set relevant to the encryption, sending a key acquisition instruction to a terminal corresponding to the user information, receiving a key returned from the terminal corresponding to the user information, encrypting the data to be encrypted by using the key, and transmitting encrypted data to the terminal corresponding to the user information.

Abstract: Methods, systems, computer-readable media, and apparatuses may provide a mobile device with the ability to locally detect fraudulent activity by an unauthorized user. A mobile device may include a fraud detection module that may build a historical usage pattern of a user of the mobile device. The fraud detection module may monitor usage of the mobile device for multiple parameters and record events pertaining to the parameters. Periodically or in response to each event, the fraud detection module may compute a current usage pattern using each of the current parameter values. The fraud detection module may compare the current usage pattern with the historical usage pattern and may use the comparison result to compute a confidence score. The fraud detection module may then compare the confidence score with a preset confidence score to determine whether fraudulent activity is occurring at the mobile device.

Abstract: A system and method for servicing secure data object management aware applications using a cloud-based host environment and a local secure container. The cloud-based host environment creates a controlled digital object from a master digital object, and activates a tether associated with the controlled digital object. The tether includes an access permission, and optionally an operation permission (e.g., view, delete, store, edit, and copy) and a command (e.g., timeout, destroy). The controlled digital object is stored to an isolated storage of the secure container. The tether contents control access and manipulation of the controlled digital object. Certain conditions (e.g., timeout period reached, anomalous data access pattern detected), cause the controlled digital object to be destroyed and/or the tether to be inactivated.

Abstract: A technique performs electronic conferencing operations. The technique involves electronically conveying video of a local environment from local conferencing equipment (e.g., a local electronic portal) to remote conferencing equipment (e.g., a remote electronic portal) while electronically muting audio of the local environment. The technique further involves, while the video of the local environment is electronically conveyed from the local conferencing equipment to the remote conferencing equipment and while the audio of the local environment is electronically muted, detecting a user gesture within the local environment, the user gesture being detected electronically in a contactless manner. The technique further involves, in response to detection of the user gesture within the local environment, electronically unmuting the audio of the local environment.

Abstract: A device includes a thermal infrared sensor and a processor, operatively coupled to the thermal IR sensor. The processor is configured to determine that the device has been successfully unlocked by a user using a security procedure, obtain a thermal signature for the user using thermal sensor data from the thermal infrared sensor, monitor proximity of the user to the device using the thermal signature and maintain the device unlocked if the thermal signature is detectable and is within the detection proximity of the thermal infrared sensor.

Abstract: An authentication terminal comprising an authentication apparatus authenticating an authentication subject, an artifact operating in accordance with an input signal and a signal processing section is provided. When an authentication result in the authentication apparatus is passed, the signal processing section inputs an input signal without including information of the authentication subject in the artifact and outputs an output signal in accordance with an operation result of the artifact as the authentication result.

Abstract: An authentication system comprising an authentication terminal and an authentication server is provided. The authentication terminal comprises an authentication apparatus authenticating an authentication subject, an artifact operating in accordance with an input signal and a signal processing section inputting an input signal without including information of the authentication subject designated by the authentication server in the artifact and outputting an output signal in accordance with an operation result of the artifact as an authentication result when the authentication result in the authentication apparatus is passed. The authentication server authenticates the authentication subject based on the output signal.

Abstract: A method, system, and computer program product for user verification based on behavioral characteristics are provided in the illustrative embodiments. A set of questions is presented from an application to a user, where the user has not previously been asked the set of questions. A set of answers received from the user corresponding to the set of questions is analyzed. A score is computed using the set of answers. A determination is made whether the score matches, within a tolerance value, a base score in a psychological profile of the user. When the score matches the base score within the tolerance value, a conclusion is made that an identity of the user has been verified.

Abstract: Methods and systems for activating a display security application and initiating a privacy measure on a computing device are provided. A user opens and turns on an application on the computing device, which monitors the security of the screen. The security feature recognizes when an unauthorized user is within viewing range of the display of the computing device. The user is prompted to initiate a privacy measure or ignore the unauthorized user. If the user initiates the privacy measure, the unauthorized user is prevented from seeing the content on the display. The user may terminate the privacy measure when the unauthorized user is no longer within viewing range of the display.

