Privacy-secure edge-region digital identity computing for open-loop pixel state control

Abstract

Embodiments of the present disclosure relate to privacy-secure edge region digital identity computing for open-loop pixel state control. A system includes a display control master device, which is located in a central region that communicates with a supplied agent operating on the edge region device. The display control master device can implement master-blind open-loop pixel state control on the edge region device by executing pixel state commands via the supplied agent. The supplied agent operating in the edge region can access unpurified data, which may not be available to the display control master device in the central region. The display control master device can provide conditional pixel state commands via a pixel state control parameter matrix. The supplied agent can identify valid pixel state commands from the conditional pixel state commands based on the unpurified data, and the display control master device is blind to the unpurified data.

Description

[0001] priority

[0002] This application claims priority to U.S. Patent Application No. 16 / 881,989, filed on May 22, 2020, with attorney docket number 15718-678, entitled “Privacy-Secure Edge-Zone Digital Identity EdgeComputing for Open-Loop Pixel-State Control,” which is incorporated herein in its entirety. This application also claims priority to U.S. Provisional Patent Application No. 62 / 910,079, filed on October 3, 2019, with attorney docket number 15718-652, entitled “Digital Identity Edge Computing,” which is incorporated herein in its entirety. Technical Field

[0003] The present disclosure relates to edge region digital identity computing. Background Art

[0004] The rapid development of electronic and communication technologies, driven by overwhelming customer demand, has led to the widespread adoption of electronic transactions, record keeping, and data sharing. As an example, electronically stored and tracked identity information has provided the foundation for big data technologies and enterprises. Improvements in tracking and / or knowledge management attached to such electronically stored and tracked identity information will continue to increase the features and options available to operators involved in data operations. Summary of the invention

[0005] According to some embodiments, a system is provided, comprising: a network interface circuit device configured to establish: a cleansed uplink between an agent supplied by a privacy-safe edge region and a display control master device supplied by a central region, the cleansed uplink being configured to prevent upstream transmission of uncleaned data; and a control master circuit device configured to perform master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master device to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on uncleaned data, the display control master device being blind to the uncleaned data; in response to: the supplied agent being positioned in the privacy-safe edge region; accessing unpurified data in an edge area; the supplied agent determines a valid pixel state command from a command descriptor based on a pixel state control parameter matrix and the unpurified data; the supplied agent causes a change in a pixel state of a device in the edge area based on the valid pixel state command; the supplied agent receives raw feedback input from a user interface of the device in the edge area in response to the changed pixel state; and the supplied agent purifies the raw feedback input to generate purified feedback: receiving the purified feedback input from the supplied agent at a display control master in a central area via a purified uplink; and in response to the purified feedback, sending an unconditional pixel state command, the unconditional pixel state command being configured to generate a confirmed pixel state indicating receipt of the purified feedback.

[0006] According to some embodiments, a method is provided, comprising: at a network interface circuit device, establishing a cleansed uplink between an agent supplied by a privacy-safe edge region and a display control master device supplied by a central region, the cleansed uplink being configured to prevent upstream transmission of unpurified data; and at a control master circuit device, performing master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master device to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on unpurified data, the display control master device being blind to the unpurified data; in response to: the supplied agent being positioned at the privacy-safe edge The device comprises a display control master device in the central area, ...

[0007] According to some embodiments, a product is provided, comprising: a machine-readable medium other than a transient signal; and instructions stored on the machine-readable medium, the instructions being configured to cause a machine, when executed, to: establish, at a network interface circuit device, a cleansed uplink between an agent supplied by a privacy-safe edge region and a display control master supplied by a central region, the cleansed uplink being configured to prevent upstream transmission of uncleaned data; and, at a control master circuit device, perform master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on uncleaned data, the display control master viewing the uncleaned data as the supply agent accesses unpurified data when positioned in the privacy-safe edge area; the supply agent determines a valid pixel state command from a command descriptor based on a pixel state control parameter matrix and the unpurified data; the supply agent causes a change in the pixel state of the edge area device based on the valid pixel state command; the supply agent receives raw feedback input from a user interface of the edge area device in response to the changed pixel state; and the supply agent purifies the raw feedback input to generate purified feedback: receiving the purified feedback input from the supply agent at a display control master in the central area via a purified uplink; and in response to the purified feedback, sending an unconditional pixel state command, the unconditional pixel state command being configured to generate a confirmed pixel state indicating receipt of the purified feedback. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 An example pixel state control environment is shown.

[0009] Figure 2 An example control prime logic is shown.

[0010] Figure 3 An example control master execution environment is shown.

[0011] Figure 4 An example edge region device is shown.

[0012] Figure 5 An example ladder diagram is shown for an example system with physically localized edge regions.

