Abstract: A cloud computing system has an external application program interface (API) allowing a user to access the cloud computing system and sending a job to at least one application. At least one application supervisor is provided, wherein each application supervisor monitors a specific application and deploys at least one cloud worker to the job. A database stores status information of the at least one cloud worker, job details and other telemetry data. An internal API is coupled to the database. A state machine receives the status information of the at least one cloud worker, job details and other telemetry data via the internal API. The state machine determines when servers need to be deleted, servers need to be created, when the at least one cloud worker needs to be deleted or additional cloud workers created.

Abstract: Armor comprises one or more ceramic plates differentially reinforced by reinforcement applied to a face of the plate to separate regions of low reinforcement by regions of higher reinforcement.

Abstract: Armor comprises an array of tiles or pellets confined between at least a pair of sheets, and in which at least one of said at least a pair of sheets is weakened overlying boundaries between adjacent tiles or pellets.

Abstract: Armour comprises one or more ceramic plates differentially reinforced by reinforcement applied to a face of the plate to separate regions of low reinforcement by regions of higher reinforcement.

Abstract: Armour comprises an array of tiles or pellets confined between at least a pair of sheets, and in which at least one of said at least a pair of sheets is weakened overlying boundaries between adjacent tiles or pellets.

Abstract: A method is presented for managing authentication credentials for a user. A session management server performs session management with respect to the user for a domain that includes a protected resource. The session management server receives a request to access the protected resource, which requires authentication credentials that have been generated for a first type of authentication context. In response to determining that authentication credentials for the user have been generated for a second type of authentication context, the session management server sends to an authentication proxy server a first message that contains the authentication credentials for the user and an indicator for the first type of authentication context. The session management server subsequently receives a second message that contains updated authentication credentials for the user that indicate that the updated authentication credentials have been generated for the first type of authentication context.

Abstract: The present invention provides a process for the preparation of polymer which comprises the steps of i) feeding an aqueous mixture comprising a monoethylenically unsaturated monomer or a mixture of monoethylenically unsaturated monomers and an initiator into the top of a reactor ii) polymerizing the monoethylenically unsaturated monomer to form a gel-like aqueous mixture comprising the polymer, iii) squeezing the gel-like aqueous mixture comprising the polymer out of the bottom of the reactor using inert gas, wherein the reactor is either a vertical fully conical reactor having an angle (alpha) between top diameter (d1) of the reactor and inner wall of the reactor of smaller than 90° but larger than 45° or is made up of 2 to 5 connected vertical fully conical parts, which are on top of one another, each having an angle between top diameter of the part and inner wall of the part of smaller than 90° but larger than 45°.

Abstract: The present invention provides a process for the preparation of polymer which comprises the steps of i) feeding an aqueous mixture comprising a monoethylenically unsaturated monomer or a mixture of monoethylenically unsaturated monomers and an initiator into the top of a reactor ii) polymerizing the monoethylenically unsaturated monomer to form a gel-like aqueous mixture comprising the polymer, iii) squeezing the gel-like aqueous mixture comprising the polymer out of the bottom of the reactor using inert gas, wherein the reactor is either a vertical fully conical reactor having an angle (alpha) between top diameter (d1) of the reactor and inner wall of the reactor of smaller than 90° but larger than 45° or is made up of 2 to 5 connected vertical fully conical parts, which are on top of one another, each having an angle between top diameter of the part and inner wall of the part of smaller than 90° but larger than 45°.

Abstract: A method is presented for managing authentication credentials for a user. A session management server performs session management with respect to the user for a domain that includes a protected resource. The session management server receives a request to access the protected resource, which requires authentication credentials that have been generated for a first type of authentication context. In response to determining that authentication credentials for the user have been generated for a second type of authentication context, the session management server sends to an authentication proxy server a first message that contains the authentication credentials for the user and an indicator for the first type of authentication context. The session management server subsequently receives a second message that contains updated authentication credentials for the user that indicate that the updated authentication credentials have been generated for the first type of authentication context.

