专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20150178999A1 SECURE VEHICULAR DATA MANAGEMENT WITH ENHANCED PRIVACY 有权
标题翻译：安全的数据管理与增强隐私
公开(公告)号：US20150178999A1
公开(公告)日：2015-06-25
申请号：US14361516
申请日：2013-12-19
申请人： Ned M. Smith , Thomas G. Willis , Nathan Heldt-Sheller
发明人： Ned M. Smith , Thomas G. Willis , Nathan Heldt-Sheller
IPC分类号： G07C5/00 , H04W12/02 , H04W12/08 , H04W4/04
CPC分类号： G07C5/008 , G07C5/085 , H04W4/046 , H04W4/40 , H04W4/60 , H04W12/02
摘要： The present disclosure is directed to secure vehicular data management with enhanced privacy. A vehicle may comprise at least a vehicular control architecture (VCA) for controlling operation of the vehicle and a device. The VCA may record operational data identifying at least one vehicle operator and vehicular operational data recorded during operation of the vehicle by the at least one vehicle operator. The device may include at least a communication module and a trusted execution environment (TEE) including a privacy enforcement module (PEM). The PEM may receive the operational data from the VCA via the communication module, may generate filtered data by filtering the operational data based on privacy settings and may cause the filtered data to be transmitted via the communication module. The filtered data may be transmitted to at least one data consumer. The privacy settings may be configured in the PEM by the at least one operator.
摘要翻译：本公开旨在提高隐私的安全车辆数据管理。车辆可以包括用于控制车辆和设备的操作的至少一个车辆控制架构（VCA）。 VCA可以记录识别至少一个车辆操作者的操作数据和由车辆操作者在车辆操作期间记录的车辆操作数据。该设备可以至少包括通信模块和包括隐私执行模块（PEM）的可信执行环境（TEE）。 PEM可以经由通信模块从VCA接收操作数据，可以通过基于隐私设置过滤操作数据来生成过滤数据，并且可以使得经过通信模块传送经过滤的数据。经过滤的数据可以被发送到至少一个数据消费者。隐私设置可以由至少一个操作者在PEM中配置。

2. 发明申请

US20140181995A1 PUBLICATION AND REMOVAL OF ATTRIBUTES IN A MULTI-USER COMPUTING SYSTEM 有权
标题翻译：多用户计算系统中属性的出版和删除
公开(公告)号：US20140181995A1
公开(公告)日：2014-06-26
申请号：US14035559
申请日：2013-09-24
申请人： Ned M. Smith , Nathan Heldt-Sheller , Thomas G. Willis
发明人： Ned M. Smith , Nathan Heldt-Sheller , Thomas G. Willis
IPC分类号： G06F21/62
CPC分类号： G06F21/6254 , G06Q30/00 , G06Q30/02 , G06Q30/0241
摘要： Embodiments of the present disclosure are directed toward publication and/or removal of attributes in a multi-user computing environment. In some embodiments, a consumer information manager (CIM) associated with a user of a multi-user computing system may receive a notification, from a dimension authority (DA), of a decrease in a population count of users of the computing system who have published an attribute within the computing system, and may determine whether the user has published the attribute. In response to receiving the notification of the decrease and determining that the user has published the attribute, the CIM may determine a likelihood that continued publication of the attribute will enable identification of the user, compare the likelihood to a threshold, and, when the likelihood exceeds the threshold, remove the attribute from publication. Other embodiments may be disclosed and/or claimed.
摘要翻译：本公开的实施例针对在多用户计算环境中的属性的发布和/或移除。在一些实施例中，与多用户计算系统的用户相关联的消费者信息管理器（CIM）可以从维度机构（DA）接收具有计算系统的用户的群体数量减少的通知在计算系统内发布了一个属性，并且可以确定用户是否已经发布了该属性。响应于接收到减少的通知并确定用户已经发布属性，CIM可以确定继续发布该属性将使得能够识别用户，将可能性与阈值进行比较的可能性，以及当可能性超过阈值，从发布中删除属性。可以公开和/或要求保护其他实施例。

