Abstract: The present disclosure is directed to a bottle made of polyethylene terephthalate (PET) and having a circular cross-section. The bottle has a sidewall spanning between a neck finish and a base. The sidewall includes a shoulder portion and a panel portion, with the lower end of the shoulder portion and the upper end of the panel portion each sloping inward to create a waist. One or more circumferential ribs are positioned within the waist, and preferably at the trough of the waist. The one or more circumferential ribs are designed and configured to increase the hoop strength of the bottle, the vacuum stability of the bottle, or both.

Abstract: A building management system includes a communications bus, subordinate devices connected to the communications bus, and a controller connected to the communications bus. The controller includes an active node table including a plurality of nodes, each node representing one of the subordinate devices connected to the communications bus. The controller is configured to monitor the active node table for a newly connected subordinate device, use a set of rules to determine whether the newly connected subordinate device is supported by the controller for performing an identified function in combination with the controller, and, in response to a determination that the newly connected subordinate device is supported, extend the identified function of the controller to the newly connected subordinate device. Extending the identified function includes enabling the newly connected subordinate device to perform the identified function.

Abstract: A controller includes a plurality of configurable input ports, a plurality of configurable output ports, and a configuration circuit. The configuration circuit is configured to provide a graphical user interface configured to facilitate a user in inputting an equipment description, determine a controller configuration based on the equipment description, configure the plurality of configurable input ports in accordance with the controller configuration, configure the plurality of configurable output ports in accordance with the controller configuration, and enable a set of control logic based on the controller configuration. The controller also includes an online control circuit configured to receive inputs via the plurality of configurable input ports, generate outputs based on the inputs and the set of control logic, and provide the outputs to building equipment via the plurality of configurable output ports.

Abstract: A method for updating heating, ventilation, or air conditioning (HVAC) devices is provided. The method includes receiving an update package at a first HVAC device of a plurality of HVAC devices via a network. The update package includes an identification of a plurality of device models and a plurality of software updates. The method includes determining that a device model for the first HVAC device is identified by the update package and in response to a determination that the device model for the first HVAC device is identified by the update package, extracting a first software update corresponding to the device model for the first HVAC device from the update package and installing the first software update on the first HVAC device. The method includes transmitting the first update package to a second HVAC device of the plurality of HVAC devices via the network.

Abstract: Techniques are disclosed relating to tokenized account information with integrated authentication. In some embodiments, a shared secret key is used for tokenization and authentication. In some embodiments, a payment device stores an encrypted version of the secret key and decrypts the secret key based on a user-provided password. In some embodiments, the payment device uses the secret key and a moving factor to generate a limited-use password. In some embodiments, the payment device uses the limited-use password to modify a first identifier of an account of the user. In some embodiments, the authentication system retrieves a stored version of the secret key and a copy of the account number using a second identifier. In some embodiments, the authentication system generates the limited-use password based on the stored secret key and a moving factor, de-tokenizes the modified first identifier, and compares the result with the retrieved copy of the account number.

Abstract: A method for updating heating, ventilation, or air conditioning (HVAC) devices is provided. The method includes receiving an update package at a first HVAC device of a plurality of HVAC devices via a network. The update package includes an identification of a plurality of device models and a plurality of software updates. The method includes determining that a device model for the first HVAC device is identified by the update package and in response to a determination that the device model for the first HVAC device is identified by the update package, extracting a first software update corresponding to the device model for the first HVAC device from the update package and installing the first software update on the first HVAC device. The method includes transmitting the first update package to a second HVAC device of the plurality of HVAC devices via the network.

Abstract: A controller includes a plurality of configurable input ports, a plurality of configurable output ports, and a configuration circuit. The configuration circuit is configured to provide a graphical user interface configured to facilitate a user in inputting an equipment description, determine a controller configuration based on the equipment description, configure the plurality of configurable input ports in accordance with the controller configuration, configure the plurality of configurable output ports in accordance with the controller configuration, and enable a set of control logic based on the controller configuration. The controller also includes an online control circuit configured to receive inputs via the plurality of configurable input ports, generate outputs based on the inputs and the set of control logic, and provide the outputs to building equipment via the plurality of configurable output ports.

Abstract: An equipment controller in a building management system (BMS) includes a feature detector and a dynamic point list generator. The feature detector is configured to receive sensor input from a sensor and determine a set of features available to the equipment controller based on the sensor input. The dynamic point list generator is configured to determine unavailable features based on the set of available features and identify one or more points in a complete point list associated with the set of unavailable features. The dynamic point list generator is configured to generate a dynamic point list by removing the identified points from the complete point list and expose the dynamic point list to a BMS controller communicably connected to the equipment controller.

