Samsung Electronics Co., Ltd.

Dell Products Inc.

Cisco Technology, Inc.

Geng Chen

Vadim Draluk

Francois Goldfain

Jan-Willem Maarse

Vikas Butaney

Bulent Kasman

Pai Peng

Chaoying Huo

Chao-Li Tarng

Chang Wook Lee

Seok Lee

Seunghoon Lee

Dong Ho Jang

Peng Ning

Jayesh Chokshi

Sung Oh Hwang

Gary Dennis Vogel, Jr

Hyungseok Yu

Antonios Dimitrios Broumas

Na Yu

Muralidhar Kattimani

Hashir Khan

Sung Gyu Kim

Victor Havin

Jennifer Blatnik

Sia Jeffry Saputra

Sean Xiao

Sung Whan Moon

Naman R Patel

KyungBae Park

Ron Lewis

Singh Bhupinder

Xudong Jin

Chirayu Shah

Chongyang Xie

Sambit Kumar Shukla

Jae Hoon Ryu

Won Suk Seo

Jia Ma

Jian Wang

Min Woo Park

Kwanghwan Moon

Sangwoo Ryu

S J Oh

Sami Orava

A method for authenticating a counterparty to a digital transaction includes obtaining, at a mobile terminal from a unverified counterparty, characteristic content associated with the digital transaction to be displayed in a trusted user interface provided by the mobile terminal, sending, by the mobile terminal, data associated with the characteristic content to an authentication server; and obtaining, from the authentication server, a result of an authentication judgment by the authentication server, the authentication judgment based on the data associated with the characteristic content and an item of reference content.

System and method for fraud detection

A method for providing an anti-rollback secure timer service includes determining, at a device which includes a processor providing a trusted execution environment (TEE), a trusted memory, and a real time clock (RTC) accessible through an operating system of the device, an initial reference time value, by a secure timer application running in the TEE, the initial reference time value determined based on an initial value of the RTC obtained during booting of the device and a time delta value. The method further includes determining an updated reference time value based on the initial reference time value, a second value of the RTC, and a previously stored old reference time value, determining an updated time delta value based on the second value of the RTC and the updated reference time value, and storing the updated time delta value and the updated reference time value in the trusted memory.

System and method for anti-rollback

A method, electronic device, and non-transitory computer readable medium for transmitting information is provided. The method includes creating a card network account for each card network of a plurality of card networks. The method also includes associating with a digital card the created card network accounts and providing to at least one of the card network accounts an account balance of the digital card. Additionally, the method includes receiving, from a mobile device, a selection of the digital card to conduct a transaction at a location. The method also includes providing a suggested card network, determined from the plurality of card networks, to the mobile device, to conduct the transaction. The suggested card network is based in part on which card networks accepted at the location. The method also includes updating the account balance of the digital card on completion of the transaction.

System and method for universal card acceptance

An apparatus and method for storing security information are provided. The apparatus is generally an electronic device that includes a memory configured to include a secured region to store security information and a processor configured to electrically connect with the memory. The processor is further configured to execute an application program configured to store the security information in a first secured region, to receive a request to store the security information from the application program, and to store the security information in a second secured region different from the first secured region in response to the request.

Electronic device and method for storing security information thereof

An apparatus and a method for encrypting and decrypting data in a device are provided. The apparatus includes a processor and a memory. The processor is configured to transmit a data command from an application to an encryption driver that executes in a kernel space, determine if the application is authenticated to perform the data command based on an access policy, transmit, when the application is authenticated, a first key to a cryptographic library that executes in an application space, and perform the data command based on the first key after receiving a response via the cryptographic library. The first key is stored in an encryption driver in the kernel space and is not available to applications in the application space.

Method and apparatus for device state based encryption key

A method includes receiving a challenge from an authentication consumer. The method also includes generating for display a figure associated with an identification, a public certificate, and a private key after receiving the challenge. The figure, the identification, the public certificate, and the private key are stored in a TrustZone (TZ) enriched environment. The method further includes receiving an input identification. The method includes verifying that the input identification matches the identification. The method also includes transmitting the challenge to the authentication consumer in response to verifying that the input identification matches the identification.

System and method for trustzone attested authenticators

Mechanisms are provided to allow devices to support multiple modes, such as work, personal, and family modes. Conventional mobile solutions provide only for mode distinctions at the application level, e.g. one work application may prevent access to certain data, but a different application may want to allow access to that same data. Existing computer system solutions rely on multiple operating system instances or multiple virtual machines. Framework level modes are provided that do not require different, mutually exclusive, or possibly conflicting applications or platforms. A device and associated applications may have access to different data and capabilities based on a current mode.

Multiple framework level modes

Mechanisms are provided for allowing pluggable encryption in an operating system. Modules such as proprietary cipher modules connect to a kernel cryptographic framework using cryptographic cipher adapters. Supported cryptographic ciphers as well as proprietary cryptographic ciphers can be used in a transparent manner during file system access, key management, and metadata maintenance operations. Proprietary cipher modules interact with the cryptographic cipher adapters as though the cryptographic cipher adapters are the kernel cryptographic framework. The kernel cryptographic framework interacts with the cryptographic cipher adapters as though the cryptographic cipher adapters are proprietary cipher modules.

Pluggable cryptography

Mechanisms are provided to implement framework level mode specific file access operations. In a mode such as a work or enterprise mode, read and write accesses are directed to one or more secured locations. File data and metadata may be secured with encryption and/or authentication mechanisms. Conventional mobile solutions provide only for mode encryption distinctions at the application level, e.g. one work application may prevent access to certain data, but a different application may want to allow access to that same data. Various embodiments provide framework level mode sensitive encryption that does not require different, mutually exclusive, or possibly conflicting applications or platforms. A device and associated applications may have access to different data based on a current mode.

Mode sensitive encryption

Techniques are provided for assigning extension numbers to Internet Protocol (IP) telephony devices. The techniques include receiving a message from the IP telephony device requesting that an extension be assigned. A port identifier of a port in which the IP telephony device is coupled is determined. Extension numbers are fixed for specific ports. Thus, an extension number for the port identifier of the port is determined. The extension number is then assigned to the IP telephony device. For example, a MAC address for the IP phone is assigned to the extension number.

Techniques for auto assigning IP telephone extension numbers based on a port

Computer systems and logic are operable to establish a local network connection to a network device; establish a remote network connection to a network service provider; create and send a message to the network service provider that requests the network service provider to provide configuration data for the network device; receive from the network service provider a network location identifier specifying a location in a network of the configuration data; download the configuration data from the network service provider by accessing the network location identifier; and install the configuration data in the network device. In one embodiment, VoIP trunk information is provisioned to an IP-PBX across a network without manual entry or long time delays.

Dynamically provisioning digital voice trunks

Mode sensitive networking is provided to allow mode specific communications using a mobile device. If a device has an established secured connection and an application is running in work mode, packets are routed through the secure connection. If the device has an established secured connection but an application is running in personal mode, packets are routed through an alternate connection. Secured connections may be established by using privileged applications. A device and associated applications may have access to different servers, sites, and destinations based on a current mode.

Mode sensitive networking

A method and apparatus for assigning an IP address, in a modular network system, to at least one client premise equipment device coupled by a communications link to a router, wherein the last octet of said IP address may be one of at least three different values.

Method and apparatus for IP address assignment

Growing community of inventors

San Jose, CA, United States of America

Geng Chen