[0013] Figure 6 An example ladder diagram is shown for an example system with logically localized edge regions. DETAILED DESCRIPTION

[0014] In electrical and computer systems, a central control system may control one or more functions on a target device. In some cases, control decisions may be based on feedback data sent back to the central control system from the target device, allowing the central system to adjust control parameters to reflect information collected at the target device, such as local sensor data, without the control decision being available locally to the central control system. Thus, the system operates in an open-loop control state.

[0015] In an example open-loop pixel state control system, a display control prime (e.g., a central display state control system) can control pixel states (e.g., an on-off state, color state, brightness state, or other physically real state of one or more pixels) that constitute at least a portion of a display on an edge region device (e.g., a mobile device within an edge region such as discussed below). For example, the display control prime can cause a set of pixel states that results in the presentation of an interactive display (e.g., a dialog box, an information window, an emergency alert, a commercial offer, an opportunity for an automated service request, or other interactive display).

[0016] In some cases, at the data above the display control master, the display control master may base pixel state control determinations on sensitive data (e.g., unsanitized data discussed below). Therefore, passing sensitive data to the display control master may violate privacy and / or security standards. In order to allow the display control master to implement open-loop control, the display control master may cause / provide the supply of an agent to operate on the controlled device (or within a privacy-safe edge region). By providing a pixel state control parameter matrix that supports conditional pixel state commands, the supplied agent can handle calculations from sensitive data within the privacy-safe edge region. This makes the display control master blind to the sensitive data (e.g., unable to view it), but still allows prime-blind open-loop pixel state control. Therefore, the supplied agent can instead handle the analysis of sensitive data from within the edge region in the display control master.

[0017] The techniques and architectures discussed herein (including edge region implementation, provisioned agents, sanitized uplink establishment and / or control main circuit devices) provide technical solutions (e.g., open-loop pixel state control can be performed without sensitive data portability) for technical problems (e.g., digital edge computing execution and support), thereby improving the operation of the underlying hardware. Further, because the techniques and architectures discussed herein (including edge region implementation, provisioned agents, sanitized uplink establishment and / or control main circuit devices) allow for increased separation of data, these techniques and architectures also improve the security of computers and computing systems that implement these techniques and architectures. Further, the increased privacy afforded by these techniques and architectures provides an improvement over existing market-based solutions.

[0018] In various implementations, protecting data within a defined edge region allows access to data based on pixel state commands (which may include sensitive private data). In various systems, various analytical tools (which may be computationally intensive in some cases) may be used to derive similar data from available data outside the edge region. In other words, in some cases, the data used in the pixel state calculation may be predicted or derived computationally in some cases rather than obtained from the user of its source. However, the accuracy and efficiency of such analytical derivation may be lower than the accuracy and efficiency of directly polling the data source. Therefore, the establishment and implementation of the edge region can improve the accuracy and efficiency of the underlying hardware that performs open-loop pixel state control.

[0019] In various implementations, data sharing control may be implemented by applying homomorphic encryption (e.g., cryptographic techniques) to unpurified data. Homomorphic encryption may allow for the sharing of selected data, data details, metadata, and / or other data features without having to share unpurified data from which such selected data features may be derived or later recreated. Unpurified data may refer to data in a decrypted / unencrypted form on which pixel control state determinations may be performed. For example, unpurified data may include empirical data, test data, survey data, collected data, historical utilization data, sales data, environmental data, industrial data, manufacturing specifications, identity data, reputation data, educational credential data, government record data, or other data on which analytics may be performed.

[0020] Homomorphic encryption schemes can include a class of different encryption schemes. Homomorphic encryption schemes use the homomorphic properties of certain encryption algorithms, such as H m (x), where H m Specifies the homomorphic encryption algorithm. The homomorphic property provides a value where the sum of the encrypted values ​​is equal to the encrypted sum of the values, for example, H m (x)+H m(y) = H m (x+y). Using various known mathematical results from the homomorphic property, the homomorphic property can be used to disclose various characteristics of the underlying data values, such as x and y, without having to disclose x and y. Further, because addition (e.g., ADD operation) and multiplication (e.g., MULT operation) can be performed on the encrypted data without decryption, processing operations such as mathematical or modeling operations can be performed on the data while it is in an encrypted state. Similarly, subtraction operations (e.g., due to: H m (x+y)+-H m (y) = H m (x), so the inverse is performed). Thus, insights can be gleaned from relevant aggregated data and / or sanitized data (e.g., selected information that preserves privacy) without disclosing the unsanitized data.

[0021] In some cases, homomorphic encryption and / or other encryption schemes may be implemented to implement a logic region, as discussed below. In some cases, a logic region may be implemented as a secure enclave local to a device (such as an edge region device discussed below). A secure enclave may provide controlled access to data in order to determine actions within an open-loop pixel state control system.

