Abstract: Embodiments are directed to protection of communications between a trusted execution environment and a hardware accelerator utilizing enhanced end-to-end encryption and inter-context security. An embodiment of an apparatus includes one or more processors having one or more trusted execution environments (TEEs) including a first TEE to include a first trusted application; an interface with a hardware accelerator, the hardware accelerator including trusted embedded software or firmware; and a computer memory to store an untrusted kernel mode driver for the hardware accelerator, the one or more processors to establish an encrypted tunnel between the first trusted application in the first TEE and the trusted software or firmware, generate a call for a first command from the first trusted application, generate an integrity tag for the first command, and transfer command parameters for the first command and the integrity tag to the kernel mode driver to generate the first command.

Abstract: At least one aspect of the present disclosure is directed to systems and methods of selecting and acknowledging content to broadcast. A system can receive, at a first time, a request for content to broadcast identifying a content publisher. The system can obtain cluster data of the content publisher corresponding to a first time, the cluster data identifying content selection metrics based on predicted characteristics of the cluster corresponding to the first time. The system can determine a subset of content items having cluster filtering criteria that satisfy the content selection metrics. The system can rank the subset of content items based on the content selection metrics to create an ordered list of content items. The system can transmit data identifying the order of the content items to the content publisher. The content publisher can insert the content into a broadcast in the order identified by the system.

Abstract: At least one aspect of the present disclosure is directed to systems and methods of selecting and acknowledging content to broadcast. A system can receive, at a first time, a request for content to broadcast identifying a content publisher. The system can obtain cluster data of the content publisher corresponding to a first time, the cluster data identifying content selection metrics based on predicted characteristics of the cluster corresponding to the first time. The system can determine a subset of content items having cluster filtering criteria that satisfy the content selection metrics. The system can rank the subset of content items based on the content selection metrics to create an ordered list of content items. The system can transmit data identifying the order of the content items to the content publisher. The content publisher can insert the content into a broadcast in the order identified by the system.

Abstract: For each original data segment, a distributed storage processing unit generates encoded slices designed to prevent the original data segment from being reconstructed using fewer than a threshold number of encoded slices. Multiple encoded slices are generated for each of two different data segments, and the slices associated with the first and second data segment are stored substantially concurrently in different storage sets employing different distributed storage units. Encoded slices for even and odd data segments can be stored in different storage sets, or longer sequences of data segments can be stored in alternating storage sets. Storage sets can also be determined by the vault generation of a particular data segment.

Abstract: For each original data segment, a distributed storage processing unit generates encoded slices designed to prevent the original data segment from being reconstructed using fewer than a threshold number of encoded slices. Multiple encoded slices are generated for each of two different data segments, and the slices associated with the first and second data segment are stored substantially concurrently in different storage sets employing different distributed storage units. Encoded slices for even and odd data segments can be stored in different storage sets, or longer sequences of data segments can be stored in alternating storage sets. Storage sets can also be determined by the vault generation of a particular data segment.

Abstract: For each original data segment, a distributed storage processing unit generates encoded slices designed to prevent the original data segment from being reconstructed using fewer than a threshold number of encoded slices. Multiple encoded slices are generated for each of two different data segments, and the slices associated with the first and second data segment are stored substantially concurrently in different storage sets employing different distributed storage units. Encoded slices for even and odd data segments can be stored in different storage sets, or longer sequences of data segments can be stored in alternating storage sets. Storage sets can also be determined by the vault generation of a particular data segment.

Abstract: For each original data segment, a distributed storage processing unit generates encoded slices designed to prevent the original data segment from being reconstructed using fewer than a threshold number of encoded slices. Multiple encoded slices are generated for each of two different data segments, and the slices associated with the first and second data segment are stored substantially concurrently in different storage sets employing different distributed storage units. Encoded slices for even and odd data segments can be stored in different storage sets, or longer sequences of data segments can be stored in alternating storage sets. Storage sets can also be determined by the vault generation of a particular data segment.