Abstract: A process performed at a first computer system for establishing a connection over a network between a second computer system and a logic block of the first computer system, comprises: providing an attestation from the first computer system to the second computer system that the logic block of the first computer system has not previously established a connection over the network with any computer system since the most recent power-up or reset of the logic block.

Abstract: A process performed at a first computer system for establishing a connection over a network between a second computer system and a logic block of the first computer system, comprises: providing an attestation from the first computer system to the second computer system that the logic block of the first computer system has not previously established a connection over the network with any computer system since the most recent power-up or reset of the logic block.

Abstract: A system (30) for protecting a server (20) from network attacks is provided. The system (30) comprises a data splitter (31) and a parameter extractor (33). The data splitter (31) is configured to receive network communications from a client (10); send network data comprising at least payload information included in the received network communications to the parameter extractor (33); and send network data comprising at least communication state information included in the received network communications to the server (20). The parameter extractor (33) is configured to apply predefined parameter extraction rules to network data received from the data splitter (31) in order to extract parameters, and to forward extracted parameters to the server (20).

Abstract: A computer system 100 that allows a storage facility 500 to be shared by multiple different users of an Infrastructure as a Services (IaaS) system while maintaining security separation between the users is provided. A controller 150 configured for use in the computer system and a corresponding method and computer program are also provided. The computer system 100 comprises a logic block 101 that comprises one or more processing units that execute instructions, the logic block 101 configured to issue requests to read from and write to storage over a first interface 102; and a controller 150 that is configured to implement a communications link to storage 500; implement a communications link 300 to a second computer system 200 and to receive information identifying a current user of the logic block 101 from the second computer system 200; and receive the requests to read from and write to storage from the logic block 101 over the first interface 102, and to complete the requests.

Abstract: A system (30) for protecting a server (20) from network attacks is provided. The system (30) comprises a data splitter (31) and a parameter extractor (33). The data splitter (31) is configured to receive network communications from a client (10); send network data comprising at least payload information included in the received network communications to the parameter extractor (33); and send network data comprising at least communication state information included in the received network communications to the server (20). The parameter extractor (33) is configured to apply predefined parameter extraction rules to network data received from the data splitter (31) in order to extract parameters, and to forward extracted parameters to the server (20).

Abstract: A computer system 100 that allows a storage facility 500 to be shared by multiple different users of an Infrastructure as a Services (IaaS) system while maintaining security separation between the users is provided. A controller 150 configured for use in the computer system and a corresponding method and computer program are also provided. The computer system 100 comprises a logic block 101 that comprises one or more processing units that execute instructions, the logic block 101 configured to issue requests to read from and write to storage over a first interface 102; and a controller 150 that is configured to implement a communications link to storage 500; implement a communications link 300 to a second computer system 200 and to receive information identifying a current user of the logic block 101 from the second computer system 200; and receive the requests to read from and write to storage from the logic block 101 over the first interface 102, and to complete the requests.

Abstract: A secure boot computer system is provided. The system comprises a logic block comprising one or more processing units that executes instructions, the logic block being configured to request boot instructions over a first interface, according to a first communication protocol, on power-up or reset of the logic block. A controller component is configured to communicate with the logic block over the first interface according to the first communication protocol, the controller being further configured to implement a communications link to a second computer system and to receive the boot instructions from the second computer system. The logic block is preconfigured to communicate with the controller over the first interface according to the first communication protocol in a manner that cannot be altered by instructions executed by the logic block. The controller is configured to prevent the completion of any write requests from the logic block.

Abstract: A secure boot computer system is provided. The system comprises a logic block (101) comprising one or more processing units (101a, 101b) that executes instructions, the logic block being configured to request boot instructions over a first interface (102), according to a first communication protocol, on power-up or reset of the logic block. A controller component (150) is configured to communicate with the logic block over the first interface according to the first communication protocol, the controller being further configured to implement a communications link (300) to a second computer system (200) and to receive the boot instructions from the second computer system. The logic block is preconfigured to communicate with the controller over the first interface according to the first communication protocol in a manner that cannot be altered by instructions executed by the logic block. The controller is configured to prevent the completion of any write requests from the logic block.

Abstract: A computer system for securely controlling an insecure computer is provided. The system comprises an insecure computer, a secure computer and a unidirectional dataflow enforcer. The insecure computer comprises a dedicated video output with a hardware interface, and is configured to transmit its video output to a secure computer over a first connection and to receive instructions for controlling the insecure computer over a second connection. The secure computer is configured to receive the video output of the insecure computer over the first connection and to transmit instructions for controlling the insecure computer over the second connection. The unidirectional dataflow enforcer is configured to enforce unidirectional dataflow between the secure computer and the insecure computer, such that dataflow from the secure computer to the insecure computer over the second connection is allowed, but dataflow from the insecure computer to the secure computer over the second connection is prevented.

