Abstract: Systems, methods, and apparatus, including computer programs encoded on computer storage media, for analyzing telemetry data from physical process sensors to detect anomalies within the physical process. A telemetry analytics system is disclosed as a process level anomaly detection system based on operational telemetrics and domain-specific knowledge that protects cyber physical system (CPS) devices against zero-day exploits not detectable through traditional system log or network packet inspection. The telemetry analytics system operates as a security component comparable to intrusion detection or anti-virus/anti-malware that generates alerts upon detecting anomalies in the sensor and/or activity data ingested from system or network data sources.

Abstract: Provisioning resources into the cloud is a constantly increasing technical challenge as more cloud service providers emerge, each offering disparate computing platforms, services, assets, supported technical components, and other features. A cloud computing provisioning architecture implements a sequence of complex technical analyzes that successfully provisions complex cloud computing services.

Abstract: A system may include one or more server devices. The system may provide a set of questions, to a user of a user device, to characterize an Internet of things system. The system may obtain responses from the user of the user device associated with each of the set of questions. The system may automatically create an Internet of things system architecture that defines the Internet of things system by applying associated Internet of things system architecture rules to the responses.

Abstract: Systems, methods, devices, and other techniques for placing and rendering virtual objects in three-dimensional environments. The techniques include providing, by a device, a view of an environment of a first user. A first computing system associated with the first user receives an instruction to display, within the view of the environment of the first user, a virtual marker at a specified position of the environment of the first user, the specified position derived from a second user's interaction with a three-dimensional (3D) model of at least a portion of the environment of the first user. The device displays, within the view of the environment of the first user, the virtual marker at the specified position of the environment of the first user.

Abstract: A device may include one or more processors. The device may receive first information identifying a plurality of nodes and transactions associated with the plurality of nodes. The transactions may be between nodes, of the plurality of nodes, and entities of a plurality of entities. The device may determine geographical locations corresponding to the plurality of nodes. The device may determine second information, based on the first information, that may identify nodes, of the plurality of nodes, that are associated with shared entities. The device may generate, based on the geographical locations and the second information, a geographical network. The device may select a selected node, of the geographical network, on which to perform an action. The device may determine third information based on predicting future performance of the geographical network assuming that the action is performed. The device may store or provide the third information.

Abstract: An ingestion code generation architecture facilities making large and complex datasets available for processing by parallel processing clusters. The architecture generates a set of data ingestion interfaces through which the operator specifies characteristics of their dataset. After receiving the specifications, the architecture automatically samples the dataset, analyzes its structure, and generates program code to ingest the dataset. The architecture solves the technical challenges of making complex and extensive datasets readily available to the parallel processing cluster so that the cluster may successfully perform its specialized processing over the dataset.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for service oriented software-defined security framework are disclosed. In one aspect, a system includes a security control device, one or more assets, and a security controller that communicates with the security control device and the one or more assets. The security controller includes a processing engine configured to register the security control device by creating a physical-logical attribute mapping for the security control device, and generating a security service description associated with the security control device. The processing engine is further configured to register the one or more assets by creating a physical-logical attribute mapping for each of the one or more assets, and generating security service requirements for each of the one or more assets. The processing engine is further configured to generate a security service binding based on a request for service.

Abstract: Implementations are directed to providing an explanatory electronic document with actions including providing a target subject profile based on user input and one or more ontologies, the target subject profile including associations describing a subject at respective degrees of specificity, providing a set of peer user profiles using semantic user profile association between the user profile and each peer user profile in a superset of peer user profiles, retrieving one or more peer subject profiles, each peer subject profile being associated with a peer user profile in the set of peer user profiles, and including associations describing a past subject experienced by a peer user, filtering at least one association from a peer subject profile based on data provided in a knowledge graph, and providing at least one explanatory text string associated with the subject based on at least one remaining association in the peer subject profile.

Abstract: A device may obtain sensor data regarding the vending device. The device may transmit the sensor data via a network connection for processing by a server. The server may store a data model. The server may be associated with identifying a response action associated with altering a configuration of the vending device. The device may receive information identifying the response action based on transmitting the sensor data via the network connection. The device may cause the response action to be performed based on receiving the information identifying the response action. The response action may be associated with altering a status of a component of the vending device. The device may provide information associated with identifying the status of the component.

Abstract: A data pipeline architecture is integrated with an analytics processing stack. The data pipeline architecture may receive incoming data streams from multiple diverse endpoint systems. The data pipeline architecture may include converter interface circuitry with multiple dynamic converters configured to convert the diverse incoming data stream into one or more interchange formats for processing by the analytics processing stack. The analytics processing stack may include multiple layers with insight processing layer circuitry above analysis layer circuitry. The analysis layer circuitry may control analytics models and rule application. The insight processing layer circuitry may monitor output from the analysis layer circuitry and generate insight adjustments responsive to rule changes and analytics model parameter changes produced at the analysis layer circuitry.

