Abstract: The technology disclosed relates to non-intrusively enforcing security during federated single sign-on (SSO) authentication without modifying a trust relationship between a service provider (SP) and an identity provider (IDP). In particular, it relates to configuring the IDP to use a proxy-URL for forwarding an assertion generated when a user logs into the SP, in place of an assertion consumer service (ACS)-URL of the SP. It also relates to configuring an assertion proxy, at the proxy-URL, to use the SP's ACS-URL for forwarding the assertion to the SP. It further relates to inserting the assertion proxy in between the user's client and an ACS of the SP by forwarding the assertion to the SP's ACS-URL to establish a federated SSO authenticated session through the inserted assertion proxy.

Abstract: The technology disclosed relates to non-intrusively enforcing security during federated single sign-on (SSO) authentication without modifying a trust relationship between a service provider (SP) and an identity provider (IDP). In particular, it relates to configuring the IDP to use a proxy-URL for forwarding an assertion generated when a user logs into the SP, in place of an assertion consumer service (ACS)-URL of the SP. It also relates to configuring an assertion proxy, at the proxy-URL, to use the SP's ACS-URL for forwarding the assertion to the SP. It further relates to inserting the assertion proxy in between the user's client and an ACS of the SP by forwarding the assertion to the SP's ACS-URL to establish a federated SSO authenticated session through the inserted assertion proxy.

Abstract: A wireless sensor device for use in a refrigerated container includes a flexible sensor body including at least one sensing element to sense at least one parameter of the refrigerated container, a battery to provide power to the at least one of sensing elements, and a battery housing coupled to an end of the flexible sensor body.

Abstract: A method and system to control a refrigeration unit (104) in response to a cargo load (108) in a refrigerated container includes providing a plurality of sensors disposed within the refrigerated container, providing a cargo load temperature range and a cargo load excursion time limit corresponding to the cargo load, receiving a plurality of temperature readings corresponding to the cargo load via the plurality of sensors, operating the refrigeration unit in a power saving mode in response to the plurality of temperature readings within the cargo load temperature range, and operating the refrigeration unit in a standard mode in response to the plurality of temperature readings outside the cargo load temperature range for longer than the cargo load excursion time limit.

Abstract: Systems and methods for checking proper airflow within a container (307) having a refrigeration unit (320) are provided. The system includes one or more sensors (358) located within the container configured to measure at least one airflow characteristic, and a controller (360) in communication with the one or more sensors. The controller is configured to store predetermined information related to airflow within the container, wherein the predetermined information includes minimum airflow criteria related to the at least one airflow characteristic, receive data from the one or more sensors, compare the received data with the predetermined information, and provide an indicator when the comparison indicates that the received data does not meet or exceed the minimum airflow criteria.

Abstract: A method and system to determine a hot cargo load condition of a cargo load in a refrigerated container includes providing a plurality of sensors disposed within the refrigerated container, operating the refrigeration unit with a set of desired operational parameters corresponding to the cargo load, analyzing a plurality of sensor readings corresponding to the plurality of sensors via a processor, creating a temperature distribution profile of the refrigerated container corresponding to the plurality of sensor readings via the processor, retrieving a historical temperature distribution profile corresponding to the cargo load via a historical database, comparing the temperature distribution profile to the historical temperature distribution profile via the processor, and identifying the hot cargo load condition in response to the temperature distribution profile exceeding the historical temperature distribution profile via the processor.

Abstract: Systems and methods for monitoring power supply of refrigeration units including cargo sensors (358) located within a container (307), a power connector (346) configured to receive power, the power connector operably connected to the refrigeration unit, a power supply sensor connected to the power connector configured to detect a lack of power supplied through the power connector and a controller in communication with the cargo sensors and the power supply sensor, the controller configured to store predetermined information related to power requirements including a maximum time period of a powered-off state, receive data from the cargo sensors, receive data from the power supply sensor, and, when the data from the cargo sensors indicates the presence of cargo within the container and data from the power supply sensor indicates a lack of power for a duration that exceeds the maximum time period, the controller is configured to provide an indicator.

Abstract: The technology disclosed relates to non-intrusively enforcing security during federated single sign-on (SSO) authentication without modifying a trust relationship between a service provider (SP) and an identity provider (IDP). In particular, it relates to configuring the IDP to use a proxy-URL for forwarding an assertion generated when a user logs into the SP, in place of an assertion consumer service (ACS)-URL of the SP. It also relates to configuring an assertion proxy, at the proxy-URL, to use the SP's ACS-URL for forwarding the assertion to the SP. It further relates to inserting the assertion proxy in between the user's client and an ACS of the SP by forwarding the assertion to the SP's ACS-URL to establish a federated SSO authenticated session through the inserted assertion proxy.