[0022] In some cases, controlled access to the secure enclave may include access to homomorphically encrypted data to allow manipulation and computation without exposing the private data. For example, a secure enclave may provide access to homomorphically encrypted versions of private data, but not the underlying private data. The proxy (discussed below) may perform computations / manipulations on the homomorphically encrypted data while it is encrypted. Secure local logic on the device may cause the enclave to expose the results in unencrypted form after the manipulation (or perform / request the corresponding action without exposing the result). Thus, the underlying data remains protected within the secure enclave (and local to the device) without being exposed to the proxy logic (including some cases where the proxy itself is localized).

[0023] Additionally or alternatively, controlled access to a secure enclave may include access to data of an encryption type that may not necessarily allow operations on the data while in encrypted form. An enclave may be a logical area (which is also physically localized to a specific location on a mobile device) in which private data may be decrypted. Outside the enclave, only data in encrypted form may be allowed. Enclaves may be data-specific, application-specific, or neither. For example, a particular enclave may hold specified private data (photos, contacts, demographic data, financial data, and / or other private data) and mediate access to that data for applications (in some cases all applications) that access that particular data. In some cases, an enclave may hold a variety of unspecified private data for interaction with one or more specific applications. In some cases, an enclave may mediate interactions between unspecified private data and unspecified applications.

[0024] To maintain data privacy and security, edge regions may be defined for an open-loop pixel state control system. The edge regions may be protected such that data traveling from the edge regions (e.g., on an uplink to a display control master) is sanitized. The edge regions may be logically and / or physically localized.

[0025] Logical localization can be defined by logical perimeters that are not necessarily physically localized (e.g., various physical storage locations and processing locations that enforce encryption requirements on a logically localized edge region). In other words, storage locations and processing locations within a logically localized edge region can be physically distributed (in some cases, co-located (at least partially) with the display control host hardware), but the edge region is logically maintained through encryption parameters. For example, homomorphic encryption can be a condition of an example logically localized edge region, but the hardware hosting the processing locations and storage locations of the example edge region can be physically distributed.

[0026] Physical localization can be defined by one or more physical perimeters. For example, specific hardware devices may be entirely (or partially) within an edge region. Therefore, the processing or storage on these devices will be located in the edge region.

[0027] In some cases, edge regions may use both physical and logical localization. For example, physical perimeters and logical perimeters may be defined for edge regions. If storage and / or processing occurs within at least one perimeter, then storage and / or processing may be located in an edge region. In some cases, both physical and logical localization may be used in tandem. Thus, if storage and / or processing occurs within two perimeters, then storage and / or processing may be located in an edge region.

[0028] An edge region device may include a device (or portion of a device) that hosts storage and / or processing within the edge region. An edge region device may include a display having one or more pixels subject to pixel state control by a display control master.

[0029] The central area may include one or more areas outside the edge area, which include hardware implementing the display control host device.

[0030] Figure 1 An example pixel state control environment 100 is shown. In the example pixel state control environment 100, a display control master 112 within a central region 110 has established a sanitized uplink 114 with an edge region provisioned agent 134 on an edge region device 132 in a privacy-safe edge region 130. In this illustrative example, the display control master has also established an edge support downlink 116. The display control master 112 has provided a pixel state control parameter matrix 118 to the provisioned agent. The provisioned agent is further located within a portfolio container 140 on the edge region device 132. The portfolio container 140 may include an isolated space for one or more agents (potentially controlled by multiple different host systems). The portfolio container 140 may include an unsanitized data import channel 142 for moving unsanitized data from the edge region memory 136 into the portfolio container and then to the agent(s) therein.

[0031] In some cases, pre-provisioned agents may be maintained in an agent repository 150 prior to provisioning. The agent repository 150 may include a plurality of different pre-provisioned agents 152 corresponding to different display control host systems (e.g., and different enterprises). Thus, the agent repository may be maintained by a third party that controls neither the edge area device 132 nor the display control host 112. In some cases, the agent repository may include a search function and / or a virtual "app store" type storefront where users can find and install agents for their edge area devices. In some cases, the repository may be pre-provisioned with agents using the pixel state control parameter matrix 118.

[0032] Now refer to Figure 2 , while continuing to refer to Figure 1 , Figure 2 An example control master logic (CPL) 200 is shown, which may define the operation of hardware executed as a control master circuit device.

[0033] The CPL 200 may provide a pixel state control parameter matrix 118 to the provisioning agent 134 (202). The pixel state control parameter matrix may include a data structure (such as a table, self-executing code, machine learning code, or other data structure) that may accept input data (e.g., unpurified data available within the privacy-safe edge region) and identify one or more conditional pixel state commands included within the pixel state control parameter matrix. The conditional pixel state command may include details of display content that may be presented on a display of the edge region device (e.g., thereby controlling the pixel state of the device). The conditionality of the command informs the agent of the conditions under which a particular conditional pixel state command is implemented (e.g., is a valid pixel state command). In other words, the display control master sends the conditional pixel state command as a group in the pixel state control parameter matrix 118, but the display control master is blind to the unpurified data on which the conditionality of the command is based. Therefore, the agent determines which of the commands from the display control master are valid by applying the unpurified data to the pixel state control parameter matrix 118 and determining the conditional pixel state command that matches the condition.

