Blackberry Corporation

Huawei Technologies Co., Limited

Seiko Epson Corporation

2236008 Ontario Limited

Alan Pak-Lun Ho

Chi Chiu Tse

Michael Jonathan Mueller

Eugene Chin

Christopher Lyle Bender

Leonard B Hodder

Chunguang Li

Sangjoo Lee

Sivakumar Nagarajan

Yuri Poeluev

Yin Tan

Teng Wu

Anthony Russello

Zhigang Luo

John Vincent Storozuk

Elliott Michael Guy Mazzuca

Dong Jin Kim

Tianhu Zhang

Mustafa Mohamad

Amarpreet Singh

John Vincent Stotozuk

Thomas Daniel Wallace

The disclosed systems, structures, and methods are directed to a digital watermarking system comprising: a data separator configured to receive a digital data file and segregate the digital data file into a message component and a data component, in which the message component includes a message, and the data component includes a data file; a message pipeline configured to process the message; a data pipeline configured to process the data file; a watermark pipeline configured to embed the processed message file onto the processed data file; and an inverse process pipeline configured to inverse the process applied by the data pipeline while processing the data file and generate a watermarked data file.

System, method and apparatus for digital watermarking

Methods and systems for managing access control of interprocess communications between processes executing on a computing device are provided. Interprocess communication is determined to be permitted or denied based on calling process attribute data, target process attribute data, IPC attribute data, and contextual attribute data of an operating system, and one or more access policies.

Systems and methods for managing access control between processes in a computing device

A computer-implemented method of performing inter-process communication includes a first process in a first operating system (OS) level container in a user space sending a message to a buffer process. The message is addressed to a second process in a second OS-level container in the user space. The buffer process communicates the message to the second process. A device for performing the computer-implemented method is also provided.

Method and system of performing inter-process communication between OS-level containers in user space

A computing device has first and second operating systems with access to separate first and second memories. The second operating system hosts containers which provide separate execution environments. The containers have secure computing resources. A software module in the second operating system receives access requests from applications in the first operating system and selectively passes the requests based on rules for accessing the containers.

Methods and apparatus for containerized secure computing resources

Plural modes of operation, each associated with a class attribute, may be established on a mobile device. The present application discloses a method of handling an application launch request, a computing device for carrying out the method and a computer readable medium for adapting a processor to carry out the method. The method includes receiving a launch request identifying an application that is to be launched, acquiring an identity for the application, acquiring a class for the application, labeling the application with the identity and the class and launching the application. The application's identity and class may then be taken into consideration when processing a request to access a store or create a new store. Notably, an application may request access to a store managed by a certificate manager, rather than accessing the store directly. Conveniently, a resource manager may handle parsing of a file path to the store.

Managing application access to certificates and keys

A method for messaging between operating system containers includes receiving, by a first proxy in a first user space container, a first message from a first service in the first user space container, the first message sent to the first proxy using a first messaging mechanism, forwarding, by the first proxy, the first message to a second proxy in a second user space container, the first message sent to the second proxy using a second messaging mechanism that is different than the first messaging mechanism, and delivering, by the second proxy, the first message to a second service in the second user space container.

System and method for messaging between operating system containers

Plural modes of operation, each associated with a class attribute, may be established on a mobile device. The present application discloses a method of handling an application launch request, a computing device for carrying out the method and a computer readable medium for adapting a processor to carry out the method. The method includes receiving a launch request identifying an application that is to be launched, acquiring an identity for the application, acquiring a class for the application, labeling the application with the identity and the class and launching the application.

Plural modes of operation may be established on a mobile device. Specific modes of operation of the mobile device may be associated with specific spaces in memory. By using a 'class' designation within the existing certificate store structure and key store structure, certificates and keys can be assigned to one space among plural spaces. Accordingly, a personal certificate store and a personal key store may exist in a personal space. Similarly, a corporate certificate store and a corporate key store may exist in a corporate space. APIs designed to work within such a system may be arranged to employ a 'class' attribute when managing certificates and cryptographic keys.

Designation of classes for certificates and keys

Plural modes of operation may be established on a mobile device. Specific modes of operation of the mobile device may be associated with specific spaces in memory. By associating the existing certificate store structure and key store structure with a mode of operation, certificates and keys can be assigned to one space among plural spaces. Furthermore, management (viewing/importation/deletion) of certificates associated with specific modes of operation may be controlled based on the presence or absence of a mobile device administration server and the status (enabled/disabled) of an IT policy.

Certificate management method based on connectivity and policy

A method and device for automatic login of a virtual private network on an interface change, the method: associating a virtual private network profile with a plurality of connection interfaces, each connection interface within the plurality of connection interfaces having a priority; monitoring the plurality of connection interfaces for availability; if a connection interface with a higher priority than the connection interface currently used by the virtual private network becomes available, utilizing the higher priority connection interface for the virtual private network; and if the connection interface currently used by the virtual private network becomes unavailable, transferring the virtual private network to a highest priority available connection interface within the plurality of connection interfaces.

Method and apparatus for automatic VPN login on interface selection

A multiple font management system and method in a printing device for activating multiple fonts is provided for enabling base font localization and font patching for print jobs to reduce the need to upload entire fonts in order to provide localized receipts or to provide corrections to partially-corrupted font tables. A font access level stores locations of activated base, localization and patch fonts and are referenced in an access order during character retrieval so as to apply retrieval priority to patches and localizations. A font storage level maintains multiple tier character indices for referencing character shape data in order to provide faster character searching through each of the multiple activated fonts than a single-level index.

Growing community of inventors

Unionville, Canada

Alan Pak-Lun Ho