Abstract: Methods, devices, and servers for as-needed update of a trusted list are provided herein. An electronic subscriber identity module (eSIM) server receives a request for an eSIM of a particular type from a wireless device. The eSIM server evaluates the particular type and requests an eSIM of the particular type from a second eSIM server, which is not initially trusted by a secure element (SE) of the wireless device. The eSIM server sends a policy update to the wireless device. The wireless device passes the policy update to the SE, for example, a universal integrated circuit card (UICC). The UICC updates the trusted list with an identity of the second eSIM server. When the wireless device downloads a bound profile package (BPP) containing an eSIM from the second eSIM server, the UICC validates the BPP based on the updated trusted list. The eSIM is then installed on the UICC.

Abstract: Under one aspect, a method is provided for protecting a device from a malicious file. The method can be implemented by one or more data processors forming part of at least one computing device and can include extracting from the file, by at least one data processor, sequential data comprising discrete tokens. The method also can include generating, by at least one data processor, n-grams of the discrete tokens. The method also can include generating, by at least one data processor, a vector of weights based on respective frequencies of the n-grams. The method also can include determining, by at least one data processor and based on a statistical analysis of the vector of weights, that the file is likely to be malicious. The method also can include initiating, by at least one data processor and responsive to determining that the file is likely to be malicious, a corrective action.

Abstract: Embodiments of the present disclosure describe a self-contained service function network layer between a chain (e.g., a logical chain or service function chain) and a substrate network. Embodiments of the present disclosure further provide techniques for constructing logical chains for service function networks using chain tables, organizing chain tables using application program interfaces (APIs), deploying service function networks to substrate networks, routing packets through a service function network and a substrate network, and inserting, deleting, re-routing, moving and substituting service functions in logical chains.

Abstract: Embodiments of the present invention provide a method and a device for identity authentication. The method for identity authentication includes: according to a selected user digital certificate, generating, by a browser kernel unit, a login request carrying a selected user digital certificate according to the selected user digital certificate, and sending the login request to an application server; receiving, by the browser kernel unit, a response indicating authentication success which is returned by the application server after performing identity authentication according to the selected digital certificate, extracting a webpage file from the response, parsing the webpage file, generating a webpage and sending the webpage to a browser interface unit; and displaying, by the browser interface unit, the webpage. The method and the device for identity authentication provided by embodiments of the present invention improve the convenience and security of identity authentication.

Abstract: Disclosed herein is a technique for enabling Subscriber Identity Module (SIM) toolkit commands to be properly routed within a mobile device that includes an embedded Universal Integrated Circuit Card (eUICC) configured to manage two or more electronic SIMs (eSIMs). Specifically, the technique involves a baseband component of the mobile device and the eUICC initially exchanging information about their eSIM capabilities to identify whether multiple eSIMs are active within the eUICC. During this exchange of information, the eUICC can generate a list of unique identifiers of the active eSIMs that are managed by the eUICC and provide the list of unique identifiers to the baseband component. In turn, the baseband component can update a configuration to manage the list of unique identifiers and use the list of unique identifiers to properly route SIM toolkit commands to the appropriate eSIM within the eUICC.

Abstract: Embodiments of the present invention relate to an auxiliary method, apparatus, and system for diagnosing a failure of a virtual machine. An operation and maintenance system receives a failure message when a virtual machine fails; obtains running information of the virtual machine according to identifier information carried in the message, where the running information is used for diagnosing the failure of the virtual machine; generates graphic multi-dimensional display information of the virtual machine according to the running information; and sends the display information to a user end for displaying. The present invention provides an auxiliary method for diagnosing a failure of a virtual machine. The method may provide correlation analysis for diagnosing a failure of a virtual machine, allow the user end to diagnose the cause of the failure of the virtual machine in a comprehensive multi-dimensional manner, and improve the convenience and accuracy of diagnosing the virtual machine.

Abstract: A test substrate for measuring contact force and a method for measuring contact force are provided in the technology. The substrate may comprises: a base substrate, and a piezoelectric element provided on a surface of the base substrate. One end of the piezoelectric portion is a detecting voltage input terminal and the other end thereof is a detecting voltage output terminal. According to the technology, the substrate and method for measuring contact force can be used to measure the contact force applied to the substrate by the cleaning apparatus or conveying apparatus, and thus the contact force can be properly controlled and the adverse influence on the substrate from the conveying apparatus or cleaning apparatus can be decreased or eliminated.

Abstract: An optical device that includes 1) a gain section having a plurality of core regions including dopant species configured to absorb incident radiation at a first wavelength and emit radiation at a second wavelength, and 2) at least one passive section attached to the gain section. The gain section and the at least one passive section comprise an optical cavity which selectively promotes in-phase light emission from the optical cavity. An alternative optical device which includes a gain section having a plurality of core regions including dopant species configured to absorb incident radiation at a first wavelength and emit radiation at a second wavelength, and 2) two passive sections attached to the gain section at opposite ends.

Abstract: The invention provides methods for the ex-vivo expansion of CD4+CD25+ Tregs. The invention provides a method for producing ex vivo expanded Tregs that may be used to inhibit unwanted human immune responses against self-antigens or allergens. Additionally, the ex vivo expanded Tregs may provide treatment for inflammatory/automimmune diseases.

Abstract: An optical device that includes 1) a gain section having a plurality of core regions including dopant species configured to absorb incident radiation at a first wavelength and emit radiation at a second wavelength, and 2) at least one passive section attached to the gain section. The gain section and the at least one passive section comprise an optical cavity which selectively promotes in-phase light emission from the optical cavity. An alternative optical device which includes a gain section having a plurality of core regions including dopant species configured to absorb incident radiation at a first wavelength and emit radiation at a second wavelength, and 2) two passive sections attached to the gain section at opposite ends.

Abstract: A system and method for providing distributed multimodal interaction are provided. The system is a hybrid multimodal dialogue system that includes one or multiple hybrid constructs to form sequential and joint events in multimodal interaction. It includes an application interface receiving a multimodal interaction request for conducting a multimodal interaction over at least two different modality channels; and at least one hybrid construct communicating with multimodal servers corresponding to the multiple modality channels to execute the multimodal interaction request.

Abstract: A thin film polarizing device has a functional core consisting of at least two alternating thin film layers of metal and dielectric sandwiched between a pair of optical media providing input and output ports. The thicknesses of said layers and the optical constants of said layers and said optical media are selected such that the equivalent admittance of said functional core substantially matches the admittance of said optical media for one plane of polarization, thus allow light with said polarization to be transmitted, and has substantially only an imaginary part for the other plane of polarization, thus allows light with the other polarization to be reflected, at predetermined wavelengths and angles of incidence.