Koninklijke Philips Corporation N.v.

Koninlijke Philips Electronics N.v.

Milan Petkovic

Muhammad Asim

Claudine Conrado

Jorge Guajardo Merchan

Mina Deng

Hui Li

Pim Theo Tuyls

Geert Jan Schrijen

Boris Skoric

Paulus Mathias Hubertus Mechtildis Antonius Gorissen

Robert Paul Koster

Jin Qu

Stefan Katzenbeisser

Malik Hammoutene

Vojkan Mihajlovic

Changjie Wang

Qi Gao

Tanya Ignatenko

Koen Hendrik Johan Vrielink

Marijn Christian Damstra

Markus Laubscher

Milosh Stolikj

Rafih Berkane

Luan Ibraimi

Franciscus Lucas Antonius Johannes Kampeman

Julien Kunzi

Paulus Mathias Hubertus Mechtilds Antonius Gorissen

Anastasiia Grishina

Robert P Koster

Koen H J Vrielink

A recommendation method () includes: querying a knowledge base () of maintenance cases using the text query to retrieve a ranked list () of maintenance cases relating to a text query; performing topic modeling () on the maintenance cases of the ranked list of maintenance cases to group the maintenance cases into N topics; for each topic, ranking the replaced part identifiers associated to the maintenance cases grouped into that topic to generate a ranked replaced part identifiers list () for that topic; displaying summarization () of the N topics on the display of the user interface and receiving a selection of a selected topic of the N topics via the user interface device; and displaying a list () of recommended parts for replacement comprising at least a top portion of the ranked replaced part identifiers list for the selected topic on the display of the user interface device.

System and method for improved spare part search for maintenance services using topic modelling

A domain authorityfor use in a hierarchy of domain authorities in a hierarchical cryptographic system. The domain authoritycomprises a user secret key generatorfor generating a user secret key based on a domain secret key and one or more attribute representations, to obtain a user secret key associated with a set of attributes corresponding to the attribute representations, and wherein the domain secret key is based on a domain secret key of a parent domain authority or a root secret key of a root authority of the hierarchy of domain authorities, and wherein the attribute representations are independent of the hierarchy. A decrypter makes use of the user secret key. An encrypter generates ciphertext decryptable by the decrypter.

Hierarchical attribute-based encryption and decryption

A virtual machine devicecomprising multiple operation routineseach configured to perform a particular instruction, and a selectorconfigured to receive an encoded instruction, the encoded instruction being obtained by encoding a plain instruction with a code encoding, the selector is configured to select and activate a corresponding operation routine of the multiple operation routines, the corresponding operation routine is configured to perform the plain instruction corresponding to the encoded instruction, the selectorcomprises a look-up means for looking-up an encoded instruction to select the corresponding operation routine.

Virtual machine device having key driven obfuscation and method

A system for generating an access control policy comprises a user interface () for enabling a user to indicate a topic () and a set of permissions (). A document analyzer () analyzes the content of a plurality of documents () to find a set of documents () relating to the topic (). A property finder () analyzes the content of a plurality of documents () to find at least one distinguishing property () of documents relating to the topic (). A document selector () selects the set of documents (), based on the distinguishing property (). An associating subsystem () associates the set of permissions () with the set of documents () to obtain an access control policy ().

Creating an access control policy based on consumer privacy preferences

This invention relates to a method of healthcare data handling by a trusted agent possessing or having an access to decryption keys for accessing healthcare data. A request is received from a requestor requesting accessing healthcare data. A log is generated containing data relating to the request or the requestor or both. Finally, the requestor is provided with an access to the healthcare data.

Method and a system of healthcare data handling

A hierarchical tree structure is used to facilitate the communication of encrypted keys to particular users having access to the tree. All users are in communication with a root node, but the information content of the material at the root node is decipherable only by the intended users of this information. Protected data is encrypted using a variety of data-keys specific to the data. These data-keys are encrypted using a combination of node-keys that are specific to particular users or groups of users. Users having access to the node-key associated with a particular encrypted data-key are able to decipher the data associated with the data-key; users without access to the particular node-key are unable to decrypt the data-key, and thus unable to decipher the data. The hierarchical tree is preferably structured based on a similarity of access rights among users, to minimize the overhead associated with providing user-specific access rights.

Cryptographic role-based access control

An attribute-based digital signature system comprises a signature generation unit () for signing a message (m) by generating a signature (&#x3c3;) based on a user secret key (SK) associated with a set of user attributes, wherein the signature generation unit () is arranged for combining the user secret key (SK) with revocation data (R) to form at least part of the signature (&#x3c3;), wherein the revocation data (R) complements respective ones of a plurality of valid user secret keys and wherein the revocation data (R) prevents a revoked user secret key (SK) from being used to validly sign a message (m) with the set of user attributes. The system further comprises a revocation unit () for selectively removing at least part of the signing capability of a to-be-revoked user secret key (SK), by generating updated revocation data (R), wherein the updated revocation data (R) is based on at least part of the to-be-revoked user secret key (SK). A plurality of attribute authoritiesmay independently issue cryptographic keys.

