Abstract: Securely authorizing the performance of actions may be enabled by linking each secure/privileged action to a requisite policy for authorizing that secure/privileged action. In a described media implementation, one or more electronically-accessible media include electronically-executable instructions that, when executed, direct an electronic device to execute operations including: receiving an action performance request that is directed to a requested action; locating an authorization policy that is associated with the requested action from among multiple authorization policies, the authorization policy indicating how performance of the requested action can be authorized; and extracting at least one rule and one or more authentication ticket requirements from the authorization policy.

Abstract: One aspect relates to a process and associated device that provides a private key of an asymmetric key pair in a key device. A symmetric master key is derived from the private key of the asymmetric key pair. The symmetric master key is stored in a computer memory location. The symmetric master key is used to encrypt or decrypt a file encryption key. The file encryption key can encrypt or decrypt files. In another aspect, the user can still access the files even if a user deactivates the key device by encrypting or decrypting the file encryption key directly from the symmetric master key.

Abstract: To obtain a digital license for rendering a piece of digital content, a license requester contacts a license provider and sends a license request. The license provider checks the license request for validity and negotiates with the license requestor terms and conditions for the requested license. The license provider generates the requested license and issues the generated license to the license requestor.

Abstract: An enforcement architecture and method for implementing digital rights management are disclosed. Digital content is distributed from a content server to a computing device of a user and received, and an attempt is made to render the digital content by way of a rendering application. The rendering application invokes a Digital Rights Management (DRM) system, and such DRM system determines whether a right to render the digital content in the manner sought exists based on any digital license stored in the computing device and corresponding to the digital content. If the right does not exist, a digital license that provides such right and that corresponds to the digital content is requested from a license server, and the license server issues the digital license to the DRM system. The computing device receives the issued digital license and stores the received digital license thereon.

Abstract: A digital rights management (DRM) system operates on a computing device and requires a black box for performing decryption and encryption functions. To obtain the black box from a black box server, the DRM system requests such black box from such black box server. The black box server in response generates the black box, where such black box is unique and has a public/private key pair. The black box server then delivers the generated black box to the DRM system and the DRM system installs the delivered black box in such DRM system.

Abstract: A method and apparatus for automatically controlling the gain of an optical amplifier. The method begins by establishing a setpoint for ASE power within a given wavelength range generated by the optical amplifier. The pump power supplied to the optical amplifier is adjusted to maintain the ASE power at the established setpoint. The setpoint for the ASE power is adjusted based at least in part on changes in signal input power.

Abstract: A method is disclosed for a device to interdependently validate a digital content package having a piece of digital content in an encrypted form, and a corresponding digital license for rendering the digital content. A first key is derived from a source available to the device, and a first digital signature is obtained from the digital content package. The first key is applied to the first digital signature to validate the first digital signature and the digital content package. A second key is derived based on the first digital signature, and a second digital signature is obtained from the license. The second key is applied to the second digital signature to validate the second digital signature and the license.

Abstract: Securely authorizing the performance of actions may be enabled by linking each secure/privileged action to a requisite policy for authorizing that secure/privileged action. In a described media implementation, one or more electronically-accessible media include electronically-executable instructions that, when executed, direct an electronic device to execute operations including: receiving an action performance request that is directed to a requested action; locating an authorization policy that is associated with the requested action from among multiple authorization policies, the authorization policy indicating how performance of the requested action can be authorized; and extracting at least one rule and one or more authentication ticket requirements from the authorization policy.

Abstract: One aspect relates to a process and associated device for managing digital ID lifecycles for application programs, and abstracting application programs for multiple types of credentials through a common Digital Identity Management System (DIMS) and Application Programming Interface (API) layer.

Abstract: One aspect relates to a process and associated device that provides a private key of an asymmetric key pair in a key device. A symmetric master key is derived from the private key of the asymmetric key pair. The symmetric master key is stored in a computer memory location. The symmetric master key is used to encrypt or decrypt a file encryption key. The file encryption key can encrypt or decrypt files. In another aspect, the user can still access the files even if a user deactivates the key device by encrypting or decrypting the file encryption key directly from the symmetric master key.

Abstract: A thoracic drainage system for removing liquid from the thoracic cavity of a patient. The system includes a reusable thoracic vacuum regulator and a standard disposable collection container. A disposable water seal chamber is also provided that can be disposed of after each patient and is a separable, independent component. There is also a combination thoracic vacuum regulator having a water seal chamber removable affixed thereto to enable the water seal chamber to be readily removed from the thoracic vacuum chamber in order to carry the water seal chamber along with the patient as that patient is transported.

