Abstract: A physical space may contain sliding doors in various places such as between rooms, as closet doors, on furniture, and so forth. An autonomous mobile device (AMD) capable of non-holonomic motion may selectively contact a portion of the sliding door and apply a force to open or close the door. The AMD moves to an initial pose relative to the door, with a portion of the AMD coming into contact with the door. The AMD then rotates and translates, relative to the door, applying a force to the door. Sensor data, such as linear acceleration, rotation, drive wheel torque, and so forth is used as input to determine the next movement in a series of motions, resulting in continued contact and force application. As the end of travel for this motion is reached, the AMD may separate from the door, reposition, and continue to apply a force to the door.

Abstract: Technologies directed to energy efficient phase shifting in digital beamforming in phased array antennas in communication systems are described. Digital signal processing (DSP) circuitry includes a first phase shifter that generates second data by phase shifting first data according to a rotation-based operation without multiplication of the second data, a second phase shifter that generates fourth data by phase shifting third data according to the rotation-based operation without multiplication of the fourth data, a combiner that generates fifth data by adding the second data and the fourth data, and a multiplier that generates sixth data by multiplying the fifth data by a constant value.

Abstract: A privacy protecting transaction engine for a cloud provider network is described. According to some embodiments, a computer-implemented method includes receiving a request from a customer of a cloud provider network to create a customer cloud in the cloud provider network, generating the customer cloud in the cloud provider network, receiving a first request at the cloud provider network for the customer cloud that includes private information of an end customer of the customer of the cloud provider network, removing the private information from the first request by a privacy protecting transaction engine of the cloud provider network to generate a second request, and sending the second request to the customer cloud for servicing.

Abstract: An update deployment service performs automatic testing and deployment of a software update (e.g., security patches) for a software component on a fleet of IoT devices, without the need for the client to test the update and manually deploy the update to the IoT devices. A client configures the service by providing an upper usage limit for certain IoT hardware components (e.g., memory, hard disk) and/or code components (e.g., threads) that may be caused by any future updates. When a new update is available for deployment, the update deployment service obtains usage test data that indicates the amount of usage (or increase in usage) of the IoT hardware and/or code for the new update. If the usage (or increase in usage) is within the client-provided usage limits, then the service automatically deploys the update to the fleet of edge devices.

Abstract: Techniques for synthetic accuracy measurement of a content recognition system are described. According to some examples, a computer-implemented method includes generating, by a provider network, a reference fingerprint for a secondary content (e.g., advertisement) media file; generating, by the provider network, a synthetic fingerprint for a transformed version of the secondary content media file; inserting, by the provider network, the synthetic fingerprint into a stream of fingerprints of a plurality of media files; comparing, by a comparison service of the provider network, the stream of fingerprints including the synthetic fingerprint to the reference fingerprint to generate an indication of a match between the synthetic fingerprint and the reference fingerprint in the stream; and sending the indication of the match to a storage location.

Abstract: Various embodiments of apparatuses and methods for threat sensor deployment and management in a malware threat intelligence system are described. In some embodiments, the system comprises a plurality of threat sensors, deployed at different network addresses and physically located in different geographic regions in a provider network, which detect interactions from sources. In some embodiments, a threat sensor deployment and management service determines a deployment plan for the plurality of threat sensors, including each threat sensor's associated threat data collectors. The threat data collectors can be of different types such as utilizing different communication protocols or ports, or providing different kinds of responses to inbound communications. The different threat sensors can have different lifetimes.

Abstract: This disclosure describes systems and techniques for enabling a communication device to communicate wirelessly with a near-field-communication (NFC)-enabled payment terminal while avoiding interference between the NFC-enabled payment terminal and other NFC payment instruments. In some instances, the communication device may receive, via a non-NFC communication protocol, a payment token from an identification device and may send, over NFC, the payment token to the NFC-enabled payment terminal for satisfying the cost of a transaction.

