International Business Machines Corporation

Disney Enterprises, Inc.

Eth Zurich (eidgenossische Technische Hochschule Zurich)

Eth Zurich (eidgenoessische Technische Hochschule Zurich)

Thomas R Gross

Jan Leonard Camenisch

Guenter Karjoth

Dieter M Sommer

Stefan Mangold

Dirk Husemann

Jan Leonhard Camenisch

Anthony Bussani

Fabio Zünd

Thomas Scott Heydt-Benjamin

Patrik Bichsel

Roman Frigg

Birgit Monika Pfitzmann

Alexander Sorkine Hornung

Markus H Gross

Robert Walker Sumner

Alanson P Sample

Matthias Schunter

Anthony Scott Moran

Christopher J Giblin

Erich M Ruetsche

Giorgio Corbellini

Yael Pritch

Roberto Aiello

Michael Backes

Ansgar Schmidt

Benjamin Buergisser

Gergely Vakulya

Brook M Lovatt

Virag Varga

Stefan Matthias Schmid

This disclosure presents systems and methods to provide an interactive environment in response to touch-based inputs. A first body channel communication device coupled to a user may transmit and/or receive signals configured to be propagated along skin of the user such that the skin of the user comprises a signal transmission path. A second body channel communication device coupled to an interaction entity may be configured to transmit and/or receive signals configured to be propagated along the skin of the user along the signal transmission path. A presentation device may present images of virtual content to the user. Information may be communicated between the first body channel communication device, the second body channel communication device, and the presentation device so that virtual content specific to the interaction entity may be presented to augment an appearance of the interaction entity.

Systems and methods to provide an interactive environment in response to touch-based inputs

A policy data structure defines predetermined authorizations, each relating to authorization of at least one user to access at least one resource as well as to dynamic access requests. Each dynamic access request indicates a condition to be satisfied by a respective set of attributes associated with a user request to access a resource and for the request to be granted in absence of an authorization determinative of the request. If the structure does not define an authorization for a request to access a resource, it is determined whether the structure defines a dynamic access requirement determinative for the request, and if so, whether to grant the request in accordance with the respective set of attributes associated with the request. For at least one request, after determining whether to grant the request, a dynamic authorization relating to authorization to access the resource within the request is added to the structure.

Access control in data processing systems

Access control in data processing system

Shaking patterns and/or environmental information associated with real-world handheld devices may form a basis for enabling authentication and/or effectuating events in a virtual environment. The handheld devices may include toys and/or other object that can be used to play. The handheld devices may be associated with the virtual environment in that individual handheld devices may share an appearance and/or theme with an avatar, a virtual object, and/or other element within the virtual environment. Shaking a pair of handheld devices together may facilitate authentication of the handheld devices with respect to the virtual environment and/or effectuate one or more events within the virtual environment. Shake patterns may be used in conjunction with geo-location and/or environmental information to improve pairing between handheld devices.

Enabling authentication and/or effectuating events in virtual environments based on shaking patterns and/or environmental information associated with real-world handheld devices

Methods for content-aware image compression are disclosed. One method comprises the steps of non-uniformly downscaling an original input image according to a saliency map, creating a residual image, encoding the residual image and downscaled input image, and transmitting the residual image and downscaled input image. The encoded image components are transmitted to a receiver. Downscaling may be performed using an aspect ratio that is automatically calculated from the saliency map. The saliency map may be based on an algorithm specified at an encoder or on regions of interest selected by a plurality of users of receivers that receive the transmitted encoded image components.

Content-aware image compression method

LEDs that transmit or receive data in a VLC channel may create a flickering effect which is caused by the human eye being able to perceive the fluctuations of the light intensity in a LED. To prevent flickering such that the LED is perceived as being illuminated at a constant intensity, the LEDs may emit light based on a pattern of dark and energy slots. During the dark slots, the LEDs may be reversed bias to determine how much light is received. Based on comparing the light received, each VLC system may synchronize respective clocks such that the dark slots align. The VLC systems may then transmit a data frame preamble instructing the other VLC systems to cease synchronization and use the dark slots to receive the data from the data frame. While transmitting the data frame, the VLC systems may continue to use the energy slots to prevent flicker.

Reliable visibile light communication with dark light synchronization

Shaking patterns and/or environmental information associated with real-world handheld devices may form a basis for enabling authentication and/or effectuating events in a virtual environment. The handheld devices may include toys and/or other object that can be used to play. The handheld devices may be associated with the virtual environment in that individual handheld devices may share an appearance and/or theme with an avatar, a virtual object, and/or other element within the virtual environment. Shaking a pair of handheld devices together may facilitate authentication of the handheld devices with respect to the virtual environment and/or effectuate one or more events within the virtual environment. By way of non-limiting example, two avatars may dance together or become friends in the virtual environment responsive to two corresponding handheld devices being shaken together. Shake patterns may be used in conjunction with geo-location and/or environmental information to improve pairing between handheld devices.

