Sequitur Labs, Inc.

Semiconductor Components Industries, LLC

Avago Technologies General IP Pte, Ltd.

Agilnet Technologies, Inc.

Paul Chenard

Philip Attfield

Simon Curry

Vincent Ting

Julia Narvaez

Mark Reed

Michael Thomas Hendrick

Daniel Schaffner

Robert Komar

David Baar

Gregory Frank Carlson

James Daren Bledsoe

Todd Alan McClelland

Patrick Alan McKinley

Laura Elisabeth Simmons

Dwight Poplin

Michael G Kelly

Ignacio Jose Perez

Thomas Page Bruch

Revathi Uma Polisetti

Raymond Jensen Hasler

John Walter Neave

Abhijeet Rane

Daniel I Croft

Giridhar Venkat

Shelly Rose Reasoner

Patrick A Mckinley

A method for verifying a set of policy instructions to be used by a policy decision point (PDP) in adjudicating access requests to protected resources. The policy instructions are in the form of Horn clauses or conditional tag-expressions that are validated against a known test policy or desired outcome. The policy instructions are then compiled into aggregate form. When a plurality of policy instructions creates a conflict, the policy instructions are hierarchically organized to resolve said conflict.

System and method for secure, policy-based access control for mobile computing devices

A system for controlling file access on a mobile computing device. Policy conditions are held at a policy decision point (PDP) and can be dynamically modified at run-time. Access requests to a file or set of files are intercepted by an agent that subsequently brokers the adjudication of said request via a secure, encrypted and hidden back-channel where the requestor is never allowed access to or knowledge of either the adjudication process or the parameters associated with adjudication. The PDP then returns either an access approval or denial based on said policy conditions.

An imaging system may include transform circuitry to transform a captured input image into desired output images. In some applications, it may be desired to transition between a first output image and a second output image that have been respectively produced using first and second transforms. To perform this transition gradually, the transform circuitry may include a transform processor and an interpolation processor that produce discrete intermediate output images between the first output image and the second output image. The transform processor may generate a set of individual transforms between the first transform and the second transform or may interpolate between the first transform and the second transform to produce interpolated transforms. In either case, the transform circuitry may produce the intermediate output images using the produced transforms, and the output images may be output in a continuous stream to gradually transition between the first and second output images.

Transform processors for gradually switching between image transforms

A system and methods for context-aware and situation-aware secure, policy-based access control for computing devices. The invention enhances the previously disclosed policy-based control system by adding contextual information to the set of resources by which a policy decision point can adjudicate a query to execute a transaction or to access a secure resource. Policy information points are able to store information collected over time related to resources under the control of the system. The system can further include an analytical processing engine capable of inferring new information from existing information that also can be used by the decision points. The policy information points provide context to the decision. They are also able to consider and include information that is external to the system or detected outside the system itself.

System and methods for context-aware and situation-aware secure, policy-based access control for computing devices

A system and method for hardware implementations of policy-based secure computing environments for Internet enabled devices. The present invention facilitates a secure computing environment for any Internet enabled device where policy rules can be described as hardware components that allow or deny access to resources on the device. A compiler produces a hardware description language (HDL) of the hardware components based on given policy rules for that component. The system may be partially or completely implemented in hardware to address inherent limitations of a software only solution. The invention provides greater flexibility to the overall system in terms of performance, security, and expressiveness of the policy rules that must be executed.

Hardware implementation methods and system for secure, policy-based access control for computing devices

A system and method for policy-based active Data Loss Prevention (DLP) using a two-step process to first determine if an attempt to access a data object is governed by DLP policy, and if so, then applying the DLP policy to either allow or deny access. Attempts by an agent to access, create, modify, or distribute a data object are trapped by a policy execution point. A first query determines if DLP policies govern that access request. If they do, then the metadata is decrypted to form a second query to a policy decision point to adjudicate the access request. If the access request is allowed, then a second key is provided to decrypt the data object for further processing. The system further provides for the encryption of unencrypted data objects to protect them for all future access queries.

System and methods for policy-based active data loss prevention

Systems and methods for secure, policy-based, access control and management of mobile computing devices, including policy decision enforcement mechanisms, device and private network presence testing, aspects of file system controls, policy set sanity checking algorithms, performance optimizations.

Policy-based client-server systems and methods for attestation in managing and securing mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trusted expert parties and authorities within the expression and enforcement of policies for controlling use of, and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, as well as potential business models for attestation used in such a policy-based system. The system of the present invention resolves attestation record conflicts using digital certificates and digital signatures.

System and methods for secure utilization of attestation in policy-based decision making for mobile device management and security

An autonomous and adaptive method and system for secure, policy-based control of remote and locally controlled computing devices. The invention uses a policy-based access control mechanism to achieve adaptive and dynamic behavior modification based on the context of the local operating environment of the computing device. The modification system assesses the desirability of actions or outcomes as determined by the policy rules and modifies them accordingly, thus altering the behavior of the computing device. The system can utilize a machine learning technique, pattern matching and heuristic evaluation. When applied to the control of robotic and autonomous devices, the system allows the robot to offload adjudication to a remote system and also facilitates cooperative behaviors between robots operating in dynamic environments.

Autonomous and adaptive methods and system for secure, policy-based control of remote and locally controlled computing devices

Policy-based client-server systems and methods for attestation in managing and securing mobile computing devices. Attestation provides the means to make efficient, secure, and reproducible use of knowledge possessed by trusted expert parties and authorities within the expression and enforcement of policies for controlling use of, and access to, onboard software and hardware, network capabilities, and remote assets and services. Aspects of secure attestation of applications that use shared and dynamically loaded libraries are presented, as well as potential business models for attestation used in such a policy-based system.

A multi-chip package includes a package substrate. First and second semiconductor die are formed on the package substrate. The first and the second semiconductor die are configured to communicate with each other via a high-speed serial communications protocol.

Multi-chip package with high-speed serial communications between semiconductor die

The present invention is an integrated system on a chip that combines wireless, graphics, and multimedia. The graphics and multimedia features may be programmed by the end user while restricting programmability of the wireless features.

Growing community of inventors

Corvallis, OR, United States of America

Paul Chenard