Imation Corporation

Activcard Ireland Limited

Other

Kingston Digital, Inc.

Dew Engineering and Development Limited

Bluink Ltd.

Assa Abloy Ab

Activcard

Datalocker Inc.

Activecard Ireland, Ltd.

Laurence Hamid

Robert D Hillhouse

Stephen J Borza

Darren Krahn

Lawrence Reusing

Scott Ashdown

Eric Fernand Le Saint

Wu Wen

John Boyer

Marc Charbonneau

Michael Andrew Borza

Gordon Freedman

Gordon S Freedman

Scott Newman Ashdown

John Douglas Wong

Dean Charles Michaud

Stephen Borza

Dean C Michaud

Darren L Krahn

Biometrics are increasingly used to provide authentication and/or verification of a user in many security and financial applications for example. However, 'spoof attacks' through presentation of biometric artefacts that are “false” allow attackers to fool these biometric verification systems. Accordingly, it would be beneficial to further differentiate the acquired biometric characteristics into feature spaces relating to live and non-living biometrics to prevent non-living biometric credentials triggering biometric verification. The inventors have established a variety of “liveness” detection methodologies which can block either low complexity spoofs or more advanced spoofs. Such techniques may provide for monitoring of responses to challenges discretely or in combination with additional aspects such as the timing of user's responses, depth detection within acquired images, comparison of other images from other cameras with database data etc.

Liveness detection

Biometrics are increasingly used to provide authentication and/or verification of a user in many security and financial applications for example. However, 'spoof attacks' through presentation of biometric artefacts that are 'false' allow attackers to fool these biometric verification systems. Accordingly, it would be beneficial to further differentiate the acquired biometric characteristics into feature spaces relating to live and non-living biometrics to prevent non-living biometric credentials triggering biometric verification. The inventors have established a variety of &#x201c;liveness&#x201d; detection methodologies which can block either low complexity spoofs or more advanced spoofs. Such techniques may provide for monitoring of responses to challenges discretely or in combination with additional aspects such as the timing of user's responses, depth detection within acquired images, comparison of other images from other cameras with database data etc.

User identities, password, etc. represent the barrier between a user's confidential data and any other third party seeking to access this data. As multiple software applications, web applications, web services, etc. embody this confidential data it is a tradeoff between easy recollection of said identities, passwords, etc. and data security. However, malware by intercepting user credentials provides third parties access to even complex passwords, user credentials, security keys etc. even where these are changed/updated regularly. Within the prior art substantial work has gone into addressing malware. However, in many instances the user is at or very near the computer with a software application executing a transaction requiring credentials/authorisation with a portable electronic device or another device. Accordingly, it would be beneficial to provide users with an out-of-band communications channel for exchanging credentials and/or keys etc.

Methods and systems for blocking malware attacks

User identities, password, etc. represent the barrier between a user's confidential data and any other third party seeking to access this data. As multiple software applications, web applications, web services, etc. embody this confidential data it is a tradeoff between easy recollection of said identities, passwords, etc. and data security. However, malware by intercepting user credentials provides third parties access to even complex passwords, user credentials, security keys etc. even where these are changed/updated regularly. Within the prior art substantial work has gone into addressing malware. However, in many instances the user is at or very near the computer with a software application executing a transaction requiring credentials/authorization with a portable electronic device or another device. Accordingly, it would be beneficial to provide users with an out-of-band communications channel for exchanging credentials and/or keys etc.

Whilst portable electronic devices such as smartphones have become ubiquitous for billions of users their primarily uses are consuming content or generating limited low complexity data. In contrast, laptops, desktop PCs etc. allow users to enter extended and/or complex content due to ergonomic user interfaces such as keyboard and mouse. Moving data requires either a third electronic device, e.g. a USB memory drive, or remotely storing the content. Accordingly, it would be beneficial to provide users with the benefit of entering and generating content on one or more electronic systems supporting ergonomic and user compatible haptic interfaces with the ability to store this upon their PED, e.g. smartphone. It would be further beneficial to provide the user also with a means to enter information into applications upon their PED through such external interfaces rather than the haptic interface of their PED, e.g. typically a small touchscreen.