[0034] The CPL 200 may receive cleansing feedback (204) from the provisioned agent 134 on the cleansed uplink. Receipt of this feedback may be contingent upon the agent's execution of the provisioned agent logic (PAL) 250. Thus, execution of the PAL 250 by the agent may not necessarily be affirmatively executed by the CPL 200 (or any entity controlling the CPL 200). Rather, execution of the PAL 250 by the provisioned agent describes specific conditions under which the CPL 200 may receive cleansing feedback on the cleansed uplink.

[0035] Now refer to Figure 2 The PAL 250 of the present invention can access the unsanitized data while localizing the provisioned agent 134 in the privacy-safe edge region (252) before sending the sanitization feedback to the CPL 200. In some cases, the provisioned agent can be located within the composition container 140. To access the unsanitized data from within the composition container 140, the provisioned agent 134 can request to import the unsanitized data through the import channel 142.

[0036] The composition container 140 can enforce import rules. For example, a particular agent within the composition container can have specifically defined access to a particular type of unsanitized data. The composition container 140 (e.g., via the import channel 142) can inspect data passed into the composition container (e.g., to ensure that import rules are followed). For example, an agent maintaining a pixel status display related to automated hotel reservations can access location information from edge zone devices, but is prohibited from requesting education credential information.

[0037] In some cases, the provisioned agents may adhere to pre-access conditions when accessing unsanitized data. For example, the import channel 142 may restrict access to certain types of unsanitized data to agents that have implemented a predetermined level of cryptographic protection. In an example, the import channel 142 may enforce sanitization standards on data bound for sanitized uplinks. In an example, the import channel may force agents to comply with a new or more stringent sanitization scheme (e.g., further restricting the types of data that may be sent to a display control master) before agreeing to send additional unsanitized data.

[0038] In some cases, the supplied agent may complete a reward transaction with the edge area device user before obtaining access to the unpurified data. In some cases, such a rule or transaction may convert the unpurified date to the purified data of the supplied agent or agent group. However, the conversion may be limited. For example, the converted unpurified data may remain unpurified data for agents other than the specific agent or agent group to which the conversion is to be applied.

[0039] Based on the accessed unsanitized data and pixel state control parameter matrix 118, PAL 250 may identify a valid pixel state command (254) from the conditional pixel state commands in pixel state control parameter matrix 118. Based on the valid pixel state command, PAL 250 may cause a change in the state of the pixels of edge area device 132. For example, PAL 250 may cause a change in the physical state of the pixels on the edge area device to display specific content on a display or a portion of a display.

[0040] In response to the changed pixel state, PAL 250 may receive raw feedback from the user interface of the edge area device (256). The raw feedback may include a user tap or button press or other interface device (e.g., such as those in user interface 418 discussed below). Further, the raw feedback may include or be connected to unsanitized data. Thus, PAL 250 may cleanse (e.g., remove unsanitized data) the raw feedback (258) before sending the cleaned feedback to CPL 200 (260) via a cleaned uplink.

[0041] Refer again Figure 2In the CPL 200 of the embodiment of the present invention, the CPL 200 may send an unconditional pixel state command (206) based on the purge feedback. The unconditional pixel state command may be similar (at least in part) to a corrective adjustment based on a feedback loop in an open-loop control system. For example, the unconditional pixel state command may provide an adjustment to a previous display resulting in negative purge feedback (e.g., updating the display with a newer, more attractive promotion). In an example, the unconditional pixel state command may include a command to display a confirmation or acknowledgement after receiving positive purge feedback.

[0042] Figure 3 An example control host execution environment (CPEE) 300 is shown, which may be implemented as a control host circuit device. The CPEE 300 may include system logic 314 to support the tasks described in the present disclosure, such as proxy control and communication. The system logic 314 may include a processor 316, a memory 320, and / or other circuit devices, which may be used to implement the CPL 200, which may provide software support to implement various tasks performed by the CPL 200 (e.g., (at least partially) converting the CPEE 300 into a dedicated control host circuit device). In various implementations, the CPEE 300 may include a mobile device.

[0043] Memory 320 may be used to store parameters 322 and / or model templates 324 used in agent control and communication. Memory 320 may further store rules 321 that may facilitate performance of agent control and communication and / or other tasks.

[0044] The memory 320 may also include applications and structures, such as coded objects, templates, or one or more other data structures, to facilitate the execution of tasks such as agent control and communication and / or other tasks. The CPEE 300 may also include one or more communication interfaces 312, which may support wireless (e.g., Bluetooth, Wi-Fi, WLAN, cellular (3G, 4G, LTE / A)) and / or wired, Ethernet, Gigabit Ethernet, optical networking protocols. The communication interface 312 may support communication with a data source or resource for facilitating the execution of tasks such as agent control and communication and / or other tasks, for example, by a communication layer as a network interface circuit device. Additionally or alternatively, the communication interface 312 may support secure information exchange, such as a secure socket layer (SSL) or a public key encryption-based protocol for sending and receiving purified and / or unpurified data. The CPEE 300 may include a power management circuit device 334 and one or more input interfaces 328.