Abstract: A system for evaluating a biometric authorization system is described. The biometric authorization system is configured to apply a facial recognition model to image data to make an authorization determination based on detection of synthesized image data and based on matching a reference image to the image data. The system is also configured to execute one or more synthetic image data attack protocols to evaluate the biometric authorization system. The system also generates, according to one or more synthetic image data generation techniques, an evaluation set of image data comprising synthesized representations of a target and sends one or more authorization requests using the evaluation set of image data to the biometric authorization system. The system generates an evaluation of the biometric authorization system for synthetic image data attack analysis based on respective responses to the one or more authorization requests received from the biometric authorization system.

Abstract: At a radio-based application pipeline processing server at which a portion of a distributed unit (DU) of a radio-based application is implemented, a particular networking hardware device is selected from among several devices (which include least one device incorporated within a network function accelerator card and at least one device which is not part of an accelerator card) for transmission of at least a portion of mid-haul traffic to a centralized unit (CU). The mid-haul traffic is transmitted to the CU via the selected device. At least a portion of front-haul traffic is transmitted to a radio unit (RU) via a networking hardware device incorporated within a network function accelerator card of the server.

Abstract: Techniques are described for providing managed computer networks, such as for managed virtual computer networks overlaid on one or more other underlying computer networks. In some situations, the techniques include facilitating replication of a primary computing node that is actively participating in a managed computer network, such as by maintaining one or more other computing nodes in the managed computer network as replicas, and using such replica computing nodes in various manners. For example, a particular managed virtual computer network may span multiple broadcast domains of an underlying computer network, and a particular primary computing node and a corresponding remote replica computing node of the managed virtual computer network may be implemented in distinct broadcast domains of the underlying computer network, with the replica computing node being used to transparently replace the primary computing node in the virtual computer network if the primary computing node becomes unavailable.

Abstract: A determination is made that an explanatory data set for a common set of predictions generated by a machine learning model for records containing text tokens is to be provided. Respective groups of related tokens are identified from the text attributes of the records, and record-level prediction influence scores are generated for the token groups. An aggregate prediction influence score is generated for at least some of the token groups from the record-level scores, and an explanatory data set based on the aggregate scores is presented.

Abstract: A data service implements a configurable data compressor/decompressor using a recipe generated for a particular data set type and using compression operators of a common registry (e.g., pantry) that are referenced by the recipe, wherein the recipe indicates at which nodes of a compression graph respective ones of the compression operators of the registry are to be implemented. The configurable data compressor/decompressor provides a customizable framework for compressing data sets of different types (e.g., belonging to different data domains) using a common compressor/decompressor implemented using a common set of compression operators.

Abstract: Technologies directed to a wireless network device with a single hardware architecture that supports multiple devices roles through software configuration are described. One wireless network device includes a housing with an RF connector and a circuit board with a first radio coupled to an internal antenna and a second radio coupled to an external antenna via the RF connector. The second antenna is mounted on an exterior surface of the building and coupled to the RF connector via an RF cable. The wireless network device receives a command identifying a device role for the wireless network device and configures itself according to the device role using device setting.

Abstract: A stiffener ring can include a body sized for attachment to a substrate in a semi-conductor package. The stiffener ring body can have a top surface and a bottom surface. A through-hole may penetrate the body so as to extend through the top surface and the bottom surface and so that the body is formed as ring around the through-hole. An anchor surface can form a portion of the bottom surface and be configured for engaging the substrate. An elevated surface can also form a portion of the bottom surface and be elevated above the anchor surface.

Abstract: A virtualization host is identified for an isolated run-time environment. One or more records generated at a security module of the host, which indicate that a first phase of a multi-phase establishment of an isolated run-time environment has been completed by a virtualization management component of the host, is transmitted to a resource verifier. In response to a host approval indicator from the resource verifier, the multi-phase establishment is completed at the virtualization host.

