Abstract: A sensor device for monitoring a container includes a first sensor that detects signals indicative of a level to which the container is filled with contents, a second sensor that detects movement of the container, and a processing unit coupled to the first sensor and the second sensor. The processing unit has a first interface to communicate with the first sensor, and a second interface to communicate with the second sensor. The sensor device monitors the level and the movement of the container and transitions to an idle state where the first sensor and other components of the sensor device are powered down in response to an instruction from an external source, a determination of passage of an amount of time without any activity, and/or determination of a predefined time. The second sensor is used to detect movement associated with an emptying event where contents are removed from the container.

Abstract: Establishing a status of a user at a physical area includes determining a presence of a mobile user device at a location relative to the physical area, determining an identification of the user from the mobile user device, accessing, from a secure component included proximal to the mobile user device, a credential for authorizing the mobile user device to communicate transactions with one or more other remotely located components, using the credential to securely determine one or more first attributes of the user and one or more second attributes of one or more resources located at the physical area, and determining a status of a user with respect to the one or more resources based at least in part on the determined identification of the user, the first attributes and the second attributes. The credential may be a block chain credential and the transactions may be block chain transactions.

Abstract: Efficiently and reliably tracking information for devices in a network, for example, a heterogeneous network of a plurality of devices of different types, includes collecting and storing information in a computationally efficient and secure manner that ensures to a high degree of certainty the integrity of the information for future access and use. The information may be collected from one or more sensors/data sources, for example, over a predetermined period of time, and may be grouped into a single transaction record. The transaction record may be sent from a gateway to a server of a network cloud, for example, during a predefined time slot of cycle based in part on the number of gateways and sensors in the system. Each transaction record may include a one-way hash of, and a reference to, an immediately preceding transaction record for the overall system for which information is being tracked.

Abstract: Securely deploying a software component to a control device of an industrial control system includes generating a first validation credential and a second validation credential corresponding to the first validation credential. The second credential is installed on the control device. A digital signature or a hash value is generated using the first validation credential and is associated with the software component, which is transmitted with the digital signature or the hash value to the control device. The digital signature or the hash value is validated using the second validation credential. In response to the digital signature or the hash value being valid, the software component is installed on the control device. The first validation credential may be generated and stored within a hardware security module and may be inaccessible from outside of the hardware security module. The second validation credential may be derived from the first validation credential.

Abstract: Communicating between components that are part of an IP network and a control device includes coupling the IP network to a dedicated cellular network, the control device communicating directly with network components of the dedicated cellular network, and transferring data between the components and the control device at a quality of service levels that corresponds to a quality of service level provided for voice communications in a non-dedicated cellular network. The IP network may include a cloud having core services that provide control signals to the control device. Quality of service parameters may be prioritized by an ICS management component of the core services of the cloud. The ICS management component may provide cellular network services parameters that are used to control the core services of the cloud and the quality of service parameters. A subset of resources of the dedicated cellular network may be reserved for industrial control systems.

Abstract: Efficiently and reliably tracking information for devices in a network, for example, a heterogeneous network of a plurality of devices of different types, includes collecting and storing information in a computationally efficient and secure manner that ensures to a high degree of certainty the integrity of the information for future access and use. The information may be collected from one or more sensors/data sources, for example, over a predetermined period of time, and may be grouped into a single transaction record. The transaction record may be sent from a gateway to a server of a network cloud, for example, during a predefined time slot of cycle based in part on the number of gateways and sensors in the system. Each transaction record may include a one-way hash of, and a reference to, an immediately preceding transaction record for the overall system for which information is being tracked.

Abstract: Managing visitor access to resources within a physical area includes a mobile user device of a visitor associated to the physical area with a secure component having stored thereon a credential for authorizing the mobile user device to communicate transactions with other components of the system that are remotely located from and coupled with the mobile user device. The components include data structures that define a plurality of entities and associate attributes with the entities corresponding to access to the resources. A first application manages access of the visitor to the resources based on the data structures and information communicated by the mobile user device to the components in transactions that are authorized using the at least one credential. The credential may be a block chain credential and the transactions may be block chain transactions. The mobile user device may be locally coupled to the secure component.

