Abstract: An OT-IT (operational technology-information technology) service of a provider network allows operators to configure gateway connectors for data sources (e.g., machines at an industrial site) and allows developers to specify workflows that consume data from the data sources. To do so, the OT-IT service provides an operator interface to receive topology data for the client's remote network. The OT-IT service configures connectors for data sources based on the topology data and deploys the connectors to gateway devices. The OT-IT service also provides a developer interface to present available data sources and to receive specifications for workflows that consume data from the data sources. The OT-IT service deploys the workflows to execution locations. The OT-IT service then configures the gateways to send tagged data from the connectors to the workflows for processing.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: Some embodiments include electronic circuitry for an electronic lock. The electronic circuitry can include: an antenna configured to receive a wireless signal; a communication processor, coupled to the antenna, configured to decode the wireless signal to ascertain a command to lock or unlock the electronic lock and to authenticate a source of the wireless signal; an energy storage configured to store electrical energy; a motor switch configured to drive a motor clockwise or counterclockwise, powered by the energy storage, depending on a control signal, wherein the motor switch is configured to drive the motor for a short burst of time; and a controller, coupled to the energy storage capacitor and the motor switch, configured to monitor electrical charge left in the energy storage and to output the control signal that corresponds to the command to lock or unlock the electronic lock.

Abstract: A system and method for providing continued access to authentication and encryption services that includes a secure key store communicably coupled to a virtual smart card server. A virtual smart card driver is also provided and is communicably coupled to a virtual smart card secure hardware server. The virtual smart card driver communicates with an authentication client to authenticate a user, and access the user's private key stored in the secure key store when the user's physical smart card is unavailable. Continued access is provided when the user has been authenticated.

Abstract: Some embodiments include electronic circuitry for an electronic lock. The electronic circuitry can include: an antenna configured to receive a wireless signal; a communication processor, coupled to the antenna, configured to decode the wireless signal to ascertain a command to lock or unlock the electronic lock and to authenticate a source of the wireless signal; an energy storage configured to store electrical energy; a motor switch configured to drive a motor clockwise or counterclockwise, powered by the energy storage, depending on a control signal, wherein the motor switch is configured to drive the motor for a short burst of time; and a controller, coupled to the energy storage capacitor and the motor switch, configured to monitor electrical charge left in the energy storage and to output the control signal that corresponds to the command to lock or unlock the electronic lock.

Abstract: Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Abstract: A method and system for delivering external data to a process running on a virtual machine, the virtual machine running on an operating system. The method includes the steps of executing instructions on the virtual machine that obtain state data related to the process; querying the virtual machine to obtain component data related to the state data; and manipulating the component data to deliver the external data to the process. In one example, the system provides a single sign-on application that passes user credentials to a Java applet running on a Java virtual machine.

Abstract: Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Abstract: In a computer system including a computer terminal, an operating system installed on said computer terminal, a virtual machine running on the operating system, a server communicatively coupled to the computer terminal and a process including instructions that when executed on a virtual machine define a user interface; a Single Sign On (SSO) system comprising a database of authentication credentials accessible to the computer terminal, and instructions executable on the virtual machine operative to: obtain user interface state data from the process; query the virtual machine to obtain component data related to the user interface state data; and manipulate the component data so as to deliver authentication credentials to the process.

Abstract: In a computer system including a computer terminal, an operating system installed on said computer terminal, a virtual machine running on the operating system, a server communicatively coupled to the computer terminal and a process including instructions that when executed on a virtual machine define a user interface; a Single Sign On (SSO) system comprising a database of authentication credentials accessible to the computer terminal, and instructions executable on the virtual machine operative to: obtain user interface state data from the process; query the virtual machine to obtain component data related to the user interface state data; and manipulate the component data so as to deliver authentication credentials to the process.

Abstract: One embodiment provides a token for dynamically authenticating a user. The token includes a memory for storing secure data; a processor for calculating authentication credentials of the user based on the secure data, and for constructing a server address based on the authentication credentials. Also included is a transmitter for transmitting the server address to a host controller wherein the host controller is configurable to communicate with a remote server locatable at the server address such that the user is dynamically authenticated on the remote server using the authentication credentials.

Abstract: A system and method for providing continued access to authentication and encryption services that includes a secure key store communicably coupled to a virtual smart card server. A virtual smart card driver is also provided and is communicably coupled to a virtual smart card secure hardware server. The virtual smart card driver communicates with an authentication client to authenticate a user, and access the user's private key stored in the secure key store when the user's physical smart card is unavailable. Continued access is provided when the user has been authenticated.

Abstract: A system and method for dynamically retrieving and storing local building/facility access card information on an access card is provided. An access card is provided to a local facility access card reader and is authenticated for the local facility by providing local facility access card information from the reader to be stored inside a Public Key Infrastructure (PKI) certificate relating to the access card.