Abstract: A computer system includes a chassis comprising location indicating elements, such as springs, magnets, standoffs, or other types of location indicating elements physically attached to the chassis in a configuration that indicates locations in the chassis. Also, the computer system includes multiple printed circuit boards comprising pads configured to interface with the location indicating elements, wherein combinations of sensed or not sensed location indicating elements at the pads of the printed circuit boards provide a physically verified placement location for the printed circuit boards.

Abstract: Techniques for increasing the security and reliability of frame transmission are described. In an example, a network access device transmits a first frame indicating that a protected frame is to be used for a power mode change. The network access device receives a second frame that includes an identifier of a device and a change to a power mode of the device. The network access device determines whether the second frame is protected. In addition, the network access device determines whether data received for the device is to be stored prior to transmission to the device based at least in part on whether the second frame is protected.

Abstract: This disclosure describes, in part, context-based device arbitration techniques to select a voice-enabled device from multiple voice-enabled devices to provide a response to a command included in a speech utterance of a user. In some examples, the context-driven arbitration techniques may include determining a ranked list of voice-enabled devices that are ranked based on audio signal metric values for audio signals generated by each voice-enabled device, and iteratively moving through the list to determine, based on device states of the voice-enabled devices, whether one of the voice-enabled devices can perform an action responsive to the command. If the voice-enabled devices that detected the speech utterance are unable to perform the action responsive to the command, all other voice-enabled devices associated with an account may be analyzed to determine whether one of the other voice-enabled devices can perform the action responsive to the command in the speech utterance.

Abstract: Flexible input/output (I/O) allocation techniques for integrated circuit scan testing are disclosed. The techniques implement configurable definition of the core circuitry blocks comprising the scan domain under test and their mapping to the scan test pads. Scan testing of the scan domain is performed by receiving a test pattern on the set of one or more scan-in test pads, transmitting the test pattern to the scan domain via the set of one or more scan input channels, receiving a test response on the set of one or more scan output channels, and transmitting the test response to the set of one or more scan-out test pads.

Abstract: In response to a process being triggered, at least in part by receipt of information regarding communication directed to a first application by a second application, a threat level is computed based at least in part on the information. As a result of the threat level being of a first severity, the second application is migrated to a destination zone that allows for improved communications with the first application. As a result of the threat level being of a second severity, migration of the second application to the destination zone is delayed. As a result of the threat level being of a third severity, a mitigation action is performed.

Abstract: Systems and methods for processing a DNS query to identify and implement pre-processing information by a DNS server component in anticipation of a corresponding content request from a client computing device are provided. The pre-processing information can correspond to identification of content to be preloaded or other actions to be implemented by one or more computing devices in association with an anticipated client content request. Based on identification of the content or future actions, a DNS server component can provide the pre-processing information to one or more computing devices, such as computing devices of a CDN service provider and/or an original content provider, in advance of a corresponding request for content from the client computing device in order to improve performance associated with responding to the client request.

Abstract: Technologies are disclosed for disambiguating contact information using relationship data using a virtual assistant. A user interacts with a virtual assistant to obtain and utilize contact information. For example, a virtual assistant may allow users to perform an action that utilizes contact information (e.g., make a call to a contact). The virtual assistant utilizes a contact service to identify candidate contacts that are related to the requesting user. The contact service identifies candidate contacts based on relationship data between the requesting user and the stored contacts. For example, the relationship data may indicate that the requesting user is on the same project or team as another contact, that the requesting user has the same role as another contact, that the requesting user is a manager of another contact, as well as other attributes. In some examples, the contact service limits the number of candidate contacts provided to requesting user.

Abstract: A system configured to perform self-trigger prevention to avoid a device waking itself up when a wakeword is output by the device's own output audio. For example, during active playback the device may perform double-talk detection and suppress wakewords or other device-directed utterances when near-end speech is not present. To detect whether near-end speech is present, an Audio Front End (AFE) of the device may perform echo cancellation and generate correlation data indicating an amount of correlation between an output of the echo canceller and an estimated reference signal. When the correlation is high in certain frequency ranges, near-end speech is not present and the device may suppress the utterance. When the correlation is low, indicating that near-end speech could be present, the device does not suppress the utterance and sends the utterance to a remote system for speech processing.

