Abstract: The disclosed embodiments include processes that manage a cryptographically secure generation and exchange of data between network-connected systems operating within a computing environment using a permissioned distributed ledger. For example, and based on secure interaction with a distributed smart contract maintained within ledger blocks of the permissioned distributed ledger, an apparatus and a counterparty system may generate local symmetric encryption keys that facilitate a secure communication session between the apparatus and the counterparty system. Using the symmetric encryption key, the apparatus may generate a cryptographically secure representation of generated or obtained data, which may be transmitted to the counterparty system across the secure communications channel.

Abstract: The disclosed embodiments include computerized methods and systems that automatically provision one or more services available to an Internet-of-Things (IoT) devices upon connection to and registration onto communications network. In one aspect, a device may receive, from a computing system, data specifying one or more first services provisioned to the device. The device may identify a subset of the first services that are consistent with a device type of an additional device, and may transmit a portion of the stored first data that specifies the subset of the first services to that additional device. The additional device may process the transmitted portion to provision the subset of the first services to the additional device prior to a successful authentication.

Abstract: The disclosure generally describes computer-implemented methods, software, and systems, including a method for placing a card into an alert state. An alert detection indication is received during an attempted data exchange using a permanent account number (PAN) associated with a card. The alert detection indication is received by an electronic controller embedded in the card and is received through an interface. The alert detection indication indicates that the PAN has an alert state identified for the PAN by an entity that issued the card. An operational mode of the card is modified into the alert state by the electronic controller and is based on receipt of the alert detection indication. An electronic display indicating that the card is in the alert state is displayed by the electronic controller.

Abstract: The disclosure generally describes computer-implemented methods, software, and systems, including a method for placing a card into a usable state. A biometric input is received for a user to which a card has been issued by an entity. The card has an operational mode of an unusable state that has been previously identified by the entity for a particular PAN. The particular PAN is invalidated for use in further data exchanges using the card. The biometric input is received by an electronic controller embedded in the card. A determination is made that the biometric input matches one of one or more stored biometric profiles of users authorized to use the card. Based on the determining, a new PAN is activated for the card. The new PAN is usable in further data exchanges of the card. The operational mode of the card is modified to a usable state by the electronic controller.

Abstract: An apparatus for use in electronic document control includes a storage device a processor coupled to the storage device. The storage device storing software instructions for controlling the processor that when executed by the processor configure the processor to: receive a signal representing data including an original document, append a unique identifier to the original document to generate a modified document, generate a hash value of the modified document, and transmit the hash value corresponding to the modified document to an electronic distributed ledger.

Abstract: The disclosed embodiments include computer-implemented systems and processes that perform operations that initiate, approve, and execute exchanges of data between network-connected systems, apparatuses, and devices in a computing environment. For example, a network-connected apparatus may receive a first value of a parameter that characterizes an exchange of data initiated at a terminal device, identify a second value of the parameter allocated to the client device. In response to a determination that the first parameter value exceeds the second parameter value, the apparatus may request, and receive, parameter data from an application program executed by the at least one processor. The parameter data may identify a third value of the parameter allocated to the client device by the executed application program, and the apparatus may authorize, based on the second and third parameter values, a performance of the initiated data exchange in accordance with the first parameter value.

Abstract: The disclosed embodiments include computerized methods and systems that automatically provision one or more services available to an Internet-of-Things (IoT) devices upon connection to and registration onto communications network. In one aspect, a device may receive, from a computing system, data specifying one or more first services provisioned to the device. The device may identify a subset of the first services that are consistent with a device type of an additional device, and may transmit a portion of the stored first data that specifies the subset of the first services to that additional device. The additional device may process the transmitted portion to provision the subset of the first services to the additional device prior to a successful authentication.

Abstract: A water resistant device case includes a front and back assembly that mate to enclose an electronic device. The front assembly includes a rigid front frame, a touch screen cover bonded to the front frame, an inner bumper attached to the rigid front frame and an elastomeric main seal attached around a periphery of the rigid front frame. The back assembly includes a rigid back frame, an elastomeric over mold formed on an exterior of the back frame and an inner bumper attached to the rigid back frame. A snap tab attached to the rigid back frame mates with a snap hook on the front assembly to hold the front and back assemblies together when the device is enclosed within the case. A main water resistant seal is formed around a perimeter of the front and back assemblies by the elastomeric main seal on the front assembly being held against an inner surface of the rigid back frame.

Abstract: The disclosed embodiments include processes that securely approve and execute exchanges of data between systems, apparatuses, and devices in a computing environment. For example, a terminal device may establish communications with a client device across a direct channel of communication, and may initiate an exchange of data with that additional device across the direct communications channel. The initiated data exchange may be characterized by a value of a data-exchange parameter, and the terminal device may determine to authorize the current data exchange in real-time based on cryptographically secure distributed ledger data maintained by the client device and provided to the terminal device across the direct communications channel. Further, and based on transmitted confirmation data, the client device may generate additional, cryptographically secure of the distributed ledger data to reflect the authorized data exchange.

Abstract: The disclosed embodiments include computer-implemented systems and processes that perform operations that initiate, approve, and execute exchanges of data between network-connected systems, apparatuses, and devices in a computing environment. For example, a network-connected apparatus may receive, from a network-connected terminal device, data specifying an exchange of data initiated at the terminal device. The apparatus may, in some instances, identify a data type corresponding to the received data, and based on a block-chain ledger that tracks data exchanges involving the identified data type, determine an availability of the identified data type for use in the data exchange. In response to the determination, the apparatus may transmit a message confirming the availability of the identified data type to the terminal device prior to executing the data exchange in accordance with a data exchange parameter and using the identified data type.

