1. A method for imaging an object, and using reference templates to recognize and enhance object image, the method comprising:
identifying a template for a specific area of a target object to which images of the object are compared;
using the camera on a wireless device to image the target object;
comparing images of the object within the specific area of the object to the template for that area of the object;
identifying an image from the comparison of the images to the template for the specific area of the object; and
storing the template and the identified image in a storage unit.
2. The method of claim 1, further comprising:
repeating all prior operations of the method to identify and store a multiplicity of templates in which each template applies to a specific area of the target object;
comparing each of a multiplicity of images of the target object to the template applicable to the area of the imaged object in which the image is located;
identifying each compared image from the comparison to the template for the area in which the image is located on the object; and
storing each compared image and corresponding template in the storage unit.
3. The method of claim 2, further comprising:
using the camera of a wireless device to capture multiple images of each area of the target object; in which said multiple images in an area are on substantially same size scale and in which a substantial pictorial overlap among the images in an area is present;
applying a technique to combine said multiple images of an area of the target object into a recognizable form;
storing results of said technique in the storage unit.
4. The method of claim 3, wherein said technique is selected from a group comprising optical character recognition, optical mark recognition, barcode recognition, alphanumeric data detection, logo and graphical symbols recognition, face recognition, and recognition of special marks.
5. The method of claim 3, wherein said technique is frame combination.
6. The method of claim 3, wherein said technique is projective geometric transform.
7. The method of claim 3, wherein a user communicates the selection of captured images of the target object to the storage unit using keypresses on the wireless device conveyed as Dual-Tone Multi-Frequency (DTMF) commands.
8. The method of claim 3, wherein a user selects the area imaged by zooming the camera with a forward movement on the center of the area of interest.
9. The method of claim 3, wherein the user identifies the area of interest by voice command.
10. The method of claim 3, further comprising:
recognizing that some of the images taken of the target object are damaged so that such images convey incorrect or misleading information;
comparing frames to templates to identify each damaged frame;
discarding a fixed number of frames after each damaged frame, in which the fixed number of frames is approximately 10 or less.
11. The method of claim 3, in which the user is financially charged for using the service of identification, recognition, and enhancement of target objects.
12. The method of claim 11, in which the charge to user is based on one or more of the group comprising time and quantity of air time transmission and reception, time and quantity of data transmitted and received, and quantity of data processed by the server.
13. The method of claim 3, further comprising:
said storage unit transmits feedback to a user during or very soon after the imaging executed by the user;
said feedback contains suggestions to the user for actions that enhance effectiveness of images captured by the user.
14. The method of claim 13, in which said feedback is in a form of written instructions advising the user to reposition or refocus the camera in the wireless device.
15. The method of claim 13, in which said feedback is image captured by the user, processed by the server, and transmitted back to a user’s imaging device.
16. The method of claim 13, in which said feedback is in a form of voice instructions advising the user to reposition or refocus the camera in the wireless device.
17. The method of claim 13, in which the feedback is in a form of a visual clue suggesting to the user what should be done to reposition of refocus the camera in the wireless device.
18. A system for imaging an object, and using reference templates to recognize and enhance object image, the system comprising:
a user interface unit for capturing images and communicating with a server, said unit comprising a video display channel, an audio communication channel, a keypad input channel, and a video input channel;
a computational facilities comprising a data storage server, an application server, and a speech recognition server; and
a communication network for facilitating communication between the user interface unit and the computational facilities.
19. The system of claim 18, wherein the computational facilities further comprise a video and image preprocessing server.
20. The system of claim 18, wherein the computational facilities further comprise an image recognition and enhancement server.
21. The system of claim 18, wherein the computational facilities further comprise a video and image preprocessing serve, and an image recognition and enhancement server.
22. A computer program product stored on a computer readable medium for causing the computer medium to perform a method comprising:
identifying a template for a specific area of a target object to which images of the object may be compared;
using a camera on a wireless device to image the target object;
comparing images of the object within the specific area of the object to the template for that area of the object;
identifying the image from the comparison of the image to the template for the specific area of the object; and
storing the template and the identified image on a storage unit.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A trusted computer system comprising:
at least one processor having a multi-domain architecture defining a plurality of processor domains, each processor domain limited to a corresponding set of processor privileges associated therewith;
at least one data storage unit;
at least one memory unit;
a secure operating system configured to run on the trusted computer system, the secure operating system comprising a plurality of security policies and a plurality of security domains, the security domains to host a plurality of processes, each process having a security level associated therewith, and the secure operating system causing the trusted computer system to enforce the security policies in the trusted computer system to prevent a first process from accessing a second process having a different security level,
wherein the processes hosted in each security domain are mapped into a processor domain, and the at least one processor having the multi-domain architecture enforces the resource privileges of each processor domain to prevent processes mapped into a first processor domain from modifying processes mapped into a second less privileged processor domain, and
wherein the trusted computer system meets or exceeds the minimal security features and assurance requirements to meet a TCSEC B3 rating or Common Criteria EAL-5 rating; and
a covert channel mechanism to prevent a first process at a first security level from determining the existence or status of a second process at a second security level by limiting the number and capacity of covert storage channels.