Abstract: Systems, devices, and methods are provided for performing compound operations on a security module. In some embodiments, a hardware security module (HSM) comprises executable code that, as a result of execution by one or more processors of the HSM, causes the HSM to obtain a request to perform a compound operation, parse the compound operation to determine a sequence of operations, perform the sequence of operations within a protected execution environment, wherein one or more intermediate results of the sequence of operations are programmatically unexportable from the protected execution environment, determine, based on complete execution of the sequence of operations, an output, and export the final output from the protected execution environment, thereby making it available to external devices.

Abstract: Techniques are generally described for color filter array interpolation of image data. A first frame of image data representing a plurality of pixels arranged in a grid may be received. A low pass filter may be used to generate a first luminance value for a first non-green pixel of the plurality of pixels. A first chrominance value of the first non-green pixel may be determined based at least in part on a combination of at least a chrominance value of a first green pixel located adjacent to the first non-green pixel and a chrominance value of a second green pixel located adjacent to the first non-green pixel. A second luminance value for the first non-green pixel may be determined based on a combination of the first chrominance value and the first luminance value. Output values for the first non-green pixel may be determined based at least in part on the second luminance value.

Abstract: A semiconductor package component (such as a die or interposer) can include a body having a top surface and a bottom surface. The component can further include an interface array arranged along the top surface or the bottom surface. The interface array can include a first set of microbumps arranged in a first row. The interface array can further include a second set of microbumps arranged in a second row adjacent the first row. The interface array can also include a probe pad extending into both the first row and the second row.

Abstract: This disclosure describes techniques for providing instructions when receiving biometric data associated with a user. For instance, an electronic device may detect a portion of a user, such as a hand. The electronic device may then determine locations of the portion of the user relative to the electronic device. Based on the locations, the electronic device may cause a visual indicator to provide instructions to the user for placing the portion of the user at a target location relative to the electronic device. For example, the visual indicator may emit light indicating that the portion of the user is off-centered, angled, too low, and/or too high. After providing the instructions and determining that the portion of the user is at the target location, the electronic device may capture at least an image of the portion of the user and use the image to identify an account.

Abstract: Systems and methods are provided for efficiently maintaining a transaction sequence witness service to ensure that requests to read data provide consistent results across all storage nodes in a distributed system. Each storage node that stores data in response to a particular update event may first update the transaction sequence witness service with the sequence number for the update event. Thus, any other storage node that services a subsequent request for the data will be able to see, via the transaction sequence witness service, the sequence number that must be available on the storage node to respond to the request.

Abstract: Data about concentration of one or more types of molecules present within a human body are determined noninvasively using radio frequency signals. Signals at several different frequencies at very low power levels are emitted using an antenna mounted to a wearable device. The antenna includes nested elements of different sizes. Operating values, such as changes to the impedance of the antenna, are associated with the concentration of one or more types molecules within the user. Concentrations at different depths may be measured by using different sets of the nested elements at different times. Operating values at those times are measured and used to determine information indicative of concentration of the molecules. During use, a long axis of the antenna may be aligned with a long axis of a user's arm.

Abstract: Systems and methods for target-device resolution are disclosed. A user may speak a user utterance requesting an action to be performed with respect to an accessory device, such as a smart-home device. The user utterance may include an identifier for the accessory device, but that identifier may not correspond to a naming indicator of an accessory device and/or may correspond to multiple naming indicators. In these examples, one or more models are utilized to identify which accessory device is most likely to correspond to the accessory device targeted by the user utterance for operation.

