Abstract: Methods, apparatuses and computer program products that implement embodiments of the present invention for protecting a computer network, include receiving, in a security server, alerts of multiple different types, indicative of potentially malicious activity in the network, that are detected by multiple different protection appliances deployed in the network. The alerts in the security server are correlated so as to identify a first alert of a first type from a first protection appliance in the network and a second alert of a second type, different from the first type from a second protection appliance in the network that are together indicative of a single attack on the network. Finally, a consolidated alert is issued responsively to the attack.

Abstract: A method for payment device issuance, lifecycle management, and use may include a financial institution computer program: issuing a numberless, physical first financial instrument that is restricted to in-person transactions having a first primary account number (PAN) stored in a chip to a customer; issuing a digital, second financial instrument to an electronic wallet for the customer having a second PAN that is different from the first PAN; receiving a notification that the first financial instrument or the second financial instrument has been lost or compromised; in response to the first financial instrument being lost/compromised, reissuing the first financial instrument with a third PAN, wherein the second PAN for the second financial instrument is unchanged; and in response to the second financial instrument being lost/compromised, reissuing the second financial instrument with a fourth PAN, wherein the first PAN for the first financial instrument is unchanged.

Abstract: Methods, apparatuses and computer program products that implement embodiments of the present invention for protecting a computer network, include receiving, in a security server, alerts of multiple different types, indicative of potentially malicious activity in the network, that are detected by multiple different protection appliances deployed in the network. The alerts in the security server are correlated so as to identify a first alert of a first type from a first protection appliance in the network and a second alert of a second type, different from the first type from a second protection appliance in the network that are together indicative of a single attack on the network. Finally, a consolidated alert is issued responsively to the attack.

Abstract: An electronic intraocular device is implantable into the capsular bag of a wearer's eye. In some cases, the intraocular device may include a femtoprojector. The femtoprojector projects images onto the wearer's retina when the electronic intraocular device is implanted in the wearer's eye. Different haptic designs may be used to keep the femtoprojector in position. In some embodiments, an imager is contained in a contact lens worn by the wearer. Images captured by the contact lens imager may be relayed to the intraocular femtoprojector. In some cases, the intraocular device may include an electronic capsular tension ring with a femtoimager. The femtoimager may capture images of the wearer's retina, for example for purposes of monitoring eye health.

Abstract: ID management for a network attached storage system using layered ID mapping virtualization. When a connection request is received at a NAS server, it is determined whether the request is for a new user, and if so, user IDs are created for the new user. External user ID and filesystem user ID are mapped to the internal user ID, and user ID is verified at the NAS server kernel on subsequent logins with an external database. The user IDs are remapped for the changed user account, and updated mappings are transmitted from the NAS server to one or more NAS server kernel repositories.

Abstract: A flip chip III-Nitride LED which utilizes a dielectric coating backed by a metallic reflector (e.g., aluminum or silver). High reflectivity and low resistance contacts for optoelectronic devices. Low ESD rating optoelectronic devices. A VCSEL comprising a tunnel junction for current and optical confinement.

Abstract: A sensing apparatus, an illumination system, and a data communication system including a Vertical Cavity Surface Emitting Laser (VCSEL) or VCSEL array.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include defining multiple group names, and identifying multiple system objects in a computer system such as a storage system. Examples of system objects include physical objects such as storage devices, network objects such as IP addresses, and logical objects such as logical volumes. Each of the system devices is tagged with a given group name, and upon receiving a query including a condition and an operation, one or more of the system devices matching the condition are identified, and the operation is performed on the one or more identified system objects. In some embodiments, the operation may include retrieving a parameter associated with the one or more identified system objects, and presenting a result of the query. In alternative embodiments, the operation may include updating a parameter associated with the one or more identified system objects.

Abstract: An aggregation volume includes a plurality of sub-volumes. Advanced storage functions or operations are carried out at the aggregation volume granularity and therefore are carried out on all sub-volumes allocated in a single aggregation volume at the same time. Such organization results in a de facto consistency group for all sub-volumes associated with a single aggregation volume. To create a sub-volume the aggregation volume is logically divided into pre-defined size chunks. Each chuck can subsequently be allocated to the sub-volume. When a sub-volume is created it is allocated to a number of chunks according to a requested sub-volume size.

Abstract: Systems, methods, and devices are described related to the assignment and management of patient-specific bins. A dispensing device at a healthcare facility includes a number of bins for storage of medical supplies, with some of the bins designated as patient-specific bins allocated to be assigned to patients for storage of their medications or certain other supplies. A central server computer system, in communication with a computer of the dispensing device, may monitor and assign current and future patient-specific use of the bins for the dispensing device. The assignment and management of patient-specific bins may be performed by devices distributed through the system.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include configuring distributed storage system resources for a distributed storage system. Examples of the storage system resources include a plurality of network segments, one or more network devices coupled to the network, and multiple nodes coupled to the network, the nodes including both frontend and backend nodes. Upon receiving, by a given frontend node in the distributed storage system, an input/output (I/O) request, one or more of the distributed storage system resources required to process the I/O request are identified, and a respective load that the I/O request will generate on each of the identified distributed storage system resources is calculated. The distributed storage system processes the I/O request upon detecting that the respective loads are less than respective available capacities of the identified distributed storage system resources.

