Micha Anthenor Benoliel

in one example, a method may include receiving a wireless signal from a device. The device may be within an environment. The method may also include identifying the device. The device may be identified based on at least one of data and metadata included in the wireless signal. In addition, the method may include determining alocation of the device within the environment. The location of the device within the environment may bedetermined based on the data included the wireless signal. Further… Show more

in one example, a method may include receiving a wireless signal from a device. The device may be within an environment. The method may also include identifying the device. The device may be identified based on at least one of data and metadata included in the wireless signal. In addition, the method may include determining alocation of the device within the environment. The location of the device within the environment may bedetermined based on the data included the wireless signal. Further, the method may include displaying an augmented environment repre- sentative ofthe environment and a symbol representative of the devicewithin the augmented environment. The symbol may be displayed ni a location within the augmented envi- ronment corresponding to the location ofthe device within the environment. Show less

A method may include receiving a beacon from a first intermediate device via a first network, the beacon being received by the first intermediate device from an endpoint device via a second network. The beacon may include a hash value based at least in part on the identity of the endpoint device and a time unit when the beacon was generated. The hash value of the beacon may be validated based on the identity of the endpoint device and the time unit when the beacon was generated. The beacon may… Show more

A method may include receiving a beacon from a first intermediate device via a first network, the beacon being received by the first intermediate device from an endpoint device via a second network. The beacon may include a hash value based at least in part on the identity of the endpoint device and a time unit when the beacon was generated. The hash value of the beacon may be validated based on the identity of the endpoint device and the time unit when the beacon was generated. The beacon may be forwarded to a server via a third network in response to the hash value of the beacon being valid. Show less

The present disclosure generally relates to security and privacy for communication between networked “smart” devices. In particular, the present disclosure describes secure and
private identification for networked devices.
In one non-limiting example, a method may include generating a unique identifier for an endpoint device. The unique identifier may be specific to the endpoint device and may be configured to identify the endpoint device with at least one semi-trusted party. The unique… Show more

The present disclosure generally relates to security and privacy for communication between networked “smart” devices. In particular, the present disclosure describes secure and
private identification for networked devices.
In one non-limiting example, a method may include generating a unique identifier for an endpoint device. The unique identifier may be specific to the endpoint device and may be configured to identify the endpoint device with at least one semi-trusted party. The unique identifier may be a hashed value based on both the endpoint device’s MAC address and an operator secret known to a network operator. The method may include sharing the unique identifier with another device. Show less

A system may include processing logic configured to execute instructions to cause a system to perform operations including receiving, from an intermediate device, data that originated at an endpoint node. The data may be associated with metadata that was associated with the data by the intermediate device. The operations may also include extracting one or more items from the metadata. The operations may include validating an activity of the intermediate device based on the one or more items… Show more

A system may include processing logic configured to execute instructions to cause a system to perform operations including receiving, from an intermediate device, data that originated at an endpoint node. The data may be associated with metadata that was associated with the data by the intermediate device. The operations may also include extracting one or more items from the metadata. The operations may include validating an activity of the intermediate device based on the one or more items that were extracted from the metadata. Show less

A system may include processing logic configured to execute instructions to cause a system to perform operations including receiving a beacon from a first intermediate device via a first network. The operations may also include identifying a characteristic of the beacon. The operations may include identifying, based on the characteristic of the beacon, a server that is associated with the beacon. The operations may include sending a beacon message to the server via a third network.

Secure messaging system wherein both the content and the metadata are protected from adversary attack. A message for an intended recipient is decrypted using the intended recipient's public key. The message is then sent to the intended recipient as well as to multitude of decoys. The decoys are real devices that are clustered with the intended recipient according to some method, such as logical or geographical method. The decoys are unable to decrypt the message with their private key and will… Show more

Secure messaging system wherein both the content and the metadata are protected from adversary attack. A message for an intended recipient is decrypted using the intended recipient's public key. The message is then sent to the intended recipient as well as to multitude of decoys. The decoys are real devices that are clustered with the intended recipient according to some method, such as logical or geographical method. The decoys are unable to decrypt the message with their private key and will drop it. Only the intended recipient will be able to decrypt and read the message. Since the message is sent to many recipients (intended recipient and decoys), an adversary is unable to determine who is communicating with whom. Show less

A method and system for transferring apps between mobile devices without the need to download the app from an app store. Various examples are provided for discovering, authenticating and transmitting the apps among devices directly or via an access point. Even when no connection is available, examples are provided for establishing a mesh network and transferring the app using the mesh network. If not all devices have mesh networking capability, connection such as Bluetooth is used to distribute… Show more

A method and system for transferring apps between mobile devices without the need to download the app from an app store. Various examples are provided for discovering, authenticating and transmitting the apps among devices directly or via an access point. Even when no connection is available, examples are provided for establishing a mesh network and transferring the app using the mesh network. If not all devices have mesh networking capability, connection such as Bluetooth is used to distribute the mesh network capability and then the mesh network is established. Show less