Abstract: A water resistant device case includes a front and back assembly that mate to enclose an electronic device. The front assembly includes a rigid front frame, a touch screen cover bonded to the front frame, an inner bumper attached to the rigid front frame and an elastomeric main seal attached around a periphery of the rigid front frame. The back assembly includes a rigid back frame, an elastomeric over mold formed on an exterior of the back frame and an inner bumper attached to the rigid back frame. A snap tab attached to the rigid back frame mates with a snap hook on the front assembly to hold the front and back assemblies together when the device is enclosed within the case. A main water resistant seal is formed around a perimeter of the front and back assemblies by the elastomeric main seal on the front assembly being held against an inner surface of the rigid back frame.

Abstract: The disclosed embodiments include computer-implemented systems and processes that facilitate an initiation and a performance of one or more trustless transactions between counterparty devices operating within a trusted, secure computer-networking environment. For example, an apparatus may receive, through a touchscreen display unit, first data that identifies a session identifier associated with a transaction session, and may determine a validity of the session identifier based on the received first data. The apparatus may establish the transaction session in response to the determined validity of the session identifier. The transaction session may be associated with first and second operations characterized by values of corresponding parameters.

Abstract: Novel tools and techniques might provide for implementing intent-based network services orchestration. In some embodiments, a computing system might receive, over a network, a request for network services from a customer. The request for network services might include desired performance parameters for the requested network services, without information regarding any of specific hardware, specific hardware type, specific location, or specific network for providing the requested network services. The computing system might allocate network resources from one or more networks, based at least in part on the desired performance parameters. Based on a determination that at least one network can no longer provide at least one network resource having the desired performance parameters, the computing system might allocate at least one other network resource from at least one second network, based at least in part on network performance metrics, and based at least in part on the desired performance parameters.

Abstract: There is provided a gesture-based GUI (system, method, etc.) to facilitate input of numerical data using a continuous swipe gesture. A gesture-based I/O device displays a GUI presenting a gross number and a gross number control to initially define a specific number for further defining with specificity. In response to a first gesture (hard click or pause) interacting with the gross number control, the specific number is initially defined as the gross number and a finer number control is presented to refine the specific number. In response to a continuous swipe gesture continuing from the first gesture and interacting with the finer number control, the interface further defines the specific number with finer specificity where a quantum varies in response to a direction and distance of the continuous swipe. Successive finer number controls may be also be presented to refine the specific number by continuing the swipe.

Abstract: A device has a secure element including a memory that stores at least one address, a set of rules, and a state of an asset. A processor is configured for receiving a request to change the state of the asset associated with the address, validating the request in the case where changing the state of the asset according to the request complies with the set of rules, and invalidating the request in the case where changing the state of the asset according to the request violates the set of rules. A communications module is coupled to the secure element for transmitting information responsive to the request to a distributed network of peer processors for recording a change in the state of the asset in a distributed electronic ledger in the case where the secure element validates the request.

Abstract: An excavation system is disclosed for use with a mobile machine having a work tool. The excavation system may have a speed sensor configured to generate a first signal indicative of a travel speed of the mobile machine, and at least one load sensor configured to generate a second signal indicative of loading of the work tool. The excavation system may also have a controller configured to record values of the first signal during travel of the mobile machine toward a material, and to detect engagement of the work tool with the material based on the second signal. After engagement of the work tool with the material is detected, the controller may be further configured to determine an edge location of the material passed through by the work tool based on values of the first signal recorded prior to engagement detection of the work tool with the material.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing UI-based modifications to adjust and interact with data exchange splits. One example system includes a processor for identifying a newly received data exchange (DE) request associated with a particular user profile and receiving a first signal including a request to split the DE request with at least one other user profile. In response to the first signal, the processor can analyze the DE to identify at least one data exchange parameter and search a repository of DEs for previously submitted DEs associated with the at least one DE parameter of the identified DE. In response to identifying at least one previously requested DE, a set of DE split parameters associated with the at least one previously requested DE satisfying the search can be identified. The set of proposed DE split parameters can then be transmitted accordingly.

Abstract: The present disclosure involves systems, software, and computer implemented methods for providing user interface (UI)-based modifications to adjust and interact with data exchange splits. An example client device can include can identify a data exchange (DE) associated with at least three entities, the DE associated with a total value. A visualization representing the DE can be presented via a UI and can include a chart comprising the total value of the DE exchange divided into value areas that are each associated with a particular entity. In response to a detection of input associated with a selection of an edge between a first and second value area, the combined value area associated with the first and second value areas can be locked. In response to detected movement input associated with the edge, the relative values of the first and second inside the combined value area can be adjusted in the visualization.

Abstract: A system has a storage medium encoded with program instructions, and a processor coupled to access the program instructions. The instructions configure the processor for: receiving a first request at a POS terminal to surrender a previously purchased first asset in exchange for at least a portion of a second asset that was used to purchase the first asset, receiving the private key from the first asset; accessing a set of rules stored in a distributed electronic ledger, the set of rules specifying conditions associated with the first request; transmitting an authorization to return the at least a portion of the second asset in exchange for surrender of the first asset, in the case where the conditions are satisfied; and invalidating the first request in the case where one or more of the conditions are not satisfied.