Abstract: An electronic device in a device-to-device network of a user of the electronic device communicates with a group of one or more other instances of the electronic via dynamic connections that are based on pre-established and maintained (i.e., long-lived) associations in the device-to-device network. Moreover, a given dynamic connection between the electronic device and a given instance of the electronic device in the group is setup by the electronic device without assistance of a computer in another network, which conveys the communication within the group. During operation, the electronic device: detects a change to a location of the electronic device in the other network; and communicates a message with the update to the location to a second user in the device-to-device network who is associated with a second instance of the electronic device in the group at a second location specified by one of the associations.

Abstract: A computer-implemented method for data mirroring for network attached storage includes duplicating an identity mapping database on a second NAS server and creating a queue of updated data files containing updated elements since a prior synchronization. Data files containing the updated elements are transmitted from the first NAS server to the second NAS server. An updated copy of the identity mapping database from the first NAS server is stored at the second NAS server. The updated data files and metadata information from the first NAS server are written to the second NAS server. The permission entries of the transmitted data files from the first NAS server are translated using the identity mapping databases of the first and second NAS servers, such that the permission entries reflect the local ID mapping database on the second NAS server.

Abstract: An electronic device in a device-to-device network of a user of the electronic device communicates with a group of one or more other instances of the electronic via dynamic connections that are based on pre-established and maintained (i.e., long-lived) associations in the device-to-device network. Moreover, a given dynamic connection between the electronic device and a given instance of the electronic device in the group is setup by the electronic device without assistance of a computer in another network, which conveys the communication within the group. During operation, the electronic device: confirms that a second instance of the electronic device in the group (which is associated with a second user in the device-to-device network) is associated with a provider of the electronic device; and when the association is confirmed, communicates a message to the second instance of the electronic device at a location specified by one of the associations.

Abstract: An electronic device in a device-to-device network of a user of the electronic device communicates with a group of one or more other instances of the electronic via dynamic connections that are based on pre-established and maintained (i.e., long-lived) associations in the device-to-device network. Moreover, a given dynamic connection between the electronic device and a given instance of the electronic device in the group is setup by the electronic device without assistance of a computer in another network, which conveys the communication within the group. During operation, the electronic device: receives content from the user; generates a message by encrypting the content using an encryption key associated with the user; and provides the message to at least a second instance of the electronic device in the group, which is associated with a second user in the device-to-device network, at a location specified by one of the associations.

Abstract: Systems, methods, and devices are described related to the assignment and management of patient-specific bins. A dispensing device at a healthcare facility includes a number of bins for storage of medical supplies, with some of the bins designated as patient-specific bins allocated to be assigned to patients for storage of their medications or certain other supplies. A central server computer system, in communication with a computer of the dispensing device, may monitor and assign current and future patient-specific use of the bins for the dispensing device. The assignment and management of patient-specific bins may be performed by devices distributed through the system.

Abstract: An aggregation volume includes a plurality of sub-volumes. Advanced storage functions or operations are carried out at the aggregation volume granularity and therefore are carried out on all sub-volumes allocated in a single aggregation volume at the same time. Such organization results in a de facto consistency group for all sub-volumes associated with a single aggregation volume. To create a sub-volume the aggregation volume is logically divided into pre-defined size chunks. Each chuck can subsequently be allocated to the sub-volume. When a sub-volume is created it is allocated to a number of chunks according to a requested sub-volume size.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include configuring distributed storage system resources for a distributed storage system. Examples of the storage system resources include a plurality of network segments, one or more network devices coupled to the network, and multiple nodes coupled to the network, the nodes including both frontend and backend nodes. Upon receiving, by a given frontend node in the distributed storage system, an input/output (I/O) request, one or more of the distributed storage system resources required to process the I/O request are identified, and a respective load that the I/O request will generate on each of the identified distributed storage system resources is calculated. The distributed storage system processes the I/O request upon detecting that the respective loads are less than respective available capacities of the identified distributed storage system resources.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include configuring distributed storage system resources for a distributed storage system. Examples of the storage system resources include a plurality of network segments, one or more network devices coupled to the network, and multiple nodes coupled to the network, the nodes including both frontend and backend nodes. Upon receiving, by a given frontend node in the distributed storage system, an input/output (I/O) request, one or more of the distributed storage system resources required to process the I/O request are identified, and a respective load that the I/O request will generate on each of the identified distributed storage system resources is calculated. The distributed storage system processes the I/O request upon detecting that the respective loads are less than respective available capacities of the identified distributed storage system resources.

Abstract: An aggregation volume includes a plurality of sub-volumes. Advanced storage functions or operations are carried out at the aggregation volume granularity and therefore are carried out on all sub-volumes allocated in a single aggregation volume at the same time. Such organization results in a de facto consistency group for all sub-volumes associated with a single aggregation volume. To create a sub-volume the aggregation volume is logically divided into pre-defined size chunks. Each chuck can subsequently be allocated to the sub-volume. When a sub-volume is created it is allocated to a number of chunks according to a requested sub-volume size.