Abstract: A computer-implemented method for remote management of hardware security modules (HSMs) includes receiving a command request from a mobile device. The command request includes an encrypted key part and an encrypted signing key. The HSM decrypts the command request using a key associated with a security zone of the mobile device. The HSM decrypts the encrypted key part and the encrypted signing key. Decrypting the encrypted key part and the encrypted signing key includes using the key associated with the security zone of the mobile device and a key associated with a remote administrator associated with the mobile device. A command is generated for a domain with a target HSM. The command is generated using the decrypted key part and the decrypted signing key. The command is transmitted to the domain for execution by the target HSM. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The present invention relates to novel protein pores and their uses in analyte detection and characterisation. The invention particularly relates to an isolated pore complex formed by a CsgG-like pore and a modified CsgF peptide, or a homologue or mutant thereof, thereby incorporating an additional channel constriction or reader head in the nanopore. The invention further relates to a transmembrane pore complex and methods for production of the pore complex and for use in molecular sensing and nucleic acid sequencing applications.

Abstract: An apparatus includes a suction cup, a fitting, and a filter. The suction cup defines an interior cavity with a first opening and a second opening. The fitting is coupled to the suction cup. The fitting includes a first portion and a second portion. The first portion of the fitting defines a chamber. The second portion of the fitting is positioned within the interior cavity and is coupled to the first portion of the fitting to secure the first portion of the fitting to the suction cup. The filter is positioned within the chamber such that the suction cup and the fitting define a passage from the second opening, through the interior cavity, and through the chamber and the filter.

Abstract: Aspects include receiving an outbound payload for output to a requestor as part of a response to a call by the requestor to an application programming interface (API). Clear data in the outbound payload is selected for encryption based on policy information. The clear data is encrypted to generate encrypted data, and the encrypted data is inserted into the outbound payload in place of the clear data to generate an updated outbound payload. The response, including the updated outbound payload, is sent to the requestor.

Abstract: Method and apparatus for identifying a relative rotation between a rotary unit and a base unit in a drive unit, receiving a command that changes the relative rotation when the command is executed by the drive unit, determining that rotating at least one of the base unit or the rotary unit in a first direction in response to the command results in the relative rotation exceeding a maximum rotation value, and rotating at least one of the base unit or the rotary unit in a second direction opposite the first direction while executing the command. In one example, the drive unit may include cables that transfer power and control signals from the base unit to the rotary unit. Determining whether executing the command results in the relative rotation exceeding the maximum rotation value can ensure the cables are not damaged.

Abstract: A computer-implemented method for remote management of hardware security modules (HSMs) includes receiving a command request from a mobile device. The command request includes an encrypted key part and an encrypted signing key. The HSM decrypts the command request using a key associated with a security zone of the mobile device. The HSM decrypts the encrypted key part and the encrypted signing key. Decrypting the encrypted key part and the encrypted signing key includes using the key associated with the security zone of the mobile device and a key associated with a remote administrator associated with the mobile device. A command is generated for a domain with a target HSM. The command is generated using the decrypted key part and the decrypted signing key. The command is transmitted to the domain for execution by the target HSM. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Aspects include receiving a request from a user to access data that was acquired by a third-party from a data owner, the data in an encrypted format unreadable by the user. In response to receiving the request from the user to access the data, a third-party key from the third-party is requested and a data owner key from the data owner is requested. The third-party key and the data owner key are applied to the data in the encrypted format to generate the data in an unencrypted format readable by the user. The user is provided with access to the data in the unencrypted format.

Abstract: Generating unique data encryption keys for a data set, by allocating a data set associated with a security policy, where the security policy specifies a key encryption key (KEK) label, retrieving the KEK label from the security policy, storing the KEK label as metadata of the data set, opening the data set for a first time write, generating a data encryption key (DEK), retrieving a KEK from a key store according to the KEK label, encrypting the DEK using the KEK, storing the encrypted DEK as metadata of the data set, and encrypting the data set using the DEK.

Abstract: Generating unique data encryption keys for a data set, by allocating a data set associated with a security policy, where the security policy specifies a key encryption key (KEK) label, retrieving the KEK label from the security policy, storing the KEK label as metadata of the data set, opening the data set for a first time write, generating a data encryption key (DEK), retrieving a KEK from a key store according to the KEK label, encrypting the DEK using the KEK, storing the encrypted DEK as metadata of the data set, and encrypting the data set using the DEK.

Abstract: Aspects include receiving a request from a user to access data that was acquired by a third-party from a data owner, the data in an encrypted format unreadable by the user. In response to receiving the request from the user to access the data, a third-party key from the third-party is requested and a data owner key from the data owner is requested. The third-party key and the data owner key are applied to the data in the encrypted format to generate the data in an unencrypted format readable by the user. The user is provided with access to the data in the unencrypted format.

