Abstract: A method includes determining a cluster reliability of a computing cluster including a maximum computing capacity and representative of a reliability of the computing cluster when utilizing an entirety of the maximum computing capacity. The operations include receiving a provisioning request of the computing cluster including a threshold reliability of the computing cluster. In response to the provisioning request, determining, using the cluster reliability, a reserved computing capacity of the computing cluster based on the threshold reliability. The reserved computing capacity is less than the maximum computing capacity. Based on the reserved computing capacity and the maximum computing capacity, the operations include determining an unreserved computing capacity of the computing cluster. The operations include provisioning the computing cluster for execution of a user workload. The user workload executes on the unreserved computing capacity.

Abstract: A secure and fault-tolerant, or variation-tolerant, method and system to turn a set of N shares into an identifier even when only M shares from this set have a correct value. A secret sharing algorithm is used to generate a number of candidate identifiers from subsets of shares associated with asset parameters of a collection of assets. The most frequently occurring candidate identifier is then determined to be the final identifier. The method has particular applicability in the fields of node locking and fingerprinting.

Abstract: A secure and fault-tolerant, or variation-tolerant, method and system to turn a set of N shares into an identifier even when only M shares from this set have a correct value. A secret sharing algorithm is used to generate a number of candidate identifiers from subsets of shares associated with asset parameters of a collection of assets. The most frequently occurring candidate identifier is then determined to be the final identifier. The method has particular applicability in the fields of node locking and fingerprinting.

Abstract: A secure and fault-tolerant, or variation-tolerant, method and system to turn a set of N shares into an identifier even when only M shares from this set have a correct value. A secret sharing algorithm is used to generate a number of candidate identifiers from subsets of shares associated with asset parameters of a collection of assets. The most frequently occurring candidate identifier is then determined to be the final identifier. The method has particular applicability in the fields of node locking and fingerprinting.

Abstract: In the present disclosure, implementations of Diffie-Hellman key agreement are provided that, when embodied in software, resist extraction of cryptographically sensitive parameters during software execution by white-box attackers. Four embodiments are taught that make extraction of sensitive parameters difficult during the generation of the public key and the computation of the shared secret. The embodiments utilize transformed random numbers in the derivation of the public key and shared secret. The traditional attack model for Diffie-Hellman implementations considers only black-box attacks, where attackers analyze only the inputs and outputs of the implementation. In contrast, white-box attacks describe a much more powerful type of attacker who has total visibility into the software implementation as it is being executed.

Abstract: A method of protecting the execution of a cryptographic hash function, such as SHA-256, in a computing environment where inputs, outputs and intermediate values can be observed. The method consists of encoding input messages so that hash function inputs are placed in a transformed domain, and then applying a transformed cryptographic hash function to produce an encoded output digest; the transformed cryptographic hash function implements the cryptographic hash function in the transformed domain.

Abstract: The present disclosure provides a system for media path security includes an authoring system having a content stream transform and corrupter for corrupting content data and providing decorrupting data, a media container for conveying the corrupted content data and decorrupting data, and a client system having a fix-up component for fixing the corrupted content data in dependence upon the decorrupting data. A client system is also provided as having an input for receiving a media container and a fix-up component for fixing the corrupted content data in dependence upon the decorrupting data.

Abstract: In the present disclosure, implementations of Diffie-Hellman key agreement are provided that, when embodied in software, resist extraction of cryptographically sensitive parameters during software execution by white-box attackers. Four embodiments are taught that make extraction of sensitive parameters difficult during the generation of the public key and the computation of the shared secret. The embodiments utilize transformed random numbers in the derivation of the public key and shared secret. The traditional attack model for Diffie-Hellman implementations considers only black-box attacks, where attackers analyze only the inputs and outputs of the implementation. In contrast, white-box attacks describe a much more powerful type of attacker who has total visibility into the software implementation as it is being executed.

Abstract: A digital signature generation (DSG) process which provides resistance against white box attackers is disclosed. This is done by applying specially selected data transformations to the inputs, outputs and internal parameters of the algorithm. In particular, the signatory's private key does not appear in the clear in our protected implementation. Our new white box implementation produces signatures that are compatible with signatures created by conventional implementations; thus our solution facilitates interoperability and can be used as a drop-in replacement for conventional implementations. In particular, we describe transformations to the key (d) and the generator domain parameter (usually denoted G or g) of the digital signature generation processes, such that embodiments of the invention can produce signed messages which appear to a verifier as if the key (d) was used, without actually ever using the key (d).

Abstract: A method of protecting the execution of a cryptographic hash function, such as SHA-256, in a computing environment where inputs, outputs and intermediate values can be observed. The method consists of encoding input messages so that hash function inputs are placed in a transformed domain, and then applying a transformed cryptographic hash function to produce an encoded output digest; the transformed cryptographic hash function implements the cryptographic hash function in the transformed domain.

Abstract: A secure and fault-tolerant, or variation-tolerant, method and system to turn a set of N shares into an identifier even when only M shares from this set have a correct value. A secret sharing algorithm is used to generate a number of candidate identifiers from subsets of shares associated with asset parameters of a collection of assets. The most frequently occurring candidate identifier is then determined to be the final identifier. The method has particular applicability in the fields of node locking and fingerprinting.

