Emc Corporation

Emc IP Holding Company LLC

Open Text Corporation

Carbonite Corporation

Other

Daniel Vernon Bailey

Ari Juels

John Gordon Brainard

Yedidya Dotan

Lawrence N Friedman

William Duane

Burton S Kaliski, Jr

Robert W Griffin

Michael J O'Malley

Gareth Richards

Samuel Curry

Joshua A Rosenthol

Aaron T Katz

Robert S Philpott

Eric Young

Riaz Zolfonoon

Yavir Amar

Yun Zhang

Kevin Bowers

Patricia Gomes Soares Florissi

John O'Brien

Ronald L Rivest

Qiyan Chen

Tianqing Wang

John Philip Bell, Ii

Marco Ciaffi

Yong Qiao

Michael Szydlo

Vishnu Chaitanya Pedasingu

Robert Damon Hopley

Robert B Masson

Millie Ng

Karl G Kowalski

Robert S Phipott

Paul Syverson

Bradley Berg

Irina Furman

Siddharth Navare

Rishi Pidva

Craig R Paradis

The present disclosure describes systems and methods for detection and mitigation of malicious encryption. A security agent on an infected computing device may monitor data writes to disk, memory, or network transmission buffers for strings that may represent encryption keys or moduli. The security agent may apply one or more techniques to decode and parse the string to either identify or extract the keys, or rule out the string as containing an encryption key or modulus. If a key is identified, or its presence cannot be excluded, then the security agent may generate an alert and take mitigation actions.

Systems and methods for detection and mitigation of malicious encryption

In one aspect, authentication information is received from a first processing device in a second processing device, and a digital signature is generated in the second processing device by signing data that incorporates at least a portion of the received authentication information. The received authentication information is generated at least in part from a secret seed stored in the first processing device. The received authentication information may be combined with the digital signature generated by the second processing device to form a joint signature that is transmitted to an authentication server. In an illustrative embodiment, the received authentication information comprises a tokencode and the digital signature is generated by signing data that incorporates the tokencode. The data that is signed to generate the digital signature may comprise an electronic document having the tokencode appended thereto.

Authentication methods and apparatus for generating digital signatures

In one aspect, one or more key-encapsulating ciphertexts are generated and stored in a processing device. The processing device receives authentication information from another processing device, and utilizes the authentication information to decrypt at least one of the key-encapsulating ciphertexts to recover an associated key. The authentication information may comprise, for example, a tokencode. In an illustrative embodiment, the authentication information may comprise a plurality of gradually rotating keys with overlapping refresh intervals. As a more particular example, the authentication information may comprise a plurality of hash chains wherein successive ones of the hash chains overlap one another in a designated number of time steps.

Authentication methods and apparatus using key-encapsulating ciphertexts and other techniques

Example embodiments of the present invention provide a method, apparatus and computer program product for determining a share of power consumption by an application executing on a server. The method includes obtaining metrics relating to operation of the server and obtaining metrics relating to server resource utilization attributable to the application. A transformation is then performed using the metrics relating to operation of the server and server resource utilization attributable to the application to determine the respective share of power consumption by the application executing on the server. Additionally, greenhouse-gases attributable to the application also may be calculated.

Energy-aware virtual infrastructure

A method is used in managing security of source code. Source code characteristics are derived from a source code change. Based on the source code characteristics, risk information associated with the source code change is produced.

Managing security of source code

In one aspect, a method comprises the steps of deriving a base point on an elliptic curve in a first processing device, generating authentication information in the first processing device utilizing the base point and a private key of the first processing device, and transmitting the authentication information from the first processing device to a second processing device. The base point on the elliptic curve may be derived, for example, by applying a one-way function to a current time value, or by computation based on a message to be signed.

Authentication methods and apparatus using base points on an elliptic curve and other techniques

There is disclosed a method and system for use in authenticating an entity. An authentication request is received from the entity. An input signal is received from a communications device associated with the entity. The input signal comprises the current location of the communications device. The current location of the communications device is derived from the input signal. Based on the current location of the communications device, an event is detected at substantially the same location as the current location of the communications device. An analysis is performed between the current location of the communications device and the event. An authentication result is generated based on the analysis between the current location of the communications device and the event. The authentication result can be used for authenticating the entity.

Authenticating an entity

A method, system and computer program product for use in managing policies is disclosed. Policies associated with a communications device are correlated with respective locations. The location of the communications device is determined. The policy correlated with the determined location is applied to the communications device.

Managing policies

Improved techniques involve selecting a set of authentication factors from among multiple factors based on a current situation and information about how well the multiple authentication factors have worked in similar situations in the past. Along these lines, when an authentication system performs an authentication operation on a requesting party, the authentication system first assesses a situational environment. Based on the assessment of the situational environment, the authentication system decides that it is necessary to re-authenticate the requesting party. In some arrangements, the authentication system may determine which set of factors has the highest likelihood of successfully verifying the user's identity when compared with other authentication factors. The authentication system then carries out an authentication operation on the selected set of factors and bases a successful authentication result on whether the selected set of factors can be verified.

Situationally aware authentication

There is disclosed a method, system and a computer program product for use in authenticating an entity. An authentication request is received from the entity. Information in connection with the entity is acquired from an external source. Based on the information, a risk score is set such that the riskiness of the authentication request can be readily deduced therefrom.

A technique provides access control on a mobile device (e.g., a smart phone, a tablet, etc.). The technique involves displaying an image on a touch screen of the mobile device. The technique further involves, while the image is displayed on the touch screen, receiving user input from a user. The user input includes user gestures applied to the touch screen over the displayed image. The technique further involves performing an access control operation which provides an access control result based on the user input, the access control result (i) providing access to a set of protected resources when the user input matches expected input and (ii) denying access to the set of protected resources when the user input does not match the expected input.

Access control by a mobile device using an image

A processing device comprises a processor coupled to a memory and is configured to obtain a credential associated with a particular access control interval, to determine an application programming interface (API) key based at least in part on the credential, and to utilize the API key in an API key enrollment protocol. The obtaining, determining and utilizing are repeated for one or more additional instances of the API key enrollment protocol corresponding to respective ones of one or more additional access control intervals. The processing device illustratively comprises a service requester device configured to carry out at least a portion of a given instance of the API key enrollment protocol with a service provider device. The API key may comprise, for example, the credential itself, or a function of the credential and other information. The credential may comprise, again by way of example, an intermediate value of a hash chain.

Credential-based application programming interface keys

Growing community of inventors

Pepperell, MA, United States of America

Daniel Vernon Bailey