Attribute-based digital signature system

A method of performing measurement of a subject comprises measuring a physiological parameter of a subject, deriving data from the measured parameter, optionally, obtaining metadata relating to the measurement of the physiological parameter, determining the quality of the derived data from the derived data and/or the obtained metadata, and if the determined quality matches a predefined criteria, performing a predefined corrective action. In one embodiment, the method further comprises calculating one or more qualifiers from the derived data and/or from the obtained metadata, and wherein the step of determining the quality of the derived data comprises determining the quality of the derived data from the calculated qualifiers.

Performing measurement of a subject

A system for executing a virtual machine instance is provided. An executing environment () is arranged for creating a virtual machine instance (). The virtual machine instance () comprises an instance authorization unit () for receiving an instance authorization credential, wherein the instance authorization credential is uniquely associated with the virtual machine instance (). A data key unit () is arranged for generating a request for a data key, based on the instance authorization credential associated with the virtual machine instance (). A decryption unit () is arranged for decrypting a data item () based on the data key. A key server system () is arranged for issuing keys to a virtual machine instance (). An instance authorization providing unit () is arranged for providing the instance authorization credential to the virtual machine instance ().

Secure data handling by a virtual machine

A method of dynamically determining the access rights of a client to a record comprises receiving an access request from the client with respect to the record, determining one or more contexts relating to the access request, calculating a score for each determined context, calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, and determining the client's access rights according to a comparison of the overall score to the score for each right in the rights policy.

Dynamic determination of access rights

An attribute-based digital signature system is disclosed. A first signature generating unit () is used for generating a first signature () for a document (), based on a first signature key () and the document (). A re-signing unit () is used for generating a second signature () for the document (), based on the first signature () and a re-signing key (), wherein the re-signing unit () is arranged for handling attributes () associated with the first signature () and/or the second signature (). The second signature () is associated with a second set of attributes () determined by the re-signing key (), wherein the second set of attributes () comprises a plurality of attributes. The first signature () is associated with a first set of attributes (), wherein the first set of attributes () comprises a plurality of attributes, and the re-signing unit () is arranged for generating the second signature () only if the first set of attributes () satisfies a set of conditions ().

Attribute-based digital signatures

A system is disclosed for providing interoperability between a plurality of data protection systems. The system includes an ontology () configured to store definitions () of concepts () relating to interface elements of at least two different data protection systems including a first data protection system () and a second data protection system (); and a mapping generator () configured to generate a mapping between at least one interface element of the first data protection system () and at least one interface element of the second data protection system (), based on the ontology (). The system comprises a message converter () configured to receive a message generated by the first data protection system (), convert the message based on the mapping to obtain a converted message, and transmit the converted message to the second data protection system ().

Interoperability between a plurality of data protection systems

A method of authenticating a device and a user comprises receiving a user input, generating a first key from the user input, performing a physical measurement of the device, obtaining helper data for the device, computing a second key from the physical measurement and the helper data, and performing an operation using the first and second keys. In a preferred embodiment, the method comprises performing a defined function on the first and second keys to obtain a third key. Additionally security can be provided by the step of receiving a user input comprising performing a biometric measurement of the user and the step of generating a first key from the user input comprises obtaining helper data for the user and computing the first key from the biometric measurement and the user helper data.

Authenticating a device and a user

A method of authenticating a device and a user comprises obtaining a device ID for the device, performing a biometric measurement of the user, obtaining helper data for the user, and generating a key from the biometric measurement and helper data. There is then generated a message comprising the key or a component derived from the key, which transmitted to a remote service, and at the service there is carried out the step of authenticating the device and the user with the message. In a preferred embodiment, the generating of the key further comprises generating the key from the device ID.

Device and user authentication

The present invention relates to a method for exchanging data between at least two servers with use of a gateway. Preferably the method is applied to healthcare systems. Each server holds a unique federated identifier, which identifier identifies a single patient (P). Thus, it is possible for the servers to communicate with each other without having to reveal the true identity of patient. By creating one session pseudonym for each pair of providing server () holding relevant patient data and a requesting server () and by formatting an inbound session identifier related to the requesting server and an outbound session identifier related to the providing server for each session pseudonym the servers may communicate anonymous data with each other. The patient data is transferred from the at least one providing server to the requesting server and all session pseudonyms are replaced, in the requesting server, with the identifier of the requesting server for the patient (P).

Growing community of inventors

Eindhoven, Netherlands

Milan Petkovic