Abstract: A stackable filesystem architecture that curtails data theft and ensures file integrity protection. In this architecture, processes are grouped into ranked filesystem views, or “security domains.” Preferably, an order theory algorithm is utilized to determine a proper domain in which an application is run. In particular, a root domain provides a single view of the filesystem enabling transparent filesystem operations. Each security domain transparently creates multiple levels of stacking to protect the base filesystem, and to monitor file accesses without incurring significant performance overhead. By combining its layered architecture with view separation via security domains, the filesystem maintains data integrity and confidentiality.

Abstract: A framework to accurately and quickly verify the ownership of remotely-deployed deep learning models is provided without affecting model accuracy for normal input data. The approach involves generating a watermark, embedding the watermark in a local deep neural network (DNN) model by learning, namely, by training the local DNN model to learn the watermark and a predefined label associated therewith, and later performing a black-box verification against a remote service that is suspected of executing the DNN model without permission. The predefined label is distinct from a true label for a data item in training data for the model that does not include the watermark. Black-box verification includes simply issuing a query that includes a data item with the watermark, and then determining whether the query returns the predefined label.

Abstract: A coating composition for coating a surface, such as a roof, includes an acrylic polymer, water, ammonia, and a curing agent configured to reduce a curing time for the coating composition when applied to the surface. The coating composition further includes an odor mitigator configured to reduce an odor of the coating composition resulting from the ammonia.

Abstract: A neural network is trained using a training data set, resulting in a set of model weights, namely, a matrix X, corresponding to the trained network. The set of model weights is then modified to produce a locked matrix X?, which is generated by applying a key. In one embodiment, the key is a binary matrix {0, 1} that zeros (masks) out certain neurons in the network, thereby protecting the network. In another embodiment, the key comprises a matrix of sign values {?1, +1}. In yet another embodiment, the key comprises a set of real values. Preferably, the key is derived by applying a key derivation function to a secret value. The key is symmetric, such that the key used to protect the model weight matrix X (to generate the locked matrix) is also used to recover that matrix, and thus enable access to the model as it was trained.

Abstract: Networks and methods for use in authenticating messages are provided. One exemplary method generally includes receiving a message from a client, where the message includes a client certificate. The method also includes validating, by an application programming interface (API) gateway, a computing device based on a certificate identifying the computing device as a recognized computing device, and validating, by the API gateway, the client based on the client certificate via a global access manager, separate from the repository. The method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.

Abstract: A stackable filesystem architecture that curtails data theft and ensures file integrity protection. In this architecture, processes are grouped into ranked filesystem views, or “security domains.” Preferably, an order theory algorithm is utilized to determine a proper domain in which an application is run. In particular, a root domain provides a single view of the filesystem enabling transparent filesystem operations. Each security domain transparently creates multiple levels of stacking to protect the base filesystem, and to monitor file accesses without incurring significant performance overhead. By combining its layered architecture with view separation via security domains, the filesystem maintains data integrity and confidentiality.

Abstract: A framework to accurately and quickly verify the ownership of remotely-deployed deep learning models is provided without affecting model accuracy for normal input data. The approach involves generating a watermark, embedding the watermark in a local deep neural network (DNN) model by learning, namely, by training the local DNN model to learn the watermark and a predefined label associated therewith, and later performing a black-box verification against a remote service that is suspected of executing the DNN model without permission. The predefined label is distinct from a true label for a data item in training data for the model that does not include the watermark. Black-box verification includes simply issuing a query that includes a data item with the watermark, and then determining whether the query returns the predefined label.

Abstract: A programmable circuit breaker, including an input unit, a sensor, and, a trip mechanism. The input unit permits user input and/or adjustment of predetermined load parameters. The sensor senses actual values of a load. A microcontroller receives and processes the values, and operates/trips the circuit breaker when the sensed values exceed predetermined load parameters. The sensor preferably includes a Hall-Effect sensor. The circuit breaker is preferably able to be programmed, monitored and/or tripped remotely. It preferably includes an RCD. In a power distribution system, at least one such current breaker is provided, controllable by a controller, which may be remote from the current breaker.

Abstract: Networks and methods for use in authenticating messages are provided. One exemplary method generally includes receiving a message from a client, where the message includes a client certificate. The method also includes validating, by an application programming interface (API) gateway, a computing device based on a certificate identifying the computing device as a recognized computing device, and validating, by the API gateway, the client based on the client certificate via a global access manager, separate from the repository. The method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.

Abstract: Networks and methods for use in authenticating messages, based on the clients and the computing devices, are provided. One exemplary method generally includes performing, by an API gateway, validation of a computing device based on a certificate identifying the computing device as one of the recognized computing devices, via the repository, and performing, by the API gateway, validation of the client based on the client certificate via a global access manager, separate from the repository. The exemplary method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.

