Abstract: Embodiments of the present invention provide a refrigerant management system (10) in a heat flux management system (1) for an electric vehicle (150) and a method of refrigerant management, the system comprising a vehicle air conditioning circuit comprising a heat pump circuit (4) with a heating function and a refrigeration cycle refrigerant circuit (6), the air conditioning circuit comprising a heat pump condenser (17) in thermal communication with a heat source (19), a refrigerant evaporator (25) in thermal communication with the heat source (19), an evaporator (31) associated with an expansion valve (29), and a refrigerant compressor (11), wherein the components are fluidly connected to one another by a refrigerant line (9), an accumulator (37) fluidly coupled in the refrigerant line downstream of the heat pump condenser (17), the refrigerant evaporator (25) and evaporator (31) and upstream of the refrigerant compressor (11), wherein the air conditioning circuit is switchable between a heating mode in which

Abstract: Embodiments of the present invention provide a heat recovery system for an electric vehicle (1), comprising first and second switchable heat sources (65, 19) and a control means (20) operable to selectively switch one of the heat sources into thermal communication with a compressor (11) in a thermodynamic cycling system (12), the thermodynamic cycling system being in thermal communication with a heat sink (59, 159); and a detection means (39, 71, T3) operable to detect a temperature differential between each of the switchable heat sources and a fluid entering the compressor; wherein the control means is operable (adapted, arranged) to switch one of the first and second switchable heat sources into thermal communication with the thermodynamic cycling system when a temperature differential is detected between the fluid entering the compressor in the thermodynamic cycling system and the heat available from the switchable heat source, the temperature differential being such that the compressor (11) is operable to

Abstract: Embodiments of the present invention provide a lubricant management system (100) in a heat flux management system for an electric vehicle (150), comprising a vehicle air conditioning circuit comprising a refrigeration cycle refrigerant circuit (6) comprising at least a heat pump condenser (17) in thermal communication with a heat source (19), first and second evaporators (31, 131) each associated with an expansion valve (29, 129), and a refrigerant compressor (11), wherein the components are fluidly connected to one another by a refrigerant line (9,45), an accumulator (37) having a lubricant storage capacity and comprising lubricant delivery means (38), the accumulator being fluidly coupled in the refrigerant line downstream of the first and second evaporators (31, 131) and upstream of the refrigerant compressor (11), wherein the first evaporator and the second evaporator are fluidly connected in parallel downstream of the heat pump condenser (17) and upstream of the accumulator (37) and the associated expans

Abstract: An optoacoustic probe for optoacoustic imaging of a volume, the optoacoustic probe having a distal end operable to contact the volume and a proximal end. The optoacoustic probe includes at least one primary light source and an auxiliary light source that is configured to generate auxiliary light carried through an optical window to a volume. A detection device is configured to detect signals generated from the auxiliary light or primary light reflecting from the volume or the optical window. A microcontroller including one or more processors is also provided, that receives the signals generated from the auxiliary light reflecting from the volume from the detection device, determines contact between the volume and the optoacoustic probe based on the auxiliary light reflecting from the volume, and prevents the at least one primary light source from generating light until the optoacoustic probe is contacting the volume.

Abstract: Methods and apparatus for manufacturing a microfluidic arrangement are disclosed. In one arrangement, a continuous body of a first liquid is provided in direct contact with a first substrate. A second liquid covers the first liquid. A separation fluid, immiscible with the first liquid, is propelled through at least the first liquid and into contact with the first substrate along all of a selected path on the surface of the first substrate. First liquid that was initially in contact with all of the selected path is displaced away from the selected path. The first liquid is divided to form sub-bodies of first liquid that are separated from each other. For each of one or more of the sub-bodies, a sub-body footprint represents an area of contact between the sub-body and the first substrate, and all of a boundary of the sub-body footprint is in contact with a closed loop of the selected path surrounding the sub-body footprint.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: An enforcement module receives a DNS-based rule of a segmentation policy that controls access of a managed workload to workloads in a DNS domain in which the IP addresses of the workloads associated with a domain name are resolved by a DNS server. When the managed workload makes a connection request to the workload associated with the domain name, the enforcement module snoops on a DNS response from the DNS server to learn the IP address of the workload associated with the domain name. If a domain name of the DNS domain is in a whitelist of domain names permitted by the DNS-based rule, the enforcement module adds the learned IP address to a whitelist of IP addresses and configures a firewall associated with the managed workload to permit connections to the IP addresses in the whitelist.

Abstract: An enforcement module receives management instructions from a segmentation server for enforcing a segmentation policy. The management instructions include one or more rules specifying one or more groups of workloads that a workload executing on the operating system instance is permitted to communicate with according to certain communication constraints, and membership information specifying workload identifiers for workloads in each of the groups. An optimization module processes the management instructions to reduce the number of rules and the number of workload groups to which the rules apply, thereby simplifying the firewall configuration. The enforcement module then configures a firewall according to the optimized rules to enforce the segmentation policy. The optimization process beneficially improves performance of the firewall and thereby enables more efficient enforcement of the segmentation policy utilizing fewer computing resources.

Abstract: Systems and techniques for a member activity based profile viewing evaluation system are described herein. In an example, a profile viewing evaluation system is adapted to receive a viewed profile event indicating a member profile was accessed by a viewer, wherein the viewed profile event includes a member identification associated the member profile and a viewer identification associated with the viewer. The profile viewing evaluation system may obtain activity data related to activities performed by the member on the online service. The profile viewing evaluation system may obtain attributes of the viewer. The profile viewing evaluation system may determine the viewer is a notable viewer by comparing the attributes of the viewer to the activity data of the member. The profile viewing evaluation system may generate a graphical user interface to display viewer identification information associated with viewers of the member profile, including viewers classified as notable viewers.

