Abstract: Secure protocols for external-facing authentication are provided for both user templates stored on their devices and the biometric measurement captured by external sensors of an access device. The protocols provide different levels of security, ranging from passive security with some leakage to active security with no leakage. A packing technique is also provided. Zero-knowledge techniques are used during enrollment to validate a norm of user templates and knowledge of the plaintext biometric template. Once enrolled, the verifier can sign the encrypted template for use in a later matching phase with an access device.

Abstract: A modular data center and a method of building a modular data center. The modular data center includes a site microgrid including at least one power converter connected to a direct current (DC) bus and a digital power system. The digital power system includes at least one digital power transmitter, a set of transmission lines, and at least one digital power receiver. The modular data center design uses an adiabatic cooling system to cool the modular data center.

Abstract: A system includes a downhole tubular and a latch assembly securable to a conveyance that is configured to lower the latch assembly into a central bore of the downhole tubular. The latch assembly includes a tubular body portion, a plurality of latch keys secured to the tubular body portion, and at least one alignment feature secured to the tubular body portion. The system further includes a latch coupling formed on the downhole tubular. The latch coupling includes a plurality of key profiles configured to engage corresponding key profiles of the plurality of key profiles in response to proper angular orientation of the latch assembly with respect to the latch coupling. Additionally, the system includes at least one guide feature configured to rotate the latch assembly to angularly align the plurality of latch keys with the plurality of key profiles in response to contact with the at least one alignment feature.

Abstract: A modular data integration system comprising a server system configured to ingest a plurality of data object from a plurality of data sources into a data lake, data warehouse, or both according to business use-cases for a plurality of data consumers. The business use-cases allow the modular data integration system to ingest data objects through independent data channels which meet the requirements of a business purpose and conform with a service level agreement.

Abstract: A data analytics system is disclosed that can include a data repository configured to store data for multiple clients, a metadata repository separate from the data store, an access control system, and a policy store. The data analytics system can automatically generate metadata for data in the data repository using a metadata engine, the metadata including technical metadata and usage metadata, and store the metadata in the metadata repository. The data analytics system can obtain a client policy governing access to the data. The data analytics system can receive a request to provide the data, the request including instructions to create a pipeline to provide the data. The data analytics system can authorize, by the access control system, the request using the policy and usage metadata; create the pipeline using the technical metadata; and provide the data using the pipeline.

Abstract: A synthetic identity network for detecting synthetic identities may receive a first request for credit including one or more user attributes, compare the one or more user attributes to one or more stored user identities, create a new user identity, flag the new user identity as a potentially synthetic identity based on comparing the one or more user attributes to the one or more stored user identities, receive a second request for credit including or more second user attributes, compare the one or more second user attributes to the one or more user attributes associated with the potentially synthetic identity, prepare a notice including the potentially synthetic identity and a credit request identifier, and transmit the notice to one or more servers.

Abstract: A method is disclosed, and includes receiving from a token requestor, a token data request message comprising an initial resource provider identifier, and determining a permanent resource provider identifier using the initial resource provider identifier. The method also includes determining a verification value, and associating the permanent resource provider identifier with a token, the verification value. The method also includes providing a token data response message including a verification value to the token requestor, receiving an authorization request message comprising the token, the verification value, and one or more data elements in a plurality of data fields, determining the permanent resource provider identifier using the one or more data elements in the plurality of data fields, and determining that the verification value in the authorization request message matches the verification value that was provided to the token requestor.

Abstract: This application relates to a system for compressing captured images. The system may include an image capturing device configured to continuously capture images, for example, of a location, or frame, or field of view, and convert the captured images respectively into a plurality of sets of digital data, each of the plurality of sets of digital data including at least two consecutive rows of digital data. The system may also include a processor circuit configured to combine the at least two sets of the plurality of sets of digital data to generate a pre-compression set of digital data and simultaneously compress the pre-compression set of digital data simultaneously or together in a single compression operation.

Abstract: Provided are compositions, methods, and systems that relate to downhole tractor wheels. A downhole tractor system comprising: tubular housing capable of being deployed downhole by wireline; plurality of wheels rotatably mounted to tubular housing, wheels having at least a portion of an outer surface comprising polymeric material. A method for conveying a downhole tool along an inner wall of a wellbore, the method comprising: disposing downhole tool coupled to downhole tractor within wellbore; providing energy to downhole tractor by way of wireline thereby rotating a wheel disposed on downhole tractor; frictionally engaging the inner wall of wellbore with wheel comprising polymeric material disposed on at least a portion of an outer surface of wheel thereby providing a compressive load between the inner wall of the wellbore and polymeric material; allowing downhole tractor to proceed along wellbore wall until downhole tractor reaches desired location; deploying downhole tool for use in wellbore.