Abstract: Managing a visitor outside of a physical area includes remotely registering the visitor to an access system, installing an application on a mobile user device of the visitor, the application being authorized to access and communicate with the access system, the visitor entering personnel credentials to authorize use of the application while the visitor is outside of the physical area, and, in response to the visitor authorizing use of the application, the application and the access system exchanging data containing information about the visitor, remote executed activities of the visitor, remote data, and/or information about localization of the user device. The application may exchange data with the access system using a RESTful API. Data may be formed in a blockchain prior to being exchanged between the mobile user device and the access system. The access system may add third party information to complement and improve scheduling of the visitor.

Abstract: Using a mobile user device of a user to control access to a thing located within a physical area and having a physical locking mechanism includes determining whether a current location of the mobile user device is within a predefined proximity to the thing, accessing, from a secure component proximal to the mobile user device, a credential for authorizing the mobile user device to communicate block chain transactions with one or more other remotely located components, securely accessing one or more first attributes associated with the thing, and locking or unlocking the locking mechanism based at least in part on the one or more first attributes. The credential may be a block chain credential. Securely accessing the one or more first attributes may include accessing one or more blocks of a blockchain on the one or more remotely located components using the credential.

Abstract: Managing a lifecycle of a container includes defining a plurality of states, each state corresponding to a particular phase in the lifecycle of the container, determining one or more current properties of the container while a current defined state of the container is in a first defined state of the plurality of defined states, and controlling an action associated with the container based on at least the first defined state and the one or more determined properties of the container. Determining one or more current properties of the container may include determining a current fill level of the container and information about at least one other current physical property of the container. Controlling an action may include changing the defined state of the container from the first defined state to a second defined state of the plurality of defined states.

Abstract: A system for managing lifecycles of pallets remotely located from one or more servers has at least a first database defining information for managing the lifecycles of the plurality of pallets. Each of the plurality of pallets has a pallet monitoring device physically coupled thereto. The system includes one or more pallet management components communicatively coupled to, and remotely located from, the one or more servers, and each pallet management component manages, at least in part, a lifecycle of one or more of the plurality of pallets based at least in part on the information defined in the first database. At least one of the one or more pallet management components may be included in a pallet monitoring device physically coupled to the one or more pallets, and the pallet monitoring device may be in direct communication with at least one of the one or more servers.

Abstract: A device for monitoring and managing a pallet includes one or more sensors for determining properties associated with a pallet, which may include a weight of a load of a pallet, and the presence, number and/or location of one or more load items on a pallet. The device may be physically coupled to a pallet, and may include a processing unit coupled to the one or more sensors, the processing unit having one or more interfaces to communicate with the one or more sensors, and one or more interfaces to communicate with one or more networks. The device may include one or more hydraulic mats including one or more pressure sensors, and RFID (UHF) and/or optical code readers for detecting and/or identifying load items. The device may include RFID (NFC) readers for exchange of payment and access information. The device also may include multiple layers, each of which may include one or more cavities for accommodating components of the device.

Abstract: Issuing an alert with respect to a first physical area includes determining a location of a mobile user device of a user with respect to the first physical area controlled by a entity, following determining the current location, remotely configuring the mobile user device to detect when the device is within a predefined proximity to one or more second physical areas within the first physical area, and, in response to detecting that the device is within the predefined proximity, issuing the alert to one or more parties. Issuing an alert with respect to a first physical area may also include placing one or more wireless beacons that transmit beacon signals relative to the one or more second physical areas, where detecting that the device is within the predefined proximity includes the device detecting at least one of the beacon signals transmitted from the one or more wireless beacons.

