Amazon Technologies, Inc.

Bce Inc.

Nortel Networks Corporation

Maciej Broda

Hakem Habib

Matthew Schwartz

Marc-Andre Hervieux

Eric Jason Brandwine

Matthew Michael Sommer

David Ruysser Gabler

Evgeniy Retyunskiy

Yuk-Chung Eric Kam

Colm MacCárthaigh

Bruce Sherrod

Martin Dawson

Wesley Thomas Spears

Mark Lewis

Kushwant Singh Gidda

Matthew Kitching

Mahamudul Chowdhury

Shaffiq Dhanji

James Skinner

Amir-Hossein Razavi

Corey Still

Anis Bishara

Joe Stapleton

Laura Jane Hayward

Amir Razavi

Captures or recordings of sensitive information or data displayed on screens or displays are detected by generating unique identifiers of users and embedding linked codes including such identifiers into the information or data. When the information or data is accessed by a user and displayed on a screen, and an image of the information or data is captured by a camera of a mobile device or other system, the camera detects a code within the images and requests to access a page or other networked resource associated with a link embedded in the code. Upon detecting a request to access such a page, the request may be attributed to the user. Upon detecting a unique identifier within an image depicting sensitive information, the image may be attributed to the user.

Detecting out-of-band screen captures and recordings

A device, having executed a single sign-on operation, may maintain a private device key in volatile memory. A client application may request an authentication artifact as part of obtaining authentication credentials for the device. Responsive to the request, an artifact may be signed with the private device key to generate the requested authentication artifact. The single sign-on operation may be authenticated using an authentication device and a wrap key generated and applied by a secure cryptographic processor using an identifier based on an attestation certificate obtained from the authentication device after successful authentication. The wrap key may be used to decrypt the private device key stored on a persistent device storage.

Authentication artifact generation using single sign-on

A cyber threat intelligence infrastructure allows processing of network data to enrich captured data with data from different sources to identify possible and/or actual cyber threats.

Cyber threat intelligence system infrastructure

Methods, systems, and computer-readable media for single-packet authorization using proof of work are disclosed. An access control service receives, from a client, a single-packet authorization (SPA) request. The (SPA) request comprises output of a proof-of-work task, wherein completion of the proof-of-work task requires computational resources or memory resources of the client. The access control service performs verification of the output of the proof-of-work task using fewer computational or memory resources of the access control service than were used by the client. In response to determining that verification of the output of the proof-of-work task succeeds, the access control service performs authentication of the SPA request. In response to determining that authentication of the SPA request succeeds, the access control service allows access by the client device to a service.

Single-packet authorization using proof of work

Techniques for deperimeterized access control are described. A method of deperimeterized access control may include receiving, by a controller of a deperimeterized access control service, a single packet authorization (SPA) request for a session ticket from an agent on a electronic device, wherein the agent sends the request for the session ticket in response to intercepting traffic destined for a service associated with the deperimeterized access control service and determining that the agent does not have a session ticket for the service, authorizing the SPA request, providing a session ticket to the agent based on the request, receiving, by a gateway of the deperimeterized access control service, a request to initiate a session with a service, the request including the session ticket, validating the session ticket, and providing session parameters to the agent to be used to initiate the session between the electronic device and the service.

Deperimeterized access control service

Determining the cyber threat risk and vulnerability of an organization may be determined taking in to account the chain of service suppliers to the organization.

Cyber threat intelligence threat and vulnerability assessment of service supplier chain

In order that emergency service vehicles can be dispatched to the correct destination promptly, accurate information about the location of the caller is needed. Another problem concerns routing emergency calls to the correct destination. For emergency calls a universal code is used such as 911 in North America and 112 in Europe. This universal code cannot be used to identify the destination of the call. These problems are particularly acute for nomadic communications systems such as voice over internet protocol communications networks. That is because user terminals change network location. These problems are solved by enabling the geographical location of the emergency caller to be determined by entities within a packet-based network without the need for modification of existing emergency services network infrastructure.

Determining the geographical location from which an emergency call originates in a packet-based communications network

Growing community of inventors

Ottawa, Canada

Maciej Broda