Abstract: According to one embodiment, an electronic device includes one or more connectors configured to connect external devices, and circuitry. The circuitry is configured to detect that the external devices are connected to the one or more connectors, and to authenticate access of a user based on an order in which the external devices are connected to the one or more connectors.

Abstract: A server provides a picture password proof of knowledge. The server includes a processor creating a user identifier when communicating with a relying party (RP) server, sending the identifier to the RP server, creating a login token in response to a user authentication request originating from a client browser (CB), sending a web address containing the login token to the RP server, receiving and authenticating actions from the CB regarding the proof of knowledge, generating and sending an authentication token to the CB responsive to the received and authenticated actions, receiving from the RP server a request for an identification token, the request including the authentication token, and generating and sending the identification token to the RP server to enable the user at the CB to be verified and logged-in to the RP server.

Abstract: Providing a distributed application on a plurality of personal devices of a user includes providing a first portion of the distributed application on a first personal device and providing a second portion of the application on a second personal device different from the first personal device, where the second personal device is wearable by the user and where the second portion of the distributed application operates on data that is inaccessible to the first personal device to provide a result thereof to the first portion of the distributed application. The first personal device may be a mobile phone, a tablet, or a personal computer. The second personal device may be a smart glasses, a wearable camera, a smart watch, a wristband, smart earwear, gloves, a necktie, a smart carrying bag, a smart backpack, a smart clothing or smart shoes. The second personal device may be a wearable activity tracking monitor.

Abstract: A personal computer system comprises a visual display, an imaging device adapted to provide eye-tracking data by imaging at least one eye of a viewer of the visual display, and identifying means for recognizing the viewer with reference to one of a plurality of predefined personal profiles. The personal computer system further comprises an eye-tracking processor for processing the eye-tracking data. According to the invention, the eye-tracking processor is selectively operable in one of a plurality of personalized active sub-modes associated with said personal profiles. The sub-modes may differ with regard to eye-tracking related or power-management related settings. Further, the identifying means may sense an identified viewer's actual viewing condition (e.g., use of viewing aids or wearing of garments), wherein the imaging device is further operable in a sub profile mode associated with the determined actual viewing condition.

Abstract: At least two biometric measurement signals are generated by contact with a single individual. At least one feature is extracted from each signal of the at least two biometric measurement signals, the extracted features are combined to generate a combined biometric signal. The combined biometric signal is compared with a defined biometric signal associated with a known individual, responsive to the combined biometric signal matching the defined biometric signal, a signal is transmitted indicating that the single individual is the known individual. The biometric measurement signals can be collected by a biometric identification device worn or carried by the single individual. The processing may be done by the biometric identification device or a remote server.

Abstract: Downloadable pluggable services and methods of distributing the same are described. The downloadable pluggable services may correspond to communication services that can be downloaded to upgrade a communication system. The downloadable pluggable services may include a number of component parts that can be distributed among various servers in the communication system being upgraded along with instructions that enable the component parts to instruct each server in the communication system to operate in a coordinated fashion so as to provide the downloaded service.

Abstract: Implementations generally relate to face template balancing. In some implementations, a method includes generating face templates corresponding to respective images. The method also includes matching the images to a user based on the face templates. The method also includes receiving a determination that one or more matched images are mismatched images. The method also includes flagging one or more face templates corresponding to the one or more mismatched images as negative face templates.

Abstract: Method and systems for modeling user possession of a mobile device for a user authentication framework are provided. The method includes analyzing sensor data representing information captured from sensor(s) associated with at least one of a plurality of devices, the plurality including the user's mobile device. The method allows for determining, based on the analyzed sensor data, a probability that the user maintains possession of the user's mobile device; and configuring the probability for use in determining whether to require authentication. The determination may include configuring a probabilistic model that includes a first state indicating that the user possesses the mobile device and a second state indicating that the user does not; classifying motions of the mobile device by types, the motions being determined based on the sensor data; and updating probabilities of the two states in response to determining that at least one of the motions has occurred.