Abstract: A device may include a processor, a wireless transceiver in communication with the processor, and a non-transitory memory. The memory may store instructions that, when executed by the processor, cause the processor to perform processing. The processing may include receiving a command configured to be executed by an external user device. The external user device and the user device may be members of a network of trust. The processing may include detecting, by the wireless transceiver, a plurality of member devices of the network of trust in communication range of the device. The processing may include sending, by the wireless transceiver, the command to each of the plurality of member devices.

Abstract: Some implementations include a flow control device positioned in a tubing string within a wellbore formed in a subsurface formation, the flow control device configured to produce a liquid or a gas. The flow control device may comprise a movable restrictor configured to move, in response to the liquid at a first velocity from the subsurface formation, from a closed position to an open position and a pilot-operated valve configured to attenuate a flow of the liquid through the flow control device when the movable restrictor is in the open position.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Disclosed herein are system, method, and computer program product embodiments for using a third party dynamic QR code on a personal mobile device to complete a transaction at an ATM. The customer may stage a transaction using a mobile application on a mobile device. Upon the staged transaction being authenticated and approved, a machine-readable image may be transmitted to the mobile device. When the customer visits the ATM, the machine-readable image on the mobile device may be captured by the ATM and sent to an application server from the ATM. The application server may associate the ATM with the staged transaction that is staged using the mobile application, and send instructions to the ATM to dispense cash according to the staged transaction.

Abstract: A system, method, and computer program product are provided for consent management. A method may include receiving a first data request for user data associated with a user, the user data stored in a user data database; communicating a consent request to the requester system; receiving a consent response from the requester system; storing consent data associated with the consent response for the user data requested in the first data request in an immutable ledger; receiving a consent verification request from the user data database, the consent verification request based on a second data request for the user data from the requester system to the user data database; verifying the consent verification request based on the consent data; and communicating a consent verification response to the user data database, the consent verification response indicating consent from the user to share the user data with the requester system.

Abstract: A method and an apparatus that includes performing a material alteration detection process: sampling the document images based at least in part on account information indicated on the document images; performing image pre-processing on the sampled document images; determining a document type for each image of the sampled document images; for handwritten documents, analyzing the document image using a machine learning (ML) algorithm trained to detect material alterations on handwritten documents; for printed documents, analyzing the document image using a ML algorithm trained to detect material alterations on printed documents; and outputting a fraud probability representation for each analyzed document image; and a signature forgery detection process: obtaining past signatures corresponding to the document images; performing signature image pre-processing; authenticating each signature using the past signatures and a ML algorithm trained to match signatures; outputting a similarity measure; and adjusting the

Abstract: Disclosed monopolar and bipolar tissue lacerators can comprise a wire partially covered by electrical insulation, wherein the wire has a kink defining an inner curvature, wherein the wire is exposed through the insulation at one or two exposed regions along or near the inner curvature of the kink, wherein the wire is configured to conduct electrical energy through the one or two exposed regions and through a tissue target positioned adjacent the inner curvature to lacerate the tissue target via the electrical energy. The tissue target can be a native or prosthetic heart valve leaflet in a patient's heart.

Abstract: The present disclosure relates to compositions and methods related to tissue-specific promoters and their uses in plants, including tobacco and cannabis. The provided trichome-specific promoters enable the expression of heterologous polynucleotides in trichome tissues.

Abstract: A detonator housing facilitates assembly of detonator components of a perforating gun. In an example, the detonator housing comprises a housing body configured for coupling to a charge tube of a perforating gun. A detonator receptacle is formed on the housing body for receiving a detonator. A detonating cord receptacle is formed on the housing body adjacent the detonator receptacle for receiving an end portion of a detonating cord in an overlapping relationship with the detonator. A detonating cord stop is formed on the detonating cord receptacle to limit an insertion depth of the detonating cord within the detonating cord receptacle.

Abstract: In some implementations, a device may monitor user activity in a computing system. The device may detect, based on monitoring the user activity, modification of a resource of the computing system by a user. The device may determine, using a machine learning model and based on detecting the modification of the resource, a set of access rules for the resource based on one or more characteristics associated with the user and one or more characteristics associated with the resource. The device may control access to the resource based on the set of access rules.

Abstract: A streaming server receives a request to provide a requested media stream to a client-side media player. The client-side media player is capable of assembling portions of different media streams into a single playout stream and outputting the single playout stream to a user interface. In response to receiving the request, the streaming server transmits the requested media stream to the client-side media player. The streaming server also transmits a stream provider rule, which constrains assembly of the single playout stream by the client-side media player.