Abstract: Controlling activity within a physical area under control of an entity includes determining a current location of a mobile user device of a user relative to the physical area, where the mobile user device is not affiliated with the entity and the entity remotely controlling one or more capabilities of the mobile user device while the mobile user device is located within, or within a predefined proximity of, the physical area. Remotely controlling may include disabling WIFI communication capabilities and disabling wireless telephony communication capabilities. Remotely controlling may include allowing GPS and near field communication capabilities to remain enabled. Controlling activity within a physical area under control of an entity may also include providing one or more access codes for things located within the physical area. Controlling activity within a physical area under control of a first entity may include accessing a secure component.

Abstract: Establishing a status of a user at a physical area includes determining a presence of a mobile user device at a location relative to the physical area, determining an identification of the user from the mobile user device, accessing, from a secure component included proximal to the mobile user device, a credential for authorizing the mobile user device to communicate transactions with one or more other remotely located components, using the credential to securely determine one or more first attributes of the user and one or more second attributes of one or more resources located at the physical area, and determining a status of a user with respect to the one or more resources based at least in part on the determined identification of the user, the first attributes and the second attributes. The credential may be a block chain credential and the transactions may be block chain transactions.

Abstract: Managing a visitor outside of a physical area includes remotely registering the visitor to an access system, installing an application on a mobile user device of the visitor, the application being authorized to access and communicate with the access system, the visitor entering personnel credentials to authorize use of the application while the visitor is outside of the physical area, and, in response to the visitor authorizing use of the application, the application and the access system exchanging data containing information about the visitor, remote executed activities of the visitor, remote data, and/or information about localization of the user device. The application may exchange data with the access system using a RESTful API. Data may be formed in a blockchain prior to being exchanged between the mobile user device and the access system. The access system may add third party information to complement and improve scheduling of the visitor.

Abstract: Efficiently and reliably tracking information for devices in a network, for example, a heterogeneous network of a plurality of devices of different types, includes collecting and storing information in a computationally efficient and secure manner that ensures to a high degree of certainty the integrity of the information for future access and use. The information may be collected from one or more sensors/data sources, for example, over a predetermined period of time, and may be grouped into a single transaction record. The transaction record may be sent from a gateway to a server of a network cloud, for example, during a predefined time slot of cycle based in part on the number of gateways and sensors in the system. Each transaction record may include a one-way hash of, and a reference to, an immediately preceding transaction record for the overall system for which information is being tracked.

Abstract: Using a mobile user device of a user to control access to a thing located within a physical area and having a physical locking mechanism includes determining whether a current location of the mobile user device is within a predefined proximity to the thing, accessing, from a secure component proximal to the mobile user device, a credential for authorizing the mobile user device to communicate block chain transactions with one or more other remotely located components, securely accessing one or more first attributes associated with the thing, and locking or unlocking the locking mechanism based at least in part on the one or more first attributes. The credential may be a block chain credential. Securely accessing the one or more first attributes may include accessing one or more blocks of a blockchain on the one or more remotely located components using the credential.

Abstract: Issuing an alert with respect to a first physical area includes determining a location of a mobile user device of a user with respect to the first physical area controlled by a entity, following determining the current location, remotely configuring the mobile user device to detect when the device is within a predefined proximity to one or more second physical areas within the first physical area, and, in response to detecting that the device is within the predefined proximity, issuing the alert to one or more parties. Issuing an alert with respect to a first physical area may also include placing one or more wireless beacons that transmit beacon signals relative to the one or more second physical areas, where detecting that the device is within the predefined proximity includes the device detecting at least one of the beacon signals transmitted from the one or more wireless beacons.

Abstract: Monitoring user activity within a physical area controlled by an entity includes determining a location of a mobile device with respect to the physical area, in response to determining the location, exchanging communications with remotely located components associated with the entity to remotely configure the mobile device with a digital map of the physical area, information about things within the physical area and the ability to access the things, storing records of interactions between the mobile device and the a thing relative to the digital map, and transmitting the records as transactions of a blockchain to the remotely located components. The thing may have a QRC label and/or an RFID tag affixed thereto and remotely configuring the user device may include configuring the user device with an ability to read the QRC label and/or the RFID tag.