Abstract: Devices and techniques are generally described for sending a first instruction for a device to output first content while the speech-processing device is in an ambient state during a first time period. First feedback data is received indicating that a first action associated with the first content was requested at a first time. A determination is made that the first time is during the first time period. Timing data related to a current time of the device is determined. Second content is determined based at least in part on the first action being requested during the first time period and the timing data. A second instruction is sent effective to cause the device to output second content while in the ambient state during a second time period.

Abstract: A client of a metering service defines mapping data and derivation instructions comprising schema metadata and predicate metadata. The metering service provides usage information for a set of computing resources provided by one or more services of a computing resource service provider. As computing resources are utilized, usage records are generated. A derivation system may obtain one or more usage records and determine whether a predicate applies. If the predicate applies, a derivation function may be executed. For example, the derivation function may generate, from an original usage record, a derived usage record using mapping data provided by a client.

Abstract: An aerial vehicle and system for automatically detecting an object (e.g., human, pet, or other animal) approaching the aerial vehicle is described. When an approaching object is detected by an object detection component, a safety profile may be executed to reduce or avoid any potential harm to the object and/or the aerial vehicle. For example, if the object is detected entering a safety perimeter of the aerial vehicle, the rotation of a propeller closest to the object may be stopped to avoid harming the object and rotations of remaining propellers may be modified to maintain control and flight of the aerial vehicle.

Abstract: A mobile drive unit includes a pivot between the front chassis unit and the rear chassis unit, thereby diminishing the total height of the unit.

Abstract: A file-level snapshot access service provides direct access to individual files included in a snapshot for virtual volume of a block-storage service without requiring a volume to be re-created from the snapshot, attached to a computing device, or mounted in a file system. For example, a user/client may directly retrieve individual files from specified snapshots via a user interface/API of the file-level snapshot access service. Additionally, the file-level snapshot access service is configured to provide a listing of files included in a given snapshot. In some embodiments, a file-level snapshot access service may provide direct access to individual files included in snapshots generated for other types of storage systems, such as an object-based storage system.

Abstract: This disclosure describes, in part, techniques for identifying facility status updates using opportunistic data gathering from independently controlled devices operated by users within the facility. For instance, system(s) may determine first status information for inventory and/or locations within the facility and determine associated freshness scores. In response to a freshness score being below a threshold level, the system may determine imaging locations for the independently controlled devices to be positioned at to capture image data to update information on the inventory or locations. The system may receive uploaded image data from a fleet device after it opportunistically reaches the imaging location and captures image data. The system may then update the facility status information and the freshness score for the particular location.

Abstract: Techniques for performing anomaly detection are described. An exemplary method includes receiving a request to detect potential anomalies using an anomaly detection system having at least one anomaly scoring model; processing the received data using the anomaly detection system to score the data to determine when the data is potentially anomalous based on one or more thresholds; requesting feedback of at least one determined potential anomaly; receiving feedback on the least one determined potential anomaly; and adjusting at least one of one or more of thresholds used to determine potential anomalies and what is considered an anomaly without adjusting the at least one anomaly scoring model.

Abstract: Systems and methods are provided to use a signed connection identifier to route packets of network traffic. Each network host can include a network device that independently routes the packets of network traffic without sharing state information with other network devices. A network device can receive a packet of network traffic and determine if the packet of network traffic includes a signed connection identifier. If the packet does not include a signed connection identifier, the network device can perform a load balancing operation to select a network host for the packet and generate a signed connection identifier for the packet identifying the selected network host. If the packet does include a signed connection identifier, the network device can encapsulate the packet and route the packet to a particular network host based on the signed connection identifier.

Abstract: A deformable item stabilizer tray is described for stabilizing an item during conveyance and transport. The deformable item stabilizer tray includes a base adapted to support an article and a plurality of sidewalls surrounding and extending at an angle from the base. A first notched-out region in a first one of the sidewalls defines a first lip support region having at least one indent configured to control a deformation of the lip above the first lip support region. A second notched-out region in a second one of the sidewalls defines a second lip support region having at least one indent configured to control a deformation of the lip above the second lip support region. The first notched-out region and the second notched-out region may be on opposite ones of the sidewalls.

