Abstract: Systems and methods are provided for providing verified claims, based on multiple credentials, to relying parties. One example method includes receiving, by a computing device, a request for identity claims from a relying party. The method also includes, in response to the request, soliciting an authentication input from the user, authenticating the user based on the authentication input received from the user at the computing device, and, in response to authentication of the user, compiling, from multiple credentials included in the computing device, the identity claims included in the request. The method then includes sharing the determined identity claims with the relying party.

Abstract: Systems and methods are provided for use in appending log entries to a data structure. One exemplary method includes receiving, at a communication device, a log entry from a terminal and signing the log entry with a private key of a key pair specific to the communication device. The method also includes transmitting the signed log entry to an identity provider (IDP) and receiving, by the communication device, from the IDP, a signed, encrypted log entry. The method further includes verifying, by the communication device, a signature of the signed, encrypted log entry based on a public key associated with a key pair specific to the IDP and then appending the encrypted log entry to a digital identity included in the communication device.

Abstract: Systems and methods are provided for use in tokenizing credentials for users. One exemplary computer-implemented method includes receiving a tokenization request including a first biometric template for a user, deriving a zero-knowledge proof (ZKP) parameter based on the first biometric template and an identifier associated with the user, and storing the ZKP parameter in a ledger data structure. The method then includes receiving an authentication request for a transaction by the user at a merchant, where the authentication request includes the identifier, generating a subsequent ZKP based on a second biometric template associated with the user and the identifier included in the authentication request, checking the subsequent ZKP against the ZKP parameter stored in the ledger data structure, and transmitting a verified identifier for the user to an authorization network when the check of the subsequent ZKP is successful.

Abstract: A method of making a laser mirror in which a mirror substrate has at least a one micron size nodular defect includes depositing a planarization layer over the mirror substrate and the nodular defect, depositing a layer of silicon dioxide over the planarization layer, and etching away a portion of the layer of silicon dioxide. The method also includes thereafter, depositing a layer of hafnium dioxide over the layer of silicon dioxide and repeating the steps of depositing a layer of silicon dioxide, etching away a portion of the layer of silicon dioxide, and depositing a layer of hafnium dioxide until the nodular defect is reduced in size a predetermined amount.

Abstract: Systems and methods are provided for managing digital identities in multiple regions, through multiple identity providers, while providing for policy enforcement in connection with the digital identities. One exemplary method includes receiving, at an identity and access management hub (IAMH) in a first region, a request related to a digital identity from a secondary hub disposed in a second region and checking a policy associated with the digital identity. In response, the IAMH solicits at least one claim from a user, at a relying party application and/or website, based on the request and provides the at least one claim to a value-added service associated with the IAMH for verification of the at least one claim. The IAMH then transmits a result of the verification to the relying party associated with the request and provides a token, in response to the request, to a secure resource associated with the relying party.

Abstract: In a superconducting magnet arrangement, such as used in a magnetic resonance system, and a power management method therefor, an enhanced economic power mode (EPM) is implemented wherein the compressor operation is controlled by magnet pressure, temperature and time, so as to ensure the readiness of the magnet system for a scanning operation upon exiting the enhanced EPM. A processor implementing the enhanced EPM looks for a signal that indicates that the magnet system is operational and, in the absence of that signal for a predetermined period of time, enters into EPM. Exit from EPM occurs if certain conditions are violated, but then re-entry into EPM is attempted (re-starting EPM), thereby making the magnet system ready for operation again, if and when a patient scan is to be implemented.

Abstract: In a superconducting magnet arrangement, such as used in a magnetic resonance system, and a power management method therefor, an enhanced economic power mode (EPM) is implemented wherein the compressor operation is controlled by magnet pressure, temperature and time, so as to ensure the readiness of the magnet system for a scanning operation upon exiting the enhanced EPM. A processor implementing the enhanced EPM looks for a signal that indicates that the magnet system is operational and, in the absence of that signal for a predetermined period of time, enters into EPM. Exit from EPM occurs if certain conditions are violated, but then re-entry into EPM is attempted (re-starting EPM), thereby making the magnet system ready for operation again, if and when a patient scan is to be implemented.

