Carnegie Mellon University

Symbol Technologies, LLC

Cynthia Kuo

Adrian Perrig

Srinivas A Mandyam

Krishna Vedati

Bryan Jeffrey Parno

Kelvin Chong

Vikranth Katpally Reddy

Winston L Wang

Mark Luk

Evan Davis Gaustad

Phishing attacks succeed by exploiting a user's inability to distinguish legitimate websites from spoofed websites. Most prior work focuses on assisting the user in making this distinction; however, users must make the right security decision every time. Unfortunately, humans are ill-suited for performing the security checks necessary for secure site identification, and a single mistake may result in a total compromise of the user's online account. Fundamentally, users should be authenticated using information that they cannot readily reveal to malicious parties. Placing less reliance on the user during the authentication process enhances security and eliminates many forms of fraud. We disclose using a trusted device to perform mutual authentication that eliminates reliance on perfect user behavior, thwarts Man-in-the-Middle attacks after setup, and protects a user's account even in the presence of keyloggers and most forms of spyware.

Method and apparatus for secure online transactions

A method of securely deploying information to a device includes placing a device into a shielded structure and exchanging timing messages between a keying device located inside the shielded structure and a beacon located outside of the shielded structure. The shielded structure is closed. The exchange of timing messages is terminated, and upon termination, the keying device transfers the information via one or more shielded messages to the device, and the beacon jams the frequency at which the shielded messages are transferred. The shielded structure is opened, and the keying device and beacon exchange messages to verify the secure deployment of the information.

Apparatus and method for secure, user-friendly deployment of information

A system and method are provided for visually building multi-channel and multi-modal applications. The system includes a process design module for designing application workflow, an integration design module for integrating data sources into the application; a presentation design module for designing application views; a media library; and a componentization module, for packaging designed workflow into reusable components. The system further includes an interactive development/design environment (IDE). The IDE provides a graphical user interface for allowing a developer to visually interact with and operate modules. The system allows a developer to design a single application that can operate across multiple network standards, devices, browsers and languages, and that operate in one or more modes, such as real-time, off-line and asynchronous modes.

System and method for building multi-modal and multi-channel applications

Growing community of inventors

Pittsburgh, PA, United States of America

Cynthia Kuo