Abstract: A computer system for securely controlling an insecure computer is provided. The system comprises an insecure computer, a secure computer and a unidirectional dataflow enforcer. The insecure computer comprises a dedicated video output with a hardware interface, and is configured to transmit its video output to a secure computer over a first connection and to receive instructions for controlling the insecure computer over a second connection. The secure computer is configured to receive the video output of the insecure computer over the first connection and to transmit instructions for controlling the insecure computer over the second connection. The unidirectional dataflow enforcer is configured to enforce unidirectional dataflow between the secure computer and the insecure computer, such that dataflow from the secure computer to the insecure computer over the second connection is allowed, but dataflow from the insecure computer to the secure computer over the second connection is prevented.

Abstract: Uni-directional radiation vanes for a solar heating system for passing solar radiation and suppressing reradiation in the opposite direction. A plurality of parallel vanes are pivotally mounted. Drive means are connected to the vanes to rotate said vanes in parallel relation to follow the sun so that the sun's rays pass between said vanes. A plurality of grooves on the lower part of said vanes suppress reradiation between said vanes in the opposite direction to the sun's rays.

Abstract: A solar heating system. A roof mounted panel collects heat from the sun. The panel having an upper sunlight-absorbing surface. A translucent cover is mounted above the panel to protect it from the weather. The panel has a lower surface for heat transfer to a stream of water. The panel is mounted in cooperative relation with a roof to form a passage for the stream of water. Means are connected to the panel for maintaining the stream of water in substantially uniform contact with said lower surface of the panel. Insulated tank means connected for receiving and storing the stream of water. Means are provided for controlling the stream of water under the panel in response to the temperature of the panel and the water in the tank, whereby the water collects heat from the panel only at useful temperatures. Air stream means are provided for preventing the roof from overheating.

Abstract: A fluid manifolding system. A main flow line is connected to a plurality of branch flow lines. Adjustable control means are connected to each branch point to control the flow in that branch line independently of the pressure drop in that branch line and independently of the hydrostatic pressure in the main flow line at that branch point. The control means consists of a fixed constriction in each branch flow line and an automatic valve in each branch flow line responsive to the pressure drop across the fixed constriction and which may be biased by a force to maintain a fixed preassigned pressure drop across the fixed constriction.

Abstract: Roofing means including a roof panel. Means are provided for securing the roof panel onto a roof frame including elastic clamping means joining the panel in tensioned relation to the frame and a deformable elastic sealing member secured between the clamping means and the panel and covering the clamping member. The roof panel may be a thin translucent plastic sheet.

Abstract: An air-heating solar collector having a plurality of parallel, spaced-apart, substantially coextensive translucent sheets and a convoluted air passage passing in succession between successive pairs of said sheets, the air finally passing over a blackened absorber plate, whereby heat escaping from the absorber to the sheets is picked up by air flowing in the convoluted air passage.

Abstract: An auxiliary system for cooling a solar collector of the type having circulating fluid when normal circulation fails, comprising direct mechanical temperature responsive means for admitting domestic water to the collector automatically when a predetermined safe temperature is exceeded.

Abstract: A solar collector for collecting radiant energy and transferring it as heat to a moving air stream. A housing has means to provide an air stream through the housing. At least one translucent cover is mounted on the housing for the entrance of radiation into the housing. A plurality of spaced apart partially translucent sheets in said air stream, substantially parallel to and coextensive with the cover, whereby a portion of said entering radiation is absorbed by each successive partially translucent sheet and transmitted to said air stream as heat.

Abstract: A heat storage tank suitable for solar house heating systems. The tank includes a rigidly supported bottom panel covered with a layer of stones of substantially uniform size which are bonded together thermally and mechanically at their points of contact with each other, but which have voids forming air passages remaining between them, bottom insulation below said bottom panel, a bottom air passage between the bottom insulation and the bottom panel, and at least one opening in the bottom panel whereby air can pass from said bottom air passage into said layer of stones.

Abstract: A reflecting solar heat collector. A stationary cylindrical receiver surface absorbs sunlight. An array of reflecting mirror strips are rotatably mounted in substantially parabolic arrangement having the receiver surface substantially at its focus. Motor means are connected for pivotally rotating said mirror strips substantially in unison about spaced-apart axes parallel to said receiver surface and substantially in said parabolic arrangement, to track the sun's apparent motion.

Abstract: An air-heating solar collector having a plurality of parallel, spaced-apart, substantially coextensive translucent sheets and a convoluted air passage passing in succession between successive pairs of said sheets, the air finally passing over a blackened absorber plate, whereby heat escaping from the absorber to the sheets is picked up by air flowing in the convoluted air passage.