Processes are described for provision of privacy-sensitive sample analysis results to a sample provider. The sample provider generates a cryptographic commitment encoding a secret value, r, and a sample identifier, s, associated with a sample container. The sample provider provides the commitment to an analysis provider in association with the sample container containing a sample for analysis. The analysis provider analyzes the sample to obtain a set of analysis results corresponding to the sample identifier, s, and generates a cryptographic pre-credential, &#x3c3;', corresponding to the sample identifier, s. The pre-credential, &#x3c3;&#x2032;, encodes the set of analysis results and the commitment. Completion of the pre-credential, &#x3c3;&#x2032;, requires knowledge of the secret value, r, in the commitment. In response to cryptographic proof of knowledge by the sample provider of at least the secret value, r, in the commitment encoded in the pre-credential, &#x3c3;&#x2032;, corresponding to the sample identifier, s, the analysis provider supplies the pre-credential, &#x3c3;&#x2032;, to the sample provider. The sample provider then completes the pre-credential, &#x3c3;&#x2032; using the secret value, r, to obtain a cryptographic credential, &#x3c3;, encoding the set of analysis results.

Privacy-sensitive sample analysis

Method and apparatus for generating cryptographic credentials certifying user attributes and making cryptographic proofs about attributes encoded in such credentials. Attributes are encoded as prime numbers E in accordance with a predetermined mapping and a cryptographic credential is generated encoding E. To prove that an attribute encoded in a cryptographic credential associated with a proving module of the system is a member of a predetermined set of user attributes, without revealing the attribute in question, the proving module determines the product Q of respective prime numbers corresponding to the attributes in the set in accordance with the predetermined mapping of attributes to prime numbers. The proving module demonstrates to the receiving module possession of a cryptographic credential encoding a secret value that is the prime number E, and then whether this secret value divides the product value Q.

Attributes in cryptographic credentials

Methods and apparatus are provided for cryptographically encoding secret data in a data processing system. The secret data is encoded in accordance with a verifiable encryption process to produce a cryptographic construction (&#x3b8;) having a decryption constraint dependent on the occurrence of a predetermined event. An event-dependent decryption constraint is thereby built into the cryptography, so that there is an intrinsic restriction on the ability to decrypt the encoded secret data which is dependent on occurrence of the predetermined event. Decoding apparatus for such a cryptographic construction is also provided, as well as distributed trust data processing systems providing accountable privacy based on use of such cryptographic constructions.

Cryptographic encoding and decoding of secret data

A system for anonymous separation of duties with credentials includes an identity provider, the identity provider configured to issue anonymous credentials to a user based on one or more attributes of the user; a service provider, the service provider configured to issue a pseudonym to the user based on the user's anonymous credentials, and to associate the user's pseudonym with a step of an instance of a business process hosted on the service provider, the step being completed by the user; and an auditor, the auditor configured to determine if the completion of the step of the instance of the business process by the user is compliant with a separation of duties policy.

Anonymous separation of duties with credentials

Data security devices are provided which store user data and interact with terminal devices to provide information about the stored user data. Security device has memory for storing user data, an interface for transmission of data communications connectable to a data communications network, and a controller. The controller processes a request from the terminal device for information about said user data by first generating a message. The message is generated to permit verification, using secret data, that the message was generated by the controller. The controller sends the message to the terminal device for communication to a publication entity for publication of the message. The controller then receives from the terminal device a cryptographic construction. The controller checks validity of the cryptographic construction for said message, and subsequent supply of the information requested about the user data to the terminal device is then dependent on said cryptographic construction.

Transaction auditing for data security devices

Systems, methods, and devices for operating a multiplex wireless local area network using separated uplink and downlink channels in the 802.11 and television white space (TVWS) spectra are disclosed. Opportunistic detection and use of available TVWS frequency channels allows for fixed and mobile wireless devices to more efficiently use the available wireless bandwidth. By using separated uplink and downlink channels, a fixed wireless device can listen to incoming uplink frames from other mobile and fixed wireless devices and monitor for uplink frame collisions. In the event of an uplink frame collision, the fixed wireless device can immediately send a stop frame in the downlink channel to all involved wireless devices to avoid lost channel time due to the delay caused by most acknowledgement-based collision recovery protocols. Similarly, communicating mobile and fixed wireless devices can transmit and receive data frames in both directions simultaneously.

Growing community of inventors

Rueschlikon, Switzerland

Thomas R Gross