Abstract: Systems, devices, and methods are provided for cloud-based privacy controls. User content is encrypted using a content encryption key (CEK). The CEK may be double-encrypted by the data producer—the inner envelope is encrypted using keys associated with privacy domains that are authorized to access the user content. The outer envelope is encrypted using a cloud privacy control's public key. When a data consumer requests access the user content, the cloud privacy control evaluates privacy policies and determine whether access should be permitted. If permitted, the cloud privacy control decrypts the outer envelope and provides the inner envelope with CEK to the requestor. Upon receiving the inner envelope, the data consumer may then decrypt the inner envelope with its privacy domain private key to obtain the CEK. The CEK may then be used to perform a decryption and obtain the user content.

Abstract: In one example an apparatus comprises a computer readable memory, a signing facility comprising a plurality of hardware security modules, and a state synchronization manager comprising processing circuitry to select, from the plurality of hardware security modules, a set of hardware security modules to be assigned to a digital signature process, the set of hardware security modules comprising at least a first hardware security module and a second hardware module, and assign a set of unique state synchronization counter sequences to the respective set of hardware security modules, the set of state synchronization counter sequences comprising at least a first state synchronization counter sequence and a second state synchronization counter sequence. Other examples may be described.

Abstract: In one example an apparatus comprises a computer readable memory, a signing facility comprising a plurality of hardware security modules, and a state synchronization manager comprising processing circuitry to select, from the plurality of hardware security modules, a set of hardware security modules to be assigned to a digital signature process, the set of hardware security modules comprising at least a first hardware security module and a second hardware module, and assign a set of unique state synchronization counter sequences to the respective set of hardware security modules, the set of state synchronization counter sequences comprising at least a first state synchronization counter sequence and a second state synchronization counter sequence. Other examples may be described.

Abstract: In one example an apparatus comprises a computer readable memory, a signing facility comprising a plurality of hardware security modules, and a state synchronization manager comprising processing circuitry to select, from the plurality of hardware security modules, a set of hardware security modules to be assigned to a digital signature process, the set of hardware security modules comprising at least a first hardware security module and a second hardware module, and assign a set of unique state synchronization counter sequences to the respective set of hardware security modules, the set of state synchronization counter sequences comprising at least a first state synchronization counter sequence and a second state synchronization counter sequence. Other examples may be described.

Abstract: In one example an apparatus comprises a computer readable memory, a signing facility comprising a plurality of hardware security modules, and a state synchronization manager comprising processing circuitry to select, from the plurality of hardware security modules, a set of hardware security modules to be assigned to a digital signature process, the set of hardware security modules comprising at least a first hardware security module and a second hardware module, and assign a set of unique state synchronization counter sequences to the respective set of hardware security modules, the set of state synchronization counter sequences comprising at least a first state synchronization counter sequence and a second state synchronization counter sequence. Other examples may be described.

Abstract: Trusted code may be patched in a manner that resists tampering from non-trusted sources. In some embodiments, the patches may be moved into a patch cache in a trusted processing module for execution.

Abstract: Methods and apparatus for finding a shared secret without compromising non-shared secrets are disclosed. The methods and apparatus receive a first group of hashed secrets from a communication device and compare the first group of hashed secrets to a second group of hashed secrets associated with an application server. A shared secret is identified among the first and second groups of hashed secrets. An application associated with the shared secret is sent to the communication device via a communication channel.

Abstract: A cover is configured for use with a fluid jet device having a surface defining a plurality of orifices formed therein through which a fluid is jetted. The cover includes a cover element movable parallel to the surface between a covered position in which the cover element overlies the orifices and an uncovered position in which the cover is moved to expose the orifices. The cover includes a mounting portion configured to maintain the cover spaced from the surface to define a vapor space region. At least one hinge element operably mounts the cover to the fluid jet device. The hinge element includes a first leg mounted at a free end to a stationary portion of the fluid jet device and a second leg mounted at a free end to the cover portion. The first and second legs are connected to one another by a flexible region such that movement of the legs slides the cover between the covered and exposed positions.

Abstract: Methods and apparatus for finding a shared secret without compromising non-shared secrets are disclosed. The methods and apparatus hash first information associated with a first entity coupled to a communication channel to form a first hashed secret and hash second information associated with a second entity coupled to the communication channel to form a second hashed secret. The methods and apparatus send the first hashed secret to the second entity via the communication channel and compare the first and second hashed secrets to find the shared secret.

Abstract: An ignition isolating interrupt control circuit (52) includes a main transition circuit (90) isolating a first activation circuit (84) from an ignition circuit (114). The main transition circuit (90) includes a source terminal (93) that is electrically coupled to and receives a first source power from the first activation circuit (84). An input terminal (106) is electrically coupled to a second activation circuit (88) and receives an activation signal. An output terminal (138) is electrically coupled to the ignition circuit (114) and receives and supplies the first source power to the ignition circuit (114) in response to the activation signal. A power source monitor cutoff circuit (112) including a comparator is electrically coupled to the first activation circuit (84) and to the ignition circuit (114) and disables the ignition circuit (114) when a source voltage level is less than a predetermined voltage level.

Abstract: An intelligent fluid delivery system and method for controlling fluid delivery and monitoring parameters of fluid usage in a fluid jet printing system. The intelligent fluid delivery system (IFDS) includes the controls and electronic of the base station and fluid bottle. The replaceable base station, or nest, includes a micro-controller, independent of the main controller of the main printing system, for controlling fluid delivery and fluid management. The intelligent fluid delivery system provides a detection mechanism so that it can be ascertained with near certainty that an inserted fluid bottle is an appropriate fluid bottle having a fluid media that is compatible with the fluid jet printing system (e.g., within the specifications of the printing system and suitable for use with the other components of the ink jet printing system).

Abstract: An intelligent fluid delivery system and method for controlling fluid delivery and monitoring parameters of fluid usage in a fluid jet printing system. The intelligent fluid delivery system (IFDS) includes the controls and electronic of the base station and fluid bottle. The replaceable base station, or nest, includes a micro-controller, independent of the main controller of the main printing system, for controlling fluid delivery and fluid management. The intelligent fluid delivery system provides a detection mechanism so that it can be ascertained with near certainty that an inserted fluid bottle is an appropriate fluid bottle having a fluid media that is compatible with the fluid jet printing system (e.g., within the specifications of the printing system and suitable for use with the other components of the ink jet printing system).