Open Invention Network LLC

Moka5, Inc.

Unifyid, Inc.

Prove Identity, Inc.

Other

Payfone, Inc.

John Whaley

Geoffrey G Thomas

Thomas Joseph Purtell, Ii

Constantine P Sapuntzakis

Monica Sin-Ling Lam

Michael Kerby Chen

Won-Suk Chun

Umesh Agashe

Kurt W Somerville

Andrew D Berkheimer

Ramesh U V Chandra

Kelvin Kam-Suen Yue

Jesse Ernest Gross, Iv

Vinay Uday Prabhu

Eleftherios Ioannidis

Wen-Suk Chun

Kelvin Yue

Ramesh Chandra

Guy Messalem

The disclosed embodiments relate to a system that authenticates and/or identifies a user of an electronic device based on passive factors, which do not require conscious user actions. During operation of the system, in response to detecting a trigger event, the system collects sensor data from one or more sensors in the electronic device. Next, the system extracts a feature vector from the sensor data. The system then analyzes the feature vector to authenticate and/or identify the user, wherein the feature vector is analyzed using a model trained with sensor data previously obtained from the electronic device while the user was operating the electronic device.

Identifying and authenticating users based on passive factors determined from sensor data

The disclosed embodiments provide a system that identifies a user of an electronic device. During a training mode, the system uses an initial training data set, comprising sensor data from electronic devices associated with a set of initial users, to train a multilayer neural network model to authenticate the initial users. Next, the system uses an additional training data set, which includes sensor data from electronic devices associated with one or more new users, to update a portion of the weights in the trained model so that the updated model can be used to authenticate both the initial users and the one or more new users. During a subsequent mode, the system uses the updated model to authenticate a user of the electronic device based on sensor data contemporaneously received from the electronic device.

Dummy class framework for continual supervised learning applications

The disclosed embodiments provide a system that authenticates a user of an unattended device. In response to sensing a presence of the user in proximity to the unattended device, the system makes a call from the unattended device to an authentication service to authenticate the user. In response to the call, the authentication service authenticates the user based on recently collected sensor data, which was obtained from one or more sensors in a portable electronic device belonging to the user. If authentication succeeds, the system allows the user to proceed with an interaction with the unattended device.

Implicit authentication for unattended devices that need to identify and authenticate users

The disclosed embodiments provide a system that operates a computer system. During operation, the system detects a first change in a setting associated with a first computing environment executing on the computer system, wherein the first change is associated with at least one of an input/output (I/O) device setting, a regional setting, a network setting, a power setting, and a display setting. Next, the system propagates the first change to one or more other computing environments executing on the computer system.

Synchronizing settings associated with virtual computing environments

The disclosed embodiments provide a system that provides a virtual private network (VPN). The system includes a routing apparatus on a public network. The routing apparatus accepts a first connection with a client on the VPN and a second connection with a gateway in a private network extended by the VPN. Next, the routing apparatus receives a first set of packets from the client over the first connection, wherein the first set of packets is encrypted. The routing apparatus then routes the first set of packets to the gateway. The system also includes the gateway, which establishes the second connection with the routing apparatus. Next, the gateway decrypts the first set of packets and routes the decrypted first set of packets to a host in the private network.

Optimizing connections over virtual private networks

The inventors recently developed a system that authenticates and/or identifies a user of an electronic device based on passive factors, which do not require conscious user actions. During operation of the system, in response to a trigger event, the system collects sensor data from one or more sensors in the electronic device, wherein the sensor data includes movement-related sensor data caused by movement of the portable electronic device while the portable electronic device is in control of the user. Next, the system extracts a feature vector from the sensor data, and analyzes the feature vector to authenticate and/or identify the user. During this process, the feature vector is analyzed using a model trained with sensor data previously obtained from the portable electronic device while the user was in control of the portable electronic device.

Opportunistically collecting sensor data from a mobile device to facilitate user identification

The disclosed embodiments provide a system that processes data. During operation, the system uses a first key to protect a write operation on the data. Next, the system uses a second key to protect a read operation on the data.

Separate cryptographic keys for protecting different operations on data

The disclosed embodiments provide a system that facilitates the use of a computer system with virtualization software. During operation, the system obtains a set of hardware attributes from the computer system and a hardware compatibility list (HCL) for the virtualization software. Next, the system uses the hardware attributes and the HCL to predict a compatibility of a hardware component in the computer system with the virtualization software. The system then uses the predicted compatibility to manage use of the computer system with the virtualization software.

Compatibility-based configuration of hardware with virtualization software

Some embodiments provide a system that provides a filesystem in a computer system. During operation, the system obtains a policy for the filesystem and separates the filesystem into a set of layers based on the policy. Next, the system processes input/output (I/O) operations to the filesystem by directing each of the I/O operations to one of the layers based on the policy. Finally, the system periodically maintains the layers using a master image of the filesystem.

Policy-based layered filesystem management

The disclosed embodiments relate to a system that anonymizes sensor data to facilitate machine-learning training operations without disclosing an associated user's identity. During operation, the system receives encrypted sensor data at a gateway server, wherein the encrypted sensor data includes a client identifier corresponding to an associated user or client device. Next, the system moves the encrypted sensor data into a secure enclave. The secure enclave then: decrypts the encrypted sensor data; replaces the client identifier with an anonymized identifier to produce anonymized sensor data; and communicates the anonymized sensor data to a machine-learning system. Finally, the machine-learning system: uses the anonymized sensor data to train a model to perform a recognition operation, and uses the trained model to perform the recognition operation on subsequently received sensor data.

Privacy-preserving system for machine-learning training data

The disclosed embodiments provide a system that processes data. The system includes a first client that encrypts a first set of data, uploads the encrypted first set of data to a volume on a cloud storage system, and creates a commit record of the upload. The system also includes a synchronization server that verifies access to the volume by the first client and includes the commit record in a change set containing a set of commit records associated with the volume. The synchronization server also signs the change set and provides the change set for use in synchronizing the upload with a second client.

Protecting data in insecure cloud storage

A kitchen utensil suspension assembly for storing kitchen utensils over a kitchen sink includes a pair of brackets that is each of the brackets coupled to a vertical support surface. The brackets are spaced apart from each other a distance corresponding to a width of a kitchen sink. A plurality of supports is each pivotally coupled to a respective one of the brackets. Each of the supports is positionable in a deployed position having each of the supports being oriented at an angle with respect to the vertical support surface. Additionally, each of the supports is positionable in a stored position having each of the supports extending upwardly along the vertical support surface. A plurality of poles is each extended through each of the first and second supports. Thus, each of the poles may have a kitchen utensil suspended thereon for storage.

Growing community of inventors

Fremont, CA, United States of America

John Whaley