Abstract: A digital signature generation (DSG) process which provides resistance against white box attackers is disclosed. This is done by applying specially selected data transformations to the inputs, outputs and internal parameters of the algorithm. In particular, the signatory's private key does not appear in the clear in our protected implementation. Our new white box implementation produces signatures that are compatible with signatures created by conventional implementations; thus our solution facilitates interoperability and can be used as a drop-in replacement for conventional implementations. In particular, we describe transformations to the key (d) and the generator domain parameter (usually denoted G or g) of the digital signature generation processes, such that embodiments of the invention can produce signed messages which appear to a verifier as if the key (d) was used, without actually ever using the key (d).

Abstract: A compression garment or pad for selective application for treatment of lymphedema evidenced at various locations of the body. The pad includes a pair or series of layers of hermetically sealed material, that can capture pressurized air, when applied therein, and is formed through the patterned sealing of the layers of the pad together, at select locations, to form air pockets that can selectively apply isolated points of pressure to the patient's affected area, without disrupting normal vascular and lymphatic functioning. The pad is design cut, for either use in that matter, or for application as a garment to various segments of the body and can apply pressure over the entire affected area. The pad includes valves that allows for injection of measurable air, to the desired pressure points, or its deflation, after treatment.

Abstract: Methods and systems are provided for acquiring seismic data. An ambient electromagnetic signal having a known time dependence is transmitted for propagation within a survey area. The ambient electromagnetic signal is received at distinct geographic locations with independently operating data acquisition units positioned at the distinct locations. Data representing acoustic signals received from the Earth at the distinct geographic locations are collected with the data acquisition units. The collected acoustic signals for the distinct geographic locations are synchronized by correlating the known time dependence of the propagated electromagnetic signal with time dependencies of the collected acoustic signals.

Abstract: Apparatus and methods are provided for simultaneously retrieving data from multiple data acquisition units and for recharging such data acquisition units. The data offload and charging unit comprises a frame that defines stations for holding the data acquisition units and a host computer. A combined power and communications port at each such station is adapted to interface with one of the data acquisition units such that power may flow from the data offload and charger unit to that data acquisition unit and data may flow from that data acquisition unit to the host computer substantially simultaneously. Communications links are provided between the host computer and each combined power and communications port.

Abstract: A compression garment or pad for selective application for treatment of lymphedema evidenced at various locations of the body. The pad includes a pair or series of layers of hermetically sealed material, that can capture pressurized air, when applied therein, and is formed through the patterned sealing of the layers of the pad together, at select locations, to form air pockets that can selectively apply isolated points of pressure to the patient's affected area, without disrupting normal vascular and lymphatic functioning. The pad is design cut, for either use in that matter, or for application as a garment to various segments of the body and can apply pressure over the entire affected area. The pad includes valves that allows for injection of measurable air, to the desired pressure points, or its deflation, after treatment.

Abstract: A self-contained data acquisition unit is provided for acquiring seismic data. The unit has a microprocessor and an antenna adapted to receive an electromagnetic signal. A decoder is connected with the microprocessor and adapted to convert received electromagnetic signals to dual-tone multiple-frequency (“DTMF”) digits. A geophone interface is provided with a geophone for collecting acoustic data incident on the geophone. A memory is connected with the geophone interface for storing a representation of the collected acoustic data and for storing a representation of a reference electromagnetic signal to be used in synchronizing acoustic data collected by other data acquisition units. A battery power source is connected with the microprocessor.

Abstract: A compression garment for selective application for treatment of lymphedema and prevention of local ischemia of tissues at various locations of the body. The garment includes a pair or series of layers of hermetically sealed material, that can capture pressurized air, when applied therein, and is formed through the patterned sealing of the layers of the garment together, at select locations, to form air pockets that can selectively apply isolated points of pressure to the patient's affected area, without disrupting normal vascular and lymphatic functioning. The garment is design cut, for application to various segments of the body, and applies encompassing pressure over the entire affected area, and includes valves that can allow for the injection of measurable air, to the desired pressure points, or its deflation, after treatment.

Abstract: A method of automatically sorting and placing parts for inspection is described which includes orienting the parts within a feeder and delivering the oriented parts from the feeder to an escapement. Once the parts are delivered, they are advanced from the escapement, one at a time, down a ramp, and caught by a resilient material. The parts are then transferred ring from the resilient material to a parts fixture and positioned for inspection in the parts fixture within ±0.001 inch in a vertical direction and within 0.002 inches in x and y directions, x and y defining a horizontal plane.

Abstract: A compression garment for selective application for treatment of lymphedema and related illnesses manifested at various locations of the body. The garment includes a pair or series of layers of hermetically sealed material, that can capture pressurized air, when applied therein, and is formed through the patterned sealing of the layers of the garment together, at select locations, to form air pockets that can selectively apply isolated points of pressure to the patient's affected area, without disrupting normal vascular and lymphatic functioning. The garment is design cut, for application to various segments of the body, and applies encompassing pressure over the entire affected area, and includes valves that can allow for the injection of measurable air, to the desired pressure points, or its deflation, after treatment.