Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. Performing these data plane processing operations does not expose any pilot keys outside the data safe in plaintext form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. In one embodiment, the information encrypted and decrypted by the data safe includes data structure instances including feature-preserving encrypted entries generated using feature-preserving encryption on corresponding plaintext data items.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. Performing these data plane processing operations does not expose any pilot keys outside the data safe in plaintext form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. In one embodiment, the information encrypted and decrypted by the data safe includes data structure instances including feature-preserving encrypted entries generated using feature-preserving encryption on corresponding plaintext data items.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. Performing these data plane processing operations does not expose any pilot keys outside the data safe in plaintext form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. In one embodiment, the information encrypted and decrypted by the data safe includes data structure instances including feature-preserving encrypted entries generated using feature-preserving encryption on corresponding plaintext data items.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. Performing these data plane processing operations does not expose any pilot keys outside the data safe in plaintext form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. In one embodiment, the information encrypted and decrypted by the data safe includes data structure instances including feature-preserving encrypted entries generated using feature-preserving encryption on corresponding plaintext data items.

Abstract: In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Abstract: The present invention describes an enhanced audio communication system which, in certain preferred embodiments, may be employed to advantage in situations involving face-to-face communication between speaking and listening participants within a group located in a noisy environment. In preferred embodiments, the speaking participants and listening participants serve dual roles, both as speakers and listeners. Enhanced audio communication systems for use in face-to-face communication create a specific challenge in implementation, because in this type of face-to-face communication situation, participants experience an augmented reality situation whereby the listening participants hear both the natural auditory signals emanating from the speaking participants and the electronically delivered auditory signals being transmitted via the system, while also seeing the mouth movements of the speaking participants.

Abstract: One embodiment includes hardware-based cybersecurity devices that create a physical barrier (“hardware security barrier”) between a computer's (or other device's) processor and a public or private network. Hardware security barriers typically use immutable hardware in accomplishing cybersecurity activities including generating and distributing cryptographically secure numbers, encryption, decryption, source authentication, and packet integrity verification. This hardware security barrier protects against remote threats and guarantees that all exported and received data are strongly encrypted. A hardware security barrier can be included in any computing or networking device that contains a network interface. One embodiment of a hardware security barrier is implemented as part of a network interface, such as, but not limited to being part of a network interface controller, or as a standalone unit between a communications interface of a host system and a connection to a network.

Abstract: A Delay-tolerant Asynchronous Interface (DANI) is typically used to make the clock domains for reusable silicon intellectual property (IP) cores completely independent of each other. In fact, a DANI-wrapped IP core usually appears to its environment as if it were clockless. This property is necessary to address the variability in data transmission-time between source and destination. This variability is a result of increased lack of predictability in today's leading-edge manufacturing processes. A DANI wrapper can be applied to the IP core that is the source of data to be transmitted or it can be applied to the IP core that is the destination of that data. The transmission time over the route between source and destination may vary more than a single clock period.

Abstract: The integrity of a control network for providing reliable communications between different entities is verified. Such a verified control network may be included in a device, system, or design library. The verification of a control network includes, but is not limited to: physically exercising the control network itself and/or its design via modeling, analysis, and/or applying or using other testing or design verification methodologies. For example, a Petri net model of the control network may be analyzed to verify that the control signals cannot be generated which could interfere with each other, that a deadlock condition cannot be reached, and that a control signal on an input port will result in a control signal on an output port, albeit possibly delayed.

Abstract: Disclosed are, inter alia, instantaneously restartable clocks and their use. For example, instantaneously restartable clocks can be used to receive data from another independently clocked subsystem in a manner that removes the possibility of metastability errors. A restartable clocking signal generator, relying on oscillating signals typically generated by a continuous oscillating source, is used to generate a restartable clocking signal which can be asynchronously restarted in response to one or more control signals. In one implementation, an apparatus includes multiple independently clocked subsystems and a clockless sequencing network, with the clockless sequencing network being used to initiate the start of a restartable clock in order to reliably receive and process data between the independently clocked subsystems.

