Emc Corporation

Other

Emc IP Holding Company LLC

Sean Patrick Doyle

Nikolaos Triandopoulos

Kevin Bowers

Marten Van Dijk

Samuel Curry

Riaz Zolfonoon

Michael J O'Malley

Ari Juels

Yedidya Dotan

William Duane

Lawrence N Friedman

John Gordon Brainard

Eyal Kolman

Mark C Russell

Charles T Russell

Jaime Settles

A technique of supporting multi-factor authentication uses a database server. The technique involves receiving suspicious user activity data from a first set of authentication servers and storing the suspicious user activity data from the first set of authentication servers, as sharable authentication data, in a database of the database server. The technique further involves providing the sharable authentication data from the database to a second set of authentication servers. Each authentication server of the second set of authentication servers performs multi-factor authentication operations based on (i) local authentication data which is gathered by that authentication server and (ii) the sharable authentication data provided from the database. Accordingly, useful authentication data from one authentication server (e.g., a network address of a computer which mischievously attempts to probe or infiltrate that authentication server) can be shared with other authentication servers to enhance their ability to identify fraudsters.

Techniques for sharing authentication data among authentication servers

A technique controls a soft token running within an electronic apparatus. The technique involves providing an initial series of authentication codes based on a first set of machine states. The initial series of authentication codes is provided from the electronic apparatus to a server through a forward channel to authenticate a user. The technique further involves receiving a command from the server through a reverse channel between the electronic apparatus and the server. The reverse channel provides communications in a direction opposite to that of the forward channel. The technique further involves changing the first set of machine states to a second set of machine states in response to the command, and providing a new series of authentication codes based on the second set of machine states. The new series of authentication codes is provided from the electronic apparatus to the server through the forward channel for user authentication.

Controlling a soft token running within an electronic apparatus

An improved technique for managing access of a user of a computing machine to a remote network collects device posture information about the user's mobile device. The mobile device runs a soft token, and the collected posture information pertains to various aspects of the mobile device, such as the mobile device's hardware, software, environment, and/or users, for example. The server applies the collected device posture information along with token codes from the soft token in authenticating the user to the remote network.

Managing user access with mobile device posture

A temporary, disposable shoe cover for bowling includes an upper, a sole having a first sole portion and a second sole portion, and a retainer. The upper is made of a fabric. A bottom opening of the upper is attached to a perimeter of the sole. A top opening of the upper is adapted to receive the user's shoe and/or foot. The retainer is attached to (i.e., at or near) the top opening of the upper and is operable to retain the shoe cover on the user's shoe and/or foot. The first sole portion is on an anterior portion of the sole and made of a low friction fabric (e.g., felt, cotton, or a nonwoven fabric). The second sole portion is on a posterior portion of the sole and made of a high friction fabric (e.g., rubber, rubber impregnated cotton, or flannel backed cotton with nonskid vinyl or rubber dots).

Disposable shoe cover for bowling

A technique for detecting unauthorized copies of a soft token that runs on a mobile device includes generating a set of random bits on the mobile device and providing samples of the set of random bits, as well as token codes from the soft token, for delivery to a server during authentication requests. The server acquires the set of random bits of the mobile device, or learns the set of random bits over the course of multiple login attempts. Thereafter, the server predicts values of the samples of the set of random bits and tests actual samples arriving in connection with subsequent authentication requests. Mismatches between predicted samples and received samples indicate discrepancies between the random bits of the device providing the samples and the random bits of the mobile device, and thus indicate unauthorized soft token copies.

Detecting soft token copies

A technique provides authentication codes to authenticate a user to an authentication server. The technique involves generating, by an electronic apparatus (e.g., a smart phone, a tablet, a laptop, etc.), token codes from a cryptographic key. The technique further involves obtaining biometric measurements from a user, and outputting composite passcodes as the authentication codes. The composite passcodes include the token codes and biometric factors based on the biometric measurements. Additionally, the token codes and the biometric factors of the composite passcodes operate as authentication inputs to user authentication operations performed by the authentication server. In some arrangements, the biometric factors are results of facial recognition (e.g., via a camera), voice recognition (e.g., via a microphone), gate recognition (e.g., via an accelerometer), touch recognition and/or typing recognition (e.g., via a touchscreen or keyboard), combinations thereof, etc.

Providing authentication codes which include token codes and biometric factors

An improved technique for assessing the security status of a device on which a soft token is run collects device posture information from the device running the soft token and initiates transmission of the device posture information to a server to be used in assessing whether the device has been subjected to malicious activity. The device posture information may relate to the software status, hardware status, and/or environmental context of the device. In some examples, the device posture information is transmitted to the server directly. In other examples, the device posture information is transmitted to the server via auxiliary bits embedded in passcodes displayed to the user, which the user may read and transfer to the server as part of authentication requests. The server may apply the device posture information in a number of areas, including, for example, authentication management, risk assessment, and/or security analytics.

Soft token posture assessment

A method of manufacturing a channeled wall fluid apparatus ( ) is disclosed. The method includes the step of providing at least one rib ( ) on one of either a liner ( ) having a length or an interior surface of at least a first mold ( ). The method also includes the step of placing the first mold around the liner to form a gap ( ) between the first mold and the liner. A removable casting material ( ) is inserted within the gap. The method also includes removing the removable casting material from within the gap to form at least one channel ( ) extending at least a portion of the length of the liner.

Method of producing a channeled wall fluid control apparatus

A visual device for simulating the motion of a clock pendulum consisting of a series of light emitting diodes having the property of emitting two distinct colors and electronic logic arranged to activate sequentially the series in one color in one direction and in the other color in the opposite direction.

Growing community of inventors

Edmonds, WA, United States of America

Sean Patrick Doyle