Abstract: A VPN gateway is described that provides single sign-on (SSO) functionality with respect to remote users who have established tunneling sessions with the VPN gateway and who attempt to access a protected resource. The VPN gateway may receive, from a client device, a security assertion request that includes a request for a security assertion to be made by the VPN gateway with respect to a user of a private network associated with the VPN gateway, determine whether the security assertion request was received via a tunneling session established for the user between the client device and the VPN gateway, and issue a security assertion for the user in response to determining that the security assertion request was received via the tunneling session. In this way, a VPN gateway may act as an SSO identity provider for users that have an established tunneling session with the gateway.

Abstract: In general, the invention is directed to techniques for enabling single sign-on (SSO) for a client seeking access to multiple resources protected by a certificate-based authentication scheme. For example, as described herein, a secure gateway comprises a certificate repository to store a digital certificate as well as a policy that includes one or more policy rules. A network interface of the secure gateway receives a message from a client device, wherein the message comprises a request to access a protected resource and an identifier for the requesting agent. The secure gateway also comprises a resource authentication module to map the identifier and the protected resource to the digital certificate based on the policy. The resource authentication module retrieves the digital certificate from the certificate repository and sends the digital certificate to the protected resource to authenticate the secure gateway to the protected resource.

Abstract: In general, techniques are described for dynamic resource allocation in virtual environments. A network device comprising physical resources, a first virtual machine (VM), a second VM and a hypervisor may implement these techniques. The first VM executes within a first partition of the physical resources to process a first portion of received network traffic, while the second MV executes within a second partition of the physical resources to process a second portion of the received network traffic. The first VM determines whether physical resources in addition to those allocated by way of the first partition are required to process the incoming network traffic and issues a request requesting additional physical resources based on the determination. Either the second VM or the hypervisor, in response to the request, dynamically reallocates at least a portion of the physical resources allocated to the second partition to the first partition.

Abstract: An embodiment of a network manager permits a resource group administrator (with resource group level permissions but without global permissions) to add a global object to his/her resource group as a managed object, without requiring the administrator to have a global permission, as discussed further below. An embodiment of the network manager permits a resource group administrator to also edit the configuration settings that are attached to his/her resource group without requiring the administrator to have a global permission.

Abstract: Method and system for managing a storage environment having a cluster based storage system and a non-cluster based storage system is provided. A management application collects information regarding components of both the cluster based storage system and the non-cluster based storage system. A layout having a plurality of data structures is generated and maintained by the management application. The data structures include information regarding the components and their relationships with each other, if any. The layout is used for responding to user requests and presenting an integrated view of the storage environment on a display device with selectable options for selecting the cluster based storage system components and the non-cluster based storage system components.

Abstract: A system and method administers virtual servers executing on one or more physical storage systems. One or more virtual servers are created and associated with a management group. An administrator is then granted permissions to the group. Upon logging into management software, only information relating to the virtual servers associated with the group are displayed to the administrator, thereby limiting access to information related to other virtual servers and/or physical storage systems.

Abstract: Method and system for managing a storage environment having a cluster based storage system and a non-cluster based storage system is provided. A management application collects information regarding components of both the cluster based storage system and the non-cluster based storage system. A layout having a plurality of data structures is generated and maintained by the management application. The data structures include information regarding the components and their relationships with each other, if any. The layout is used for responding to user requests and presenting an integrated view of the storage environment on a display device with selectable options for selecting the cluster based storage system components and the non-cluster based storage system components.

Abstract: A storage management application is provided to manage and monitor virtual storage servers in a hosting storage server. In addition, in order to facilitate virtual storage server management and monitoring, a virtual storage server administrator role is provided. The role is allowed to access details of the virtual storage server assigned to the role, but not the details of the hosting server and other virtual servers.

Abstract: To facilitate gathering of information required for root cause analysis associated with the abnormal behavior of an attribute (“problem attribute”), a user can specify causation attributes associated with the problem attribute. When the abnormal behavior is detected for the problem attribute, the causation attributes are automatically polled and stored in a database. The user can later examine the values of the causation attributes to determine if there is a causal relationship to the abnormal behavior of the problem attribute.

Abstract: An embodiment of a network manager permits a resource group administrator (with resource group level permissions but without global permissions) to add a global object to his/her resource group as a managed object, without requiring the administrator to have a global permission, as discussed further below. An embodiment of the network manager permits a resource group administrator to also edit the configuration settings that are attached to his/her resource group without requiring the administrator to have a global permission.

Abstract: A device is provided to clean an object by positioning the surface of the object to be cleaned in contact with a cleaning medium comprising one or more liquids having a dielectric constant of from 1 to 200 and placed in an electric field in the range of from 103 V/m to 107 V/m wherein said device is capable of generating said electric field using an alternating voltage/current source, said device comprising at least two electrodes where one of the electrodes is at a higher potential than the other and said electrodes are spatially separated by a distance of 1 micron to 2 cm by an insulating material having a dielectric breakdown strength greater than the applied electric field.