Abstract: Global identity contexts are established for unique constituents to interact with a cloud architecture through a variety of relationships. The global identity context enables a particular constituent to access services from different cloud-service providers in a secure and simplified manner. Authenticating one account can provide access to services associated with other accounts linked to the global identity context for the authenticated account. In some embodiments, the global identity platform includes an account management application and an identity management application. The account management application is configured to register one or more accounts for each constituent. The identity management application is configured to perform individualization to establish an individual identifier for each unique constituent and map each account to a particular individual identifier and one or more local identifiers.

Abstract: A method of integrating data across multiple data stores is provided. The method includes ingesting diverse data from multiple data sources and reconciling the ingested diverse data by updating semantic models based on the ingested diverse data. The method further includes storing the ingested diverse data based on one or more classification of the data sources according to the semantic models and automatically generating scalable service endpoints that are semantically consistent according to the classification of the data sources. The generated scalable service endpoints are application programming interfaces. The method also includes determining a protocol based on the scalable service endpoints in response to receiving a call from the one or more recipient systems and responding to the call from the one or more recipient systems by providing data in the classification of the data sources.

Abstract: A system and method are disclosed for managing the deployment of application programming interfaces (APIs) within a hybrid cloud network architecture. APIs can be created for applications or services deployed to a hybrid cloud including public clouds and/or private clouds. The APIs are deployed to API gateways associated with each data center in the network. The network is conceptually divided into spaces, where each space corresponds to a set of API gateways deployed within designated geographical regions. The API gateways are mapped to the network locations for the API gateways by interacting with Domain Name System (DNS) name servers. API calls use the domain names as included in the DNS records to resolve the API call as being directed to a specific API gateway corresponding to the service for the API call.

Abstract: An embodiment of the disclosure provides a method of integrating data across multiple data stores in a smart cache in order to provide data to one or more recipient systems. The method includes automatically ingesting diverse data from multiple data sources, automatically reconciling the ingested diverse data by updating semantic models based on the ingested diverse data, storing the ingested diverse data based on one or more classification of the data sources according to the semantic models, automatically generating scalable service endpoints which are semantically consistent according to the classification of the data sources, and responding to a call from the one or more recipient systems by providing data in the classification of the data sources.

Abstract: An embodiment of the disclosure provides a method of integrating data across multiple data stores in a smart cache in order to provide data to one or more recipient systems. The method includes automatically ingesting diverse data from multiple data sources, automatically reconciling the ingested diverse data by updating semantic models based on the ingested diverse data, storing the ingested diverse data based on one or more classification of the data sources according to the semantic models, automatically generating scalable service endpoints which are semantically consistent according to the classification of the data sources, and responding to a call from the one or more recipient systems by providing data in the classification of the data sources.

Abstract: A system and method are disclosed for managing the deployment of application programming interfaces (APIs) within a hybrid cloud network architecture. APIs can be created for applications or services deployed to a hybrid cloud including public clouds and/or private clouds. The APIs are deployed to API gateways associated with each data center in the network. The network is conceptually divided into spaces, where each space corresponds to a set of API gateways deployed within designated geographical regions. The API gateways are mapped to the network locations for the API gateways by interacting with Domain Name System (DNS) name servers. API calls use the domain names as included in the DNS records to resolve the API call as being directed to a specific API gateway corresponding to the service for the API call.

Abstract: Global identity contexts are established for unique constituents to interact with a cloud architecture through a variety of relationships. The global identity context enables a particular constituent to access services from different cloud-service providers in a secure and simplified manner. Authenticating one account can provide access to services associated with other accounts linked to the global identity context for the authenticated account. In some embodiments, the global identity platform includes an account management application and an identity management application. The account management application is configured to register one or more accounts for each constituent. The identity management application is configured to perform individualization to establish an individual identifier for each unique constituent and map each account to a particular individual identifier and one or more local identifiers.

Abstract: An embodiment of the disclosure provides a method of integrating data across multiple data stores in a smart cache in order to provide data to one or more recipient systems. The method includes automatically ingesting diverse data from multiple data sources, automatically reconciling the ingested diverse data by updating semantic models based on the ingested diverse data, storing the ingested diverse data based on one or more classification of the data sources according to the semantic models, automatically generating scalable service endpoints which are semantically consistent according to the classification of the data sources, and responding to a call from the one or more recipient systems by providing data in the classification of the data sources.