3. 发明申请

US20160366183A1 System, Apparatus And Method For Access Control List Processing In A Constrained Environment 审中-公开
标题翻译：用于限制环境中访问控制列表处理的系统，设备和方法
公开(公告)号：US20160366183A1
公开(公告)日：2016-12-15
申请号：US15168609
申请日：2016-05-31
申请人： Ned M. Smith , Mats G. Agerstam , Nathan Heldt-Sheller
发明人： Ned M. Smith , Mats G. Agerstam , Nathan Heldt-Sheller
IPC分类号： H04L29/06
摘要： In one embodiment, a system includes: a credential management server to provide credentials to a plurality of computing devices and a plurality of resource servers; a rights management server to grant capability rights to the plurality of computing devices; and an access management server to assign access control policies for a plurality of resources to be protected by the plurality of resource servers. A first resource server may receive a first access request for access to a first resource from a first computing device and send the first access request to the access management server for determination of whether to grant a permission for the access to the first resource. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，系统包括：证书管理服务器，用于向多个计算设备和多个资源服务器提供凭证; 权限管理服务器，以向多个计算设备授予能力权限; 以及访问管理服务器，为多个待被多个资源服务器保护的资源分配访问控制策略。第一资源服务器可以从第一计算设备接收对第一资源的访问的第一访问请求，并将第一访问请求发送到访问管理服务器，以确定是否授予访问第一资源的许可。描述和要求保护其他实施例。

4. 发明申请

US20160180093A1 PROVISIONING LOCATION-BASED SECURITY POLICY 有权
标题翻译：提供基于位置的安全政策
公开(公告)号：US20160180093A1
公开(公告)日：2016-06-23
申请号：US14580517
申请日：2014-12-23
申请人： Nathaniel J. Goss , Nathan Heldt-Sheller , Kevin C. Wells , Micah J. Sheller , Sindhu Pandian , Ned M. Smith , Bernard N. Keany
发明人： Nathaniel J. Goss , Nathan Heldt-Sheller , Kevin C. Wells , Micah J. Sheller , Sindhu Pandian , Ned M. Smith , Bernard N. Keany
IPC分类号： G06F21/57
CPC分类号： G06F21/57 , G06F21/31 , G06F21/6218 , G06F21/629 , G06F2221/034 , G06F2221/2105 , G06F2221/2111 , H04L63/107
摘要： In one embodiment, a system comprises: a processor including at least one core to execute instructions; a plurality of sensors, including a first sensor to determine location information regarding a location of the system; and a security engine to apply a security policy to the system. In this embodiment, the security engine includes a policy logic to determine one of a plurality of security policies to apply based at least in part on the location information, where the location information indicates a location different than locations associated with the plurality of security policies. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，系统包括：处理器，其包括执行指令的至少一个核心; 多个传感器，包括用于确定关于系统位置的位置信息的第一传感器; 以及将安全策略应用于系统的安全引擎。在该实施例中，安全引擎包括策略逻辑，用于至少部分地基于位置信息来确定要应用的多个安全策略中的一个，其中位置信息指示与多个安全策略相关联的位置不同的位置。描述和要求保护其他实施例。

5. 发明申请

US20160188853A1 TECHNOLOGIES FOR AUTHENTICATING A USER OF A COMPUTING DEVICE BASED ON AUTHENTICATION CONTEXT STATE 审中-公开
公开(公告)号：US20160188853A1
公开(公告)日：2016-06-30
申请号：US14866950
申请日：2015-09-26
申请人： Ned M. Smith , Nathan Heldt-Sheller , Micah J. Sheller , Kevin C. Wells , Hannah L. Scurfield , Nathaniel J. Goss , Sindhu Pandian , Brad H. Needham
发明人： Ned M. Smith , Nathan Heldt-Sheller , Micah J. Sheller , Kevin C. Wells , Hannah L. Scurfield , Nathaniel J. Goss , Sindhu Pandian , Brad H. Needham
IPC分类号： G06F21/31 , H04W12/06
CPC分类号： G06F21/31 , G06F21/41 , G06F21/53 , G06F21/88 , G06F2221/2105 , G06F2221/2111 , G06F2221/2147 , H04L9/3226 , H04L63/0815 , H04L2209/127 , H04L2209/805 , H04W12/06 , H04W88/02
摘要： Technologies for authenticating a user of a computing device based on an authentication context state includes generating context state outputs indicative of various context states of a mobile computing device based on sensor data generated by sensors of the mobile computing device. An authentication manager of the computing device implements an authentication state machine to authenticate a user of the computing device. The authentication state machine includes a number of authentication states, and each authentication state includes one or more transitions to another authentication state. Each of the transitions is dependent upon a context state output. The computing device may also include a device security manager, which implements a security state machine that includes a number of security states. Transition between security states is dependent upon the present authentication state of the user. The device security manager may implement a different security function in each security state.