[0045] CPEE 300 may also include a user interface 318, which may include a human-machine interface and / or a graphical user interface (GUI). A GUI may be used to present interfaces and / or options to facilitate agent and / or front-end management and / or other tasks.

[0046] Figure 4 An example edge area device 132 is shown. The example edge area device 132 can communicate with a base station 402 via a wireless channel 454. In this example, the example edge area device 132 supports one or more subscriber identity modules (SIMs), such as SIM1 402. An electrical and physical interface 406 connects SIM1 202 to the rest of the user equipment hardware, such as through a system bus 410.

[0047] The example edge area device 132 includes a communication interface 412, a system logic 414, and a user interface 418. The system logic 414 may include circuitry and / or hardware that may host a combination of software, firmware, or other executable code. The system logic 414 may be implemented, for example, using one or more systems on a chip (SoC), application specific integrated circuits (ASICs), discrete analog and digital circuits, and other circuitry. The system logic 414 is part of the implementation of any desired functionality in the example edge area device 132. In this regard, as an example, the system logic 414 may include logic that facilitates the following: decoding and playing music and videos (e.g., MP3, MP4, MPEG, AVI, FLAC, AC3, or WAV decoding and playback); running applications; accepting user input; saving and retrieving application data; as an example, establishing, maintaining, and terminating a cellular phone call or data connection for Internet connectivity; establishing, maintaining, and terminating a wireless network connection, a Bluetooth connection, or other connection; and displaying relevant information on the user interface 418. User interface 418 and input 428 may include a graphical user interface, a touch-sensitive display, tactile feedback or other tactile output, voice or facial recognition input, buttons, switches, speakers, and other user interface elements. Additional examples of input 428 include microphones, video and still image cameras, temperature sensors, vibration sensors, rotation and orientation sensors, headphone and microphone input / output sockets, universal serial bus (USB) connectors, memory card slots, radiation sensors (e.g., IR sensors), and other types of inputs.

[0048] The system logic 414 may include one or more processors 416 and memory 420. The memory 420 stores, for example, control instructions 422 that the processor 416 executes to perform the desired functionality of the example edge area device 132. Control parameters 424 provide and specify configuration and operating options for the control instructions 422. Further, the memory 420 may include an isolated composition container 470 that may host various provisioned agents 472. The memory 420 may also store any BT, WiFi, 3G, 4G, 5G, or other data that the edge area device 132 will send or has received through the communication interface 412.

[0049] In various implementations, system power may be provided by a power storage device such as battery 482 .

[0050] In the communication interface 412, radio frequency (RF) transmit (Tx) and receive (Rx) circuitry 430 handles the transmission and reception of signals through one or more antennas 432. The communication interface 412 may include one or more transceivers. The transceiver may be a wireless transceiver that includes modulation / demodulation circuitry, digital-to-analog converters (DACs), shaping tables, analog-to-digital converters (ADCs), filters, waveform shapers, filters, preamplifiers, power amplifiers, and / or other logic for transmitting and receiving through one or more antennas or (for some devices) through a physical (e.g., wired) medium.

[0051] The transmitted and received signals may conform to any of a variety of formats, protocols, modulations (e.g., QPSK, 16-QAM, 64-QAM, or 256-QAM), frequency channels, bit rates, and encodings. As a specific example, the communication interface 412 may include a transceiver that supports transmission and reception under 2G, 3G, BT, WiFi, Universal Mobile Telecommunications System (UMTS), High Speed ​​Packet Access (HSPA)+, and 4G / Long Term Evolution (LTE) and 5G standards. However, the techniques described below are applicable to other wireless communication technologies, whether derived from the Third Generation Partnership Project (3GPP), the GSM Association, 3GPP2, IEEE, or other partners or standards bodies.

[0052] Example Implementation

[0053] The following example implementations are described to illustrate the various principles discussed above. However, the following examples are not intended to be limiting, but in some cases, specific examples are used to help illustrate the above techniques and architectures. Various features of the following example implementations may exist in other implementations and not exist in other implementations. The features of the following example implementations can be combined into various groupings based on the above techniques and architectures.

[0054] Figure 5 An example ladder diagram 500 is shown for an example system having physically localized margin regions that implement various techniques and architectures discussed above. In the example system, an agent provider may correspond to a display control master, an agent store may correspond to an agent repository, a wallet may correspond to a composition container, and an "alt" box may define a physically localized margin region. "Suggestions" may be displayed using pixel state commands.

