Abstract: Introduced here is a computational architecture (also referred to as a “computational infrastructure”) that addresses the limitations of traditional data management solutions using a highly secure data management solution coupled with consent-based sharing. At a high level, the computational architecture applies blockchain methodologies to both transaction data and business data such that both types of data are stored “on chain” in the same computational architecture. This enables several significant advantages over traditional data management solutions with respect to data security, data ownership, data sharing, and intelligence.

Abstract: A consent block is a type of block that may be stored in a blockchain. Each consent block has an owner and may store an owner consent contract, i.e., a smart contract containing owner-specified access rules that determine who may access data assets that are stored in other blocks of the blockchain and owned by the same owner. The consent block may alternatively store a global consent contract containing global access rules that supersede owner-specified access rules. The consent block also stores a hash value determined from the consent contract and a previous hash value of the block immediately preceding the consent block. The consent contract and the position of the consent block in the blockchain are verifiable from the hash value. Each consent block, once added to the blockchain, becomes part of the immutable record of data stored in the blockchain, and therefore leaves an auditable trail.

Abstract: Introduced here is a computational architecture (also referred to as a “computational infrastructure”) that addresses the limitations of traditional data management solutions using a highly secure data management solution coupled with consent-based sharing. At a high level, the computational architecture applies blockchain methodologies to both transaction data and business data such that both types of data are stored “on chain” in the same computational architecture. This enables several significant advantages over traditional data management solutions with respect to data security, data ownership, data sharing, and intelligence.

Abstract: A consent block is a type of block that may be stored in a blockchain. Each consent block has an owner and may store an owner consent contract, i.e., a smart contract containing owner-specified access rules that determine who may access data assets that are stored in other blocks of the blockchain and owned by the same owner. The consent block may alternatively store a global consent contract containing global access rules that supersede owner-specified access rules. The consent block also stores a hash value determined from the consent contract and a previous hash value of the block immediately preceding the consent block. The consent contract and the position of the consent block in the blockchain are verifiable from the hash value. Each consent block, once added to the blockchain, becomes part of the immutable record of data stored in the blockchain, and therefore leaves an auditable trail.

Abstract: A consent block is a type of block that may be stored in a blockchain. Each consent block has an owner and may store an owner consent contract, i.e., a smart contract containing owner-specified access rules that determine who may access data assets that are stored in other blocks of the blockchain and owned by the same owner. The consent block may alternatively store a global consent contract containing global access rules that supersede owner-specified access rules. The consent block also stores a hash value determined from the consent contract and a previous hash value of the block immediately preceding the consent block. The consent contract and the position of the consent block in the blockchain are verifiable from the hash value. Each consent block, once added to the blockchain, becomes part of the immutable record of data stored in the blockchain, and therefore leaves an auditable trail.

Abstract: Introduced here is a computational architecture (also referred to as a “computational infrastructure”) that addresses the limitations of traditional data management solutions using a highly secure data management solution coupled with consent-based sharing. At a high level, the computational architecture applies blockchain methodologies to both transaction data and business data such that both types of data are stored “on chain” in the same computational architecture. This enables several significant advantages over traditional data management solutions with respect to data security, data ownership, data sharing, and intelligence.

Abstract: A consent block is a type of block that may be stored in a blockchain. Each consent block has an owner and may store an owner consent contract, i.e., a smart contract containing owner-specified access rules that determine who may access data assets that are stored in other blocks of the blockchain and owned by the same owner. The consent block may alternatively store a global consent contract containing global access rules that supersede owner-specified access rules. The consent block also stores a hash value determined from the consent contract and a previous hash value of the block immediately preceding the consent block. The consent contract and the position of the consent block in the blockchain are verifiable from the hash value. Each consent block, once added to the blockchain, becomes part of the immutable record of data stored in the blockchain, and therefore leaves an auditable trail.

Abstract: Systems and methods authenticate a device to operate within an enterprise system with an enterprise policy. An agent, installed on the device, analyzes the device to determine profile information of the device. The determined profile information is sent to a type 2 super peer that verifies whether the profile information conforms to the enterprise policy. If the profile information conforms to the enterprise policy, an agent trust credential is generated, within the type 2 super peer, for the agent, based upon the profile information, and issued to the agent. Authenticity of the device is verified based upon the agent trust credential. If the device is authenticated, communications with the device are permitted. If the device is not authenticated, communications with the device is prevented. In another embodiment, a method restores a device to conform to a system policy. A snapshot of critical components of the device is taken while the device is in compliance with the system policy.

Abstract: Zero-knowledge authentication proves identity without revealing information about a secret that is used to prove that identity. An authentication agent performs authentication of a prover agent without knowledge or transfer of the secret. A non-centralized zero-knowledge authentication system contains multiple authentication agents, for access by multiple computers seeking access on a computer network through local prover agents. Once authenticated, those multiple computers may also implement authentication agents. The secret may periodically expire by publishing a new encrypted secret by a trusted source, thwarting attempts to factor or guess information about the secret.

Abstract: Zero-knowledge authentication proves identity without revealing information about a secret that is used to prove that identity. An authentication agent performs authentication of a prover agent without knowledge or transfer of the secret. A non-centralized zero-knowledge authentication system contains multiple authentication agents, for access by multiple computers seeking access on a computer network through local prover agents. Once authenticated, those multiple computers may also implement authentication agents. The secret may periodically expire by publishing a new encrypted secret by a trusted source, thwarting attempts to factor or guess information about the secret.

