Abstract: Systems and methods for in-process monitoring of additive manufacturing are described. The systems and methods utilize a predictive model trained to identify anomalies within a component which have a likelihood of resulting in a manufacturing defect. The predictive model is trained at least by identifying one or more manufacturing anomalies relating to the additive manufacturing of a test coupon, identifying one or more manufacturing defects within the resulting test coupon, and performing registration between the one or more manufacturing anomalies and the one or more manufacturing defects. The predictive model is used to monitor additive manufacturing processes and optionally inform the updating of process parameters.

Abstract: A remote validation service may generate a first delegated authority key pair for a first control plane and may generate a second delegated authority key pair for a second control plane. The first control plane, which may be a current owner control plane, may send to the remote validation service a payload including delta change information and that is signed using a public key of the first delegated authority key pair. The first control plane may then send the delta change information in an ownership voucher to the second control plane. The second control plane, which may be a next owner control plane, may then send to the remote validation service an additional payload including delta change information and that is signed using a public key of the second delegated authority key pair. The remote validation service may then validate the delta change information.

Abstract: Provided are a method, system, and computer-readable recording medium for controlling zero trust remote access to a network system. The method includes: receiving a request of a user to access a target node in the network system; determining whether the user is a trusted user or an untrusted user based on whether the user has a subscription identification (ID) registered and valid in the network system; based on determining that the user is the untrusted user, generating the subscription ID for the user; validating a trust of the user; determining a validity period for the subscription ID of the user based on the validated trust; and providing the user with access to the target node in accordance with the validity period.

Abstract: Methods and apparatus to control airflow in foldable computing devices are disclosed. A disclosed apparatus for use with a foldable computing device includes a barrier carried by at least one of a first folding portion or a second folding portion of the computing device, the first folding portion rotatable relative to the second folding portion, and an actuator to move the barrier in response to a rotation between the first and second folding portions to reduce a flow of air into the foldable computing device.

Abstract: Embodiments disclosed herein relate to methods, systems, and computer programs for automatically determining an outcome associated with a reasoning graph, based on one or more data sets. The methods, systems, and computer programs compare hash values associated with different data sets to determine if they match to assign the outcome associated with a pre-existing hash to the later provided hash and data set associated therewith.

Abstract: A method and a voice assistant device for managing private data are provided. The voice assistant device includes a processor configured to detect a privacy triggering event while obtaining at least one voice input from a first user in a voice input mode, switch from the voice input mode to a non-voice input mode in response to the privacy triggering event, obtain a non-voice input from the first user in the non-voice input mode, and execute an operation of the voice assistant device corresponding to the non-voice input.

Abstract: A method of protecting an endpoint against a security threat, wherein the endpoint includes an OS and a separate software entity included in memory pages of the endpoint, includes the steps of: preventing the OS from scheduling any tasks on vCPUs of the endpoint by transferring control of the vCPUs from the OS to the separate software entity; while the OS is prevented from scheduling any tasks on the vCPUs, scanning, by the separate software entity, at least one of a list of processes of the endpoint and a subset of the memory pages of the endpoint, and upon receiving an identification of a malicious process, terminating, by the separate software entity, the malicious process; and after the separate software entity terminates the malicious process, allowing the OS to schedule tasks on the vCPUs by transferring control of the vCPUs from the separate software entity to the OS.

Abstract: Aspects of the present disclosure provide methods, devices, and computer-readable storage media that support dynamic enforcement of access control policies in a standardized manner. An administrator console enables access control policies to be defined as classes that may be combined and leveraged to rapidly define access control policies for enforcement in a standardized manner. An interceptor operates to detect access requests and perform policy administration (e.g., determining to grant/deny access) for the access requests and where access is granted, initiate policy resolution (e.g., determine any restrictions on the granted access request). An enforcer provides functionality for enforcing policy resolution outcomes, such as restricting access to information stored in a database or disabling interactive elements of a user interface.

Abstract: High-speed data communication devices, e.g., repeaters, interfacing between a host and a peripheral operate such that high-speed components except for a host-side squelch detector are set or maintained in a deactivated state during an idle period of a micro frame. In an example, a start of a micro frame is detected on a data bus during a first time period. In a second time period after the first time period, the high-speed communication device determines whether at least one data packet is contained in the micro frame. When it is determined during the second time period that no data packet is contained in the micro frame, active components, except a squelch detector, are controlled to be inactive during a third time period after the second time period.

Abstract: Disclosed embodiments provide methods, systems, and computer program products for implementing intelligent congestion control of data transfers in Fibre Channel (FC) communication paths based on an associated priority of workloads running on respective virtual machines (VMs). In a disclosed embodiment, a host server comprises a Virtual IO Server (VIOS) with Nport ID Virtualization (NPIV) technology to manage the multiple VMs; receives Fabric Performance Impact Notification (FPIN) congestion event notifications and transmits the FPIN congestion event notifications to the VMs with a respective throttle factor configured for respective VMs. Disclosed embodiments throttle IO operations of the VMs based on a priority of the VMs to implement intelligent congestion control, and restore IO operations of the VMs in a VM group order based on a reverse VM priority when the congestion event is cleared.