[0055] Figure 6 An example ladder diagram 600 is shown for another example system having a logically localized margin region that implements the various techniques and architectures discussed above. In the example system, an agent provider may correspond to a display control master, an agent store may correspond to an agent repository, a wallet may correspond to a composition container, and an "alt" box may define a logically localized margin region. A pixel state command may be used to display "suggestions".

[0056] The methods, apparatus, processes, and logic described above may be implemented in many different ways and in many different combinations of hardware and software. For example, all or part of the implementation may be a circuit device including an instruction processor such as a central processing unit (CPU), a microcontroller, or a microprocessor; an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA); or a circuit device including discrete logic or other circuit components, including analog circuit components, digital circuit components, or both; or any combination thereof. As an example, the circuit device may include discrete interconnected hardware components, and / or may be combined on a single integrated circuit die, distributed among multiple integrated circuit dies, or implemented in a multi-chip module (MCM) of multiple integrated circuit dies in a common package.

[0057] The circuit device may also include or access instructions for execution by the circuit device. The instructions may be implemented as signals and / or data streams and / or may be stored in a tangible storage medium other than a transient signal, such as a flash memory, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM); or stored on a disk or optical disk, such as a compact disk read-only memory (CDROM), a hard disk drive (HDD) or other disk or optical disk; or stored in or on another machine-readable medium. Products such as computer program products may specifically include a storage medium and instructions stored in or on the medium, and the instructions, when executed by a circuit device in a device, may cause the device to implement any of the processes described above or illustrated in the accompanying drawings.

[0058] These implementations can be distributed as circuit devices (e.g., hardware and / or a combination of hardware and software) across multiple system components, such as across multiple processors and memories, optionally including multiple distributed processing systems. Parameters, databases, and other data structures can be stored and managed separately, can be merged into a single memory or database, can be logically and physically organized in many different ways, and can be implemented in many different ways, including as data structures such as linked lists, hash tables, arrays, records, objects, or implicit storage mechanisms. Programs can be multiple parts of a single program (e.g., subroutines), separate programs, distributed across multiple memories and processors, or implemented in many different ways, such as in libraries such as shared libraries (e.g., dynamic link libraries DLLs). For example, when executed by circuit devices, a DLL can store instructions to perform any of the processes described above or illustrated in the accompanying drawings.

[0059] Various implementations may use the techniques and architectures described above.

[0060] E1. In an example, a system includes: a network interface circuit device, configured to establish: a clean uplink between an agent supplied by a privacy-safe edge region and a display control master device supplied by a central region, the clean uplink being configured to prevent upstream transmission of uncleaned data; and a control master circuit device, configured to perform master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master device to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on uncleaned data, the display control master device being blind to the uncleaned data; in response to: the supplied agent being positioned at the privacy-safe edge region; accessing unpurified data in an edge area; the supplied agent determines a valid pixel state command from a command descriptor based on a pixel state control parameter matrix and the unpurified data; the supplied agent causes a change in a pixel state of a device in the edge area based on the valid pixel state command; the supplied agent receives raw feedback input from a user interface of the device in the edge area in response to the changed pixel state; and the supplied agent purifies the raw feedback input to generate purified feedback: receiving the purified feedback input from the supplied agent at a display control master in the central area via a purified uplink; and in response to the purified feedback, sending an unconditional pixel state command, the unconditional pixel state command being configured to generate a confirmed pixel state indicating receipt of the purified feedback.

[0061] E2. The system of example E1, wherein the valid pixel state commands are configured to generate an interactive interface on a display of the edge area device.

[0062] E3. The system of example E1 or E2, wherein the controlling main circuitry is configured to pre-provision the provisioned agent to a third party maintained agent repository to support provisioning on the edge region device.

[0063] E4. The system of Example E3 or any of Examples El or E2, wherein the control master circuit device is configured to provide the pixel state control parameter matrix by embedding the pixel state control parameter matrix in a provisioned agent during pre-provisioning.

[0064] E5. The system of any of Examples E1 to E3, wherein the network interface circuitry is further configured to establish an edge support downlink between the provisioned agent and the display control master.

[0065] E6. The system of Example E5 or any of Examples E1 to E4, wherein the control master circuit device is configured to provide the pixel state control parameter matrix by sending the pixel state control parameter matrix to the supplied agent via an edge support downlink.

[0066] E7. The system of any of Examples E1 to E5, wherein the provisioned agent is configured to comply with pre-access conditions before accessing the unsanitized data.

[0067] E8. The system of any of Examples E1 to E6, wherein the provisioned agents are isolated to the composition container when located in the edge region.

[0068] E9. The system of Example E8 or any of Examples E1 to E7, wherein the combination container is configured to implement the decontamination criteria on the decontaminated uplink.

[0069] E10. The system of example E8 or E9 or any of examples E1 to E7, wherein the composition container is configured to check incoming data from a memory controlled by the edge region device into the composition container on an import channel.

