Abstract: A cleaning device for cleaning a dispensing nozzle assembly of a beverage dispenser is disclosed. The dispensing nozzle assembly may include a macro-ingredient/diluent outlet and a number of micro-ingredient outlets surrounding the macro-ingredient/diluent outlet. The cleaning device may include a handle, a head end rotatably attached to the handle, a guidance protrusion extending from the head end, a first set of bristles extending from the head end and surrounding the guidance protrusion, and a second set of bristles extending from the head end adjacent to the first set of bristles.

Abstract: A unit-dose dentifrice composition includes a soluble fibrous composition and a nonfibrous composition. The soluble fibrous composition includes web forming material and tin ion source. The nonfibrous composition includes abrasive. The abrasive and the tin ion source are in separate locations within the unit-dose dentifrice composition.

Abstract: Methods and systems provide for reducing privacy leaks in DNS request by using a private DNS service. The private DNS service provides for matching a level of privacy provided by a type of communication protocol to a level of privacy desired or required for a particular client communication. When the DNS service determines that an intended communication protocol does not supply at least the level of privacy desired for a particular communication, the private DNS service may initiate the creation of a connection with the desired level of privacy.

Abstract: A building system of a building including one or more memory devices having instructions thereon, that, when executed by one or more processors, cause the one or more processors to identify a capability of an entity in a building graph, the building graph including a plurality of nodes and a plurality of edges, the plurality of nodes representing entities of the building including the entity and the capability, the plurality of edges representing relationships between the entities of the building and the capability. The instructions cause the one or more processors to receive a command to perform an operation associated with the entity, the operation associated with the capability of the entity and provide the command to perform the operation associated with the entity to an operating system.

Abstract: A surgical protection system to define a barrier between the user and the external environment. The surgical protection system comprising a helmet assembly, a hood and a transparent face shield. The helmet including a shell, a face frame coupled to the shell, a static tab, a first fastener disposed on the face frame; and a fan mounted to the shell and configured to circulate air about the user. The hood may include a first material defining an opening. The shield may be formed from flexible material and disposed within the opening of the hood. The shield may further include a tab extending from a top portion of the shield and define an opening configured to receive the static tab of the helmet to align the shield to the helmet. The first fastener disposed on the face frame may be configured to facilitate removable attachment of the shield to the helmet.

Abstract: In one aspect, a wheel end monitoring apparatus comprising a wheel hub configured to receive a wheel rim and be clamped therewith. The wheel end monitoring apparatus further includes a power source, at least one sensor, and communication circuitry that are rotatable with the wheel hub. The at least one sensor is configured to detect at least one property of the clamped wheel hub and the wheel rim. The at least one property is indicative of the clamping of the clamped wheel hub and the wheel rim. The communication circuitry is configured to wirelessly communicate data associated with the at least one property to an external device.

Abstract: Security policies are made dependent on location of a device and the location of a device is determined and the appropriate security policy applied without providing the device's location to a server. A device determine its location and identifies a security policy identifier mapped to a zone including the location. The device requests the security policy corresponding to the identifier from a server and implements it. The device may also store a database of the security policies and implement them according to its location. Devices registered for a user evaluate whether locations detected for the devices correspond to impossible travel by the user. Objects encoding geolocation data of a device may be encrypted with a private key of the device and the public key of another to prevent access by an intermediary server.

Abstract: An identity broker receives a request for access by a client device to a service provided by a server. In response to the request, the identity broker communicates with the client device to determine whether a security risk is associated with allowing the client device to access data of a service provider. An identifier assigned to the client device is used to identify a user session between the client device and the service provider. Continuous monitoring of the client device is performed to identify any security risks associated with the user session. If a risk is identified, the identifier is used to revoke the user session.

Abstract: A machine learning model is trained based at least on previous change requests, wherein each of the previous change requests are associated with a controlled management of a lifecycle of a change to an information technology environment. A security vulnerability of the information technology environment is identified. Using the trained machine learning model, a corresponding match score for each of a plurality of pending change requests is determined for the security vulnerability. An indication of whether a resolution specification for the security vulnerability is to be linked with one of the plurality of pending change requests selected based on a factor associated with its corresponding match score is received.

Abstract: A method of reducing junction resistance variation for junctions in quantum information processing devices fabricated using two-step deposition processes. In one aspect, a method includes providing a dielectric substrate, forming a first resist layer on the dielectric substrate, forming a second resist layer on the first resist layer, and forming a third resist layer on the second resist layer. The first resist layer includes a first opening extending through a thickness of the first resist layer, the second resist layer includes a second opening aligned over the first opening and extending through a thickness of the second resist layer, and the third resist layer includes a third opening aligned over the second opening and extending through a thickness of the third resist layer.