Systems and methods to grand network access to devices. When device attempts access via an access point, the AP initiates social network inquiry to determine whether to provide unrestricted access, restricted access or no access, depending on the social connection between the user and the AP owner. The social network inquiry may be performed by obtaining a social graph from services such as Facebook, Linkedln, etc. The social network inquiry may also be performed by interrogating a calendar, to… Show more

Systems and methods to grand network access to devices. When device attempts access via an access point, the AP initiates social network inquiry to determine whether to provide unrestricted access, restricted access or no access, depending on the social connection between the user and the AP owner. The social network inquiry may be performed by obtaining a social graph from services such as Facebook, Linkedln, etc. The social network inquiry may also be performed by interrogating a calendar, to determine whether an appointment is indicated for the user associated with the device requesting the access and a user associated with the access point. The social network inquiry may also be performed by interrogating a database to determine whether a specific entry is present, e.g., whether a predetermined "like" is included in lists of "likes" in the Facebook account of the user associated with the device requesting the access. Show less

Speeding up webpage loading by utilizing one or a combination of the following techniques: heuristic pre-loading; increasing the number of connections to a server; resource caching; and, distributed DNS caching. A software module is inserted between the bowser and the server, so as to perform the heuristic preloading, to increase the number of connections, to perform wireless caching of resources and DNS query responses. The software module may be placed in various places in the technology… Show more

Speeding up webpage loading by utilizing one or a combination of the following techniques: heuristic pre-loading; increasing the number of connections to a server; resource caching; and, distributed DNS caching. A software module is inserted between the bowser and the server, so as to perform the heuristic preloading, to increase the number of connections, to perform wireless caching of resources and DNS query responses. The software module may be placed in various places in the technology stack, for example, inside a home router or in a separate box connected to one's router. The module can insert itself by using proxy discovery protocols, or intercepting the traffic going to the router by issuing ARP replies that look as if it is the router. Alternatively, it could overwrite DHCP. Show less

A system and a method for collecting passively generated time-stamped location data from mobile devices and using this data to generate social network. The social network utilizes the data to determine a user's friends, family members, coworkers, and other associates. The system and a method improve social networking applications by automatically generating friend lists and user lists, and for automatically keeping these lists up to date. Further, the data can be used for social discovery… Show more

A system and a method for collecting passively generated time-stamped location data from mobile devices and using this data to generate social network. The social network utilizes the data to determine a user's friends, family members, coworkers, and other associates. The system and a method improve social networking applications by automatically generating friend lists and user lists, and for automatically keeping these lists up to date. Further, the data can be used for social discovery, including dating, professional networking, and travel applications. The system and method further uses this data to determine a user's hobbies and interests. A recommendation engine may be used to generate recommendations for products, services, and businesses based on passive location data. A system and a method for an advertising system for products, services, and businesses based on passive location data are also disclosed. Show less

Methods for establishing connection to the Internet using multiple channels. A device takes advantage of several channels available to it internally and/or from neighboring devices to request the various resources of the webpage, and assembles the webpage using the resources arriving from the different channels. When a device has the ability to connect to the Internet using multiple internal channels, the device uses internal heuristics to request the webpage resources using these channels. A… Show more

Methods for establishing connection to the Internet using multiple channels. A device takes advantage of several channels available to it internally and/or from neighboring devices to request the various resources of the webpage, and assembles the webpage using the resources arriving from the different channels. When a device has the ability to connect to the Internet using multiple internal channels, the device uses internal heuristics to request the webpage resources using these channels. A cloud exit server may be used to enhance security and to handle requests that may not be handled using multiple channels. Show less

A system and method for effectively “exchanging” battery power among physically distinct battery-powered devices communicating in a network for optimal conservation of aggregate battery power to preserve and extend the usable life of devices before requiring recharging. The network communication may be wired, wireless, or some combination; the devices may be mobile, fixed, or some combination. This invention improves Internet access where it already exists by making it faster, more reliable… Show more

A system and method for effectively “exchanging” battery power among physically distinct battery-powered devices communicating in a network for optimal conservation of aggregate battery power to preserve and extend the usable life of devices before requiring recharging. The network communication may be wired, wireless, or some combination; the devices may be mobile, fixed, or some combination. This invention improves Internet access where it already exists by making it faster, more reliable, and less expensive. It can also be used to provide Internet service in places where there is none. Show less

Pairing among computing devices is achieved without any of the device entering discoverable mode. An inquiring device obtains a list of MAC addresses and transmits connection requests using the MAC addresses. Any device within reception distance that has the same MAC address would respond to the request. Upon receiving the response, the two devices would pair up. A beacon may be used to store MAC addresses and related data. Computing devices may send inquiries to the beacon and receive in… Show more

Pairing among computing devices is achieved without any of the device entering discoverable mode. An inquiring device obtains a list of MAC addresses and transmits connection requests using the MAC addresses. Any device within reception distance that has the same MAC address would respond to the request. Upon receiving the response, the two devices would pair up. A beacon may be used to store MAC addresses and related data. Computing devices may send inquiries to the beacon and receive in return MAC addresses corresponding to the inquiry. The devices may then transmit pairing requests using these MAC addresses. Show less