Digital Commons Network^™

Offline Mobile Payments Using Public Key Cryptography, Sandro Feuz, Thomas Deselaers

Defensive Publications Series

This disclosure describes techniques for the user of a mobile device to electronically pay another user using a payments app even in the absence of internet connectivity. At the payer’s end, a payment message that includes the payee’s identity, the amount, and other details is generated. The message is encrypted using the payer’s private key and provided to the payee’s device via a suitable mechanism such as peer-to-peer transfer, e.g., via Bluetooth. In another mechanism, the payer’s device generates an encoded image, e.g., a QR code, from the encrypted message. The message and/or the code is transferred to the payee’s …

Conversational News Interaction Using Indexing And Linking, Gozde Oznur, T.V Raman

Defensive Publications Series

This disclosure describes techniques that enable conversational news interaction. Per the techniques, a virtual assistant application that is configured to access the latest news, provides summaries of news items to a user on demand in a hands-free or screen-free manner. The user can skim through the recited summaries, and if a news item of interest is found, access greater detail by engaging in a conversation with the virtual assistant, e.g., by asking questions.

Control Loop Injection Moulding Parameters, Verena Blunder

Defensive Publications Series

No abstract provided.

Integrated Apparatus To Validate And Test Leds And Transceiver Ports, Min Zhu, Hanqin Ye, Brice Achkir, Jason Zhang

Defensive Publications Series

Presented herein is an integrated test apparatus that may be used to test both Light Emitting Diode (LED) and transceiver port features of a network device.

Scheduling Policy For Burst Multithreading, N/A

Defensive Publications Series

Modern computers have many CPU cores, but unless the problem to be solved is highly parallel, these CPU cores cannot be used efficiently: some cores are often left sitting idle while the others perform the bulk of the computation. Even for highly parallel problems, for small procedures, the overhead of requesting a thread to receive the processing request and begin execution is comparable to the time of execution thus resulting in little to no benefits from parallel execution. This disclosure describes techniques to improve the efficiency of communications between threads by reducing overhead. Per the techniques, the runnable threads of …

I2c Based Security Ink Supply Smart-Chip Recognition, Hp Inc

Defensive Publications Series

In Thermal Ink printers, Ink supplies include a security chip to properly identify the supplies and control

the remaining ink quantity. This security smart chip is owned by each brand and optimized to ensure the

robustness in front hacker attacks and counterfeiting.

Smart-chip communication with the host printer uses I2C serial bus protocol which is a wide spread

industry standard. HP latest device revision includes new functionality beyond the I2C protocol which

helps the printer in trying to recognize if the smart-chip is original. The printer sends a command to the

smart-chip, which in response pulls down the I2C data …

Graphical Augmentation Of Message Content, Gaurav Menghani, Sean Mccabe

Defensive Publications Series

This disclosure describes techniques for automatic augmentation and/or generation of message content. Per techniques of this disclosure, message content is visually augmented based on content recognition and/or user indication. The visual augmentation includes emphasis of specific message content and/or addition of graphical overlay elements based on the message content or user selection. The visual augmentation is portable across platforms and devices. With user permission and express consent, trained machine learning models are used to detect sentiment being expressed in a message and/or key reference points included in the message. Augmentations are suggested based on the detected sentiment or key reference …

System And Architecture Of A Quantum Key Distribution (Qkd) Service Over Sdn, Santanu Ganguly

Defensive Publications Series

Presented herein is a system for Quantum Key Distribution Service (QKDServ) architecture that utilizes the novel concept of "Quantum Key on demand" (QKoD) to achieve efficient key resource usage in combination with a new concept of quantum key management server (QKMS) technique, where efficient QKoD relies on the QKMS to allocate secret keys for security requirements in a timely manner on demand. This proposed system also provides a novel QKD over SDN architecture where QKMSs are constructed to secure control channels (C-Ch) and data channels (D-Ch). Finally, the techniques presented herein propose a novel dynamic routing, wavelength and key assignment …

Supply Chain Verification Of Hardware Components Using Open-Source Root Of Trust, Vadim Sukhomlinov, Marius Schilder, Andrey Pronin, Randall Spangler

