Abstract: A method of exchanging messages across a network, the method comprising receiving a resource request message from an asset controller, the resource request message comprising asset data and a resource request, analyzing the resource request message in order to select at least one resource candidate from a plurality of available resource candidates, the resource candidates having a resource for exchange with the asset, sending the resource request message to the selected at least one resource candidate, receiving a resource approval message from the at least one resource candidate, the resource approval message being indicative of an approval to supply the resource in accordance with the resource request message, and in the event that the resource approval message indicates approval to supply the resource, generating a transaction authorization message, the transaction authorization message being used to authorize a transaction to supply the resource on the basis of the resource request message.

Abstract: Embodiments herein describe disconnecting, by an access node, a first device having a first media access control (MAC) address due to a network violation and receiving, by the access node, information about a second device having a second MAC address different from the first MAC address. In one embodiment, the information is generated by a certificate server based on a token generated by the second device. Further, when the access node determines, based on the information, that the second device is the first device, the access node denies a connection request from the second device.

Abstract: An endpoint agent extension of a cyber defense system for email that includes modules and machine learning models. An integration module integrates with an email client application to detect email cyber threats in emails in the email client application as well as regulate emails. An action module interfaces with the email client application to direct autonomous actions against an outbound email and/or its files when a cyber threat module determines the email and/or its files (a) to be a data exfiltration threat, (b) to be both malicious and anomalous behavior as compared to a user's modeled email behavior, and (c) any combination of these. The autonomous actions can include actions of logging a user off the email client application, preventing the sending of the email, stripping the attached files and/or disabling the link to the files from the email, and sending a notification to cyber security personnel regarding the email.

Abstract: Systems, methods, and apparatus are provided for determining overlay of a pattern on a substrate with a mask pattern defined in a resist layer on top of the pattern on the substrate. A first grating is provided under a second grating, each having substantially identical pitch to the other, together forming a composite grating. A first illumination beam is provided under an angle of incidence along a first horizontal direction. The intensity of a diffracted beam from the composite grating is measured. A second illumination beam is provided under the angle of incidence along a second horizontal direction. The second horizontal direction is opposite to the first horizontal direction. The intensity of the diffracted beam from the composite grating is measured. The difference between the diffracted beam from the first illumination beam and the diffracted beam from the second illumination beam, linearly scaled, results in the overlay error.

Abstract: A method is presented for secure communication, the method including generating a signature using a private key, a nonce, and at least one of an identifier and a key component; and transmitting the signature, the nonce, a security parameter, and the at least one of the identifier and the key component, wherein the security parameter associates a user identity with a public key, the public key being associated with the private key.

Abstract: A host device having a first processor executes an application via the first processor. The host device determines a state of the application. A scenegraph is generated corresponding to the state of the application, and the scenegraph is presented to a remote device having a display and a second processor. The remote device is configured to, in response to receiving the scenegraph, render to the display a view corresponding to the scenegraph, without executing the application via the second processor.

Abstract: A registration method whereby a sensor-based approach is used to establish initial registration and whereby upon the commencement of navigating an endoscope, image-based registration methods are used in order to more accurately maintain the registration between the endoscope location and previously-acquired images. A six-degree-of-freedom location sensor is placed on the probe in order to reduce the number of previously-acquired images that must be compared to a real-time image obtained from the endoscope.

Abstract: Disclosed are examples related to data driven interfaces for decoupling management system components from a manufacturer or a platform of client devices managed by the management system. In some examples, among others, a system can generate a data driven interface template that can be used to cause rendering of a data driven user interface for configuring a profile payload of a device profile for the client device. The system can generate, based on values associated with the data driven user interface, a profile document in an instance in which values are obtained from the data driven user interface. In some aspects, the profile document is a generic representation of the profile payloads for the platform, the manufacturer or the type of the client device.

Abstract: A system and method for providing content for display form data sources on a client device are provided. The method includes receiving, by a distribution server, a report identifier associated with a report and a request for information, wherein the information is requested based on the report; determining by the distribution server at least a data source, the at least a data source storing at least a portion of the information; requesting access from the integration server to the at least a data source to retrieve the at least a portion of the information; and sending from the distribution server to the client device, the at least a portion of the information, wherein the at least a portion of information is utilized in the report. In an embodiment, the data sources are accessible by an integration server.

Abstract: A load balancing method is disclosed, the method includes establishing a processing network including a plurality of task-processing processors interconnected therewith, each processor of the plurality having a queue of tasks to be processed, establishing a k-regular graph including nodes and branches connecting the nodes, where k is the degree of the graph, assigning d walkers to the k-regular graph, where each walker is randomly assigned to a node, receiving a new task to be processed, walking from the assigned nodes to new nodes by randomly choosing a new node from one or more available nodes, without backtracking from each of the assigned nodes to a node from which each of the d walkers immediately walked, comparing the queues of the new nodes, determining which queue of the new nodes has the least number of tasks; and assigning the new task to the node with the least number of tasks.