Abstract: Methods and apparatuses are disclosed for pacing the rate at which packets of one or more information streams are sent from a device, such as, for example, a workstation, computer, communications mechanism, or component thereof. Typically, multiple timing wheels each having a different timing granularity are used to schedule the transmission of packets of information corresponding the to the information streams. Using multiple timing wheels in this manner allows scheduling of a larger range of rates while typically using a significantly smaller amount of memory than a single timing wheel covering the same range of rates. An entry, corresponding to a next portion of an information stream to be sent from the device, is inserted into the timing wheels at a target time for sending the information. At the target time, the entry is removed and placed in a transmit list of items to be sent from the device. In one implementation a single transmit list is used for all timing wheels.

Abstract: A display device having 8-bit architecture includes a decoder for decoding 8-bit bytes of data representative of pixel intensities of 12 bits sufficiently fast to enable the display in flicker-free manner of an image having a frame of 1024.times.1024 pixels. The decoder is hardware based and consists of electronic circuitry without the use of programmed devices incorporating software logic. The decoder may be utilized in new display devices or used to retrofit existing 8-bit architecture display devices. An encoder is also disclosed for encoding 12-bit pixel data into 8-bit data for storage or transmission to the display device.

Abstract: An improved method and apparatus for transaxial tomographic scanning of a patient. A scanning system is provided having a rotatably mounted X-ray radiation source/detector pair which orbits and radially scans the patient in the plane of orbit. The source provides a plurality of beams of radiation having axes in the orbital plane. The beams pass through the patient to an array of detectors each of which is aligned with one of the beams. Radiation intensity data is collected at predetermined orientations of each beam/detector pair as the assembly orbits about the patient. In a preferred embodiment the rotatably mounted source-detector pair is rotated as a unit through a preselected rotation angle .phi. about an axis effectively passing through the source. The axis and the source-detector pair connected to it are then orbited around the patient through an orbit angle .gamma. while maintaining the preselected rotation angle .phi.. The axis is orbited about an origin lying in the orbital plane.

Abstract: A dual axial scanner in a transverse tomography system collects nonredundant data throughout one or more substantially 360.degree. orbital scan paths with uniform motion about a patient. A set of N X-ray beams scans the patient in a manner to allow collection of two sets of non-redundant data corresponding to a pair of 180.degree. scans in each 360.degree. scan. Overall time to conduct the study is decreased, and the number of required accelerations and decelerations of the assemblies is minimized.Adjacent beams of radiation are separated by an angle .alpha., which is one degree in the preferred embodiment to provide a radiation field of ##EQU1## degrees on either side of a center of the radiation field. The source and detector assemblies are positioned prior to the first orbit such that the field center is offset a distance D from a center of orbit lying in the orbital plane. The source and detector assemblies are mounted for rotation through a rotation angle .phi..sub.

Abstract: An improved method and apparatus for transaxial tomographic scanning a patient. A scanning system is provided having a rotatably mounted X-ray radiation source/detector assembly which orbits and scans the patient in a plane of orbit. The source provides a plurality of beams of radiation having axes in the orbital plane. The beams pass through the patient to an array of detectors each of which is and respectively aligned with a different one of the beams. Radiation intensity data is collected at predetermined orientation of each beam - detector pair as the assembly orbits about the patient. In one embodiment the source and detector are rotated as a unit through a rotation angle .phi. about center of rotation while the assembly orbits the patient through an orbit angle .gamma.. Measurements are taken as the beams from the X-ray source sweep, due to the source detector rotation relative to a patient, through substantially uniformly spaced, coplanar points [t, (k), .theta.

Abstract: An improved method and apparatus for transaxial tomographic scanning of a patient. A scanning system is provided having a rotatably mounted X-ray radiation source/detector pair which orbits and radially scans the patient in the plane of orbit. The source provides a plurality of beams of radiation having axes in the orbital plane. The beams pass through the patient to an array of detectors each of which is aligned with one of the beams. Radiation intensity data is collected at predetermined orientations of each beam/detector pair as the assembly orbits about the patient. In a preferred embodiment the rotatably mounted source-detector pair is rotated as a unit through a preselected rotation angle .phi. about an axis effectively passing through the source. The axis and the source-detector pair connected to it are then orbited around the patient through an orbit angle .gamma. while maintaining the preselected rotation angle .phi.. The axis is orbited about an origin lying in the orbital plane.