Defensive Publications Series

This publication describes techniques and apparatuses for an open-source silicon-based Root of Trust (RoT) (a security chip, a RoT chip) solution for supporting supply chain verification of hardware components embedded in or on a circuit board (e.g., motherboard). In aspects, an open-source read-only (RO) Component Verifier, which is part of an RO Firmware, is provided to establish trust at all levels, such as a field-modifiable or read-write (RW) Firmware, an operating system (OS), cloud computing, component manufacturers, and so forth. The security chip includes two classes of non-volatile memory (storage): RO non-volatile memory (e.g., RO NVRAM), which is accessible only …

Tintegrated Apparatus To Validate And Test Leds And Transceiver Ports, Min Zhu, Hanqin Ye, Brice Achkir, Jason Zhang

Defensive Publications Series

Presented herein is an integrated test apparatus that may be used to test both Light Emitting Diode (LED) and transceiver port features of a network device.

Method For Fast Bootstrap And Loss Recovery For Clients Connected To A Selective Forwarding Unit (Sfu), Jacques Samain, Mohammed Hawari, Andre Surcouf

Defensive Publications Series

Proposed herein is a technique to reduce the time to obtain an I-frame for video conferencing participants that are unable to decode video stream(s) of the main active speaker(s) by decoding video stream(s) of the main active speaker(s) at a Selective Forwarding Unit (SFU) and re-encoding the video stream(s) using only I-frames. The technique also provides for the ability reduce network traffic by unicasting the I-frames only to participants that may need the I-frames, rather than broadcasting the I-frames to all participants.

Using Sequential Analysis And Search Space Mapping Machine Learning Techniques For Troubleshooting A Software Defined Network Or A Network Function Virtualization Based Network, Sarthak Sharma, Lovepreet Singh

Defensive Publications Series

Proposed herein is a technique to utilize a sequential analysis to map the probability of a sequence of commands executed via Command Line Interface (CLI) in order to determine a root cause of a problem in a network. This technique may provide different paths that can be analyzed in order to debug an issue. The sequential analysis may be performed in tandem with an interpreter model that may read text generated by each command, verify whether there is any problem in a sub-segment, and, upon determining a problem, may enable automatic remediation to the problem.

Dynamic, Per-Tenant Encryption Using Smart Network Interface Cards, Kyle Mestery, Ian Wells, Grzegorz Duraj

Defensive Publications Series

This proposal provides a technique to dynamically encrypt traffic on a per-workload basis on a host from a per-workload virtual switch (vSwitch) to a smart Network Interface Card (NIC). Further, this proposal provides for the ability to utilize the same technique to encrypt traffic between hosts and micro services, thereby facilitating end‑to‑end encryption of workloads for containerized environments.

Automatically Changing Accessibility Settings On An Electronic Device Responsive To Detecting The Presence Of A Hearing Device, Rachel Hausmann, Collin Irwin

Defensive Publications Series

This publication describes techniques and procedures for automatically changing accessibility settings on an electronic device responsive to detecting the presence of a hearing device. For example, detecting a hearing device connected to an electronic device and then performing one or more actions to enhance accessibility services. The actions may include providing a prompt to the user to suggest using different accessibility settings or automatically toggling to a user’s hearing device-dependent accessibility settings. The hearing device-dependent settings may turn on audio enhancement features of the electronic device, such as a screen reader application (screen reader) and speech-to-text functionality. The hearing device-dependent …

Air Gesture Recognition, Jung Hong, Xu Guo, Jove Yuan

Defensive Publications Series

A system is described that enables a computing device (e.g., a mobile phone, a smartwatch, a tablet computer, etc.) to take actions based on a user input received at an interface element, such as a direction of an air gesture input or a duration of the air gesture input. The computing device may use a radio detection and ranging (radar) system to detect air gestures as inputs. An air gesture input refers to any non-touch input detected by the computing device including, for example, any gesture performed in the “air” above or below a surface of the computing device using …

Intelligently Locking A Device Based On Contextual Signals, Jonathan D. Hurwitz, Christina Gilbert

Defensive Publications Series

A system is described that enables a computing device (e.g., a mobile phone, smartwatch, tablet computer, etc.) to detect or couple with a companion computing device to detect various contextual signals and automatically lock the computing device based on the various contextual signals. The computing device may use one or more sensors (e.g., infrared cameras, near-field microwave sensors, cameras, microphones, etc.) to detect user inputs, measure wireless signal characteristics, capture images, determine a location of the computing device, etc. as contextual signals. The computing device may analyze these contextual signals to lock the computing device automatically (i.e., change the computing …

Reconstruction Of Entity Lifetime Summaries From Autosupport (Asup) Configuration And Logs, Geetha Srikantan

Defensive Publications Series

Presented herein are techniques for rapid reconstruction of entity lifetime/ lifecycle summaries (lifetime of entities) from voluminous AutoSupport (ASUP) bundles.

