Abstract: Embodiments of the present disclosure provide for improved methodologies for managing initiation of an automated healing process for operational technology devices in a network. Some embodiments include identifying at least one operational technology (OT) device connected to a network that is vulnerable to at least one cybersecurity risk, where the at least one OT device is wirelessly connected to the network, identifying at least one computer-executable resolution to the at least one cybersecurity risk, executing a simulation that tests performance of the network with resolution of the at least one cybersecurity risk utilizing the at least one computer-executable resolution, generating a solution implementation report based at least in part on the simulation, and determining whether to automatically initiate the at least one computer-executable resolution based at least in part on the solution implementation report.

Abstract: In accordance with some embodiments, systems, methods, and media for estimating a depth and orientation of a portion of a scene using a single-photon detector and diffuse light source are provided. In some embodiments, a system comprises: a light source; an image sensor comprising a pixel having a field of view of at least one degree; a hardware processor programmed to: cause the light source to emit a sequence of n defocused pulses toward the scene; receive, from the pixel, information indicative of arrival times of light from the scene; generate a transient histogram using the information indicative of arrival times of light from the scene; and estimate one or more properties of a portion of the scene within the field of view of the pixel based on the transient histogram, wherein the one or more properties of the portion of the scene includes at least a depth.

Abstract: Embodiments of the disclosure provide improvements for managing access of nodes, including wireless nodes, to a network including operational technology device(s) (e.g., a wireless OT network). Some embodiments include detecting a node from at least one message communication over a wireless OT network, authenticating node identification information that uniquely identifies the node, confirming that the node is permissioned to access the wireless OT network by at least validating authentication information associated with the node, confirming that the node is attempting an authorized action by at least validating authorization information associated with the at least one message communication, and assigning an access indicator based at least in part on the authenticating of the node identification information, the validating of the authentication information, and the validating of the authorization information.

Abstract: In various embodiments, network traffic data associated with an industrial network is monitored based on a networking event rule set related to defined networking events. The network traffic data is related to a set of asset devices in communication via the industrial network, and the networking event rule set is used to determine a networking event associated with the set of asset devices. A cybersecurity event level for the networking event is determined based on a comparison between a networking event feature set for the networking event and a predefined cybersecurity event feature set for a set of predefined cybersecurity events. In response to a determination that the cybersecurity event level for the networking event satisfies a predefined cybersecurity threat level threshold, a modification is made to one or more configuration parameters for one or more asset devices from the set of asset devices associated with the networking event.

Abstract: The disclosure provides for a system. The system may include a rotational control system configured to rotate a seat of a vehicle, and one or more computing devices. The one or more computing devices may have one or more processors that are configured to determine that an impact is imminent at a location on the vehicle along a collision axis. A most favorable orientation may be determined by the one or more processors based on the determined location and collision axis. Using the rotational control system, the one or more processors may rotate the seat of the vehicle to the most favorable orientation in order to reduce risks of serious injury to a passenger in the seat caused by the imminent impact. A translational control system may be used by the one or more processors to translate the seat of the vehicle to a position relative to the determined location.

Abstract: A pair of virtualized security device initialization data sets are received at a first virtualization server from respective sources prior to a launch of a compute instance at the server. A first virtualized security device is initialized using the data sets, and used to generate cryptographic artifacts used by the compute instance. A data item which was included in one of the data sets is modified after the cryptographic artifacts are generated. Additional cryptographic artifacts are generated by a second virtualized security device at a second virtualization server to which the compute instance has been migrated. The second virtualized security device is initialized using at least the modified data item.

Abstract: An augmented reality trigger system (10) comprising a primary augmented reality device (30) and a trigger action controller (40) for implementing an augmented reality trigger method based on a medical tool (20) and/or a tool identifier (21) associated with the medical tool (20). In operation, the primary augmented reality device (30) generates a camera image of the real world, which may or may not at any time include the medical tool (20) and/or the tool identifier (21). The trigger action controller (40) recognizes a generation by the primary augmented reality device (30) of the camera image of the real world including the medical tool (20) and/or the tool identifier (21) and in response to such recognition, triggers a medical procedure action by the primary augmented reality device (30) and/or a medical device (50) in support of a medical procedure involving the medical tool (20).