2. The trusted computer system of claim 1, wherein the at least one processor comprises a x86 microprocessor and wherein the processes comprise at least one of system objects and system subjects.
3. The trusted computer system of claim 1, wherein a minimal set of processes are designated as trusted processes, and the trusted computer system further comprises a Secure Attention Key to selectively regulate access of the trusted computer system to the trusted processes.
4. The Trusted computer system of claim 1, wherein attributes of each process with respect to the security policies determine the security level for that process.
5. The Trusted computer system of claim 1, wherein the at least one processor having the multi-domain architecture enforces the resource privileges of each processor domain by restricting access to segments, pages, and instructions.
6. The trusted computer system of claim 1, wherein the security policies comprise at least two of a mandatory security policy, a mandatory integrity policy, a discretionary access control policy, and a subtype policy.
7. The trusted computer system of claim 6, wherein each security domains comprises a set of system objects and system subjects at a same security level.
8. The trusted computer system of claim 7, wherein the processor domains comprise:
a first domain to host the security kernel,
a second domain to host the trusted system services environment
a third domain to host the operating system services environment, and
a fourth domain to host the application domain,
the security kernel hosted by the most privileged processor domain and the security kernel enforcing the security policies to prevent a first process from accessing a second process having a different security level.
9. The trusted computer system of claim 8, wherein the at least one processor having the multi-domain architecture enforces the resource privileges of each processor domain to prevent modification of the code and data of the security kernel by processes mapped into any other processor domain.
10. A trusted computer system having a trusted operating system, comprising:
at least one multi-domain processor having a plurality of processor domains, the processor isolating the processor domains by restricting a set of resource privileges associated with each processor domain;
at least one data storage unit;
at least one memory unit;
a trusted operating system configured to run on the trusted computer system, the trusted operating system comprising a plurality of security policies and a plurality of security domains, the security domains to host a plurality of processes, each process having a security level associated therewith, and the secure operating system causing the trusted computer system to enforce the security policies in the trusted computer system to prevent a first process from accessing a second process having a different security level, the trusted operating system comprising:
an application domain to execute trusted and untrusted applications;
an operating system services layer to emulate at least one other operating system; and,
a security kernel to enforce the security policies,
wherein the processes hosted in each security domain are mapped into a processor domain, and the multi-domain processor enforces the resource privileges of each processor domain to prevent processes mapped into a first processor domain from modifying processes mapped into a second less privileged processor domain, and
wherein the trusted computer system meets or exceeds the minimal security features and assurance requirements to meet a TCSEC B3 rating or Common Criteria EAL-5 rating; and
a covert channel mechanism to prevent a first process at a first security level from determining the existence or status of a second process at a second security level by limiting the number and capacity of covert storage channels.
11. The trusted computer system of claim 10, wherein the multi-domain processor comprises:
a first processor domain to host the application domain,
a second processor domain to host the operating system services layer, and
a third processor domain to host the security kernel,
wherein each of the first, second, and third processor domains are isolated from each other by the processor regulating access to processor domains with the same or lesser privileges.
12. The trusted computer system of claim 11, wherein the multi-domain processor further comprises a fourth domain to host a trusted system services layer to enforce file system management and file system object discretionary access policies for the trusted and untrusted applications, the fourth processor domain being isolated from each of the first, second, and third processor domains by the processor.
13. The Trusted computer system of claim 11, wherein the processor domain hosting the security kernel is the most privileged processor domain, such that the multi-domain processor enforces the resource privileges of each processor domain to prevent modification of the code and data in the security kernel by processes mapped into any other processor domain.
14. The trusted computer system of claim 10, wherein the plurality of security policies in the trusted computer system restrict or permit access to at least one of data objects, processes, and devices within the trusted computer system, the security policies comprising at least two of a mandatory security policy, a mandatory integrity policy, a discretionary access control policy, and a subtype policy.
15. The trusted computer system of claim 14, wherein the covert channel mechanism comprises at least one of timing delays and obscuring status values.
16. The trusted computer system of claim 14, wherein the subtype policy comprises providing subtype information for a file system object and the security kernel prevents a process from accessing the file system object according to the subtype information.
17. The trusted computer system of claim 16, wherein the trusted computer system concurrently runs a plurality of processes and the subtype policy allows access control differentiation beyond mandatory and discretionary access.
18. The trusted computer system of claim 16, wherein the subtype policy allows a first process to access at least one of a process object, a file system object, and a device object only if the subtype of the object is on a list of subtypes authorized to be accessed by the first process.
19. The trusted computer system of claim 16, wherein the subtype policy allows a first process to access data only if the subtype of the data is on a list of subtypes authorized to be accessed by the first process.