Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for generating data defining molecules. In one aspect, there is provided a method performed by one or more computers, the method comprising: receiving, from a user, a request to generate data identifying candidate molecules satisfying one or more molecular criteria; generating a collection of candidate molecules that satisfy the one or more molecular criteria; generating, for each candidate molecule in the collection of candidate molecules, one or more molecular scores that characterize one or more properties of the candidate molecule; filtering the collection of candidate molecules, based on the molecular scores, to remove a plurality of candidate molecules from the collection of candidate molecules; and after filtering the collection of candidate molecules based on the molecular scores, providing a representation of the collection of candidate molecules to the user.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for generating data defining molecules. In one aspect, there is provided a method comprising: receiving, from a user, data defining a chemical computation graph, wherein: the chemical computation graph comprises a set of chemical computation nodes and a set of edges; each chemical computation node is configured to perform operations comprising: receiving a set of input molecules; and processing the set of input molecules, in accordance with a sequence of one or more transformation operations associated with the chemical computation node, to generate a set of output molecules; and each edge connects a respective first chemical computation node to a respective second chemical computation node; and generating a set of candidate molecules using the chemical computation graph.

Abstract: A cloud security control platform and method enforces security controls across multiple cloud environments, services and disparate teams while providing a frictionless “Permissions on Demand” mechanism for approvals and exceptions. In contrast to the prior art, security is evaluated on a permission by permission basis, with the default being that all permissions are denied and then only given to a particular identity on an as-needed basis. This approach reduces the security risks associated with the vast capabilities available in Public Cloud environments and permits an organization that uses the platform to grant access, approve exceptions and delegate approvals with the appropriate compliance.

Abstract: Machine learning can be used to identify and/or predict the properties of molecules. A mathematical model is trained to generate a combined embedding space that includes language embeddings and molecule representation embeddings. The mathematical model may be a fine-tuned language model. The fine-tuned language model may receive queries related to molecules and properties of molecules and provide predictions of properties of the queries molecules, similar molecules, and/or may find molecules with a desired property.

Abstract: A fuel grain for a hybrid rocket engine includes multiple layers of fuel grain material defining a combustion port extending through a body of the fuel grain, in which each layer includes multiple beads of fuel grain material, in which the multiple beads in a given layer are disposed adjacent to one another and bonded together, and in which adjacent layers are bonded together, in which each bead of fuel grain material includes a polymer based rocket fuel material, and in which a composition of the beads of the fuel grain material, a form of the beads of fuel grain material, or both varies within the fuel grain.

Abstract: An interactive top-down emissions model, and methods of generating thereof, are disclosed. An example method comprises: receiving reference emissions reports respectively associated with an organization, a basin, or a facility. Each reference emissions report indicates reference emissions data associated with the organization, the basin, or the facility over a predefined time period. Facility information indicating ownership history and/or placement history of facilities are also received.

Abstract: One variation of a method includes: receiving identification of a patient associated with an encounter via a provider portal accessed by a provider; accessing a health record for the patient; accessing a diagnostic model including a module corresponding to a diagnosis; extracting a set of patient indicators, supporting the diagnosis for the patient, from the health record; and deriving a confidence score for the diagnosis for the patient. The method further includes, in response to the confidence score exceeding a threshold score: appending a list of predicted diagnoses with the diagnosis; and transmitting a prompt to the provider, via the provider portal, to review the list of predicted diagnoses.

Abstract: One variation of a method includes: receiving identification of a diagnosis for an encounter with a patient via a provider portal accessed by a provider; accessing a health record for the patient; accessing a diagnostic model including a module corresponding to the diagnosis; extracting a set of patient indicators, supporting the diagnosis for the patient, from the health record; and transmitting a prompt to the provider, via the provider portal, to review each patient indicator for specifying in a provider note generated for the encounter. This variation of the method further includes, in response to receiving selection of a subset of patient indicators, for specifying in the provider note, from the provider: appending the provider note with the subset of patient indicators; predicting an acceptance score for the provider note; and, in response to the acceptance score exceeding a threshold score, verifying the provider note.

Abstract: A system and method of communicating between computing devices including pairing a first computing device with a second computing device. The first computing device and the computing second device are configured to communicate with an application workspace system. The first computing device provides token and application information to a second computing device. The second computing device is authenticated with the application workspace system using the token and launches an application corresponding to the application information.

Abstract: A system and method of communicating between computing devices including pairing a first computing device with a second computing device. The first computing device and the computing second device are configured to communicate with an application workspace system. The first computing device provides token and application information to a second computing device. The second computing device is authenticated with the application workspace system using the token and launches an application corresponding to the application information.

Abstract: Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.

Abstract: Systems and methods for medical data aggregation, transformation, and presentation are provided. In one example, a method comprises sets of attributes and supplementary attributes are selectively presented as directly editable medical notes in an interface with enhanced functionality.

Abstract: Systems and methods for medical data aggregation, transformation, and presentation are provided. In one example, a method comprises sets of attributes and supplementary attributes are selectively presented as directly editable medical notes in an interface with enhanced functionality.

Abstract: Examples described herein include systems and methods for creating a per-app virtual private network (“VPN”) using hooking, even though an isolated process is used for networking functions. The isolated process can include networking functions of the WebView class for ANDROID. The application can start an HTTP proxy server to receive local HTTP requests. Then, the application can trigger a broadcast to the isolated process, causing the isolated process to route its HTTP requests to the HTTP proxy of the application. The application can then hook HTTP requests and send them to a virtual private network (“VPN”) tunnel server. This can allow an application to securely connect to enterprise files or data even though the networking functions occur in the isolated process.

Abstract: Systems and methods for medical data aggregation, transformation, and presentation are provided. In one example, a method comprises accessing first and second patient data relating to first and second medical conditions. Attributes and supplementary attributes in a data structure are derived. Sets of attributes and supplementary attributes are selectively presented as directly-editable medical notes in a user interface having enhanced user functionality.

Abstract: A system and method of communicating between computing devices including pairing a first computing device with a second computing device. The first computing device and the computing second device are configured to communicate with an application workspace system. The first computing device provides token and application information to a second computing device. The second computing device is authenticated with the application workspace system using the token and launches an application corresponding to the application information.

Abstract: Examples described herein include systems and methods for creating a per-app virtual private network (“VPN”) using hooking, even though an isolated process is used for networking functions. The isolated process can include networking functions of the WebView class for ANDROID. The application can start an HTTP proxy server to receive local HTTP requests. Then, the application can trigger a broadcast to the isolated process, causing the isolated process to route its HTTP requests to the HTTP proxy of the application. The application can then hook HTTP requests and send them to a virtual private network (“VPN”) tunnel server. This can allow an application to securely connect to enterprise files or data even though the networking functions occur in the isolated process.

Abstract: A system and method of communicating between computing devices including pairing a first computing device with a second computing device. The first computing device and the computing second device are configured to communicate with an application workspace system. The first computing device provides token and application information to a second computing device. The second computing device is authenticated with the application workspace system using the token and launches an application corresponding to the application information.

Abstract: Examples described herein include systems and methods for creating a per-app virtual private network (“VPN”) using hooking, even though an isolated process is used for networking functions. The isolated process can include networking functions of the WebView class for ANDROID. The application can start an HTTP proxy server to receive local HTTP requests. Then, the application can trigger a broadcast to the isolated process, causing the isolated process to route its HTTP requests to the HTTP proxy of the application. The application can then hook HTTP requests and send them to a virtual private network (“VPN”) tunnel server. This can allow an application to securely connect to enterprise files or data even though the networking functions occur in the isolated process.

Abstract: Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.