Abstract: An ion implantation system, ion source, and method are provided for forming an aluminum ion beam from an aluminum-containing species to an ion source. One or more of a halide species and a halide molecule are introduced to the ion source, where the halide species is selected from a group consisting of atomic chlorine, atomic bromine, and atomic iodine, and the halide molecule comprises a halide selected from a group consisting of chlorine, bromine, and iodine. The one or more of the halide species and the halide molecule clean one or more components of the ion source and further react with the aluminum-containing species to generate an aluminum-halide vapor. The aluminum ion beam is further formed from at least the aluminum-halide vapor.

Abstract: A thermal electrostatic clamp has a central electrostatic portion associated with a central region of a workpiece. A central body has a clamping surface and one or more electrodes are associated with the central body. One or more electrodes selectively electrostatically clamp at least the central region of the workpiece to the clamping surface based on an electrical current passed therethrough. One or more first heaters of the central body selectively heat the central electrostatic portion to a first temperature. A non-electrostatic peripheral portion associated with a peripheral region of the workpiece has a peripheral body encircling the central body, separated by a gap. The peripheral body is positioned beneath the peripheral region of the workpiece. The peripheral portion does not electrostatically clamp the peripheral region of the workpiece. One or more second heaters of the peripheral body selectively heat the non-electrostatic peripheral portion to a second temperature.

Abstract: An augmented reality trigger system (10) comprising a primary augmented reality device (30) and a trigger action controller (40) for implementing an augmented reality trigger method based on a medical tool (20) and/or a tool identifier (21) 5 associated with the medical tool (20). In operation, the primary augmented reality device (30) generates a camera image of the real world, which may or may not at any time include the medical tool (20) and/or the tool identifier (21). The trigger action controller (40) recognizes a generation by the primary augmented reality device (30) of the camera image of the real world including the medical tool (20) and/or the tool 10 identifier (21) and in response to such recognition, triggers a medical procedure action by the primary augmented reality device (30) and/or a medical device (50) in support of a medical procedure involving the medical tool (20).

Abstract: A trust chain having client system and a remote system in a secure connection, wherein an intermediary system associated with the network flow path serves as a signing entity to establish an end to end transitive trust. The intermediate system is a corroborative entity in the operations technology realm of the client system. The remote system serves as the host for a plurality of services in the information technology realm. A two way handshake during the initial secure exchange protocol between a local client application and a remote service is extended to a three way handshake that includes a nonce issued by the remote service on the remote system and a digital signature for the nonce issued by a signature service on an associated intermediate system. The nonce signature is verified authoritatively at the remote system based on the signing certificate of the intermediate system for explicit proof of association.

Abstract: Aspects of the disclosure relate to deployable structures, such as airbag systems, for vehicles. A system is disclosed for reducing likelihood of injury to a passenger in a collision. The system may include a seat configured to accommodate the passenger and an airbag system. At least a portion of the airbag system may be incorporated into a vehicle prior to deployment of the airbag system. The airbag system may include an airbag and a locking feature. The locking feature may be configured to lock the airbag with a locking portion of a vehicle when the airbag system has been deployed. The locking feature may be attached to the airbag. Aside from airbags, other confining structures, such as nets, shades, curtains, etc., may also be used as deployable structures.

Abstract: Embodiments herein disclose a method for optimizing power consumption in an electronic device comprising a plurality of RATs. The method includes determining a system bandwidth of the plurality of RATs available in the electronic device and mapping at least one portion of the system bandwidth to at least one power consumption level of a set of power consumption levels of the electronic device. Further, the method includes distributing the at least one portion of the system bandwidth across the plurality of RATs based on the at least one mapped power consumption level of the set of power consumption levels of the electronic device. Further, the method includes enforcing the distributed system bandwidth across the plurality of RATs in the electronic device and enabling at least one application to use the distributed system bandwidth across the plurality of RATs in the electronic device.