Abstract: Access Control Lists (ACLs) are used to describe the permitted actions (permissions) on protected network computer system resources or objects associated with an client or user identity. An identity may be an individual user or group of users. The actions are used to represent the different access methods available on a particular projected object or resource. A new action grouping mechanism is provided which tags each action with an action group name. The grouping of actions facilitates a larger permission set to be defined in an ACL, whereas action permission indicators can be reused for unique action definitions within various action groups. This effectively extends the finite total number of permissions available within a security system, allows a more descriptive and extensible permission mechanism in an Access Control List, as well as aiding in the simplification of management and definition of security policies.

Abstract: A combustion chamber for a gas turbine engine comprising at least one Helmholtz resonator having a resonator cavity and a resonator neck in flow communication with the interior of the combustion chamber. The cavity extends around at least part of the neck and is spaced apart therefrom to define a cooling chamber therebetween. The cooling chamber allows the neck and the cavity to be cooled with a flow of cooling air. The sunken neck allows the resonator to be located within enclosures with minimal volume without compromising on the damping properties afforded.

Abstract: One embodiment is a unique gas turbine engine combustion chamber including primary and secondary burning zones. Other embodiments include unique gas turbine engine apparatuses, systems, methods, and combinations.

Abstract: Methods, systems, and computer program products are disclosed that give entities flexibility to implement custom authentication methods of other entities for authentication of a principal in a federation by authenticating the principal by an identity provider according to a service provider's authentication policy and recording in session data of the identity provider an authentication credential satisfying the service provider's authentication policy. Authentication of a principal in a federation is also carried out by authenticating the principal by the identity provider according to an identity provider's authentication policy. Authentication of a principal in a federation is further carried out by receiving in the identity provider an authentication request from the service provider, the authentication request specifying the service provider's authentication policy.

Abstract: A method and system is presented to parse a WSDL description and build a hierarchical protected object namespace for authorization of access to the resource, wherein the protected object namespace is based on the abstract part of a WSDL but can be used to assist in authorization decisions for multiple different concrete bindings of this WSDL, wherein the concrete binding/request is based on the WS-Addressing endpoint reference.

Abstract: A combustor wall of a gas turbine engine is provided with an acoustic damper component. The component has a first metering passage, a first damping chamber, a first damping passage, a second damping chamber and a second damping passage. Air flows through the damper to be ejected into the combustion chamber from the second damping passage at a selected velocity and volumetric flow. The flow being sufficient to damp instabilities from the combustion process.

Abstract: The invention provides federated functionality within a data processing system by means of a set of specialized runtimes. Each of the plurality of specialized runtimes provides requested federation services for selected ones of the requestors according to configuration data of respective federation relationships of the requestors with the identity provider. The configuration data is dynamically retrieved during initialization of the runtimes which allows the respective runtime to be specialized for a given federation relationship. Requests are routed to the appropriate specialized runtime using the first requestor identity and the given federation relationship. The data which describes each federation relationship between the identity provider and each of the plurality of requesters is configured prior to initialization of the runtimes.

Abstract: A combustion chamber suitable for a gas turbine engine is provided with at least one Helmholtz resonator having a resonator cavity and a resonator neck in flow communication with the chamber interior. The resonator neck is provided with at least cooling holes extending through its wall for improved damping and cooling, at least one of the holes is directed towards the resonator cavity.

Abstract: A method and a system are presented in which federated service providers interact within a federated environment to initiate federated operations. A point-of-contact component that provides session management capabilities at a first service provider receives a request from a client. The request is then sent, possibly using redirection through a client, to a federated user lifecycle management functional component of the first service provider, which may interact with a point-of-contact component at a second service provider to initiate a federated user lifecycle management function at the second service provider, which enlists the assistance of a federated user lifecycle management functional component at the second service provider.

Abstract: A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated single-sign-on operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. Trust proxies interpret assertions from other federated domains as necessary. Trust proxies may have a trust relationship with one or more trust brokers, and a trust proxy may rely upon a trust broker for assistance in interpreting assertions. When a user is provisioned at a particular federated domain, the federated domain can provision the user to other federated domains within the federated environment. A provision operation may include creating or deleting an account for a user, pushing updated user account information including attributes, and requesting updates on account information including attributes.

Abstract: A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. The point-of-contact server receives incoming requests directed to the domain and interfaces with a first application server and a second application server, wherein the first application server responds to requests for access to controlled resources and the second application server responds to requests for access to federated user lifecycle management functions, which are implemented using one or more pluggable modules that interface with the second application server.