38 results about "Origination" patented technology

Approaches to electronic device security are described. A representation of user information describing a user device, visible in a graphical presentation of a user-specific polygraph via a graphical user interface (GUI) presented via a display device is generated. First information associated with the user is gathered. Second information indicating activity associated with the user that has been generated by an application executed on the electronic computing device is gathered. Determining whether the user of the electronic computing device has deviated from normal activity by correlating portions of the first information with portions of the second information. Directing the user to an approval workflow via the browser in response to a determination that the user has deviated from normal activity.

A system for trusted media origination including a processor of a trusted media originator node communicatively connected to at least one at least one media source and a memory on which are stored machine-readable instructions that when executed by the processor, cause the processor to: acquire a media data instance from at least one media source; determine an identity of at least one Participating Actor in an origination event associated with the media data instance; verify the identity of the at least one Participating Actor in the origination event; generate a certificate representing the verified identity of the at least one Participating Actor; derive a plurality of features from the origination event, the verified identity of the at least one Participating Actor, and attributes and state of the media data instance; verify the plurality of the derived features; generate an origination event record data based on the verified plurality of the derived features; encode at least a portion of the origination event record data using an identification certificate of the at least one Participating Actor; acquire a media event journal corresponding to the media data instance; and enter the origination event record data and the identity of the at least one Participating Actor into the media event journal.

A system for network path generation is described. The system includes at least a processor and a memory communicatively connected to the at least a processor. The memory contains instructions configuring the at least a processor to receive a transmission data for transmission within a network, identify an origination node and a destination node for the transmission data, and identify a plurality of candidate intermediary nodes based on the origination node the destination node. The at least a processor is also configured to determine a routing protocol for a transmission between the origination node and the destination node, select at least one preferred node from the plurality of candidate intermediary nodes as a function of the routing protocol, and generate a transmission path between the origination node and the destination node as a function of the selecting of the at least one intermediary node.

For communicating securely between network nodes, a method transmits a port knock sequence comprising ordered empty protocol packets from an origination node to a destination Internet Protocol (IP) address of a destination node. The port knock sequence encodes at least one vocabulary phrase. The method transmits the length of the at least one vocabulary phrase to first and second helper nodes. The method generates a corresponding substitute phrase for each at least one vocabulary phrase through communication between the first helper node and the second helper node. The method receives the corresponding substitute phrase for each at least one vocabulary phrase at the origination node and the destination node. The method generates a node nonce based on the at least one corresponding substitute phrase. The method securely communicates between the origination node and the destination node using the node nonce.

The present application relates to devices and components including apparatus, systems, and methods to share a credential for accessing a secured entity between an origination device and a recipient device. In some embodiments, the sharing may be cross platform where the recipient device executes a different platform than the origination device.

A method for execution by one or more computing devices of an exchange item marketplace network includes generating, by an exchange item origination entity, an origination block of an exchange item transactions chain associated with an exchange item, where a portion of the origination block is encrypted. The method further includes receiving, from a computing device of the exchange item marketplace network, an acquisition request regarding the exchange item. The method further includes generating a first block of the exchange item transactions chain, where the first block includes information regarding the exchange item, the computing device, and the acquisition request, where a first portion of the first block is encrypted, and where the first block is chained to the origination block in accordance with a security approach.

A video packaging and origination service can include one or more encoder components that receive content for encoding and transmitting to requesting entities. During the operation of the encoder components, a management service associated with the video packaging and origination service can receive information related to updates or modifications to the encoder components. Responsive to the information, the management service can instantiate and configure an updated encoder. Once the updated encoder component is instantiated and configured, both the updated and target encoder components receive content for streaming, encode content and generating encoding content. Additionally, the updated encoder component can initiate a notification to the target encoder component that a handover will be occurring and begin a negotiation process identifying a handover event. Based on the negotiated handover event, the target encoder component can illustratively cease operation upon evaluation and detection of the handover event.