Abstract: A system and method for secure data object management system comprising a cloud-based host environment and a local secure container. The cloud-based host environment creates a controlled digital object from a master digital object, and activates a tether associated with the controlled digital object. The tether includes an access permission, and optionally an operation permission (e.g., view, delete, store, edit, and copy) and a command (e.g., timeout, destroy). The controlled digital object is stored to an isolated storage of the secure container. The tether contents control access and manipulation of the controlled digital object. Certain conditions (e.g., timeout period reached, anomalous data access pattern detected), cause the controlled digital object to be destroyed and/or the tether to be inactivated. In accordance with applicable law, the cloud-based host environment utilizes the tether to detect, identify, and/or thwart unauthorized host environments in possession of the controlled digital object.

Abstract: A method of disabling a locking screen of an electronic device is provided. The method includes selecting at least two objects among at least three objects each having a unique color, determining whether at least one of a color order and a rotation direction of the selected at least two objects matches a pre-set color order and a pre-set rotation direction, and disabling a locking screen upon determining the match with at least one of the pre-set color order and the pre-set rotation direction.

Abstract: Systems and methods for identifying a weak stimulus in a stimulus-based authentication system is provided. Counters are associated with each stimulus used in the authentication and a first counter is incremented when the stimulus is used in an authentication session and a second counter is incremented when a successful event occurs with respect to the stimulus during the authentication session, but the authentication session ultimately fails. A ratio of the second counter and the first counter is compared to a threshold and the stimulus is identified as weak when the ratio exceeds the threshold. The stimulus may then be removed and no longer be used in the stimulus-based authentication system.

Abstract: Methods and devices arranged to provide functions for generating a security code are described. These functions include defining a set of locations in the one or more images on the basis of one or more user-selected locations, and generating a security code based on values determined and derived from display parameters associated with imaging elements having locations corresponding to the defined set of locations. This enables a security code to be generated that contains a high level of entropy, and is therefore capable of providing high levels of security, based on user input that is easy for the user to remember.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving an enrollment biometric identifier of a user. Determining a matching threshold based on a characteristic of the enrollment biometric identifier of the user. Storing the matching threshold in an enrollment profile for the use in association with the enrollment biometric identifier.

Abstract: A electronic device and method are disclosed herein. The electronic device includes a display, a fingerprint recognition sensor configured to recognize a fingerprint received through the display, and a processor. The processor is configured to implement the method, which includes detecting a fingerprint using a fingerprint recognition sensor of the electronic device through a display of the electronic device; and controlling the display to display at least one object based on the fingerprint.

Abstract: An information processing device includes: an image acquirer acquiring a shot image of a user; a registered user information holder holding face identification data of a registered user; a face authentication carrying out authentication of a face image in the shot image by using the face identification data held in the registered user information holder; an information processing section executing information processing on a basis of an authentication result by the face authentication section; a face identification data registration section updating the face identification data on a basis of a face image extracted from the shot image; and a provisionally-registered data holder temporarily holding data relating to the face image when the face image satisfies a predetermined condition. The face identification data registration section determines whether or not to update the face identification data on the basis of the face image by evaluating the data.

Abstract: A method and an apparatus of detecting a weak password are disclosed. The method comprises: receiving a password to be detected; acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and associated users thereof; detecting whether identity information associated with the password to be detected exists in the identity information set; and determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set. The technical solution of the present disclosure can detect whether a password to be detected is set up by a user using identity information thereof or identity information of a user who be closely associated therewith, thus determining whether the password to be detected is prone to cracking, and thereby further improving the security of the password of the user.