Abstract: Systems and methods authenticate a device to operate within an enterprise system with an enterprise policy. An agent, installed on the device, analyzes the device to determine profile information of the device. The determined profile information is sent to a type 2 super peer that verifies whether the profile information conforms to the enterprise policy. If the profile information conforms to the enterprise policy, an agent trust credential is generated, within the type 2 super peer, for the agent, based upon the profile information, and issued to the agent. Authenticity of the device is verified based upon the agent trust credential. If the device is authenticated, communications with the device are permitted. If the device is not authenticated, communications with the device is prevented. In another embodiment, a method restores a device to conform to a system policy. A snapshot of critical components of the device is taken while the device is in compliance with the system policy.

Abstract: A system and method protect an electronic network. One or more agents are installed within the electronic network and perform an initial assessment of the electronic network to determine normal activity. The electronic network is then monitored for abnormal activity using the agents, and protected by blocking the abnormal activity using the agents.

Abstract: Zero-knowledge authentication proves identity without revealing information about a secret that is used to prove that identity. An authentication agent performs authentication of a prover agent without knowledge or transfer of the secret. A non-centralized zero-knowledge authentication system contains multiple authentication agents, for access by multiple computers seeking access on a computer network through local prover agents. Once authenticated, those multiple computers may also implement authentication agents. The secret may periodically expire by publishing a new encrypted secret by a trusted source, thwarting attempts to factor or guess information about the secret.

Abstract: A method is provided for transferring dye from a dye imbibed matrix film to a receiver film for producing a dye transfer print of a motion picture print. A dye imbibed matrix film and a receiver film are superimposed together in precise registration on a seating apparatus, e.g., a pin belt, to create a two-film sandwich. The two-film sandwich is stripped from the seating apparatus before completing dye transfer, and dye transfer from the matrix film to the receiver film is completed along a pinless, substantially rectilinear film path while maintaining the two-film sandwich in precise registration. For example, a transfer cabinet may be provided that includes a plurality of rollers having a predetermined relationship to one another and defining the substantially rectilinear film path, and the two-film sandwich may be directed along the film path to complete dye transfer.

Abstract: A system for producing prints of a professional motion picture film by dye transfer, including a roll tank, a pin belt, and a transfer cabinet. A dye imbibed matrix film and blank film are superimposed together in a predetermined registration by rollers in the roll tank, creating a two-film sandwich, which is directed onto the pin belt. The pin belt includes a plurality of pins traveling in an orbital path, which detachably engage the two-film sandwich, thereby directing the two-film sandwich along a portion of the orbital path. The transfer cabinet includes a plurality of relatively large diameter rollers in a predetermined relationship to one another, and an elevator mechanism for adjusting the predetermined relationship. The rollers define a substantially rectilinear film path along which the two-film sandwich from the pin belt is directed. The film path has a length sufficient to allow complete dye transfer to occur at high drive speeds within the transfer cabinet.

Abstract: A system for producing prints of a professional motion picture film by dye transfer, including a roll tank, a pin belt, and a transfer cabinet. A dye imbibed matrix film and blank film are superimposed together in a predetermined registration by rollers in the roll tank, creating a two-film sandwich, which is directed onto the pin belt. The pin belt includes a plurality of pins traveling in an orbital path, which detachably engage the two-film sandwich, thereby directing the two-film sandwich along a portion of the orbital path. The transfer cabinet includes a plurality of relatively large diameter rollers in a predetermined relationship to one another, and an elevator mechanism for adjusting the predetermined relationship. The rollers define a substantially rectilinear film path along which the two-film sandwich from the pin belt is directed. The film path has a length sufficient to allow complete dye transfer to occur at high drive speeds within the transfer cabinet.

Abstract: A method of transfering from dye from a dye imbibed matrix film and a receiver film for producing a dye transfer print of a motion picture print including the steps of seating a dye imbibed matrix film and a receiver film on a pin belt, driving the pin belt at a predetermined speed along an orbital path, engaging sprocket holes on the matrix and receiver films with precisely spaced pins on the pin belts, stripping the two-film sandwich from the pin belt prior to completion of dye transfer, completing dye transfer from the matrix film to the receiver film in a transfer cabinet and maintaining the two-film sandwich in precise registration during the step of completing dye transfer.

Abstract: A system for producing prints of a professional motion picture film by dye transfer, including a roll tank, a pin belt, and a transfer cabinet. A dye imbibed matrix film and blank film are superimposed together in a predetermined registration by rollers in the roll tank, creating a two-film sandwich, which is directed onto the pin belt. The pin belt includes a plurality of pins traveling in an orbital path, which detachably engage the two-film sandwich, thereby directing the two-film sandwich along a portion of the orbital path. The transfer cabinet includes a plurality of relatively large diameter rollers in a predetermined relationship to one another, and an elevator mechanism for adjusting the predetermined relationship. The rollers define a substantially rectilinear film path along which the two-film sandwich from the pin belt is directed. The film path has a length sufficient to allow complete dye transfer to occur at high drive speeds within the transfer cabinet.