[0070] E11. The system of any of Examples E1 to E10, wherein the edge region comprises a physically localized region.

[0071] E12. The system of any of Examples E1 to E11, wherein the edge region comprises a logical localization region.

[0072] E13. In an example, a method includes: at a network interface circuit device, establishing a clean uplink between an agent supplied by a privacy-safe edge region and a display control master device supplied by a central region, the clean uplink being configured to prevent upstream transmission of unpurified data; and at a control master circuit device, performing master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master device to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on unpurified data, the display control master device being blind to the unpurified data; in response to: the supplied agent being positioned in the privacy-safe edge region domain; the supply agent determines a valid pixel state command from a command descriptor based on a pixel state control parameter matrix and the unpurified data; the supply agent causes a change in the pixel state of the edge area device based on the valid pixel state command; the supply agent receives raw feedback input from a user interface of the edge area device in response to the changed pixel state; and the supply agent purifies the raw feedback input to generate purified feedback: receiving the purified feedback input from the supply agent at a display control master device in the central area via a purified uplink; and in response to the purified feedback, sending an unconditional pixel state command, the unconditional pixel state command being configured to generate a confirmed pixel state indicating receipt of the purified feedback.

[0073] E14. The method of example E13, wherein the valid pixel state commands are configured to generate an interactive interface on a display of the edge area device.

[0074] E15. The method of example E13 or E14, further comprising pre-provisioning the provisioned agent to an agent repository maintained by a third party to support provisioning on edge region devices.

[0075] E16. The method of example E15 or any of E13 or E14, wherein providing the pixel state control parameter matrix comprises embedding the pixel state control parameter matrix in a provisioned agent during pre-provisioning.

[0076] E17. In an example, a product includes: a machine-readable medium other than a transient signal; and instructions stored on the machine-readable medium, the instructions being configured to cause the machine, when executed, to: establish, at a network interface circuit device, a cleansed uplink between an agent supplied by a privacy-safe edge region and a display control master supplied by a central region, the cleansed uplink being configured to prevent upstream transmission of uncleaned data; and, at a control master circuit device, perform master blind open-loop pixel state control of edge region devices by: providing a pixel state control parameter matrix from the display control master to the supplied agent, the pixel state control parameter matrix including a plurality of command descriptors configured to support conditional master command execution based on uncleaned data, the display control master ignoring the uncleaned data; invisible; in response to: the supplied agent accessing unpurified data when positioned in the privacy-safe edge area; the supplied agent determining a valid pixel state command from a command descriptor based on a pixel state control parameter matrix and the unpurified data; the supplied agent causing a change in the pixel state of the edge area device based on the valid pixel state command; the supplied agent receiving raw feedback input from a user interface of the edge area device in response to the changed pixel state; and the supplied agent purifying the raw feedback input to generate purified feedback: receiving the purified feedback input from the supplied agent at a display control master in the central area via a purified uplink; and in response to the purified feedback, sending an unconditional pixel state command, the unconditional pixel state command being configured to generate a confirmed pixel state indicating receipt of the purified feedback.

[0077] E18. The product of example E17, wherein the provisioned agent is isolated to the composition container when located in the edge region.

[0078] E19. The product of Example E18 or Example E17, wherein the combination container is configured to implement the decontamination standard on the decontaminated uplink.

[0079] E20. The product of any of Examples E18 or E19 or Example E17, wherein the composition container is configured to inspect incoming data from a memory controlled by the edge region device into the composition container on an import channel.

[0080] Various implementations have been described in detail. However, many other implementations are possible.

[0081] The headings and / or subheadings used herein are intended only to assist the reader in understanding the described implementations.

Claims

1. A system comprising: A network interface circuit device configured to establish: a sanitized uplink between a proxy supplied by a privacy-safe edge region and a display control master supplied by a central region, the sanitized uplink being configured to prevent upstream transmission of unsanitized data; as well as The control main circuit device is configured to perform the main blind open-loop pixel state control of the edge area device by: providing a pixel state control parameter matrix from the display control master to the provisioned agent, the pixel state control parameter matrix comprising a plurality of command descriptors configured to support conditional master command execution based on unsanitized data, the display control master being blind to the unsanitized data; Receiving, at the display control master in the central region, sanitized feedback input from the supplied agent via the sanitized uplink, in response to: the provisioned agent accesses the unsanitized data while being located in the privacy-safe edge region, the provisioned agent determining valid pixel state commands from the command descriptor based on the pixel state control parameter matrix and the unsanitized data, the provisioned agent causing a change in a pixel state of the edge region device based on the valid pixel state command, The supplied agent receives raw feedback input from a user interface of the edge area device in response to the changed pixel state, and The supplied agent cleanses the raw feedback input to generate cleansed feedback; as well as In response to the cleansing feedback, an unconditional pixel state command is sent, the unconditional pixel state command configured to generate a confirm pixel state indicating receipt of the cleansing feedback. 2 . The system of claim 1 , wherein the valid pixel state command is configured to generate an interactive interface on a display of the edge area device. 3 . The system of claim 1 , wherein the control master circuit device is configured to pre-provision the provisioned agent to an agent repository maintained by a third party to support provisioning on the edge area device.