Abstract: Dynamic key cryptography validates mobile device users to cloud services by uniquely identifying the user's electronic device using a very wide range of hardware, firmware, and software minutiae, user secrets, and user biometric values found in or collected by the device. Processes for uniquely identifying and validating the device include: selecting a subset of minutia from a plurality of minutia types; computing a challenge from which the user device can form a response based on the selected combination of minutia; computing a set of pre-processed responses that covers a range of all actual responses possible to be received from the device if the combination of the particular device with the device's collected actual values of minutia is valid; receiving an actual response to the challenge from the device; determining whether the actual response matches any of the pre-processed responses; and providing validation, enabling authentication, data protection, and digital signatures.

Abstract: An information processing apparatus detects a first user and a second user that approaches the information processing apparatus by using a plurality of detection devices including a first detection device and a second detection device which is different from the first detection device. The information processing apparatus includes a second user determination unit configured to determine that a user detected by the first detection device is the second user, in a case where a certain time period has elapsed since the first detection device detects the user, at which the first user has been detected, the second detection device not detecting the user during the certain time period.

Abstract: A method for alerting Internet content providers of the age or other personal information of a computer user, which includes receiving a reverse DNS lookup query from an Internet content provider; and providing the age information of the computer user, in addition to a host name, from a reverse map zone file in response to the request. The personal information may be used by the content provider to select appropriate content for the requesting host, for example for complying with content restrictions. A system of alerting an Internet content provider of the age or other personal information of a computer user is also provided.

Abstract: Time-based configuration profile toggling of a client device can be provided. A computing device in data communication with a client device over a network can be configured to identify an enterprise configuration profile associated with a client device stored in a memory. Further, the computing device can determine whether a current time associated with the client device complies with a compliance rule that specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile. In response to the current time associated with the client device complying with the compliance rule, the computing device can remotely enable the enterprise configuration profile on the client device.

Abstract: A system and computer implemented method for determining compromised passwords is disclosed. The method may include displaying, in a first set of positions, a set of entry keys of a device. The method may include collecting a first set of tracking data including the first set of positions for entry of a first password. The method may also include displaying the set of entry keys of the device in a second set of positions. The method may also include determining a second password based on the second set of positions and entry of the first password. The method may also include determining whether the second password was entered into the device.

Abstract: Systems and methods are described for delegating permissions to enable account access. The systems utilize a delegation profile that can be created within a secured account of at least one user. The delegation profile includes a name, a validation policy that specifies principals which may be external to the account and which are permitted to assume the delegation profile, and an authorization policy that indicates the permitted actions within the account for those principals which are acting within the delegation profile. Once the delegation profile is created, it can be provided to external principals or services. These external principals or services can use the delegation profile to obtain credentials for performing various actions in the account using the credentials of the delegation profile.

Abstract: A computer implemented method and apparatus for automatically aggregating metadata and e-mail attachments from various e-mail providers in a cloud repository. The method comprises accessing account information for one or more related e-mail accounts; accessing one or more e-mails from the one or more e-mail accounts using the received account information, wherein the one or more e-mails comprise one or more documents as one or more attachments; extracting metadata from each e-mail in the one or more e-mails that comprises at least one attachment, wherein the metadata comprises information that identifies the attachment and an associated e-mail; and storing the metadata in a cloud repository.

Abstract: A method and apparatus for device authentication are provided. In the method and apparatus, authentication data for a first device is received. The first device is then authenticated based at least in part on demonstrated access to authentication data prior to broadcast of the authentication data. One or more actions may be taken in response to the authentication of the first device based at least in part on the demonstrated access to the authentication data.

Abstract: An unlocking method for use in a terminal having a touch screen, includes: detecting a touch signal corresponding to a touch movement on the screen in a moving direction; and triggering the terminal to enter into an unlocked state, if the moving direction is the same as a preset reference direction and a number of loops of the touch movement corresponding to the touch signal is the same as a preset reference number of loops, wherein the preset reference direction is one of a clockwise direction or an anticlockwise direction.

Abstract: An active earphone authentication method includes a recognition step of recognizing insertion of an earphone by a terminal control unit; a voltage supply step of transmitting a voltage supply command to the power supply unit by the terminal control unit if insertion of the earphone is recognized at the recognition step; an authentication step of receiving a signal from the earphone and authenticating whether or not the earphone is an active earphone by a reception unit; and a circuit implementation step of implementing a circuit of the terminal equipment according to an authentication result of the authentication step.