Techniques for routing in a software-defined wide area network (SD-WAN) are disclosed herein. In some aspects, the techniques described herein relate to configuring, by a routing controller, at least one data traffic route originating from a device of a first group of devices to a first Transport Gateway (TGW) and a gateway hub, tagging the at least one data traffic route with a first identifier associated with the first group of devices to send to the first TGW and to a first set of routers of the hub gateway wherein the at least one data traffic route originates from at least one device of the first group of devices, and sending a tagged data traffic route originating from at least one device of the first group of devices based on the first identifier to the first TGW and the first set of routers of the hub gateway.

This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and / or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and / or white box obfuscation techniques.

An information security method to detect, validate, source, and / or remediate propagated, maliciously generated, AI content is disclosed. Search-engine spider(s) to crawl the Internet to identify posted content, which is analyzed with signature-based detection, anomaly detection, and machine learning to identify suspect content, which is compared against validated content. A malicious-AI probability score is generated based on the results of the foregoing AI analysis and the content differences. Metadata corresponding to the suspect content is extracted. A malicious activity mapping is compiled from available data. Suspect content is attempted to be recreated by publicly available online AI bots to identify the AI engine that generated the malicious content. Metadata pertaining to the origination source that accessed the source AI bot. Metadata is used to trace the malicious content back to the originator. Proofs regarding the foregoing are generated. Notifications / demands may be generated. Countermeasures against future attacks may be deployed.

Techniques for routing in a software-defined wide area network (SD-WAN) are disclosed herein. In some aspects, the techniques described herein relate to configuring, by a routing controller, at least one data traffic route originating from a device of a first group of devices to a first Transport Gateway (TGW) and a gateway hub, tagging the at least one data traffic route with a first identifier associated with the first group of devices to send to the first TGW and to a first set of routers of the hub gateway wherein the at least one data traffic route originates from at least one device of the first group of devices, and sending a tagged data traffic route originating from at least one device of the first group of devices based on the first identifier to the first TGW and the first set of routers of the hub gateway.

Techniques for sending data over a computer network from an origination computer to a destination computer are presented. The techniques include: receiving a demand communication from the origination computer, where the demand communication specifies at least one network parameter; determining that a path through the network from the origination computer to the destination computer that complies with the at least one network parameter is not available; sending data from the origination computer to a node in the network over a path that complies with the at least one network parameter, where the node is not the destination computer; and storing the data at the node in persistent memory.

In accordance with example embodiments of the invention there is at least a method and apparatus to at least perform identifying a session initiation protocol INVITE comprising an indication of a caller identity; based on the identifying, initiating an origination trigger to an identity authentication service (STI-AS) for the session initiation protocol INVITE, wherein the identity authentication service functions as an authentication service for device identity; and determining whether to accept the session initiation protocol INVITE based on a legitimacy of the caller identity being used in the session initiation protocol INVITE.

A method, a network device, and a non-transitory computer-readable storage medium are described in relation to an detection and autocorrection of stale session information service. The detection and autocorrection service may include the addition of a header, which may indicate date and time information, with a message that has an origination timestamp header. The header may be added to the message by an intermediary network device relative to origin and destination network devices associated with a network procedure. The header may enable detection by a network device of stale session information. The header may enable the network device to determine whether to ignore the message as a duplicate message or use the message to carry out the network procedure. In this way, duplicate messages that may include the same origination timestamp header may be managed and stale information may be detected.

An example may include verifying a call number to be used by an enterprise entity by selecting an enterprise number to verify from a database of one or more enterprise numbers assigned to a particular enterprise entity, initiating an outbound call destined to the enterprise number from an origination number known to an enterprise platform, receiving a return call to the origination number from the enterprise number, determining whether the return call was received within a defined time interval, and updating the enterprise number status in memory as a verified enterprise number when the return call was received within the defined time interval.