Abstract: Described are systems and methods relating to the causal detection and diagnosing of faults and anomalous operation of autonomous vehicles, such as unmanned aerial vehicles (UAVs), using machine learning. Embodiments of the present disclosure can provide systems and methods for detecting and diagnosing faults based on comparisons between the measured operation and/or behavior of a vehicle to the vehicle's expected nominal operation and/or behavior. Accordingly, the systems and methods according to embodiments of the present disclosure do not require prior knowledge of faults or modeling of the vehicle, the vehicle's operation, and/or environmental uncertainties. Further, embodiments of the present disclosure can facilitate sequencing of a vehicle's faults and/or anomalous operation and/or behavior, identify dependencies between a vehicle's faults and/or anomalous operation and/or behavior, and can detect and diagnose faults and/or anomalous operation and/or behavior in a contextual manner.

Abstract: This disclosure describes systems and techniques receiving a request for information from a user and, in response, outputting the requested information along with unsolicited, interesting content that is related to, yet nonresponsive to, the requested information. In some instances, if the requested information is unknown, the techniques may output an indication that the information is unknown, followed by the additional, unsolicited, interesting content.

Abstract: This disclosure describes, in part, techniques for implementing customized intrusion zones for security monitoring. For instance, a user may provide (e.g., via a GUI) an indication of a physical space to be monitored. An electronic device may detect one or more objects and its respective location from radar data collected by a radar sensor. The electronic device may additionally detect one or more objects within image data captured via a camera. The electronic device may then analyze the radar data and the image data in order to determine that the object detected by the radar sensor includes the same object represented by the image data. As such, the electronic device may send an alert to one or more computing devices that may include the radar data and/or the image data.

Abstract: Methods, systems, and computer-readable media for multi-tenant partitioning in a time-series database are disclosed. A partitioning scheme is determined that maps a plurality of data points to a plurality of partitions based at least in part on table identifiers associated with the data points. The partitions are stored using a plurality of storage resources. After the storage resources are provisioned, an additional table identifier is generated. Based at least in part on the partitioning scheme, one or more additional data points comprising the additional table identifier are mapped to a particular partition of the plurality of partitions. The one or more additional data points are stored in the particular partition using the storage resources.

Abstract: Techniques for providing specialized certificate authorities are described. A method of providing specialized certificate authorities may include receiving a request to generate a private certificate at a specialized certificate authority, the specialized certificate authority configured to generate only one type of digital certificate using a user-specified template, generating a certificate based on the customer-specified template, and returning the certificate.

Abstract: An optical detector system provides positioning data to facilitate tracking in optical communications. The system provides first and second path lengths to direct light onto an array of photodetectors. Incoming first light with a first polarization is reflected by a polarizing beam splitter (PBS) to the array, resulting in a first path length and a relatively wide field of view (FOV). Incoming second light with a second polarization passes through the PBS, interacts with a first quarter wave retarder (QWR) and a convex mirror, is reflected by the PBS, passes through a second QWR and is reflected by a flat mirror to pass through the PBS again and onto the array. The second light experiences a second path length greater than the first path length, exhibiting a relatively narrow FOV. The resulting spots of light on the array provide information about a position of the incoming beam.

Abstract: Methods, systems, and computer-readable media for analysis of role reachability with transitive tags are disclosed. An access control analyzer determines a graph including nodes and edges. The nodes represent roles in a provider network hosting resources. The roles are associated with access control policies granting or denying access to individual resources. One or more of the access control policies grant or deny access based (at least in part) on key-value attributes. The access control analyzer determines, based (at least in part) on a role reachability analysis of the graph, whether a first role can assume a second role using role assumption steps for a particular state of the attributes. The attributes may include transitive attributes that persist during the role assumption steps.