Abstract: Systems and Computer Readable Media for enabling methods for multi-party authorization including a security component determining that a request for the performance of an action on a computing device is from a first party. The security component initiates transmissions to the computing device of first and second information indicating knowledge of first and second secrets provisioned on the computing device. The computing device, upon verifying the knowledge of first and second secrets, then permits the requested action.

Abstract: A method includes: forming an opening in a mask layer; measuring a feature size associated with a dimension of the opening; based on the feature size, determining a fabrication parameter; and forming a second layer in the opening. Forming the second layer is based on the fabrication parameter. A fabrication system includes a lithography system; a measurement system; a physical vapor deposition system; an oxidation system; and a control system. The control system is configured to control a feed-forward fabrication process.

Abstract: Methods and systems are provided for providing a mobile communications device with access to a provider with a plurality of security levels. The security state of the device varies according to severity levels of device security events. The mobile communications device generates data regarding security events and provides the data to the provider, which compares that security state to a policy associated with the provider. The mobile communications device is allowed to access to a provider service where the device's current security state meets or exceeds the security state required for the provider service.

Abstract: A virtual assistant/chatbot to improve clinical workflow for home renal replacement therapies is disclosed herein. A virtual assistant/chatbot includes a patient-facing user interface configured to enable a patient to engage in a virtual chat session by typing, speaking, or otherwise providing information regarding a patient request or issue related to their renal replacement therapy. The virtual assistant/chatbot also includes a backend server-based system configured to provide logic to respond to a patient's requests. The logic defines a sequence of questions and answers for resolving patient queries. The sequence of assistant/chatbot questions and patient answers may be configured in a node arrangement such that certain patient answers/requests lead to additional questions for additional information from a patient.

Abstract: Applications on a device are assigned scores based on their attributes, update status, and source. A device is a assigned a score based on its attributes and the scores of applications installed thereon. the device score may be combined with an evaluation of user behavior to obtain a user score. The scores may be used to invoke security actions with respect to data and services of an enterprise. Security reports for a network environment may be modified such that the severity of threats accounts for policies and attributes of the environment. Security of a device may be evaluated locally, including the training of a model to identify anomalous authentication or usage behavior. Security of a device may be reduced to a score lacking personal information that may be used by a server to select access controls for a device.

Abstract: A computing system is configured to generate a map-viewing interface including a display window visually presenting one or more display layers associated with a mapping site therein. Each of the display layers corresponds to a graphical representation of at least one structure and/or utility present at the mapping site and each of the display layers is associated with geo-positional data to establish a relative position of each of the display layers within the display window. A file tag is displayed within the display window of the map-viewing interface and is associated with a file accessible to the computing system and including data relating to one of the structures and/or utilities present at the mapping site. The file is associated with geo-positional data to establish a position of the file tag within the display window relative to each of the display layers instantaneously being visually presented within the display window.

Abstract: A cloud server collects and stores context data from mobile devices. Data collected for a mobile device is compared to the historical data. A security policy is selected for the mobile device based on the comparison. The selected policy is deployed to the mobile device. A status of the deployment is tracked by the cloud server.

Abstract: A support assembly for mounting photovoltaic modules on a support surface and a mounting system including the same are disclosed herein. The support assembly may comprise a the body portion including a base portion and at least one upright support member coupled to the base portion, the at least one upright support member comprising an integrally formed ballast tray slot in one side thereof for receiving an upturned edge of a ballast tray; and at least one clamp subassembly coupled to the at least one upright support member of the body portion, the at least one clamp subassembly configured to be coupled to one or more photovoltaic modules. In addition to a plurality of support assemblies, the mounting system may further comprise at least one ballast tray support bracket, the ballast tray support bracket supporting a portion of a ballast tray on the support surface.

Abstract: Methods, systems, and computer-readable media for controlling a toolface of a downhole tool are described. The toolface of the downhole tool, and a toolface setpoint, are determined. Based on the toolface and the toolface setpoint, a toolface error is determined. Based on the toolface error, one or more drilling parameter setpoints are selected from among multiple drilling parameter setpoints. The selected one or more drilling parameter setpoints are adjusted. The adjusted one or more drilling parameter setpoints are inputted to one or more drilling controllers for controlling the toolface of the downhole tool.

Abstract: The method disclosed herein provides for performing user authentication and maintaining user authentication and access to a first device based on the user maintaining control of the first device. The continued control may be based on determining the user's continued possession of the first device, or determining an acceptable proximity of the user to the first device. The proximity of the user may be determined using a second device associated with the user, or sensors associated with the first device.