6. 发明申请

US20160088474A1 Performing Pairing And Authentication Using Motion Information 审中-公开
标题翻译：使用运动信息执行配对和认证
公开(公告)号：US20160088474A1
公开(公告)日：2016-03-24
申请号：US14493613
申请日：2014-09-23
申请人： Ned M. Smith , David A. Sandage , William C. Deleeuw , Nathan Heldt-Sheller , Nathaniel J. Goss , John C. Neumann
发明人： Ned M. Smith , David A. Sandage , William C. Deleeuw , Nathan Heldt-Sheller , Nathaniel J. Goss , John C. Neumann
IPC分类号： H04W12/06 , H04W74/00
CPC分类号： H04W12/06 , H04W12/003 , H04W12/00508
摘要： In one embodiment, a security logic of first portable device is configured to receive first motion sample information from at least one motion sensor of the first portable device and second motion sample information from at least one motion sensor of a second portable device, the first and second motion sample information obtained responsive to training movement of the first and second portable devices by a first user. Based on the motion sample information, the security logic is configured to generate a device pairing value, generate a first confidence value based on the first motion sample information and first reference motion sample information stored in the first portable device corresponding to reference movement of the first portable device by the first user, generate a relationship key pair for a relationship, and communicate the first confidence value and a public key of the relationship key pair to the second portable device using the device pairing value. Other embodiments are described and claimed.
摘要翻译：在一个实施例中，第一便携式设备的安全逻辑被配置为从第一便携式设备的至少一个运动传感器接收第一运动样本信息和来自第二便携式设备的至少一个运动传感器的第二运动样本信息，第一和第响应于第一用户对第一和第二便携式设备的训练动作获得的第二运动样本信息。基于运动样本信息，安全逻辑被配置为生成设备配对值，基于第一运动样本信息和存储在第一便携式设备中的与第一运动样本信息的参考运动相对应的第一参考运动样本信息生成第一置信度值生成用于关系的关系密钥对，并且使用设备配对值将关系密钥对的第一置信度值和公开密钥传送到第二便携式设备。描述和要求保护其他实施例。

7. 发明授权

US09600670B2 Provisioning location-based security policy 有权
公开(公告)号：US09600670B2
公开(公告)日：2017-03-21
申请号：US14580517
申请日：2014-12-23
申请人： Nathaniel J. Goss , Nathan Heldt-Sheller , Kevin C. Wells , Micah J. Sheller , Sindhu Pandian , Ned M. Smith , Bernard N. Keany
发明人： Nathaniel J. Goss , Nathan Heldt-Sheller , Kevin C. Wells , Micah J. Sheller , Sindhu Pandian , Ned M. Smith , Bernard N. Keany
IPC分类号： H04L29/06 , G06F21/57 , G06F21/62
CPC分类号： G06F21/57 , G06F21/31 , G06F21/6218 , G06F21/629 , G06F2221/034 , G06F2221/2105 , G06F2221/2111 , H04L63/107
摘要： In one embodiment, a system comprises: a processor including at least one core to execute instructions; a plurality of sensors, including a first sensor to determine location information regarding a location of the system; and a security engine to apply a security policy to the system. In this embodiment, the security engine includes a policy logic to determine one of a plurality of security policies to apply based at least in part on the location information, where the location information indicates a location different than locations associated with the plurality of security policies. Other embodiments are described and claimed.

8. 发明申请

US20150222633A1 TECHNOLOGIES FOR SUPPORTING MULTIPLE DIGITAL RIGHTS MANAGEMENT PROTOCOLS ON A CLIENT DEVICE 有权
标题翻译：技术支持客户端设备上的多个数字权限管理协议
公开(公告)号：US20150222633A1
公开(公告)日：2015-08-06
申请号：US14360161
申请日：2013-12-19
申请人： Ned M. Smith , Nathan Heldt-Sheller , Reshma Lal , Micah J. Sheller , Matthew E. Hoekstra
发明人： Ned M. Smith , Nathan Heldt-Sheller , Reshma Lal , Micah J. Sheller , Matthew E. Hoekstra
IPC分类号： H04L29/06
CPC分类号： H04L63/10 , G06F21/10 , G06F2221/0708 , H04L67/42
摘要： Technologies for supporting and implementing multiple digital rights management protocols on a client device are described. In some embodiments, the technologies include a client device having an architectural enclave which may function to identify one of a plurality of digital rights management protocols for protecting digital information to be received from a content provider or a sensor. The architectural enclave select a preexisting secure information processing environment (SIPE) to process said digital information, if a preexisting SIPE supporting the DRM protocol is present on the client. If a preexisting SIPE supporting the DRM protocol is not present on the client, the architectural enclave may general a new SIPE that supports the DRM protocol on the client. Transmission of the digital information may then be directed to the selected preexisting SIPE or the new SIPE, as appropriate.
摘要翻译：描述了在客户端设备上支持和实现多个数字版权管理协议的技术。在一些实施例中，这些技术包括具有架构区域的客户端设备，其可以用于识别用于保护要从内容提供商或传感器接收的数字信息的多个数字版权管理协议中的一个。如果在客户端上存在支持DRM协议的预先存在的SIPE，那么建筑飞地选择一个预先存在的安全信息处理环境（SIPE）来处理所述数字信息。如果客户端上不存在支持DRM协议的预先存在的SIPE，那么该架构可以通用一个支持客户端DRM协议的新SIPE。然后可以适当地将数字信息的传输指向所选择的预先存在的SIPE或新的SIPE。

