Patent classifications
G06F2221/2143
Voltage-variation detection under clock fluctuations
Detecting voltage-based attacks on an integrated circuit (IC) is difficult in the presence of clock jitter. Propagating signals can exhibit a total delay that is due to a delay component resulting from a voltage-based attack and a delay characteristic resulting from clock fluctuation. Voltage-variation detection circuitry includes first and second voltage-dependent circuits and a voltage analysis circuit. The voltage-dependent circuits produce first and second signals that are indicative of a voltage level responsive to a clock signal and based on different first and second voltage sensitivities. The voltage analysis circuit generates a voltage alert signal based on the first and second signals. A combined signal neutralizes the delay characteristic in the first and second signals, but the delay component due to the voltage variation can be at least partially maintained. Thus, a voltage-based attack is detectable in the presence of clock fluctuation by using two voltage-dependent circuits.
DIGITAL ASSET TRANSFER METHOD, DIGITAL ASSET TRANSFER DEVICE, AND PROGRAM
The present disclosure relates to a digital asset transfer method, a digital asset transfer device, and a program that enable more appropriate transfer of a digital asset managed by a peer-to-peer database at the time of death of a user.
There is provided a digital asset transfer method executed by a computer, the method including: acquiring death information of a user who owns a cold wallet; identifying a transfer condition for a digital asset registered to an account associated with the cold wallet on a basis of the death information; and signing, using a secret key associated with the cold wallet, registration data registered in a P2P database to transfer the digital asset on a basis of the transfer condition; and deleting the secret key having been used in the signing.
Secure memory
A memory controller, which manages a memory device, receives a memory command. The memory controller determines whether the memory command is encrypted. Upon determining that the memory command is encrypted, the memory controller performs a decryption function corresponding to the memory command. Conditioned on the performance of the decryption function resulting in a successful decryption of the memory command, the memory controller performs an operation on a memory location corresponding to a memory address included in the memory command.
DATA PROCESSING SYSTEM FOR SECURELY PROCESSING SHAREABLE DATA
A method includes a data processing system receiving, via an interface from a data consumer computing entity, a request for data processing in accordance with specific data criteria. The method further includes determining, based on the specific data criteria, a data owner system to utilize in processing the request. The method further includes securely accessing, in accordance with a temporary credential protocol between the data processing system and the data owner system, a database of the data owner system regarding a set of data records having the specific data criteria. The method further includes securely modifying the set of data records to produce a set of shareable data records. The method further includes executing a data analysis function on the set of shareable data records to produce an analytical result. The method further includes sending, via an interface, the analytical result to the data consumer computing entity.
DATA MANAGEMENT SYSTEM, DATA MANAGEMENT METHOD, AND DATA MANAGEMENT PROGRAM
The data management system 80 manages data of users who use a facility. The arrival time prediction unit 81 predicts an arrival time of the user at the facility. The registration unit 82 acquires authentication data used for authentication of the user from an external device based on the predicted arrival time and registers it in a local storage device. The exit time prediction means 83 predicts an exit time of the user from the facility. The deletion means 84 deletes the authentication data from the storage device after the predicted exit time of the user.
PROTECTION FOR RESTRICTED ACTIONS ON CRITICAL RESOURCES
Methods, systems, and computer programs are presented for protecting restricted actions on encryption keys that control the management of data stored by a service provider. In some implementations, a system of the service provider receives a request to generate a data encryption policy (DEP) for data stored by the system of the service provider for a customer, the request including a reference to a customer key and an availability key. The customer key and the availability key are root keys for encrypting a data encryption key. The data encryption key is used to encrypt the data stored by the service provider for the customer. Further, destructive changes to the availability key require receiving an approval from an account of the service provider. The system of the service provider validates the DEP. The system of the service provider stores the DEP based on the validation.
SYSTEM AND METHOD FOR SUSPENDING A COMPUTING DEVICE SUSPECTED OF BEING INFECTED BY A MALICIOUS CODE USING A KILL SWITCH BUTTON
A system for suspending a computing device suspected of being infected by a malicious code is configured to receive a signal to initiate a suspension procedure of the computing device. The system captures states of instructions that are being executed by a processor of the computing device, where the instructions comprise the malicious code. The system prioritizes the operation of a kill switch button over the instructions being executed by the processor. The system sends notification signals to servers managing a user account associated with a user currently logged in at the computing device, indicating that the computing device is suspected of having been infected by the malicious code. In response to sending the notification signals to the servers, the user account is suspended. The system terminates network connections of the computing device such that the computing device is disconnected from other devices.
Software-based switch for providing products and/or services to users without compromising their privacy
An online service provisioning process is provided during which the service provider's knowledge about the user to whom the service is delivered does not increase. This is accomplished by presenting user attribute information to the service provider as obfuscated objects that can be independently verified and which are privacy preserving.
Configurable memory device connected to a microprocessor
The present memory restoration system enables a collection of computing systems to prepare inactive rewritable memory for reserve and future replacement of other memory while the other memory is active and available for access by a user of the computing system. The preparation of the reserved memory part is performed off-line in a manner that is isolated from the current user of the active memory part. Preparation of memory includes erasure of data, reconfiguration, etc. The memory restoration system allows for simple exchange of the reserved memory part, once the active memory part is returned. The previously active memory may be concurrently recycled for future reuse in this same manner to become a reserved memory. This enables the computing collection infrastructure to “swap” to what was previously the inactive memory part when a user vacates a server, speeding up the server wipe process.
ON-DEVICE DECISION MAKING
Systems and methods for obtaining an external content item from an online service for presentation on the client device is presented. On the client device, a condition is detected in the execution context of an executing application, the condition corresponding to the presentation of an external content item by the application. A request is made to the online service for content items. In response, content information is received, where the content information identifies potential content items. According to various embodiments, initial scores are associated with each potential content item in the content information. At the client device, a completed score is generated for each content item according to local information on the client device and the corresponding initial score. An external content item is selected for presentation on the client device from the potential content items according to, at least in part, the completed scores.