Abstract: An Internet of Things (IoT) device with zero touch provisioning includes one or more processing devices; a secure element; and memory storing software that, when executed in the one or more processing devices, cause the one or more processing devices to: install one or more clients on the IoT device for provisioning, enrollment, and updating, based on a device configuration; store an immutable device identity and a signing certificate in the secure element; and responsive to the IoT device being powered-on, cause the one or more clients and the secure element to perform the zero touch provisioning of the IoT device. The one or more clients on the IoT device for provisioning, enrollment, and updating operate with corresponding services with all communicating being encrypted, thereby protecting against cloning and counterfeiting of IoT devices.

Abstract: An ultrasound imaging system according to the present disclosure may include an ultrasound transducer assembly comprising a plurality of apertures that are configured to transmit signals toward and receive signals from a region of interest (ROI) of a subject, a tracking sensor disposed within the subject and configured to move within the ROI, the sensor being responsive to signals transmitted by the apertures, and at least one processor in communication with the ultrasound transducer assembly and the tracking sensor.

Abstract: A trust chain having client system and a remote system in a secure connection, wherein an intermediary system associated with the network flow path serves as a signing entity to establish an end to end transitive trust. The intermediate system is a corroborative entity in the operations technology realm of the client system. The remote system serves as the host for a plurality of services in the information technology realm. A two way handshake during the initial secure exchange protocol between a local client application and a remote service is extended to a three way handshake that includes a nonce issued by the remote service on the remote system and a digital signature for the nonce issued by a signature service on an associated intermediate system. The nonce signature is verified authoritatively at the remote system based on the signing certificate of the intermediate system for explicit proof of association.

Abstract: For zero-touch provisioning of devices at scale using device configuration templates by device type, a secure element, a provisioning wizard, a provisioning client, an enrollment client, an update client, an enrollment service, an update publisher service, signing and encryption certificates, a method including generating device configuration templates for enrollment and update by device type, sending device configuration templates signed with a device owner signing certificate, and a device owner encryption certificate to the device manufacturer, generating a device configuration for a device based on the device configuration templates using a secure element on the device for immutable device identity, an extended configuration for the device, signing the device configuration with a device manufacturer signing certificate and a secure element signing certificate, encrypting the doubly signed device configuration with an owner encryption certificate, configuring bootstrap metadata, and configuring the device

Abstract: An image processing system for convolving an image includes processing circuitry that is configured to retrieve the image including a set of rows, a merged kernel, multiple skip values and a pixel base address. The merged kernel includes all non-zero coefficients of a set of kernels. Each skip value corresponds to a location offset of each non-zero coefficient with respect to a previous non-zero coefficient. Further, the processing circuitry is configured to execute a multiply-accumulate (MAC) instruction and a load instruction parallelly in one clock cycle for multiple times, on the set of rows and the merged kernel to convolve the image with the merged kernel. Each row on which the MAC and load instructions are executed is associated with a corresponding non-zero coefficient and a corresponding skip value. The load instruction is executed based on the pixel base address, the corresponding skip value, and a width of each row.

Abstract: Ion implantation systems and methods implant varying energies of an ion beam across a workpiece in a serial single-workpiece end station, where electrodes of an acceleration/deceleration stage, bend electrode and/or energy filter control a final energy or path of the ion beam to the workpiece. The bend electrode or an energy filter can form part of the acceleration/deceleration stage or can be positioned downstream. A scanning apparatus scans the ion beam and/or the workpiece, and a power source provides varied electrical bias signals to the electrodes. A controller selectively varies the electrical bias signals concurrent with the scanning of the ion beam and/or workpiece through the ion beam based on a desired ion beam energy at the workpiece. A waveform generator can provide the variation and synchronize the electrical bias signals supplied to the acceleration/deceleration stage, bend electrode and/or energy filter.

Abstract: A method of building a device historian, across a supply chain of device manufactures and managers, by a plurality of device management services comprising an enrollment service, an update service, a policy service, and an analytics service, a transaction connector, a blockchain broker service participating as a node in a blockchain network, and transaction filters. The method comprises sending, by the plurality of device management services a transaction record over the transaction connector to the blockchain broker service, receiving, by the blockchain broker service, the transaction record, filtering, by the blockchain broker service, information in the transaction record based on the transaction filters, preparing, by the blockchain broker service, a versioned block based on the filtered information from the transaction record, and adding, by the blockchain broker service, the versioned block to the blockchain network.