Antique Books, Inc.

Seagate Technology Incorporated

Other

Wave Systems, Inc.

Visual Understanding Systems, Inc.

Robert H Thibadeau, Sr

Justin D Donnell

Robert Thibadeau, Jr

Laszlo Hars

William Preston Goodwill

John R Nestor

Scott Chesser Marks

Donnell M Heyse

Thomas John Schwartzkopf

Scott C Marks

Jr Robert Thibadeau

Wallets for cryptocurrencies and other digital currencies combine multiple digital currency accounts into a wallet and manage multiple other wallets. The accounts include accounts for different cryptocurrencies, different distributed finance accounts, different credit or debit cards, and different bank accounts. Multiple other wallets may be managed from a master wallet with more limited instances of the accounts, rules for authorization, wallet activation, location tracking, copying, and destruction rules under control of specific wallets managed ultimately by the master wallet. These capabilities fit in secure storage devices for cold hard storage of the master. Different wallet copies are distributed for other cold hard storage, hot hard storage, cold soft storage or hot soft storage instances of these children wallets. With multiple wallets sharing subsets of functionality with respect to different wallet accounts, the usability, security, privacy, and versatility of wallets for digital currency is greatly improved over existing wallet offerings.

Method and system for hard cryptowallets

Systems and methods for advanced data and program protection are provided. Some embodiments extend the data-at-rest protection naturally provided by some self-encrypting drives in order to provide additional assurances to data-in-motion and data-in-use in the host computer to which the attached storage device is attached. In some embodiments, this protection is available even if only intermittently attached, and it requires no software to be installed on the host machines because the software run on the host is run in the host off the attached storage drive itself.

Attached storage device for enhanced data and program protection

Systems and methods for initial provisioning through shared Proofs of Knowledge (PoKs) and crowdsourced identification are provided. In some embodiments, a method of sharing a PoK between a first Relying Party (RP) server and a second RP server includes receiving, by the first RP server, a request from a client device by a user for sharing the PoK. The method also includes causing, by the first RP server, the PoK to be provided to the client device and receiving, by the second RP server, a request from the client device to use the shared PoK for authentication of the user. In this way, the user may be provided additional convenience by allowing the reuse of the shared PoK. Also, depending on the number of RP servers that accept the shared PoK, the user may also be provided a degree of crowdsourced identification.

Initial provisioning through shared proofs of knowledge and crowdsourced identification

Systems and methods for encryption management for storage devices are disclosed. A method of operation of a storage device includes receiving a first request from a client device by a user for a first interaction and authenticating that the user is permitted for the first interaction with the storage device. The method includes receiving a second request for a second interaction with the storage device and performing advanced capabilities testing on the user based on the second interaction. Based on the advanced capabilities testing, the method includes permitting the user to complete the second interaction. In this way, additional safeguards may be provided to prevent the unintentional damage or destruction of data stored on the storage device. This may include testing that the user is in the right state of mind and/or ensuring that the user is aware of the consequences of the requested interaction with the storage device.

Encryption management for storage devices

Methods and devices for vehicular storage security are disclosed. In some embodiments, a method of operation of a storage device includes determining if there is at least one pending command. In response to determining that there is at least one pending command, the method includes configuring a next command of the at least one pending command, where configuring the next command includes determining if one or more other storage devices are a target of the next command. If one or more other storage devices are a target of the next command, the method includes determining if there are any remaining targets of the next command and delivering the pending command to a next target of the remaining targets. In this manner, complex storage systems may be kept secure.

Method and device for vehicular storage security

Embodiments described herein relate to a server computer operable to provide a proof of knowledge service. In some embodiments, the server computer includes processor(s) and memory containing instructions executable by the processor(s) such that the server computer is operable to authenticate a user on behalf of a relying party server. The server computer is further operable to obtain results of one or more tests from a client device of the user. The server computer is further operable to send one or more instructions to the relying party server in accordance with the results of the one or more tests, where the one or more instructions have been predefined by the user and define one or more actions to be taken by the relying party server in an event where the user does not pass the one or more tests.

Advanced proofs of knowledge for the web

Embodiments described herein relate to a device operable to process input for a picture password for proof of knowledge. In some embodiments, the device includes a display, an input subsystem, processor(s), and memory containing instructions executable by the processor(s) such that the device is operative to display, on the display of the device, an image for the picture password proof of knowledge. The image is associated with an overlaid grid comprising a plurality of elements, and each element corresponds to a distinct area of the image. The device is further operative to, determine an offset to be used and, in response to receiving an input via the input subsystem at a first location of the display, highlight an element of the overlaid grid at a second location on the first image on the display. The second location is offset from the first location by the offset.

Method and system of providing a picture password for relatively smaller displays

Embodiments described herein relate to securing the privacy of knowledge used to authenticate a user (i.e., Proof of Knowledge (PoK) test(s)). In some embodiments, a client device is operable to receive a first encryption key and encrypted test(s) from a PoK server. The client device also receives a second encryption key from a Relying Party (RP) server. The client device can decrypt the encrypted test(s) by using the first encryption key and the second encryption key to thereby render decrypted test(s). The client device is further operable to obtain answer(s) for the decrypted test(s), send a communication to the PoK server based on the answer(s), and receive a communication from the RP server that authorizes a user of the client device to access service(s) administered by the RP server.

Methods and systems for securing proofs of knowledge for privacy

Antialiasing for picture passwords and other touch displays is disclosed. In some embodiments a client device for authenticating a user is operable to obtain a sequence of input actions for an image and obtain a partial hash from a Proof of Knowledge (PoK) server where the partial hash is part of a hash used for authentication of the user. The client device is also operable to calculate a hash for the sequence and determine if a part of the hash matches the partial hash. If the part of the hash matches the partial hash, the client device sends a communication to the PoK server to authenticate the user based on the hash for the sequence of the one or more input actions and obtain a response indicating whether the user is authenticated. In this way, sending some hashes to the proof of knowledge server may not be necessary, saving resources.

Antialiasing for picture passwords and other touch displays

A server provides a picture password proof of knowledge. The server includes a processor creating a user identifier when communicating with a relying party (RP) server, sending the identifier to the RP server, creating a login token in response to a user authentication request originating from a client browser (CB), sending a web address containing the login token to the RP server, receiving and authenticating actions from the CB regarding the proof of knowledge, generating and sending an authentication token to the CB responsive to the received and authenticated actions, receiving from the RP server a request for an identification token, the request including the authentication token, and generating and sending the identification token to the RP server to enable the user at the CB to be verified and logged-in to the RP server.

Method and system of providing a picture password proof of knowledge as a web service

A method of protecting information in a data storage device is provided. The method includes receiving, in the data storage device, encrypted data via a host computer in which the data storage device is employed. The encrypted data is then decrypted, and re-encrypted, in the data storage device, either before storage or just before data is transferred back to the host computer. The decryption and re-encryption (transcription) is performed substantially independently of the host computer. In addition, a data storage device, readable by a computer system, for implementing the above method for protecting information is provided.

Growing community of inventors

Pittsburgh, PA, United States of America

Robert H Thibadeau, Sr