Systems and methods for securing data for outbound communication may include: determining a risk profile for the outbound communication based, the outbound communication comprising data modules including at least a payload, an origination endpoint, and a destination endpoint; determining a scanning policy from a plurality of scanning policies, based on the determined risk profile; determining a secure machine learning model from a plurality of secure machine learning models, based on the determined risk profile, wherein the secure machine learning model is determined based on an authentication level corresponding to the determined risk profile; providing one or more data modules to the secure machine learning model, based on the determined scanning policy; receiving a sanitized version of the payload based on an output of the secure machine learning model; and providing the sanitized version of the payload for the outbound communication.

A method of determining latency in a network includes providing a plurality of nodes, the plurality of nodes including at least one origination node and at least one destination node; synchronizing clocks in the plurality of nodes; transmitting a packet from the origination node to the destination node; time stamping the packet with clock times from the synchronized clocks as the packet passes through nodes as the packet passes from the origination node to the destination node; and analyzing the stamped times to determine hop-to-hop times taken by the packet as the packet travelled from the origination node to the destination node. Other methods, devices, and systems are disclosed.

A method includes receiving summary messages summarizing respective aggregated traffic metadata packets output from the at least one traffic management device and an engine. Each summary message identifies an origination pair having a traffic management device and an aggregation engine and a sequence number. The method further includes tracking per subinterval of a series of sub-intervals, highest and lowest sequence numbers and a count of summary messages received for each unique origination pair from the beginning of the subinterval. The method further includes accumulating, per interval, accumulated highest and lowest sequence numbers and an accumulated count of summary messages for each unique origination pair from the beginning of the interval and for all previous subintervals for tracking dropped aggregated traffic metadata packets for the interval. The method further includes estimating a number of dropped aggregated traffic metadata packets for the interval based on the accumulated highest and lowest sequence numbers and the count of summary messages.

A system for trusted media origination including a processor of a trusted media originator node communicatively connected to at least one at least one media source and a memory on which are stored machine-readable instructions that when executed by the processor, cause the processor to: acquire a media data instance from at least one media source; determine an identity of at least one Participating Actor in an origination event associated with the media data instance; verify the identity of the at least one Participating Actor in the origination event; generate a certificate representing the verified identity of the at least one Participating Actor; derive a plurality of features from the origination event, the verified identity of the at least one Participating Actor, and attributes and state of the media data instance; verify the plurality of the derived features; generate an origination event record data based on the verified plurality of the derived features; encode at least a portion of the origination event record data using an identification certificate of the at least one Participating Actor; acquire a media event journal corresponding to the media data instance; and enter the origination event record data and the identity of the at least one Participating Actor into the media event journal.

Disclosed herein is a lead management system including, in some embodiments, a lead intake engine, a phone system, and a loan origination system. The lead intake engine includes a lead processing module configured for processing sales leads, which includes enriching original data of at least some incoming sales leads with complementary data, as well as algorithm-based scoring of the sales leads. The phone system includes a dialer configured to dial phone numbers for the sales leads from one or more dialer tables of the phone system sorted in accordance with the scores of the sales leads by the lead intake engine. The loan origination system is configured to create a sales-purposed record in a sales database for each sales lead up to at least a time of the dialer dialing a phone number associated with the record. The lead management system is optimized for speed-to-contact with telecommunications regulatory compliance.

A system includes an intermediate mortgage integration platform as a service (MiPaas). Specifically, an MiPaas layer may facilitate integration between a loan origination system (LOS) and supporting services. The MiPaas layer may provide integration flexibility by enabling integration of the supporting services with each other and with different LOSs. Indeed, a number of MiPaas integration formats (e.g. REST API, OpenAPI, GRPC, GraphQL, Industry Standard interface, etc. may be provided to facilitate ease of integration between the LOS and the supporting services. Further, the MiPaas may provide processing efficiencies by adapting workflows based upon particular retrieved data. In this manner, efficient processing may be performed in an intermediate data processing layer, resulting in more efficient turnaround times and reduced processing requirements at traditionally over-burdened systems.