Recovery And Upgrade Of A Device Using An Auxiliary Device, Sudha Broslawsky, Jes Klinke, Shelley Chen, Howard Lee, Julius Werner

Defensive Publications Series

A laptop or other device that breaks down or freezes, e.g., due to malicious software or malfunction, can be made operational again if it returns to a known healthy state. However, the present state of such a device prevents it from autonomously recovering, upgrading to a stable software version, establishing an internet connection to recover or upgrade, or from reliably identifying itself from the contents of its RAM. Per the techniques of this disclosure, an auxiliary device, e.g., a mobile device, reads the read-only memory of the device-under-repair to determine its make, model, and other parameters. A recent, stable operating …

Protecting Against Malicious Logins On Virtual Machines Using Blockchain, Sarthak Sharma, Lovepreet Singh, Yegappan Lakshmanan

Defensive Publications Series

Presented herein are techniques that involve utilizing a blockchain-based methodology that provides a defense against rollback attacks on a virtual machine and is scalable for other application areas. In one example, a solution is provided to avoid rollback attacks during restoration of a virtual machine under the assumption of a malicious host and hypervisor. Techniques presented herein also address problems associated with an untrusted host under certain assumptions.

Overhead Collision Alerts And Overhead-Obstacle Aware Navigation Planning Using Onboard Sensors And Vehicle-To-Vehicle Communication, Yan Mayster, Brian Shucker

Defensive Publications Series

A common type of single-vehicle accident involves a vehicle entering a passageway with insufficient clearance. Variable vehicle dimensions, e.g., oversized trucks, automobiles with roof-mounted bicycles, etc. pose a special challenge since the dimensions of the vehicle are non-standard for just the duration of the trip. Little is done today to alert drivers of impending overhead collisions. Vehicles today utilize no more than clearance lights to signal their oversize dimensions to other vehicles. Navigation tools that account for low-ceiling passageways do not account for non-standard dimensions. This disclosure describes the use of cameras and LiDAR sensors to determine both the dimensions …

Optimized Simultaneous Authentication Of Equals (Sae) Identity Pre-Shared Key (Ipsk), Abhishek Dhammawat, Shreshta Besagarahalli Manu, Namsoo Kim, Mansi Jain

Defensive Publications Series

Presented here are techniques for the residential deployment of common Wi-Fi® services with an optimized Simultaneous Authentication of Equals (SAE) Identity Pre-Shared Key (iPSK) flow. The techniques presented herein avoid the use of an Authentication, Authorization, and Accounting (AAA) server for clients whose entries are absent through the upfront use of bloom filter information provided by an AAA server. The techniques presented herein can also be used for Wi-Fi Protected Access II (WPA2) iPSK optimization or SAE (Wi-Fi® Protected Access 3 (WPA3) personal), which has more latency sensitive call flow due to SAE auth commit timeouts consideration.

On-Demand Content Generation And Insertion During Content Consumption, Victor Carbune, Alex Damian

Defensive Publications Series

Consumers of media content such as audio or video often like some parts of the content more compared to other parts. Currently, a user must accept the choices of the content creators regarding the number of different parts of the content that match the user’s preference. This disclosure describes techniques for on-demand generation and/or insertion of media content at the time of media consumption. To this end, users are provided options that can be invoked to generate additional content similar to the content the user is currently consuming.

Authentication Of Application Flows In Software Defined Network Deployments Using A Transaction Model, Niranjan M. M, Nagaraj Kenchaiah

Defensive Publications Series

As Software Defined Networking (SDN) enables third party applications to be integrated into the architecture, a malicious application could have as much of a detrimental effect on the network as a compromised controller. In order to avoid the deployment of malicious/compromised applications, controllers and applications should establish a trusted connection and authenticate the identity of applications and their flows before exchanging control messages. Application flows may be considered network configurations sent by applications that are managed by controllers, which install network configurations into switches. Without authentication, applications may inject malicious configurations into network devices at will, which could reduce network …

Node And Service Discovery In Wireless Local Area Network Controller Cluster Architectures Using Hyperledger, Niranjan M. M, Nagaraj Kenchaiah, Vijay Kothamasu, Ramachandra Murthy

