Abstract: A system can include edge devices that include communication circuitry; and one or more security components. A method can include receiving security codes from a plurality of edge devices without accessing the Internet: comparing the security codes without accessing the Internet; and, based at least in part on the comparing, connecting the plurality of edge devices for communication without accessing the Internet. A method can include executing a trained machine learning model on an edge device; and, based at least in part on the executing, detecting a change in state of the edge device.

Abstract: Methods, devices, and systems are provided for user authentication on a gateway device to perform steps of, receiving a user request communicated via a local area network (LAN) from a user system or device connected to the LAN, checking whether the gateway device is operating in a disconnected operational mode in response to the user request, selectively initiating a user authentication protocol when the gateway device is operating in the disconnected operational mode, wherein the user authentication protocol uses secret information stored in a user hardware token uniquely assigned to a particular user, authenticating the administrator user using the user authentication protocol that requires administrator secret information stored in a master hardware token connected to a system or device operated by the administrator user, and selectively authenticating the particular user based at least in part on results of the user authentication protocol.

Abstract: Articulated mechanical connectors and processes for using same. The connector can include a first connector part and a second connector part. The first connector part can include a gimbal table, first and second trunnions disposed on the gimbal table, a first arm, and a stopper assembly. The second connector part can include a second arm. The second arm can include one or more shoulders disposed between a first end and a second end of the second arm. The second arm can be configured to be at least partially disposed within an aperture defined by the first arm such that one of the one or more shoulders can engage with the stopper assembly.

Abstract: Methods, devices, and systems are provided for user authentication on a gateway device located at an industrial site or facility employing user hardware tokens. The method comprises: i) at the gateway device, receiving a user request communicated via a local area network (LAN) from a user system or device connected to the LAN; ii) at the gateway device, checking whether the gateway device is operating in a disconnected operational mode in response to the user request of i); iii) at the gateway device, selectively initiating a user authentication protocol when the gateway device is operating in the disconnected operational mode, wherein the user authentication protocol uses secret information stored in a user hardware token uniquely assigned to a particular user; and iv) at the gateway device, selectively authenticating the particular user based at least in part on results of the user authentication protocol of iii).

Abstract: Mechanical joints and processes for using same. The mechanical joint can include a gimbal table that can define a first and second bearing surface and include a first and second trunnion extending from a pair of opposing sides. The arm can include a third and fourth trunnion disposed toward a second end thereof. The third and fourth trunnion can be aligned along a first axis and the first and second trunnion can be aligned along a second axis. The first and second axes can be substantially orthogonal or substantially perpendicular to one another. The third trunnion and the first bearing surface and the fourth trunnion and the second bearing surface, respectively, can be engaged with one another. The arm can be rotatable relative to the gimbal table about the first axis, and at least a portion of the arm can be disposed through an aperture defined by the gimbal table.

Abstract: Mechanical joints and processes for using same. The mechanical joint can be configured to provide an articulated connection between a first member and a second member. In some embodiments, the mechanical joint can include a support member and an arm. The support member can define an aperture therethrough and a socket on an inner surface thereof. The arm can include a ball disposed on a first end thereof that can be engaged within and supported by the socket defined by the support member. A second end of the arm can extend through the aperture of the support member such that the arm can rotate relative to the support member about a longitudinal axis of the arm and at least partially rotate about two axes that pass through a center point of the ball that are perpendicular to one another and to the longitudinal axis of the arm.

Abstract: A drilling system includes a surface system comprising a control panel. The drilling system further includes a pressure control equipment configured to be operatively coupled to the control panel, wherein the control panel comprises at least one intrusion prevention system (IPS) enabled device configured to provide for one or more IPS functions.

Abstract: A drilling system includes a surface system comprising a control panel. The drilling system further includes a pressure control equipment configured to be operatively coupled to the control panel, wherein the control panel comprises at least one intrusion prevention system (IPS) enabled device configured to provide for one or more IPS functions.

Abstract: A chain brace for restricting relative movement between first, second, and third serially connected links of a chain. The chain brace can include a wedge block defining a bore at least partially therethrough, first and second outer blocks, a capture frame that can include a reaction plate that can define a bore therethrough, and a tension member. The capture frame can be configured to position the outer blocks and the wedge block within the second link of the chain. The tension member can be positioned through the bore defined by the reaction plate and into the bore defined by the wedge block to apply a force on the wedge block such that the wedge block displaces the first and second outer blocks into contact with the ends of the first and third links of chain, respectively, to restrict relative movement between the first, second, and third links of the chain.