A network management system (NMS) for provisioning and managing an overlay network is provided. During operation, the NMS can determine that a loop associated with a media access control (MAC) address is detected in the network. The NMS can probe a first switch in the loop by instructing the first switch to observe the MAC address for a predetermined period. The NMS can receive a first message indicating a first set of ports of the first switch observing the MAC address. The NMS can probe an upstream switch reachable via each of the first set of ports by instructing the upstream switch to observe the MAC address for the predetermined period. Here, observing the MAC address at an upstream port of the upstream switch causes further upstream probing. Based on probing the switches in the loop, the NMS can determine one or more loop origination points (LOPs) for the loop.

Systems and methods for securing data for outbound communication may include: determining a risk profile for the outbound communication based, the outbound communication comprising data modules including at least a payload, an origination endpoint, and a destination endpoint; determining a scanning policy from a plurality of scanning policies, based on the determined risk profile; determining a secure machine learning model from a plurality of secure machine learning models, based on the determined risk profile, wherein the secure machine learning model is determined based on an authentication level corresponding to the determined risk profile; providing one or more data modules to the secure machine learning model, based on the determined scanning policy; receiving a sanitized version of the payload based on an output of the secure machine learning model; and providing the sanitized version of the payload for the outbound communication.

Techniques for sending data over a computer network from an origination computer to a destination computer are presented. The techniques include: receiving a demand communication from the origination computer, where the demand communication specifies at least one network parameter; determining that a path through the network from the origination computer to the destination computer that complies with the at least one network parameter is not available; sending data from the origination computer to a node in the network over a path that complies with the at least one network parameter, where the node is not the destination computer; and storing the data at the node in persistent memory.

This disclosure relates to systems and methods for managing protected electronic content that employ relatively efficient messaging schemes. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and / or content service to end user devices. Certain embodiments may further provide for message protocols where fewer messages are sent in connection with a protected content license request process, thereby reducing latency associated with license request and provisioning processes.

A communication control method according to one aspect of the present invention is used in a wireless communication system. The communication control method includes a step in which, by using different frequencies, an IoT device performs a first transmission from the IoT device to a communication node in accordance with device origination (DO) communication, and a second transmission from the IoT device to the communication node in response to device termination (DT) communication.

Aspects of the disclosure relate to admission control of a communication session in a network. The admission control can be implemented by a network node at the boundary of the network or a subsystem thereof. In one aspect, the admission control can be implemented during a predetermined period and can be based at least on an admission criterion, which can be specific to an end-point device, e.g., a target device or an origination device. The admission criterion can be configurable and, in certain implementations, it can be obtained from historical performance associated with establishment of communication session. Such historical performance can be assessed within a period of a configurable span.

Techniques are described herein for detecting an authorization status for an email based on content included in that email. In embodiments, such techniques may comprise receiving an electronic communication associated with an origination address, identifying, within the electronic communication, information indicating a claimed source entity, determining, based on the information, a claimed source entity, determining a number of authorized addresses associated with the claimed source entity, determining whether the electronic communication is authorized by the claimed source entity based on whether the origination address is included within the number of authorized addresses, updating the electronic communication to include an indication of whether the electronic communication is authorized by the claimed source entity, and transmitting the electronic communication to its intended recipient.

This disclosure relates to systems and methods for managing protected electronic content using proxy reencryption techniques. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and / or content service to end user devices. Proxy reencryption techniques consistent with aspects of the disclosed embodiments may enable transformation of a ciphertext under one public key to a ciphertext containing the same plaintext under another public key. Consistent with embodiments disclosed herein, proxy reencryption processes may be implemented using indistinguishability obfuscation and puncturable public-key encryption schemes, functional encryption, and / or white box obfuscation techniques.

Devices and methods are provided for creating, controlling, and assigning dynamic tasks for completing manual underwriting actions. Such dynamic tasks may be assigned based on received application data associated with the origination of a lending product for a customer. The tasks may be assigned to one or more parties to complete manual underwriting actions, and may be specifically configured to present application data that is tailored to the particular underwriting action associated with this task. These tasks may be created and modified using a low-code or no-code system, thereby allowing involved parties to rapidly adapt to changes in lending product regulation and new business policies.