Abstract: Systems and methods are provided for managing digital identities in multiple regions, through multiple identity providers, while providing for policy enforcement in connection with the digital identities. One exemplary method includes receiving, at an identity and access management hub (IAMH) in a first region, a request related to a digital identity from a secondary hub disposed in a second region and checking a policy associated with the digital identity. In response, the IAMH solicits at least one claim from a user, at a relying party application and/or website, based on the request and provides the at least one claim to a value-added service associated with the IAMH for verification of the at least one claim. The IAMH then transmits a result of the verification to the relying party associated with the request and provides a token, in response to the request, to a secure resource associated with the relying party.

Abstract: A method of making a laser mirror in which a mirror substrate has at least a one micron size nodular defect includes depositing a planarization layer over the mirror substrate and the nodular defect, depositing a layer of silicon dioxide over the planarization layer, and etching away a portion of the layer of silicon dioxide. The method also includes thereafter, depositing a layer of hafnium dioxide over the layer of silicon dioxide and repeating the steps of depositing a layer of silicon dioxide, etching away a portion of the layer of silicon dioxide, and depositing a layer of hafnium dioxide until the nodular defect is reduced in size a predetermined amount.

Abstract: The invention relates to a method for managing non-volatile memory space in a secure processor comprising a secure non-volatile internal memory, the method comprising steps of: selecting data elements to remove from the internal memory, generating, by the secure processor, a data block comprising the selected data elements, and a signature computed from the selected data elements using a secret key generated by the secure processor, transmitting the data block by the secure processor, and storing the transmitted data block in an external memory.

Abstract: The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Abstract: The invention relates to a method for managing non-volatile memory space in a secure processor comprising a secure non-volatile internal memory, the method comprising steps of: selecting data elements to remove from the internal memory, generating, by the secure processor, a data block comprising the selected data elements, and a signature computed from the selected data elements using a secret key generated by the secure processor, transmitting the data block by the secure processor, and storing the transmitted data block in an external memory.

Abstract: A valve for controlling cryogen egress from a cryogen vessel has a housing having a low pressure side and a high pressure side with a fluid path defined between. A valve element is interposed between the low pressure side and the high pressure side of the housing. A mechanism is provided for holding the valve element against a valve seat. The mechanism has a cam shaft that is rotatable to displace the valve element from its seat to open the fluid path.

Abstract: The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Abstract: A burst disc arrangement for a cryostat comprising a replaceable burst disc (52) held in compression between a high-pressure flange formed at an end of a high-pressure conduit (12), and a low-pressure flange (60) formed at an end of a low-pressure conduit (14). In particular, the burst disc arrangement further comprises: a housing (50) enclosing the high- and low-pressure flanges; and compression means (56), distributed around the housing (50) and being arranged to bear upon the one of the flanges (60), so as to urge it towards the other flange, thereby retaining the burst disc (52) in compression between the flanges. The housing (50) includes a first opening (20) large enough to allow the replaceable burst disc (52) to pass therethrough.

Abstract: A pre-assembled, pre-tested quench path outlet assembly for providing a cryogen egress path from a cryogen vessel. A quench valve (26) is mounted within a flange (28). A cryogen egress tube (32) is sealed in leak-tight manner to the flange, to define a cryogen egress path (40) extending through the cryogen egress tube, the flange and the quench valve. The cryogen egress path is closed by a burst disc (34). In use, the pre-assembled, pre-tested quench path outlet assembly is mounted onto the cryogen vessel such that thermal stratification of gas within the cryogen vessel under normal conditions causes a lower end of the cryogen egress tube to be at a temperature below the freezing points of common air components.

Abstract: The present invention provides a thermal radiation shield (1) for a cryostat, formed of a plastic-metal hybrid material, which comprises a plastic component (23) and a conductive filler material (21) comprising a metal. The thermal radiation shield may be formed by injection moulding.

Abstract: A cryogen vessel (12) connected to a refrigerator chamber (15) arranged to house a cryogenic refrigerator (17). A controlled valve (32) is provided between the cryogen vessel (12) and the refrigerator chamber (15), and may be used to isolate the refrigerator chamber from the cryogen vessel.

Abstract: A valve for controlling cryogen egress from a cryogen vessel has a housing having a low pressure side and a high pressure side with a fluid path defined between. A valve element is interposed between the low pressure side and the high pressure side of the housing. A mechanism is provided for holding the valve element against a valve seat. The mechanism has a cam shaft that is rotatable to displace the valve element from its seat to open the fluid path.