Abstract: A coupler configured to provide an articulated connection about two axes of rotation between a first member and a second member. The coupler can include a first end that defines a first bore therethrough and a second bore at least partially therethrough and a second end that defines a third bore therethrough. The first bore and the second bore can partially intersect one another.

Abstract: The present disclosure relates to an air-diffusion system, a computer-implemented method of designing an air-diffusion system, an apparatus for additive manufacturing an air-diffusion system, and a method of additive manufacturing an air-diffusion system.

Abstract: An industrial internet of things gateway boot method is described wherein installation, operation and maintenance phases are controlled to limit the chance of a malicious attack on a connected network.

Abstract: Machine learning techniques may be applied to determining a mode of transportation for a trajectory of a sequence of user locations. The mode of transportation, such as walking, bicycling, riding in a car or bus, riding in a train, or other mode, may be determined by creating a training set of data, then using classification mechanisms to classify trajectories by mode of transport. The training set may be generated by tracking then verifying a user's transportation mode. In some cases, a user may manually input or verify their transportation mode, while in other cases, a user's transportation mode may be determined through other data sources.

Abstract: The disclosure provides methods and systems for securing internet of thing systems. One method includes receiving, at a computing device, a token, wherein the token comprises a cryptographically signed list of rights that the computing device is authorized to request. The method also includes requesting, using the computing device, an action of a receiving device in an industrial location, wherein requesting the action comprises sending the token with the request to cause the receiving device to authenticate the user of the computing device and confirm the user is authorized to perform the action.

Abstract: A dataset's uniqueness level may be calculated by analyzing a dataset to determine a uniqueness level. In cases where the uniqueness level may be too low for a particular purpose, meaning when the dataset may not provide enough anonymity, the dataset may be adjusted by recomputing the dataset with different resolutions of spatial data, temporal data, content data, and relationship data. By adjusting the resolution or accuracy of the data elements, the uniqueness level may thereby be adjusted. An error calculation may be determined by comparing the adjusted dataset to the original data, and the error value may represent the consistency of the data to the original data. The uniqueness level may be used as an assurance level of anonymity, which may be advertised when a dataset is sold or transferred to a third party for analysis.

Abstract: A dataset's uniqueness level may be calculated by analyzing a dataset to determine a uniqueness level. In cases where the uniqueness level may be too low for a particular purpose, meaning when the dataset may not provide enough anonymity, the dataset may be adjusted by recomputing the dataset with different resolutions of spatial data, temporal data, content data, and relationship data. By adjusting the resolution or accuracy of the data elements, the uniqueness level may thereby be adjusted. An error calculation may be determined by comparing the adjusted dataset to the original data, and the error value may represent the consistency of the data to the original data. The uniqueness level may be used as an assurance level of anonymity, which may be advertised when a dataset is sold or transferred to a third party for analysis.

Abstract: Daily activities of mobile data may be represented as and processed as an image consisting of days of the week versus time of day. The images may be rapidly processed from raw data, but also may be readily analyzed using image processing techniques. The daily activities may be a composite of several images, each of which may represent observations for a particular dimension. The dimension may represent a type of activity, a physical location, a labeled location, or some other aspect. The image having time of day versus day of week may show relationships or patterns that may occur from one day to the next, which may otherwise be difficult to detect.

Abstract: Machine learning techniques may be applied to determining a mode of transportation for a trajectory of a sequence of user locations. The mode of transportation, such as walking, bicycling, riding in a car or bus, riding in a train, or other mode, may be determined by creating a training set of data, then using classification mechanisms to classify trajectories by mode of transport. The training set may be generated by tracking then verifying a user's transportation mode. In some cases, a user may manually input or verify their transportation mode, while in other cases, a user's transportation mode may be determined through other data sources.

Abstract: A trajectory may be derived from noisy location data by mapping candidate locations for a user, then finding a match between successive locations. Location data may come from various sources, including telecommunications networks. Telecommunications networks may give location data based on observations of users in a network, and such data may have many inaccuracies. The observations may be mapped to physical constraints, such as roads, pathways, train lines, and the like, as well as applying physical rules such as speed analysis to smooth the data and identify outlier data points. A trajectory may be resampled or interpolated to generate a detailed set of trajectory points from a sparse and otherwise ambiguous dataset.

Abstract: A user's location may be estimated by applying a probability function to raw user location data taken from various telephony or wireless systems. The probability function may estimate a user's location based on a training dataset that may be generated a priori to the analysis. A training dataset may be generated or updated by analyzing queries made with global positioning system (GPS) data to extract a device's GPS location. The probability function may be generated in part from physical maps. The estimated location may improve location accuracy, especially when attempting to map a user's location with accuracies that may be much smaller than a cell of a cellular telephony system.