Abstract: Aspects include receiving an outbound payload for output to a requestor as part of a response to a call by the requestor to an application programming interface (API). Clear data in the outbound payload is selected for encryption based on policy information. The clear data is encrypted to generate encrypted data, and the encrypted data is inserted into the outbound payload in place of the clear data to generate an updated outbound payload. The response, including the updated outbound payload, is sent to the requestor.

Abstract: According to one aspect, an apparatus includes a first member that has a first aperture and a second member adjacent to the first member and having a second aperture extending between opposed first and second faces of the second member and aligned with the first aperture to define a combined aperture that has a longitudinal extent. The second aperture is defined by a surface that has a portion having an extent transverse to the longitudinal extent. The apparatus further includes at least a portion of a fastener disposed in the combined aperture. The fastener has a first end proximal the first member and a second end proximal the second member and includes a first retaining member in contact with the first member, a second retaining member in interfering relationship with the portion, and a third retaining member in contact with the second face.

Abstract: According to one aspect, an apparatus includes a first member that has a first aperture and a second member adjacent to the first member and having a second aperture extending between opposed first and second faces of the second member and aligned with the first aperture to define a combined aperture that has a longitudinal extent. The second aperture is defined by a surface that has a portion having an extent transverse to the longitudinal extent. The apparatus further includes at least a portion of a fastener disposed in the combined aperture. The fastener has a first end proximal the first member and a second end proximal the second member and includes a first retaining member in contact with the first member, a second retaining member in interfering relationship with the portion, and a third retaining member in contact with the second face.

Abstract: There is disclosed an illuminating device for an object, such as a bottle. The illuminating device may include one or more LEDs that may be programmed to blink randomly or in a predetermined sequence. The illuminating device may be attached or integrated into a bottom portion of the bottle into a cavity with a divot. Such a configuration provides stability for the bottle and does not interfere with its functionality.

Abstract: A system and method for facilitating simulation of a computer program. A program representation is generated from a computer program. A simulation of the program is performed. Simulation may include applying heuristics to determine program flow for selected instructions, such as a branch instruction or a loop instruction. Simulation may also include creating imaginary objects as surrogates for real objects, when program code to create real objects is restricted, or fields of the objects are unavailable or uncertain, or for other reasons. Data descriptive of the simulation is inserted into the program representation. A visualizer may retrieve the program representation and generate a visualization that shows sequence flows resulting from the simulation.

Abstract: An aggregate vane assembly includes a core vane assembly encircling a central longitudinal axis and having a plurality of core vanes each extending radially between an inner hub and an outer band. The aggregate vane assembly also includes a bypass vane assembly disposed on a radially opposite side of the outer band relative to the plurality of core vanes. The aggregate vane assembly also includes a splitter ring positioned proximate to the first forward end. The aggregate vane assembly also includes at least one retention plate overlapping a forward end of the at least one bypass vane along the central longitudinal axis and also overlapping at least a portion of the splitter ring along the central longitudinal axis.

Abstract: Local areas of a visualized modeling language diagram are viewable at different levels of detail without losing information such as model elements and their connectivity. Multiple elements are associated with a group element, which has a visual portion derived from the appearance of a group member element. Connectors between group member elements and non-member elements are suppressed in favor of replacement connectors between the group element and the non-member element(s). The integrity of incoming and outgoing connections to the group is maintained relative to the rest of the model. Ungrouping elements restores the elements to their original state. Grouping can be applied locally to one or more parts of the visual model.

Abstract: An aggregate vane assembly is disclosed herein. The aggregate vane assembly includes a core vane assembly encircling a central longitudinal axis and having a plurality of core vanes each extending radially between an inner hub and an outer band. The core vane assembly extends along the central longitudinal axis between a first forward end and a first aft end. The aggregate vane assembly also includes a bypass vane assembly disposed on a radially opposite side of the outer band relative to the plurality of core vanes. The bypass vane assembly includes at least one bypass vane extending radially outward from a platform. The bypass vane assembly extends along the central longitudinal axis between a second forward end and a second aft end. The aggregate vane assembly also includes a splitter ring positioned proximate to the first forward end.

Abstract: A system and method for facilitating simulation of a computer program. A program representation is generated from a computer program. A simulation of the program is performed. Simulation may include applying heuristics to determine program flow for selected instructions, such as a branch instruction or a loop instruction. Simulation may also include creating imaginary objects as surrogates for real objects, when program code to create real objects is restricted, or fields of the objects are unavailable or uncertain, or for other reasons. Data descriptive of the simulation is inserted into the program representation. A visualizer may retrieve the program representation and generate a visualization that shows sequence flows resulting from the simulation.