4. The system of claim 3, wherein the control master circuit device is configured to provide the pixel state control parameter matrix by embedding the pixel state control parameter matrix in the provisioned agent during pre-provisioning.

5. The system of claim 1, wherein the network interface circuit device is further configured to establish an edge support downlink between the provisioned agent and the display control master device.

6. The system of claim 5, wherein the control master circuitry is configured to provide the pixel state control parameter matrix by sending the pixel state control parameter matrix to the supplied agent via the edge support downlink.

7. The system of claim 1, wherein the provisioned agent is configured to comply with pre-access conditions before accessing the unsanitized data.

8. The system of claim 1, wherein the provisioned agents are isolated to a composition container when located in the edge region.

9. The system of claim 8, wherein the combination container is configured to implement a decontamination standard on the decontaminated uplink.

10. The system of claim 8, wherein the composition container is configured to check incoming data from a memory controlled by the edge zone device into the composition container on an import channel.

11. The system of claim 1, wherein the edge region comprises a physically localized area.

12. The system of claim 1, wherein the edge region comprises a logical localization region.

13. A method comprising: At the network interface circuit device, establishing a sanitized uplink between the privacy-safe edge region supplied agent and the central region supplied display control master device, the sanitized uplink being configured to prevent upstream transmission of unsanitized data; as well as At the control main circuit device, the main blind open-loop pixel state control of the edge area device is performed by the following operations: providing a pixel state control parameter matrix from the display control master to the provisioned agent, the pixel state control parameter matrix comprising a plurality of command descriptors configured to support conditional master command execution based on unsanitized data, the display control master being blind to the unsanitized data; Receiving, at the display control master in the central region, sanitized feedback input from the supplied agent via the sanitized uplink, in response to: the provisioned agent accesses the unsanitized data while being located in the privacy-safe edge region, the provisioned agent determining valid pixel state commands from the command descriptor based on the pixel state control parameter matrix and the unsanitized data, the provisioned agent causing a change in a pixel state of the edge region device based on the valid pixel state command, The supplied agent receives raw feedback input from a user interface of the edge area device in response to the changed pixel state, and The supplied agent cleanses the raw feedback input to generate cleansed feedback; as well as In response to the cleansing feedback, an unconditional pixel state command is sent, the unconditional pixel state command configured to generate a confirm pixel state indicating receipt of the cleansing feedback.

14. The method of claim 13, wherein the valid pixel state command is configured to generate an interactive interface on a display of the edge area device.

15. The method of claim 13, further comprising pre-provisioning the provisioned agent to a third party maintained agent repository to support provisioning on the edge region device.

16. The method of claim 15, wherein providing the pixel state control parameter matrix comprises embedding the pixel state control parameter matrix in the provisioned proxy during pre-provisioning.

17. A product comprising: a machine-readable medium other than a transitory signal; as well as Instructions stored on the machine-readable medium, the instructions being configured, when executed, to cause the machine to: At the network interface circuit device, establishing a sanitized uplink between the privacy-safe edge region supplied agent and the central region supplied display control master device, the sanitized uplink being configured to prevent upstream transmission of unsanitized data; as well as At the control main circuit device, the main blind open-loop pixel state control of the edge area device is performed by the following operations: providing a pixel state control parameter matrix from the display control master to the provisioned agent, the pixel state control parameter matrix comprising a plurality of command descriptors configured to support conditional master command execution based on unsanitized data, the display control master being blind to the unsanitized data; Receiving, at the display control master in the central region, sanitized feedback input from the supplied agent via the sanitized uplink, in response to: the provisioned agent accesses the unsanitized data while being located in the privacy-safe edge region, the provisioned agent determining valid pixel state commands from the command descriptor based on the pixel state control parameter matrix and the unsanitized data, the provisioned agent causing a change in a pixel state of the edge region device based on the valid pixel state command, The supplied agent receives raw feedback input from a user interface of the edge area device in response to the changed pixel state, and The supplied agent cleanses the raw feedback input to generate cleansed feedback; as well as In response to the cleansing feedback, an unconditional pixel state command is sent, the unconditional pixel state command configured to generate a confirm pixel state indicating receipt of the cleansing feedback.

18. The product of claim 17, wherein the supplied agent is isolated to a combination container when located in the edge region.

19. The product of claim 18, wherein the combination container is configured to implement a decontamination standard on the decontaminated uplink.

20. The article of manufacture of claim 18, wherein the composition container is configured to inspect incoming data from a memory controlled by the edge region device into the composition container on an import channel.

Images