Abstract: A segmentation firewall executing on a host enforces a segmentation policy. In a co-existence mode, the segmentation firewall operates in co-existence with a system firewall that enforces a security policy. The segmentation firewall is configured to either drop packets that do not match any permissive rule or pass packets that match a permissive rule to the system firewall to enable the system firewall to determine whether to drop or accept the passed packets. To enable efficient operation of the segmentation firewall when operating in co-existence with the system firewall, the segmentation firewall may include a plurality of rule chains and may be configured to exit a chain and bypass remaining rule chains upon an input packet matching a permissive rule of the segmentation policy.

Abstract: Examples of apparatus, methods, and compositions for endodontic treatments are described. In certain implementations, the apparatus can include a treatment fluid supply configured to supply a treatment fluid to a treatment region of the tooth and a pressure wave generator configured to generate pressure waves in the treatment fluid. The pressure wave generator can include a volume housing an electromagnetically responsive material, a diaphragm including a first side and a second side, the first side exposed to the volume, the second side exposed to the treatment fluid, the diaphragm being movable such that movement of the electromagnetically responsive material within the volume causes movement of the diaphragm, and an electromagnetic generator coupled to the volume, the electromagnetic generator configured to generate electromagnetic energy.

Abstract: Methods and apparatus for driving flow in a microfluidic arrangement are provided. In one disclosed arrangement, the microfluidic arrangement comprises a first liquid held predominantly by surface tension in a shape defining a microfluidic pattern on a surface of a substrate. The microfluidic pattern comprises at least an elongate conduit and a first reservoir. The area of contact between the substrate and a portion of the first liquid that forms the elongate conduit defines a conduit footprint. The area of contact between the substrate and a portion of the first liquid that forms the first reservoir defines a first reservoir footprint. The size and shape of each of the conduit footprint and the first reservoir footprint are such that a maximum Laplace pressure supportable by the first liquid in the elongate conduit without any change in the conduit footprint is higher than a maximum Laplace pressure supportable by the first liquid in the first reservoir without any change in the first reservoir footprint.

Abstract: An endoscopic apparatus and method to capture an image of in-vivo tissue with automatic exposure control. For example, the method includes capturing image data on an image sensor and analyzing an indication of brightness of each pixel to determine whether the captured image data is saturated. When the image data is saturated, the method includes reducing the exposure period by a first increment, and repeating the capturing and analyzing steps until the captured image data is not saturated. When the captured image data is not saturated, in some embodiments, the method includes analyzing the indication of brightness of each pixel compared to a threshold indicative of use of a proportion of an available dynamic range of the image sensor, and when it is determined that the threshold has not been reached, increasing the exposure period by a second increment that has a magnitude relative to the first increment.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: An enforcement mechanism on an operating system instance enforces a segmentation policy on a container. A configuration generation module executing in a host namespace of the operating system instance receives management instructions from a segmentation server for enforcing the segmentation policy on a container. The configuration generation module executes in the host namespace to configure a traffic control and monitoring module in a container namespace associated with the container. The traffic control and monitoring module in the container namespace controls and monitors communications to and from the container in accordance with its configuration. By executing a configuration generation module in the host namespace to configure traffic control and monitoring module in the container namespace, the enforcement mechanism beneficially enables robust and lightweight enforcement in a manner that is agnostic to different containerization protocols.

Abstract: Technologies are disclosed for redirecting input/output (“I/O”) requests to virtual hard disks (“VHDs”) to improve network performance and data redundancy. More particularly, files can be encapsulated in remote VHDs and accessed in such a way that the files appear to a local operating system and any local applications to be residing locally. Furthermore, I/O requests redirected to files encapsulated in VHDs may also be redirected to one or more additional VHDs for data redundancy. The redirected I/O requests may be transmitted simultaneously but separately to the additional VHDs in a split stream.

Abstract: A system for determining food safety includes a recording device printed with one or more inks configured to change characteristics over predetermined time intervals, and a scanning device configured to extract encoded information from the recording device and convey the extracted information to an analysis service. The analysis service is configured to provide predictive modeling tools for analysis of the extracted information and provide at least one assessment of a food product bearing the recording device to the scanning device.

Abstract: Methods and apparatus for manufacturing a microfluidic arrangement are disclosed. In one arrangement a continuous body of a first liquid is provided in direct contact with a substrate. A second liquid is provided in direct contact with the first liquid and covering the first liquid. The first liquid is in direct contact exclusively with the second liquid and the substrate. The second liquid is forced through the first liquid and into contact with the substrate in selected regions of the substrate in order to divide the continuous body of the first liquid into a plurality of sub-bodies of the first liquid that are separated from each other by the second liquid. The first liquid is immiscible with the second liquid. Surface tension stably holds the plurality of sub-bodies of the first liquid separated from each other by the second liquid.

Abstract: Methods and apparatus for controlling flow in a microfluidic arrangement are disclosed. In one arrangement, a microfluidic arrangement comprises a first liquid held predominantly by surface tension in a shape defining a microfluidic pattern on a surface of a substrate. The microfluidic pattern comprises at least an elongate conduit and a first reservoir. A second liquid is in direct contact with the first liquid and covers the microfluidic pattern. A flow of liquid is driven through the elongate conduit into the first reservoir.