International Business Machines Corporation

Diego Alejandro Ortiz-Yepes

Jan Leonard Camenisch

Peter Buhler

Franz-Stefan Preiss

Michael Baentsch

Reto Josef Hermann

Thomas D Weigold

Michael Peter Kuyper-Hammond

Frank Hoering

Harold D Dykeman

Douglas H Dykeman

Michael P Kuyper

The present disclosure relates to a cryptographic method for enabling access by a user device to services provided by a server in a set of reference areas. The method comprises at the user device: obtaining a set of reference credentials of the server certifying data indicating the reference areas; obtaining a location credential certifying location data indicating the current location of the user device; generating an authentication token comprising a cryptographic proof for proving that the current location of the user device certified by the location credential matches at least one reference area certified by the set of reference credentials; sending the authentication token to the server for accessing the services by the user device in the at least one reference area.

Privacy friendly location based services

The present invention is directed to a handheld companion device, including: a screen, rigid physical connection means, communication means, adapted for setting up and supporting at least one communication link with at least one external computerized system; and a memory storing computerized methods. The present invention is further directed to related systems and methods for automatically rotating contents displayed on such devices, when rigidly attached on a handheld mobile device.

Automatic rotation of display contents of a handheld companion device rigidly attached to a handheld mobile device

A method, a secure device and a computer program product for securely managing files. The method includes providing a secure device, where the secure device is protected by design against malicious software or malware and adapted to establish a connection to a server via a host, the host connected to the server through a telecommunication network, upon receiving a request for using a file stored on the secure device, processing the request at the secure device according to an updated use permission associated to the file, where the updated use permission is obtained by instructing at the secure device to establish a connection between the secure device and the server via the host and updating at the device the use permission associated to the file, according to permission data sent from the server through the established connection.

Method, secure device, system and computer program product for securely managing files

An approach for authenticating a user computer, connectable to a mobile network includes a computing device retrieving an attribute credential, the attribute credential certifying a set of user attributes, a device identifier for identifying the user computer to the mobile network, a location credential, the location credential certifying a device identifier and location data indicating a location of the user computer determined by the mobile network. The approach includes a computer producing an authentication token comprising the attribute credential, the location credential, the location data and a proof for proving that the device identifier in the attribute credential equals the device identifier in the location credential. The approach includes a computer producing a blinded attribute credential by randomized blinding of the attribute credential, wherein the authentication token includes the blinded attribute credential and the proof verifies possession by the user computer of the attribute credential in the blinded attribute credential.

Authentication of user computers

In an approach for authenticating a user computer, connectable to a mobile network, a computer retrieves an attribute credential, the attribute credential certifying a set of user attributes and a device identifier for identifying the user computer to the mobile network. The computer requests a location credential, the location credential certifying a device identifier and location data indicating a current location of the user computer determined by the mobile network. Additionally, the computer produces an authentication token comprising the attribute credential, the location credential, the location data, and a proof for proving that the device identifier in the attribute credential equals the device identifier in the location credential. Furthermore, the computer sends the authentication token for authentication.

Growing community of inventors

Adliswil, Switzerland

Diego Alejandro Ortiz-Yepes