Abstract: In one implementation, a method of body pose estimation is performed at a device including one or more processors and non-transitory memory. The method includes obtaining a plurality of two-dimensional images of a body in a three-dimensional environment at a respective plurality of times. The method includes determining, for each of the plurality of two-dimensional images, the two-dimensional location in the two-dimensional image of one or more joints of the body at the respective plurality of times. The method includes determining, based on the two-dimensional locations, a plurality of three-dimensional locations in the three-dimensional environment of the one or more joints of the body at the respective plurality of times. The method includes determining, based on the three-dimensional locations, a plurality of updated three-dimensional locations in the three-dimensional environment of the one or more joints of the body at the respective plurality of times.

Abstract: A method of protecting an endpoint against a security threat detected at the endpoint, wherein the endpoint includes, in memory pages of the endpoint, an operating system (OS), a separate software entity, and remediation code, includes the steps of: transferring control of virtual CPUs (vCPUs) of the endpoint from the OS to the separate software entity; and while the separate software entity controls the vCPUs, storing, in an interrupt dispatch table, an instruction address corresponding to an interrupt, wherein the remediation code is stored at the instruction address, and replacing a next instruction to be executed by the OS, with an interrupt instruction, wherein the interrupt is raised when the OS executes the interrupt instruction, and the remediation code is executed as a result of handling of the interrupt that is raised.

Abstract: A semiconductor device includes a substrate having a semiconductor fin. A gate structure is over the semiconductor fin, in which the gate structure has a tapered profile and comprises a gate dielectric. A work function metal layer is over the gate dielectric, and a filling metal is over the work function metal layer. A gate spacer is along a sidewall of the gate structure, in which the work function metal layer is in contact with the gate dielectric and a top portion of the gate spacer. An epitaxy structure is over the semiconductor fin.

Abstract: High-speed data communication devices, e.g., repeaters, interfacing between a host and a peripheral operate such that high-speed components except for a host-side squelch detector are set or maintained in a deactivated state during an idle period of a micro frame. In an example, a start of a micro frame is detected on a data bus during a first time period. In a second time period after the first time period, the high-speed communication device determines whether at least one data packet is contained in the micro frame. When it is determined during the second time period that no data packet is contained in the micro frame, active components, except a squelch detector, are controlled to be inactive during a third time period after the second time period.

Abstract: Provided are systems, apparatuses, and techniques for managing processor system power and performance based on operational metrics, hardware capabilities, and/or other parameters.

Abstract: A substrate processing system includes N valve systems connected to N stations, respectively. Each valve system includes a manifold block, a plurality of valves, and a flow control device. The manifold block includes inlets to receive a process gas and an inert gas, an outlet connected to a station, and a plurality of gas flow channels disposed within the manifold block and connected to the inlets and the outlet. The valves are mounted to the manifold block and control flow of the process gas and the inert gas through the outlet. The flow control device is mounted to the manifold block and controls flow of the inert gas through the manifold block into the one of the N stations. The flow control device of each of the N valve systems is calibrated to balance the flow of the inert gas in the N stations.

Abstract: In one implementation, a method of body pose estimation is performed at a device including one or more processors and non-transitory memory. The method includes obtaining a plurality of two-dimensional images of a body in a three-dimensional environment at a respective plurality of times. The method includes determining, for each of the plurality of two-dimensional images, the two-dimensional location in the two-dimensional image of one or more joints of the body at the respective plurality of times. The method includes determining, based on the two-dimensional locations, a plurality of three-dimensional locations in the three-dimensional environment of the one or more joints of the body at the respective plurality of times. The method includes determining, based on the three-dimensional locations, a plurality of updated three-dimensional locations in the three-dimensional environment of the one or more joints of the body at the respective plurality of times.

Abstract: A semiconductor device includes a substrate having a semiconductor fin. A gate structure is over the semiconductor fin, in which the gate structure has a tapered profile and comprises a gate dielectric. A work function metal layer is over the gate dielectric, and a filling metal is over the work function metal layer. A gate spacer is along a sidewall of the gate structure, in which the work function metal layer is in contact with the gate dielectric and a top portion of the gate spacer. An epitaxy structure is over the semiconductor fin.

Abstract: A method for automatically reregistering a clone virtual machine with a cloud security monitoring service is provided. The method generally includes detecting a connection between a cloud agent running in a virtual machine on a host and a hypervisor module on the host. In response to detecting the connection, the cloud agent queries the hypervisor module for one or more first identifiers of the virtual machine. The method generally includes checking a database, by the cloud agent, for one or more second identifiers stored in the database matching the one or more first identifiers received from the hypervisor module and, based on finding no second identifiers stored in the database matching the one or more first identifiers, sending a request to the cloud security monitoring service to register the virtual machine with the cloud security monitoring service.

Abstract: Disclosed herein is an indwelling urinary catheter having a guidewire anchoring mechanism. The indwelling urinary catheter includes a catheter tube having a proximal opening, a distal opening, a catheter tube lumen with the catheter tube having a first wall thickness. The guidewire anchoring mechanism is configured to transition between an insertion state and an anchored state. The guidewire anchoring mechanism can include a proximal portion having a top cap, a collapsible section having a second wall thickness less than the first wall thickness, and a distal portion including a holder cap coupled to a holder. The holder can be coupled to the catheter tube, the distal portion can be in communication with the proximal portion, and a guidewire can be coupled to the proximal portion, the guidewire extending through the catheter tube lumen to the distal portion.