Leland Stanford Junior University

University of California

Microsoft Technology Licensing, LLC

Vmware, Inc.

Visa International Service Association

Telcordia Technologies, Inc.

Voltage Security, Inc.

Other

Sri International

Deutschetelekom Ag

Safenet, Inc.

Moka5, Inc.

Geocodex LLC

Ingrian Systems Inc.

Dan Boneh

Matthew K Franklin

Carl Alan Waldspurger

Pratap Subrahmanyam

Xiaoxin Chen

Per Kristian Enge

Tal Garfinkel

Sherman C Lo

Ramarathnam R Venkatesan

Panagiotis Tsirigotis

Shashank Agrawal

Rajeev Chawla

Xavier Boyen

Mahdi Zamani

Richard J Lipton

Karl Benedikt Bünz

Di Qiu

Constantine P Sapuntzakis

Logan Scott

David S De Lorenzo

Peter L Montgomery

Monica Sin-Ling Lam

Victor V Boyko

Ramesh U V Chandra

Angela Nicoara

Karl Benedikt Bunz

Brent Waters

Alan H Frindell

Amit Sahai

Narendan Thiagarajan

Gaurav Aggarwal

Ron Karpf

C O Lee Boyce, Jr

Nicolai V Alexeev

Eu-Jin Goh

Nagendra Modadugu

Richard A DeMillo

Matthew Franklin

Blockchain-based, smart contract platforms have great promise to remove trust and add transparency to distributed applications. However, this benefit often comes at the cost of greatly reduced privacy. Techniques for implementing a privacy-preserving smart contract is described. The system can keep accounts private while not losing functionality and with only a limited performance overhead. This is achieved by building a confidential and anonymous token on top of a cryptocurrency. Multiple complex applications can also be built using the smart contract system.

Blockchain system for confidential and anonymous smart contracts

A virtual-machine-based system that may protect the privacy and integrity of application data, even in the event of a total operating system compromise. An application is presented with a normal view of its resources, but the operating system is presented with an encrypted view. This allows the operating system to carry out the complex task of managing an application's resources, without allowing it to read or modify them. Different views of 'physical' memory are presented, depending on a context performing the access. An additional dimension of protection beyond the hierarchical protection domains implemented by traditional operating systems and processors is provided.

Cryptographic multi-shadowing with integrity verification

A method and system for encrypting a first piece of information M to be sent by a sender [] to a receiver [] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. The sender uses a bilinear map to encrypt a message M, producing ciphertext V to be sent from the sender [] to the receiver []. The receiver [] uses the bilinear map to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

Systems and methods for identity-based encryption and related cryptographic techniques

A system for measuring power consumption by a mobile device corresponding to access of web pages is provided. The system includes: the mobile device, configured to access web pages via a wireless network; a power measurement device connected to a battery of the mobile device, configured to measure parameters related to power consumption; and a server, in communication with the mobile device and the power measurement device, configured to control the mobile device's access of web pages and control the power measurement device's measurement of parameters, to receive measurements from the power measurement device, and to process the received measurements so as to correlate the mobile device's access of a web page with an amount of power consumed corresponding to the mobile device's access of the web page.

System for analyzing mobile browser energy consumption

Methods, systems, and apparatus, including computer program products, for retaining the function of product activation schemes and other persistent state changes based on hardware identifiers, even when running in a virtual machine monitor. It can tie such schemes to a single identifier, e.g., a USB serial number, instead of the multiple hardware identifiers.

Activation and security of software

A data encryption and decryption system securely geoencrypts data using location-dependent navigation signals. To increase the entropy of the cryptographic key to guard against a brute-force attack, geoencryption is made to depend on largely time-independent characteristics of the navigation signals that are not easily spoofed, including the time difference of arrival, the envelope-to-cycle difference, the differential signal-to-noise, the signal envelope shape, and the directions of arrival of the navigation signal set.

Method and apparatus for using navigation signal information for geoencryption to enhance security

Systems and methods for supporting symmetric-bilinear-map and asymmetric-bilinear-map identity-based-encryption (IBE) key exchange and encryption schemes are provided. IBE key exchange schemes use an IBE encapsulation engine to produce a secret key and an encapsulated version of the secret key. An IBE unencapsulation engine is used to unencapsulate the encapsulated key. IBE encryption schemes use an IBE encryption engine to produce ciphertext from plaintext. An IBE decryption engine is used to decrypt the ciphertext to reveal the plaintext. The IBE unencapsulation engine and decryption engines use bilinear maps. The IBE encapsulation and encryption engines perform group multiplication operations without using bilinear maps, improving efficiency. IBE private keys for use in decryption and unencapsulation operations may be generated using a distributed key arrangement in which each IBE private key is assembled from private key shares.

Identity-based-encryption system

In a geo-security system, a device receives RF signals from multiple distinct classes of RF communication systems and extracts location-dependent signal parameters. A current geotag is computed from the parameters by fuzzy extractors involving quantization of the parameters and Reed-Solomon decoding to provide a reproducible unique geotag. The current geotag is compared with a stored geotag, and a geo-secured function of the device is executed based on the result of the comparison. The use of multiple signal sources of different types, combined with special fuzzy extractors provides a robust geotag that allows both lower false rejection rate and lower false acceptance rate.

Geosecurity methods and devices using geotags derived from noisy location data from multiple sources

A method and system for encrypting a first piece of information M to be sent by a sender [to a receiver [allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [computes an identity-based encryption key from an identifier ID associated with the receiver [. The identifier ID may include various types of information such as the receiver's e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key g, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [to the receiver [together with an element rP. An identity-based decryption key dis computed by a private key generator [based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [, the receiver [uses it together with the element rP and the bilinear map to compute the secret message key g, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

Location systems and methods are implemented using a variety of arrangements and methods. Using one such system location information is provided in response to a utility-line arrangement propagating signals that represent a wireless radio-frequency (RF) communication originating from one or more remote transmitters. The system includes a receiver circuit communicatively coupled and responsive to the utility-line arrangement. The system also includes a signal-processing logic circuit, communicatively coupled and responsive to the utility-line arrangement. The signal processing logic circuit is arranged to derive location information from characteristics of the signals that are indicative of a location of the receiver circuit relative to the remote transmitters.

Method and system for deriving location information from utility lines

The present invention relates to a method for traitor tracing. One embodiment of a method for determining at least one traced private key used by a decoder to decrypt an encrypted message includes defining an input ciphertext, the input ciphertext being associated with a tracing private key and having a sublinear size, calling the decoder on the input ciphertext, and associating the tracing private key with a set of traced private keys if the decoder is able to correctly decrypt the encrypted message in accordance with the input ciphertext, the set of traced private keys including at least one private key.

Method and apparatus for tracing the source of decryption keys used by a decoder

A method and apparatus are provided for protecting sensitive information within server or other computing environments. Numerous electronic requests addressed to a server system are received over network couplings and evaluated. The evaluation scans for sensitive information including credit card information and private user information. Upon detecting sensitive data, cryptographic operations are applied to the sensitive data. When the sensitive data is being transferred to the server system, the cryptographic operations encrypt the sensitive data prior to transfer among components of the server system. When sensitive data is being transferred from the server system, the cryptographic operations decrypt the sensitive data prior to transfer among the network couplings. The cryptographic operations also include hash, and keyed hash operations.

Method and apparatus for transparent encryption

Growing community of inventors

Palo Alto, CA, United States of America

Dan Boneh