Abstract: An information processing apparatus determines whether a device accesses a box region of the information processing apparatus. When it is determined that the box region is accessed, a box ID entry screen is displayed on the device. The information processing apparatus determines whether a box ID is entered by a user of the device. If it is determined that a box ID is entered, then device information about the device is obtained. After the device information is obtained, the information processing apparatus determines whether the device possesses a hardware keyboard. If it is determined that the device possesses a hardware keyboard, a password authentication screen is displayed on the device. If it is determined that the device does not possess a hardware keyboard, an image authentication screen is displayed on the device.

Abstract: An approach for authenticating a device is provided. The approach includes a computer implemented method for receiving a first stage biometric variable verification data for accessing the device. The approach further includes a computer-implemented method for computing a second stage binary authentication data for accessing the device. The approach further includes analyzing the received first stage biometric variable verification data and the second stage binary authentication data. The approach further includes receiving the second binary authentication data for accessing the device.

Abstract: An authentication apparatus includes an electrocardiogram (ECG) signal receiver configured to receive a target ECG signal, and a preprocessor configured to filter the target ECG signal. The apparatus further includes an authenticator configured to process the filtered target ECG signal based on a pattern of a reference ECG signal, and determine whether the target ECG signal corresponds to the reference ECG signal based on the processing.

Abstract: Technologies are provided in embodiments to manage an authentication confirmation score. Embodiments are configured to identify, in absolute session time, a beginning time and an ending time of an interval of an active user session on a client. Embodiments are also configured to determine a first value representing a first subset of a set of prior user sessions, where the prior user sessions of the first subset were active for at least as long as the beginning time. Embodiments can also determine a second value representing a second subset of the set of prior user sessions, where the prior user sessions of the second subset were active for at least as long as the ending time. Embodiments also determine, based on the first and second values, a decay rate for the authentication confidence score of the active user session. In some embodiments, the set is based on context attributes.

Abstract: A method includes a computer device receiving a set of images for at least one user; the computer device receiving unique visual clue inputs from the at least one user for each image of the set of images; the computer device receiving drawing gesture inputs from the at least one user for each image of the set of images; and the computer device using the visual clue and drawing gesture inputs to create passwords to provide a locked access point for at least one device.

Abstract: Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.

Abstract: An information processing apparatus includes a determination unit, an operator change unit, and an image change unit. The determination unit determines whether or not an image displayed on a display unit of a portable information processing apparatus has been rotated. The operator change unit changes an operator of the information processing apparatus, when the determination unit determines that the image has been rotated. The image change unit changes the image displayed on the display unit of the information processing apparatus on the basis of the operator who has been changed by the operator change unit.

Abstract: An image processing apparatus includes an imaging unit, an authenticating unit, and a controller. The imaging unit acquires a face image of a user. The authenticating unit performs a first authentication process based on the face image and a second authentication process based on information other than the face image. The controller suspends the first authentication process based on the face image while maintaining the imaging unit in an activated state when the authenticating unit performs the second authentication process.

Abstract: Session-specific information stored to a cookie or other secure token can be selected and/or caused to vary over time, such that older copies will become less useful over time. Such an approach reduces the ability of entities obtaining a copy of the cookie from performing unauthorized tasks on a session. A cookie received with a request can contain a timestamp and an operation count for a session that may need to fall within an acceptable range of the current values in order for the request to be processed. A cookie returned with a response can be set to the correct value or incremented from the previous value based on various factors. The allowable bands can decrease with age of the session, and various parameter values such as a badness factor for a session can be updated continually based on the events for the session.

Abstract: An apparatus and method for a two phase password input mechanism are provided. The method includes resetting a password entry, displaying a password entry screen, inputting a password element of a plurality of password elements, determining whether the entered password is complete, determining whether the entered password is correct when the entered password is complete, and if the entered password is correct, unlocking the mobile device. The plurality of password elements include at least two elements that cannot be observed from a same viewpoint.