Abstract: A technique is introduced that enables a server to establish trust of and a secure channel of communication with an unverified client computer, which can be on a different insecure network. To establish trust, the server needs to ensure that the client computer is legitimate, and the client computer similarly needs to ensure that the server is legitimate. With mutual trust established, a secure channel of communication is established between the server and the client computer. With mutual trust and a secure channel of communication established, the client computer can safely communicate with the server, for example, to download software that enables the client computer to join a central management system at the server.

Abstract: A technique is introduced that enables a server to establish trust of and a secure channel of communication with an unverified client computer, which can be on a different insecure network. To establish trust, the server needs to ensure that the client computer is legitimate, and the client computer similarly needs to ensure that the server is legitimate. With mutual trust established, a secure channel of communication is established between the server and the client computer. With mutual trust and a secure channel of communication established, the client computer can safely communicate with the server, for example, to download software that enables the client computer to join a central management system at the server.

Abstract: A technique is introduced that enables a server to establish trust of and a secure channel of communication with an unverified client computer, which can be on a different insecure network. To establish trust, the server needs to ensure that the client computer is legitimate, and the client computer similarly needs to ensure that the server is legitimate. With mutual trust established, a secure channel of communication is established between the server and the client computer. With mutual trust and a secure channel of communication established, the client computer can safely communicate with the server, for example, to download software that enables the client computer to join a central management system at the server.

Abstract: A technique is introduced that enables a server to establish trust of and a secure channel of communication with an unverified client computer, which can be on a different insecure network. To establish trust, the server needs to ensure that the client computer is legitimate, and the client computer similarly needs to ensure that the server is legitimate. With mutual trust established, a secure channel of communication is established between the server and the client computer. With mutual trust and a secure channel of communication established, the client computer can safely communicate with the server, for example, to download software that enables the client computer to join a central management system at the server.

Abstract: Systems and methods for illuminating a platen are provided. A hybrid illumination system uses both diffusion and collimation to efficiently provide a flat, uniform illumination at a platen. One or more diffusers are disposed between the illumination source array and a collimating lens. An illumination system is provided which uses diffused light to illuminate a platen in a print scanner. The illumination system has an illumination source array and a light wedge. The light wedge reflects light internally which makes the illumination even more diffuse. Sources are divided into at least a center region and a perimeter region. The density of sources provided in the perimeter region is greater than in the center region to correct for natural light falloff in the illumination system. Intensity control can be performed individually or in groups.

Abstract: A winch with a wrap spring brake is provided. The winch includes a rotatable drum configured to wind and unwind a cable. The cable may be connected to a load to be moved. A shaft is coupled to the drum such that rotation of the shaft causes rotation of the drum, thereby winding or unwinding the cable about the drum. The winch also includes an input hub capable of rotating and coupled to the shaft such that rotation of the input hub causes rotation of the shaft. The winch also includes a grounding hub. Finally, the winch includes a wrap spring wound about the grounding hub. The wrap spring has a first end and a second end. The first end of the wrap spring is coupled to the shaft such that the first end rotates with the shaft. The wrap spring is configured to be wrapped down on the grounding hub when the input hub is not rotated, thereby automatically locking the winch.

Abstract: A variable speed slip clutch is provided. The clutch has an output shaft, a first and second input hub, and output hub, a wrap spring and a control hub. In one embodiment, the clutch includes a source coupler coupled to a first and a second input drive. The output shaft is configured to rotate. The first input hub is coupled to the first input drive and configured to rotate about the output shaft in a first direction. The second input hub is coupled to the second input drive and configured to rotate about the output shaft in a second direction opposite the first direction. The output hub fixed to the output shaft and configured to rotate therewith. The wrap spring has a first and a second end. The first end of the wrap spring is fixed to the output hub such that the first end of the wrap spring rotates with rotation of the output hub. The control hub is coupled to the second end of the wrap spring. In one embodiment a control motor is provided and coupled to the control hub.

Abstract: Devices and methods for applying heat to a platen of a biometric image capturing device are described that remove and prevent the formation of excess moisture on the platen. These devices and methods prevent undesirable interruptions of total internal reflection of a prism that result in biometric images having a halo effect. In embodiments of the invention, heater assemblies, such as electrically conductive transparent material or resistive heating elements, can be used to heat an area where a biometric object is placed to remove and prevent the formation of excess moisture on the platen. Cooling assemblies, such as electrically conductive transparent material or Peltier elements, can be used to decrease temperature of an area where a biometric object is placed to prevent overheating of the platen.