Portable device interface methods and systems

In order to capture electronic information provided by a user to another user different third parties seek to download tracking software, viruses etc. to the user's computer systems. These may include, but are not limited to, message intercepting, email logging, hacking, spamming, phishing, spyware, malware, keyloggers, screen capturing, Trojan horses, WWW robots (BOTs or bots), IP spoofing, man-in-the-middle attacks, worms and viruses. Whilst within the prior art methodologies exist to protect the message by converting the plaintext at the sender's terminal to ciphertext for transmission before it is re-converted to plaintext at the receiver's (or recipient's) terminal once decrypted the message content, now in plaintext is accessible to malware, Trojan horse software, etc. upon the recipient's terminal allowing its contents to be acquired and transmitted without the recipient's and/or sender's knowledge. Accordingly, it would be beneficial to provide users with methods and systems enabling secure messaging to be undertaken as well as secure document transmission and viewing that overcomes the limitations within the prior art. Accordingly, beneficially embodiments of the invention provide secure messaging and secure document transmission even upon potentially compromised desktop computers.

Secure content and encryption methods and techniques

A storage device is provided with memory configured to store user authentication data for accessing an operating system executing on a host computer. A processor is provided to receive a command indicating readiness to accept input from the operating system, and to retrieve the user authentication data from the memory in response to the command.

Method and apparatus for secure credential entry without physical entry

User identities, password, etc. represent the barrier between a user's confidential data and any other third party seeking to access this data. As multiple software applications, web applications, web services, etc. embody this confidential data it is a tradeoff between easy recollection of said identities, passwords, etc. and data security. Generally for most users the balance is too far to convenience and ease of recollection such that the probability of third party illegally accessing the confidential data increases. Accordingly, it would be beneficial for users as well as organizations providing/controlling access to systems, resources, and data to be provided with an automatic means of entering password and/or security credential information without the user, for example, selecting the password, knowing the password, having access to the password, or entering the password where the organizations providing/controlling access can establish geo-fences relating to the credential information.

Methods and systems for data entry

User identities, password, etc. represent the barrier between a user's confidential data and any other third party seeking to access this data. As multiple software applications, web applications, web services, etc. embody this confidential data it is a tradeoff between easy recollection of said identities, passwords, etc. and data security. Generally for most users the balance is too far to convenience and ease of recollection such that the probability of third party illegally accessing the confidential data increases. Accordingly, it would be beneficial for users as well as organizations providing/controlling access to systems, resources, and data to be provided with an automatic means of entering password and/or security credential information without the user, for example, selecting the password, knowing the password, having access to the password, or entering the password.

Techniques for recovering from unexpected removal of (or other unexpected power loss) a flash memory device from a computer system. An interpolated device driver notes whenever the flash memory device is unexpectedly removed, or otherwise unexpectedly powers off or enters a locked state. If the flash memory device is reinserted, the interpolated device driver reinitializes the flash memory device, and satisfies any flash memory device security protocol, so the flash memory device and the computer system can be restored to their status just before unexpected removal. The interpolated device driver caches requests to the flash memory device, and when status is restored to just before removal, replays those requests to the flash memory device, so the flash memory device responds to those requests as if it had ever been removed. The computer system does not notice any break in service by the flash memory device due to removal and reinsertion.

Recovering from unexpected flash drive removal

While portable electronic devices such as smartphones have become ubiquitous for billions of users their primarily uses are consuming content or generating limited low complexity data. In contrast, laptops, desktop PCs etc. allow users to enter extended and/or complex content due to ergonomic user interfaces such as keyboard and mouse. Moving data requires either a third electronic device, e.g. a USB memory drive, or remotely storing the content. Accordingly, it would be beneficial to provide users with the benefit of entering and generating content on one or more electronic systems supporting ergonomic and user compatible haptic interfaces with the ability to store this upon their PED, e.g. smartphone. It would be further beneficial to provide the user also with a means to enter information into applications upon their PED through such external interfaces rather than the haptic interface of their PED, e.g. typically a small touchscreen.

A portable desktop device and method for host computer system hardware recognition and configuration are provided. The portable desktop device causes on a first boot, the host computer system to recognize hardware devices connected thereto, and to configure hardware configuration files of the portable desktop O/S in accordance with the recognized hardware. Once the hardware configuration files have been configured, the system is rebooted. On the second boot, the host computer determines that the portable desktop has been configured for its hardware, and initiates start-up of the portable desktop.

Portable desktop device and method of host computer system hardware recognition and configuration

A security protocol for use by computing devices communicating over an unsecured network is described. The security protocol makes use of secure data provided to a peripheral memory device from a server via a secure connection. When the peripheral memory device is coupled to a computing device that attempts to establish a secure connection to the server, the secure data is used to verify that the server is authentic. Similarly, the secure data assists the server in verifying that the request to access the server is not being made by a malicious third party.

Growing community of inventors

Ottawa, Canada

Laurence Hamid