Abstract: Networks and methods for use in authenticating messages, based on the clients and the computing devices, are provided. One exemplary method generally includes performing, by an API gateway, validation of a computing device based on a certificate identifying the computing device as one of the recognized computing devices, via the repository, and performing, by the API gateway, validation of the client based on the client certificate via a global access manager, separate from the repository. The exemplary method further includes causing a security token indicative of the client to be generated, when the computing device and the client are validated, whereby the security token is indicative of the client and permits the message, from the client, to be delivered to one or more backend services.

Abstract: A computer-implemented method of monitoring a computing network includes identifying a topology pattern in a computing network. The method also includes assigning a management template for a configuration item type of the topology-pattern. The method further includes applying the management template to a configuration item instance of the configuration item type.

Abstract: A programmable circuit breaker, including an input unit, a sensor, and, a trip mechanism. The input unit permits user input and/or adjustment of predetermined load parameters. The sensor senses actual values of a load. A microcontroller receives and processes the values, and operates/trips the circuit breaker when the sensed values exceed predetermined load parameters. The sensor preferably includes a Hall-Effect sensor. The circuit breaker is preferably able to be programmed, monitored and/or tripped remotely. It preferably includes an RCD. In a power distribution system, at least one such current breaker is provided, controllable by a controller, which may be remote from the current breaker.

Abstract: An oral hygiene device includes a head, a first bristle field, and a second bristle field. The head includes a first head portion and a second head portion. The first bristle field extends from the first head portion. The second bristle field extends from the second head portion. The first bristle field and second bristle field are controllably movable between a first configuration for providing a first cleaning operation and a second configuration for providing a second cleaning operation.

Abstract: In an airbag arrangement for a front seat passenger in a motor vehicle, an airbag is mounted, in its stowed condition, in a dashboard of the vehicle. The airbag is configured to inflate to a deployed condition interposed between the dashboard and the front seat passenger. The inflated airbag is wider on an upper side, over an impact region nearer the front seat passenger, than on a lower side adjacent the dashboard. The airbag is narrower at an end adjacent the vehicle dashboard than at an end nearer to the front seat passenger.

Abstract: A system and method for reducing the amount of repetitive data sent by a server to a client for vehicle navigation. The system includes a computer-based vehicle unit located in a vehicle, a gateway configured to wirelessly send and receive trip information to and from the vehicle unit, and a computer-based server in communication with the gateway over a network. The vehicle unit wirelessly receives signals from a computer-based server that includes the desired navigation information in packet form. The vehicle unit includes a user interface component that presents the received navigation information and records user requests. The server processes the requests, generates a trip plan according to the navigation information and sends the generated trip plan back to the vehicle unit via a gateway when a request has been completed.

Abstract: A system and method for reducing the amount of repetitive data sent by a server to a client for vehicle navigation. The system includes a computer-based vehicle unit located in a vehicle, a gateway configured to wirelessly send and receive trip information to and from the vehicle unit, and a computer-based server in communication with the gateway over a network. The vehicle unit wirelessly receives signals from a computer-based server that includes the desired navigation information in packet form. The vehicle unit includes a user interface component that presents the received navigation information and records user requests. The server processes the requests, generates a trip plan according to the navigation information and sends the generated trip plan back to the vehicle unit via a gateway when a request has been completed.

Abstract: A system and method for reducing the amount of repetitive data sent by a server to a client for vehicle navigation. The system includes a computer-based vehicle unit located in a vehicle, a gateway configured to wirelessly send and receive trip information to and from the vehicle unit, and a computer-based server in communication with the gateway over a network. The vehicle unit wirelessly receives signals from a computer-based server that includes the desired navigation information in packet form. The vehicle unit includes a user interface component that presents the received navigation information and records user requests. The server processes the requests, generates a trip plan according to the navigation information and sends the generated trip plan back to the vehicle unit via a gateway when a request has been completed.

Abstract: An air-bag (1) is provided with a vent aperture (2). A membrane (3) extends across the vent aperture, the membrane defining a smaller aperture (4) than the vent aperture (2). The periphery of the aperture is defined by a thickened part of the membrane. The membrane is formed of an elastic material such as a silicone rubber material. When a very high pressure exists in the air-bag the vent becomes deformed, thus increasing the size of the aperture defined by the membrane, permitting a relatively large flow of air from the air-bag to reduce the pressure within the air-bag.

Abstract: In an airbag arrangement for a front seat passenger in a motor vehicle, an airbag 10 which is mounted, in its stowed condition, in the dashboard 18 of the vehicle, the airbag 10 is so configured that it its inflated, deployed condition in which it is interposed between, the dashboard and the front seat passenger, the inflated bag is wider on its upper side, over an impact region 24C nearer the front seat passenger, than on its lower side adjacent the dashboard, and is narrower at its end adjacent the vehicle dashboard than at its end nearer to the front seat passenger.