Abstract: A system for self-provisioning building equipment includes a main control unit having a processing circuit and a data communications interface and an auxiliary control unit connected with the main control unit via a communications network. The system includes a memory device having an update file stored therein. The update file includes a plurality of partitions, each partition containing provisioning data for a programmable component of the main control unit or the auxiliary control unit. The processing circuit includes a provisioning manager configured to monitor the main control unit and the auxiliary control unit for a predetermined trigger and automatically initiate a provisioning process in response to detecting the predetermined trigger. The provisioning process includes providing the provisioning data from the update file to the programmable component of the main control unit or the auxiliary control unit.

Abstract: To protect confidential data, a mobile device determines whether the mobile device is at a location susceptible to visual capture of confidential data entered into the phone by external cameras. The mobile device determines whether focus of a display is on a field in which confidential data is entered. If the mobile device determines that it is at a location susceptible to an external imaging device visually capturing confidential data input into the input field, then the mobile device activate a light source on a same side as the screen presenting the display.

Abstract: In accordance with the teachings of the present disclosure, a method is provided for reducing the chances of shoulder surfing. The method may include determining an approximate angle of orientation of a mobile device and selecting one of first or second input key layouts, based upon the approximate angle of orientation. The first input key layout may be a standard layout of alphanumeric characters and the second input key layout may be a disordered layout of the alphanumeric characters. The method may also include displaying the selected one of the first or second input key layouts at a graphical user interface of the mobile device and receiving an input of sensitive information at the graphical user interface.

Abstract: A method for receiving a first access request from a client computer is described. The method comprises, in response to receiving the first access request, generating a query string comprising a predetermined number of characters, designating, via a unique indicator, a first randomized subset of the predetermined number of characters, wherein the first randomized subset comprises a plurality of the predetermined number of characters, and requesting a first predefined response comprising the first randomized subset of the predetermined number of characters. The method further comprises receiving a first client input from the client computer, determining whether the first client input matches the first predefined response, and accepting the first access request if the first client input matches the first predefined response.

Abstract: Techniques are disclosed relating to tokenized account information with integrated authentication. In some embodiments, a shared secret key is used for tokenization and authentication. In some embodiments, a payment device stores an encrypted version of the secret key and decrypts the secret key based on a user-provided password. In some embodiments, the payment device uses the secret key and a moving factor to generate a limited-use password. In some embodiments, the payment device uses the limited-use password to modify a first identifier of an account of the user. In some embodiments, the authentication system retrieves a stored version of the secret key and a copy of the account number using a second identifier. In some embodiments, the authentication system generates the limited-use password based on the stored secret key and a moving factor, de-tokenizes the modified first identifier, and compares the result with the retrieved copy of the account number.

Abstract: Techniques are disclosed relating to tokenized account information with integrated authentication. In some embodiments, a shared secret key is used for tokenization and authentication. In some embodiments, a payment device stores an encrypted version of the secret key and decrypts the secret key based on a user-provided password. In some embodiments, the payment device uses the secret key and a moving factor to generate a limited-use password. In some embodiments, the payment device uses the limited-use password to modify a first identifier of an account of the user. In some embodiments, the authentication system retrieves a stored version of the secret key and a copy of the account number using a second identifier. In some embodiments, the authentication system generates the limited-use password based on the stored secret key and a moving factor, de-tokenizes the modified first identifier, and compares the result with the retrieved copy of the account number.

Abstract: A device unlock pattern (“pattern password”) is static in that the same pattern is entered each time to unlock a device. Due to this repetition, a pattern password may be discovered by an application that captures touchscreen gestures, by inspection of fingerprints or smudges on a screen, or simply by an onlooker that views the pattern password being entered. A variable hint pattern can be used to impede discovery. A hint pattern is a sub-pattern (“hint”) of the pattern password to be completed for device unlock. A variable hint pattern can impede discovery by changing the sub-pattern at a defined change threshold related to unlock attempts. The device can randomly change the sub-pattern or randomly change the missing portions of the pattern password at each change threshold. As a result, different inputs complete the pattern password. This variance stymies the methods typically used to discover pattern passwords.

Abstract: Single sign on technology enables shared access to a protected service, such as an application, from a plurality of dynamically associated computing devices. After logging into the application from one of the computing device, a user may access the application from the other computing devices without re-authentication. A user may also log out from the application from any of the computing device. Unique machine identifications, such as device DNA, for identifying each of the computing devices are used in, for example, a method, apparatus (such as a login server) and computer program product. A single session may be shared across multiple computing devices. The same authentication token, such as a SAML token, may also be used for all of the computing devices having the same user session.

Abstract: A method, performed by an authentication processor of a first network device, includes receiving a first message through a network interface circuit from a second network device. The first message contains a first data unit to be operated upon by the first network device. A second message is received through the network interface circuit from the second network device. The second message contains a reported authentication token for the second network device and a second data unit to be operated upon by the first network device. The first message is received before receipt of the second message. A check authentication token is generated based on hashing the first data unit. A command that controls operation of the first network device is selectively performed on the second data unit based on whether the check authentication token matches the reported authentication token.