Abstract: Optical apparatus includes a beam source, which is configured to generate an optical beam having a pattern imposed thereon. A projection lens is configured to receive and project the optical beam so as to cast the pattern onto a first area in space having a first angular extent. A field multiplier is interposed between the projection lens and the first area and is configured to expand the projected optical beam so as to cast the pattern onto a second area in space having a second angular extent that is at least 50% greater than the first angular extent.

Abstract: This disclosure relates to restricting access in a social network. The social network stores profile information for each of a plurality of users of the social network in a database. The social network receives, from a first user of the social network, a request to invite a second user to establish a connection with the first user. The social network transmits, to the first user, one or more questions pertaining to the profile information of the second user. The social network receives, from the first user, one or more answers responsive to the one or more questions. The social network determines whether each of the answers is correct based on the stored profile information of the second user. The social network transmits, to the second user, an invitation to establish the connection with the first user when at least a number of the answers are correct.

Abstract: A virtual reality (VR) audio rendering system and method include spatializing microphone-captured real-world sounds according to a VR setting. In a game streaming system, when a player speaks through a microphone, the voice is processed by geometrical acoustic (GA) simulation configured for a virtual scene, and thereby spatialized audio effects specific to the scene are added. The GA simulation may include generating an impulse response using sound propagation simulation and dynamic HRTF-based listener directivity. When the GA-processed voice of the player is played, the local player or other fellow players can hear it as if the sound travels in the scenery and according to the geometries in the virtual scene. This mechanism can advantageously place the players' chatting in the same virtual world like built-in game audio, thereby advantageously providing enhanced immersive VR experience to users.

Abstract: Enhancement of web browser extension analysis capabilities, such as security application analysis, is realized by encapsulating the extension with a wrapper function that defines entry and exits points within the source code of the extension. By wrapping the web browser extension in a function that defines entry and exit points, the present invention enables the use of commercial SAST tools/engines and any other application which desires to analyze the web browser extension and/or extract data therefrom. The web browser extension is programmatically analyzed to identify the entry and exit points and, in response, the wrapper function is generated that defines the entry and exits points and the web browser extension is encapsulated with the wrapper function.

Abstract: A private communication set-up service enables scalable private connectivity between producers and consumers residing within a public cloud environment. A producer exposes metadata information about a new or updated resource within the public cloud environment using a tag. The system monitors the public cloud environment for tagged metadata about new resources and configures a producer-side service to a private link. Subsequently, the system exposes metadata information about the private link. The system monitors for tagged metadata about private links and configures the consumer-side private link endpoint to the private link. The producer and the consumer communicate using the configured private link.

Abstract: Disclosed are various embodiments for implementing a decentralized messaging system that allows users to exchange messages via an inbox maintained through a distributed ledger. A messaging inbox can be created for a user in a distributed ledger using an inbox address that includes a string of alphanumeric numbers without an identifying domain name or identifying information about the user. Furthermore, a user may define content preferences associated with the inbox that can be used by the distributed ledger to filter content received in the inbox to minimize unwanted or undesired content provided to the user.

Abstract: A computing system can receive contextual data corresponding to a particular user and execute context resolution and constraint evaluation processes with local data acquisition and/or derivation priority to classify the user in one or more groups and reduce network latency. Based on the classified group(s) of the user, the computing system can provide targeted, group-specific content through an executing application of the user's computing device to enhance user experience with the application service.

Abstract: An example method comprises determining, by a computing system, that a message-sending computing device has received an indication of user input indicating an intent to send a message to a user of a message-recipient computing device; prior to the message being delivered to the message-recipient computing device, calculating, by the computing system, a screen sharing risk score (SSRS) that indicates a risk that the message-recipient computing device is currently sharing screen content of a screen of the message-recipient computing device with a screen-recipient computing device associated with an untrusted screen-recipient user; and based on the SSRS indicating that the risk is above a risk threshold, causing the message-sending computing device to output an alert indicating that the message-recipient computing device is possibly sharing the screen content of the message-recipient computing device with the screen-recipient computing device associated with the untrusted screen-recipient user.

Abstract: Method, apparatus and computer program product for querying a group-based communication platform are described herein. For example, the apparatus comprises at least one processor and at least one non-transitory memory including program code. The at least one non-transitory memory and the program code are configured to, with the at least one processor, cause the apparatus to at least store a plurality of electronic messages to a message corpus; receive a search query associated with the message corpus, wherein the search query comprises reaction metadata criteria; and apply the search query to the message corpus to generate a reaction search results set.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, an Ethernet communications device includes a physical layer (PHY) unit or a media access control (MAC) unit configured to perform media access control for the Ethernet communications device. The Ethernet communications device includes a security unit configured to manipulate a data stream in a data path within the Ethernet communications device when the data stream violates or conforms to a pre-defined policy.