Abstract: A device may receive, from one or more other devices, one or more images that depict one or more events occurring at a location. The device may detect an event of the one or more events depicted in the one or more images. The device may determine a first score that indicates a first likelihood that the event is an anomalous event. The device may determine a second score that indicates a similarity between the event and another event. The second score may be based on second data received from the one or more other devices. The device may determine a third score based on the first score and the second score. The third score may indicate a second likelihood that the event is the anomalous event. The device may perform an action based on the third score.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for generating rules to apply to fare transactions when a fare card reader cannot communicate with an authorization server, for generating historical data and a risk score for a fare card that are used by a fare card reader, with the rules, to determine whether to authorize access to a transit service when the fare card reader cannot communicate with the authorization server, and for selectively permitting or denying access to the transit service using the rules and the historical data or the score for a fare card.

Abstract: According to an example, event anomaly analysis and prediction may include accessing a master directed graph that specifies known events and transitions between the known events, and ranking each of the known events. Each of the ranked known events may be clustered into a plurality of anomaly categories. A plurality of rules to analyze new events may be determined based on the plurality of anomaly categories. A determination may be made, based on an application of the plurality of rules to data that is to be analyzed for an anomaly, whether the data includes the anomaly. In response to a determination that the data includes the anomaly, a device associated with the data may be controlled.

Abstract: A system provides integrated multi-energy scheduling control in a micro-grid. The micro-grid may comprise a combined cooling, heating and power CCHP unit and an ice-storage air conditioner. In embodiments, an integrated multi-energy scheduling control process for operation in the micro-grid is performed, based on the predicted electricity demand and cooling demand and the predicted renewable energy output, under process constraints to determine the amount of electricity exchanged between the micro-grid and a macro-grid, cooling power output and electricity output of the CCHP unit, and operation modes and cooling power output of the ice-storage air conditioner in time intervals in a scheduling period, wherein electricity supply/demand balance and cooling energy supply/demand balance are coupled. The system may achieve multi-energy supply/demand balance at a minimized operational cost, and may achieve a high energy efficiency of both the CCHP units and a high performance of the ice-storage air conditioner.

Abstract: A system for power grid distribution network control can monitor a power grid distribution network in real-time, detect an abnormal loading condition based on real-time measurements on the distribution network, and perform in real time, in response to the detected abnormal loading condition, a reconfiguration analysis of the distribution network. The reconfiguration analysis can be performed based on heuristic logic that combines real time depth first trace and breadth first division of nodes within the distribution system. Through the reconfiguration analysis process, the system can generate and implement a practical and optimized reconfiguration plan in real time so as to alleviate or eliminate an abnormal loading condition in time to prevent possible pre-matured failures of equipment and consequently save cost of equipment replacement and/or related power outages. Accordingly, the distribution network may operate with improved stability and reliability, and a cost of operation can be reduced.

Abstract: Cloud Connected automated testing (CCAT) provides a low-cost, high-throughput, automated multi-thread testing platform for testing application with multiple test cases in a variety of operating environments. The platform may be hosted on cloud infrastructure. Unlike other test automation platforms, inputs to CCAT are based on human readable formats, such as keyword entries in a spreadsheet. CCAT thereby reduces the need for testers to understand highly specialized and difficult to use coding languages such as Java or Python.

Abstract: The present application relates to set top boxes and relates to the inclusion of a diagnostic function in the set top box which may be activated remotely or respond internally to the detection of faults or changes in status. The diagnostic function may emulate key presses from an infrared remote control to perform a test.

Abstract: A server node may receive a license creation message including a license creation parameter. The server node may acquire, from a blockchain, a license factory smart contract in response to receipt of the license creation message. The license factory smart contract may include license factory logic executable to generate a license smart contract. The server node may generate, based on the license creation parameter and execution of the licensing factory logic, the license smart contract. The license smart contract may include logic executable to validate an access event corresponding to a licensed component configured on a remote device. The server node may append a datablock to the blockchain. The datablock may include the license smart contract. The server node may synchronize the blockchain across a plurality of network nodes. The server node may control access to the licensed component configured on the remote device by execution of the licensing logic.

Abstract: An unmanned vehicle (UV) system provides network data connectivity for terminals. UV nodes in the system may transmit and receive terminal data in a network of UV nodes and other nodes according to a routing protocol. The nodes may include fixed nodes or UV nodes with a wired or wireless network connection to a destination terminal. A UV node may receive data from a source terminal for transmission to the destination terminal, and when the UV node is within range of a node in the network connected the destination terminal, the UV node transmits the received data to the node within range for forwarding to the destination terminal via the network.

Abstract: Identifying a vehicle in a toll system includes accessing a set of toll transaction entries. Each entry in the set designates a toll transaction between a vehicle and the toll system and includes a transaction descriptor and a transaction time stamp. A series of toll transaction pictures is accessed. The series includes a plurality of pictures, each of which is associated with a picture time stamp. A toll transaction entry is identified from the set as a violation transaction entry based on the transaction descriptor. A toll transaction picture is selected from the series. The transaction time stamp of the violation transaction is compared, using a processing device, with the picture time stamp of the selected toll transaction picture. The selected toll transaction picture is identified as a violation picture corresponding to the violation transaction entry based on a result of the comparison.