Imprivata, Inc.

Tausight, Inc.

Alain Slak

David M T Ting

Lou Bergandi

David Kashtan

Pieter-Jan Boone

Robert Calder

Feroz Gora

Michael Michlin

Taras Lushney

Kyle Vernest

Jason Mafera

Paul Bradford

Boris Boruchovich

Jay Tucker

Joel Lemieux

John Gage

Sean Ting

David Ting

Paul Oramasionwu

Aaron Miri

Gus Malezis

Evan Hoyt

Established user habits in carrying multiple wirelessly detectable devices are used to provide or substantiate authentication. In some embodiments, simply detecting that expected devices are co-located within a limited spatial region is sufficient to establish that the devices are being carried by a single individual. In other embodiments, particularly where the potential for spoofing by multiple individuals is a concern, single-user possession of the devices may be confirmed by various corroborative techniques. This approach affords convenience to users, who may be working at a device that lacks the necessary modality (e.g., a fingerprint or vein reader) for strong authentication.

Personal device network for user identification and authentication

Embodiments of the present invention analyze multiple factors—such as user input events, device motion data, other data from the endpoint, or data from an external system (such as a real-time location system)—to make a probabilistic determination whether a walkaway event has occurred.

Inference-based detection of proximity changes

Firmware updates for, e.g., thin client devices may be achieved in a seamless, non-disruptive manner using a two-stage firmware loader, including a base loader pre-installed on the device and a caching loader downloaded, by the base loader, from a firmware server and thereafter responsible for downloading and updating other firmware application packages.

Secure, non-disruptive firmware updating

In various embodiments, the predicted location of a user within an institutional space is associated with a node at or near that location, and a virtual desktop is prepared before a user has actually logged on and authenticated. Although users are not accorded access to applications and sensitive data until they have properly authenticated themselves, the virtual desktop and associated data are assembled and retrieved in the background in order to eliminate delay following log-on.

Location-based resource management

Embodiments of the present invention analyze multiple factors&#x2014;such as user input events, device motion data, other data from the endpoint, or data from an external system (such as a real-time location system)&#x2014;to make a probabilistic determination whether a walkaway event has occurred.

Methods and systems facilitate continuous processing of incoming data while one or more software components are updated and/or are temporarily unavailable. Computing tasks may be divided into idempotent steps with the computational state exchanged between steps saved in a persistent manner. In various embodiments, these steps are assembled into one or more computation pipelines.

Continuous in-place software updates with fault isolation and resiliency

The locations of electronic devices in an institutional facility are determined based on crowdsourced location reporting by users in an institutional setting and responding to device location queries.

Crowdsourced determination of movable device location

A user of a client device that executes a remote application is authenticated by first receiving an HTTP or HTTPS request to authenticate the user from the remote application. The user is prompted for authentication information, and authentication information is obtained by communicating with a hardware device in electronic communication with the client device. The user's authorization to use the remote application is then verified using a computer processor and using the authentication information.

Growing community of inventors

Bedford, MA, United States of America

Alain Slak