Abstract: A method of policy management in a Data Loss Prevention (DLP) system uses a policy model that associates a user with one or more DLP endpoints. When an endpoint is added to the system, a set of policies for that endpoint are determined using an identity of the user that is associated with the endpoint and a list of roles or groups for that user. At policy distribution time, the method determines a set of endpoints to which the policy is to be distributed.

Abstract: A method of policy management in a Data Loss Prevention (DLP) system uses a policy model that associates a user with one or more DLP endpoints. When an endpoint is added to the system, a set of policies for that endpoint are determined using an identity of the user that is associated with the endpoint and a list of roles or groups for that user. At policy distribution time, the method determines a set of endpoints to which the policy is to be distributed.

Abstract: A method of policy management in a Data Loss Prevention (DLP) system uses a policy model that associates a user with one or more DLP endpoints. When an endpoint is added to the system, a set of policies for that endpoint are determined using an identity of the user that is associated with the endpoint and a list of roles or groups for that user. At policy distribution time, the method determines a set of endpoints to which the policy is to be distributed.

Abstract: An endpoint machine has a unique endpoint identifier based on a configurable set of hardware attributes for an endpoint type. The endpoint agent running on that machine has an associated software identifier registered with the endpoint management solution upon install. The management server generates the unique endpoint identifier and provides it to the endpoint agent. Periodically, checks are run on the endpoint by the endpoint agent to determine if any of the hardware attributes have changed. If so, the endpoint identifier and the new hardware attribute values are sent to the management server, which uses the information to recognize the endpoint as the same endpoint or to detect a clone of known endpoint. If the endpoint type is unknown or does not exist, the unique software identifier may be used to facilitate the identification process, including the ability to detect a cloned machine.

Abstract: A radiotherapy system comprising a support for a patient undergoing radiotherapy treatment, a gantry rotatable about an axis, a source of radiation mounted on the gantry and producing a beam of radiation directed towards a target region of the patient, a collimator coupled to said radiation source, the collimator comprising a plurality of movable, beam-limiting elements, to collectively define a shaped aperture through which the radiation beam passes, a portal imager mounted on the gantry opposite the radiation source for detecting the radiation after it has passed through the patient and generating corresponding images, and associated circuitry for controlling at least the gantry, the source, the collimator, and the portal imager, collating detected data comprising a plurality of images acquired including images at a plurality of angles of rotation of said gantry and images at a plurality of collimator shapes; generating a three-dimensional image of the target region based thereon.

Abstract: A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated single-sign-on operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. Trust proxies interpret assertions from other federated domains as necessary. Trust proxies may have a trust relationship with one or more trust brokers, and a trust proxy may rely upon a trust broker for assistance in interpreting assertions. When a user is provisioned at a particular federated domain, the federated domain can provision the user to other federated domains within the federated environment. A provision operation may include creating or deleting an account for a user, pushing updated user account information including attributes, and requesting updates on account information including attributes.

Abstract: An endpoint machine has a unique endpoint identifier based on a configurable set of hardware attributes for an endpoint type. The endpoint agent running on that machine has an associated software identifier registered with the endpoint management solution upon install. The management server generates the unique endpoint identifier and provides it to the endpoint agent. Periodically, checks are run on the endpoint by the endpoint agent to determine if any of the hardware attributes have changed. If so, the endpoint identifier and the new hardware attribute values are sent to the management server, which uses the information to recognize the endpoint as the same endpoint or to detect a clone of known endpoint. If the endpoint type is unknown or does not exist, the unique software identifier may be used to facilitate the identification process, including the ability to detect a cloned machine.

Abstract: A radiotherapy system comprising a support for a patient undergoing radiotherapy treatment, a gantry rotatable about an axis, a source of radiation mounted on the gantry and producing a beam of radiation directed towards a target region of the patient, a collimator coupled to said radiation source, the collimator comprising a plurality of movable, beam-limiting elements, to collectively define a shaped aperture through which the radiation beam passes, a portal imager mounted on the gantry opposite the radiation source for detecting the radiation after it has passed through the patient and generating corresponding images, and associated circuitry for controlling at least the gantry, the source, the collimator, and the portal imager, collating detected data comprising a plurality of images acquired including images at a plurality of angles of rotation of said gantry and images at a plurality of collimator shapes; generating a three-dimensional image of the target region based thereon.

Abstract: A radiotherapy system is disclosed, comprising a support for supporting a patient undergoing radiotherapy treatment, a gantry that is rotatable about an axis, a source of radiation mounted on the gantry and producing a beam of radiation directed towards a target region of the patient, a collimator coupled to said radiation source for collimating said radiation beam, the collimator comprising a plurality of beam-limiting elements, each movable to collectively define a shaped aperture through which the radiation beam passes, a portal imager mounted on the gantry opposite the radiation source for detecting the radiation after it has passed through the patient and generating corresponding images, and associated circuitry for controlling at least the gantry, the source, the collimator, and the portal imager, collating detected data comprising a plurality of images acquired from the imager including images at a plurality of angles of rotation of said gantry and images at a plurality of collimator shapes, and genera

Abstract: A method of policy management in a Data Loss Prevention (DLP) system uses a policy model that associates a user with one or more DLP endpoints. When an endpoint is added to the system, a set of policies for that endpoint are determined using an identity of the user that is associated with the endpoint and a list of roles or groups for that user. At policy distribution time, the method determines a set of endpoints to which the policy is to be distributed.

Abstract: A radiotherapy system is disclosed, comprising a support for supporting a patient undergoing radiotherapy treatment, a gantry that is rotatable about an axis, a source of radiation mounted on the gantry and producing a beam of radiation directed towards a target region of the patient, a collimator coupled to said radiation source for collimating said radiation beam, the collimator comprising a plurality of beam-limiting elements, each movable to collectively define a shaped aperture through which the radiation beam passes, a portal imager mounted on the gantry opposite the radiation source for detecting the radiation after it has passed through the patient and generating corresponding images, and associated circuitry for controlling at least the gantry, the source, the collimator, and the portal imager, collating detected data comprising a plurality of images acquired from the imager including images at a plurality of angles of rotation of said gantry and images at a plurality of collimator shapes, and genera

Abstract: A new and distinct Cannabis cultivar named ‘PG 1 19 0125 0002’ is characterized by its dominant CBG chemotype, which is favorable for application as a medicinal product. Furthermore, it may be used for the industrial-scale extraction of CBG due to the minimal concentrations of contaminating cannabinoids which may otherwise complicate the extraction of this class of secondary metabolites.