H04L2209/16

TWO-WAY AUTHENTICATION IN SINGLE PASSWORD WITH AGENT

Systems and methods for enabling user authentication using a first computing device (e.g., a tablet computer) for providing user credentials including an obfuscated password to an application server for authenticating the user credentials and a second computing device different from the first computing device (e.g., a mobile phone) for generating the obfuscated password are described. In some cases, the first computing device may request a login page for accessing a protected resource (e.g., an electronic file) from the application server, which may generate a user specific grid for the login page and send the login page including the user specific grid to the first computing device. The user specific grid may include a plurality of symbols (e.g., alphanumeric characters) associated with a password. The second computing device may generate the obfuscated password using the plurality of symbols entered by a user of the second computing device.

SYSTEMS AND METHODS FOR OBFUSCATION OF DATA VIA AN AGGREGATION OF CLOUD STORAGE SERVICES
20170331796 · 2017-11-16 ·

The present disclosure describes systems and methods for aggregation and management of cloud storage among a plurality of providers via file fragmenting to provide increased reliability and security. In one implementation, fragments or blocks may be distributed among a plurality of cloud storage providers, such that no provider retains a complete copy of a file. Accordingly, even if an individual service is compromised, a malicious actor cannot access the data. In another implementation, file fragmenting may be performed in a non-standard method such that file headers and metadata are divided across separate fragments, obfuscating the original file metadata.

AUTHENTICATION SYSTEM USING SECURE MULTI-PARTY COMPUTATION

The invention is directed to a system that enables an authentication process that involves secure multi-party computation. The authentication process can be performed between a user device operated by a user and an access device. The user device and the access device may conduct the authentication process such that enrollment information and authentication information input by the user is not transmitted between the devices. Instead, the user device may determine and utilize obfuscated values associated with the authentication information. The user device may also determine an obfuscated authentication function that can be utilized to determine an authentication result without revealing enrollment information and authentication information associated with the user. The user can be authenticated based on the authentication result.

OBFUSCATING CRYPTOGRAPHIC MATERIAL IN MEMORY
20230169016 · 2023-06-01 ·

Methods and systems disclosed herein describe obfuscating plaintext cryptographic material stored in memory. A random location in an obfuscation buffer may be selected for each byte of the plaintext cryptographic material. The location of each byte of the plaintext cryptographic material may be stored in a position tracking buffer. To recover the scrambled plaintext cryptographic material, the location of each byte of the plaintext cryptographic material may be read from the position tracking buffer. Each byte of the plaintext cryptographic material may then be read from the obfuscation buffer and written to a temporary buffer. When each byte of the plaintext cryptographic material is recovered, the plaintext cryptographic material may be used to perform one or more cryptographic operations. The scrambling techniques described herein reduce the likelihood of a malicious user recovering plaintext cryptographic material while stored in memory.

SYSTEMS AND METHODS FOR DYNAMICALLY CONCEALING SENSITIVE INFORMATION

Systems and methods for dynamically concealing sensitive information in a shared screen session of a video conference are disclosed. The system may establish communication with one or more computing devices active in a video conference in which each computing device may switch between a screen share mode and a video mode. The system may determine that one or more articles of sensitive information are visible in a graphical user interface associated with a first computing device of the plurality of computing devices. The system may receive a first signal from the first computing device that indicates a first intent of a host associated with the first computing device to switch the screen share mode which includes sharing the first graphical user interface with the one or more computing devices during the video conference. In response to the first signal, the system may execute one or more privacy actions.

NON-MALLEABLE OBFUSCATOR FOR SPARSE FUNCTIONS
20170316214 · 2017-11-02 ·

Described is a system for obfuscating a computer program. Sensitive data of an unprotected computer program is received as input. A random oracle is used to algebraically hide a set of polynomial-size point functions representing the sensitive data. The system outputs a set of obfuscated instructions internally hiding the sensitive data. The set of obfuscated instructions are used to transform the unprotected computer program into a protected, obfuscated computer program that is accepting of the set of polynomial-size point functions. The obfuscated computer program is written to a non-volatile computer-readable medium.

SYSTEMS AND METHODS FOR DYNAMICALLY CONCEALING SENSITIVE INFORMATION

Systems and methods for dynamically concealing sensitive information in a shared screen session of a video conference are disclosed. The system may establish communication with one or more computing devices active in a video conference in which each computing device may switch between a screen share mode and a video mode. The system may determine that one or more articles of sensitive information are visible in a graphical user interface associated with a first computing device of the plurality of computing devices. The system may receive a first signal from the first computing device that indicates a first intent of a host associated with the first computing device to switch the screen share mode which includes sharing the first graphical user interface with the one or more computing devices during the video conference. In response to the first signal, the system may execute one or more privacy actions.

Hiding Stable Machine Instructions in Noise
20220058022 · 2022-02-24 ·

Our machine architecture and machine procedures use robustness, unpredictability and variability to hinder malware infection. In some embodiments, our machine instruction opcodes are randomized. The computing behavior of our machine is structurally stable (invariant) to small changes made to its machine instructions. Our invention expands the engineering method of stability to a cryptographically stable machine that is resistant to malware sabotage by an adversary.

Our procedures use quantum randomness to build unpredictable stable instructions. Our machine procedures can execute just before running a program so that the computing task can be performed with a different representation of its instructions during each run. A process of hiding a key or data inside of random noise is described that protects the privacy of the machine instruction opcodes and operands. In some embodiments, quantum randomness generates random noise, using photonic emission with a light emitting diode.

Data encryption system and method
09800410 · 2017-10-24 · ·

An improved method for data encryption has been developed. The method includes storing data, multiple prime numbers and random numbers within an electronic memory storage device. Next, calculating a public number using the multiple prime numbers and providing a public number to a recipient apparatus that has knowledge of the multiple prime numbers. The method then encrypts the stored data with a randomly generated key that is determined with elliptical curve cryptography (ECC) and deletes the randomly generated key after use. Next, the method calculates a common shared secret between the sender and recipient using the prime numbers, a recipient public number and the second random number. The sender and recipient calculate parameters using a key equation based on the randomly generated key and random numbers and a common shared secret. Finally, the recipient calculates the randomly generated key for decryption using the common shared secret, one of the prime numbers, the parameters and the simultaneous equations for decryption of the data.

METHOD FOR OBFUSCATING THE DISPLAY OF TEXT
20170301115 · 2017-10-19 ·

The present document describes system and method for securing a text against copying and tampering. The system introduces a reversible change within the instructions contained in the electronic page description language defining the text. In a non-limiting example, the reversible change may include replacing the font used in the PDL by a customized font defining a set of changes from the standard/existing fonts. The system may then generate a set of instructions reversing the set of changes to display the proper text to the user. However, should any tampering or illegal copying of the text occur, the original text will not be displayed because a portion of the reversible change is not present. The reversible changes introduced may affect character sizes, colors, spacing, positions, mapping etc.