Defensive Publications Series

In the wireless cluster deployments, node discovery is a challenge. Further, it can be more challenging to discover the services running in such deployments. There are existing methods which use "client side discovery" and "server side discovery" that need a centralized "Service Registry" to maintain all available service instances. Presented herein are techniques that provide for the utilization of a private blockchain and HyperLedger in order to discover nodes and their services in wireless cluster deployments. Techniques of this proposal may provide for de‑centralizing node and service discovery in wireless cluster deployments without compromising authentication and security aspects. In one …

Trustworthiness Among Controllers And Switches In Multi-Provider Software Defined Network Deployments Using A Trusted Platform Module (Tpm) And Secure Ledger, Niranjan M. M, Nagaraj Kenchaiah

Defensive Publications Series

The OpenFlow® protocol especially OpenFlow® Discovery Protocol (OFDP) utilizes clear text Link Layer Discovery Protocol (LLDP) message exchanges to discover network topology. Such exchanges lack security and may lead to network attacks such as LLDP flooding, link fabrication, etc. Currently, the OpenFlow® protocol both in the case of discovery (OFDP) as well during subsequent communication between a controller and a switch (even with Transport Layer Security (TLS)) does not offer a way to understand whether or not a discovered controller or switch is a trustworthy device. Presented herein are techniques that provide Trusted Platform Module (TPM) and blockchain-based trust establishment …

Secure And Efficient Method To Distribute Configurations In Wireless Cluster Deployments Using Hyper Ledger, Niranjan M. M, Nagaraj Kenchaiah

Defensive Publications Series

An enterprise wireless clustering deployment is comprises of cluster of Wireless Local Area Network (LAN) Controllers (WLCs), intended to provide collaborative services such as load balancing of Access Points (APs), distributed mDNS gateway, etc. Since these cluster deployments are typically very large, configuring individual WLCs is difficult. Presented herein are techniques to incorporate WLC cluster deployments with an authenticated distributed ledger to securely store the configuration and subsequent changes (e.g., only maintain changes from the previous one, using dictionary method: key-value pair to identify the difference). This avoids the use of control Datagram Transport Layer Security (DTLS) connection between AP …

Communication Bus For Embedded Sensor Systems, Hp Inc

Defensive Publications Series

A communications bus using features of both I2C and SPI topologies enables

communications between a master and multiple slaves at high data rates over a span of

several feet.

Browser With Smart Search In Page Button, Benjamin Azose, Kathleen Brennan, Phd

Defensive Publications Series

Web browsers offer find in page functionality to search for a phrase within the content of a webpage. However, this requires the user to access the menu option and type the phrase which is a cumbersome process on smartphones or other devices with small screens and/or limited input capabilities. Per techniques of this disclosure, a readily accessible option, e.g., a displayed button, corresponding to a likely search phrase is provided as part of the browser user interface, thus simplifying the search process. When the user permits, the likely search phrase is determined based on prior searches by the user.

Optimized Simultaneous Authentication Of Equals (Sae) Identity Pre-Shared Key (Ipsk), Abhishek Dhammawat, Shreshta Besagarahalli Manu, Namsoo Kim, Mansi Jain

Defensive Publications Series

Presented here are techniques for the residential deployment of common Wi-Fi® services with an optimized Simultaneous Authentication of Equals (SAE) Identity Pre-Shared Key (iPSK) flow. The techniques presented herein avoid the use of an Authentication, Authorization, and Accounting (AAA) server for clients whose entries are absent through the upfront use of bloom filter information provided by an AAA server. The techniques presented herein can also be used for Wi-Fi Protected Access II (WPA2) iPSK optimization or SAE (Wi-Fi® Protected Access 3 (WPA3) personal), which has more latency sensitive call flow due to SAE auth commit timeouts consideration.

Directing Users To An Available Parking Spot At An Optimal Location Near The Destination, Adalberto Foresti

Defensive Publications Series

High demand for parking generated by the large numbers of people simultaneously looking for parking within the same area often makes it tedious and difficult to find a parking spot, leading to delays and frustration. Individual drivers typically attempt to find a parking spot closest to an event venue. Finding a parking spot via such an approach requires luck and timing. Many drivers tend to overestimate their luck, thus adding to congestion and wasting more time in the process of finding a parking space. To address these issues, this disclosure describes techniques that use real-time information on available parking spaces …