Abstract: A digital content file distribution, transmission, and protection system comprises a digital content provider having stored therein a digital content file such as an audio file, video file, literature, program file, etc. The digital content provider includes an authentication interface and a USB port from which the digital content file may be downloaded. The system also contemplates a portable device to which the digital content file will be transferred. This portable device includes an authentication interface and a USB port, and conforms to the USB storage device class. The portable device communicates with the digital content provider via the USB interface and, pending the establishment of a trusted relationship, downloads the digital content file therefrom. The establishment of the trusted relationship with the portable device is accomplished through communications between the authentication interfaces over the USB.

Abstract: A vacuum system for applying vacuum to the body cavity of a patient where a flow switch is provided that is located upstream of a vacuum regulator that can be adjusted to establish the level of vacuum desired to be applied to the patient. The flow switch provides an easy device for the caregiver to activate to fully and positively occlude the vacuum line to the patient. In one embodiment, the flow switch is constructed integral with a regulator having an rotatable actuator having a knob that is rotated to adjust the level of vacuum to the patient such the a caregiver can simply push the actuator knob inwardly to occlude the flow in the patient line and thereafter rotate the actuator knob to establish the desired level of vacuum to the patient.

Abstract: An infant warming apparatus that functions both as an infant incubator as well as an infant warmer. The apparatus has a heater that moves vertically with respect to an infant support during the change in function between an infant incubator and an infant warmer. The heater also has a door or doors that are open when the heater is at or nearing the upper position so that the heater can direct energy toward the infant to warm the infant when acting as an infant warmer and close at or shortly after the heater commences movement to the lower position. When closed, the doors isolate the heater to prevent the inadvertent touching of the heater by the infant or attending personnel and prevents the further radiating of infrared energy toward the infant.

Abstract: A thoracic drainage system for removing liquid from the thoracic cavity of a patient. The system includes a reusable thoracic vacuum regulator and a standard disposable collection container. A disposable water seal chamber is also provided that can be disposed of after each patient and is a separable, independent component. There is also a combination thoracic vacuum regulator having a water seal chamber removable affixed thereto to enable the water seal chamber to be readily removed from the thoracic vacuum chamber in order to carry the water seal chamber along with the patient as that patient is transported.

Abstract: An electronic system including signal processing circuitry that can operate in video and still image modes. Incoming image data is processed and compressed according to the operating mode. Processing includes scaling logic configured to use scaling methodologies appropriate to each mode. Compressing includes using compression methodologies appropriate to each mode.

Abstract: An enforcement architecture and method for implementing digital rights management are disclosed. Digital content is distributed from a content server to a computing device of a user and received, and an attempt is made to render the digital content by way of a rendering application. The rendering application invokes a Digital Rights Management (DRM) system, and such DRM system determines whether a right to render the digital content in the manner sought exists based on any digital license stored in the computing device and corresponding to the digital content. If the right does not exist, a digital license that provides such right and that corresponds to the digital content is requested from a license server, and the license server issues the digital license to the DRM system. The computing device receives the issued digital license and stores the received digital license thereon.

Abstract: A vacuum system for applying vacuum to the body cavity of a patient where a vacuum flow indicator is provided that provides a visual display of the relative flow in a vacuum line to a medical patient. The vacuum indictor has indicia indicative of the no flow condition, a low flow condition, a high flow condition of flow through the vacuum system and has a space between the indicia of high flow and no flow so that the caregiver can visually get a quick and easy perception of the relative flow through the system. The vacuum flow indicator is not intended to be an accurate means of measuring that flow but only a guide that can aid the caregiver in determining and correcting a potential or real problem in the vacuum system.

Abstract: A system for verifying intent in a card not present transaction is provided. The system includes a late binding token that is distributable to consumers without necessarily being bound to an account. The system also includes a client software that locates a token server configured to facilitate managing and communicating with the late binding token. The system also includes a protocol concerning how to build a verifiably secure structured proposal that carries an offer to the consumer through the client software.

Abstract: A vacuum system for applying vacuum to the body cavity of a patient where a flow switch is provided that is located upstream of a vacuum regulator that can be adjusted to establish the level of vacuum desired to be applied to the patient. The flow switch provides an easy device for the caregiver to activate to fully and positively occlude the vacuum line to the patient. In one embodiment, the flow switch is constructed integral with a regulator having an rotatable actuator having a knob that is rotated to adjust the level of vacuum to the patient such the a caregiver can simply push the actuator knob inwardly to occlude the flow in the patient line and thereafter rotate the actuator knob to establish the desired level of vacuum to the patient.