9. 发明申请

US20150170197A1 TECHNOLOGIES FOR COLLECTING ADVERTISING STATISTICS IN A PRIVACY SENSITIVE MANNER 审中-公开
标题翻译：在隐私敏感人群中收集广告统计的技术
公开(公告)号：US20150170197A1
公开(公告)日：2015-06-18
申请号：US14360118
申请日：2013-12-18
申请人： Ned M. Smith , Nathan Heldt Sheller
发明人： Ned M. Smith , Nathan Heldt Sheller
IPC分类号： G06Q30/02 , H04L9/00
CPC分类号： G06Q30/0242 , G06Q2220/00 , H04L9/008 , H04L2209/46
摘要： Generally, this disclosure provides technologies for collecting ad statistics in a privacy sensitive manner. In some embodiments the technology includes a system which includes a plurality of client devices, each hosting a context information management (CIMM) module in a secure processing environment. Each CIMM may be operable to select ads for display and calculate statistics for each of the selected ads. The CIMMs may generate a vector representative of those statistics, and may encrypt that vector using additive homomorphic encryption. The encrypted vector may be associated with a statistics collection counter, which may be incremented each time an encrypted vector is calculated. Each CIMM may compare the incremented counter value to a threshold, and may distribute the encrypted vector to another CIMM for further statistical tabulation if the incremented value is less than the threshold. In this way, the technologies described may ensure that a minimum statistical sample size is collected prior to the transmission of ad statistics to an ad network or advertiser, potentially maintaining or protecting user privacy.
摘要翻译：通常，本公开提供了以隐私敏感方式收集广告统计信息的技术。在一些实施例中，该技术包括包括多个客户端设备的系统，每个客户端设备在安全处理环境中托管上下文信息管理（CIMM）模块。每个CIMM可以用于选择要显示的广告并且计算每个所选广告的统计。 CIMM可以生成代表这些统计信息的向量，并且可以使用加法同态加密来加密该向量。加密向量可以与统计收集计数器相关联，每当计算加密的向量时，其可以递增。每个CIMM可以将增加的计数器值与阈值进行比较，并且如果递增的值小于阈值，则可以将加密的向量分配给另一CIMM用于进一步的统计表。以这种方式，所描述的技术可以确保在将广告统计信息传输到广告网络或广告商之前收集最小统计样本大小，潜在地维护或保护用户隐私。

10. 发明申请

US20160182502A1 USER PROFILE SELECTION USING CONTEXTUAL AUTHENTICATION 有权
标题翻译：用户配置文件选择使用上下文认证
公开(公告)号：US20160182502A1
公开(公告)日：2016-06-23
申请号：US14581659
申请日：2014-12-23
申请人： Ned M. Smith , Hannah L. Scurfield , Nathan Heldt-Sheller , Micah J. Sheller , Nathaniel J. Goss , Kevin C. Wells , Sindhu Pandian
发明人： Ned M. Smith , Hannah L. Scurfield , Nathan Heldt-Sheller , Micah J. Sheller , Nathaniel J. Goss , Kevin C. Wells , Sindhu Pandian
IPC分类号： H04L29/06 , G06N99/00
CPC分类号： H04L63/0861 , G06F21/31 , G06F21/316 , G06F2221/2105 , G06N99/005 , H04L63/0884 , H04L67/306
摘要： In embodiments, apparatuses, methods and storage media (transitory and non-transitory) are described that are associated with user profile selection using contextual authentication. In various embodiments, a first user of a computing device may be authenticated and have an access control state corresponding to a first user profile established, the computing device may select a second user profile based at least in part a changed user characteristic, and the computing device may present a resource based at least in part on the second user profile. In various embodiments, the computing device may include a sensor and a user profile may be selected based at least in part on an output of the sensor and a previously stored template generated by a machine learning classifier.
摘要翻译：在实施例中，描述了使用上下文认证与用户简档选择相关联的装置，方法和存储介质（暂时性和非暂时性）。在各种实施例中，计算设备的第一用户可被认证，并且具有与建立的第一用户简档相对应的访问控制状态，所述计算设备可以至少部分地基于改变的用户特征来选择第二用户简档，并且所述计算设备可以至少部分地基于第二用户简档呈现资源。在各种实施例中，计算设备可以包括传感器，并且可以至少部分地基于传感器的输出和由机器学习分类器生成的先前存储的模板来选择用户简档。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式