Abstract: Secure token exchange for automated systems includes receiving, for validation, an application programming interface (API) token grant request, including an API key, sent by an automated system, and retrieving, from a database, an API key entity corresponding to the API key, wherein the API key entity includes a token receive endpoint. An authentication token is generated. The authentication token is asynchronously pushed to the token receive endpoint for access by the automated system.

Abstract: A physically unclonable function (PUF) device comprises a plurality of conductors, at least some of which are arranged so that they interact electrically and/or magnetically with one another. A media surrounds at least a portion of each of the conductors, and circuitry is configured for applying an electrical challenge signal to at least one of the conductors and for receiving an electrical output from at least one of the other conductors to generate an identifying response to the challenge signal that is unique to the device. The media comprises a plurality of interactive regions, the interactive regions having an electrical and/or magnetic response characteristic which is permanently altered in response to a predetermined environmental event, and the identifying response is altered with the response characteristic.

Abstract: For a variety of different kinds of vehicles, such as school buses and other types of vehicles, various embodiments of vehicle status indicator systems including sign components are provided. Enhancements are described in association with status indicator assemblies, actuator devices for extending and closing sign components, and sign component illumination features.

Abstract: A method of quantifying emissions concentrations emitted from a gas source via a flow path at which a sensor assembly is arranged, the method comprising: obtaining temperature data and pressure data corresponding to a gas emitted by the gas source, obtaining indicia of whether there has been a barometric change at either the gas source or the sensor assembly, adjusting, if there is a barometric change, the pressure data to account for the barometric change, and determining a flow rate of gas emitted by the gas source, a proportion of an emissions present in the gas emitted from the gas source, and a flow rate or volume of the emissions being released based on the pressure data and the temperature data.

Abstract: Enhancing data processing is provided. A plurality of derivative application instances is generated to run a plurality of parallel jobs based on an image of an instance of an application providing a service corresponding to a data processing request. One derivative application instance is generated for each respective job of the plurality of parallel jobs to run the plurality of parallel jobs to meet defined data processing performance objectives. The plurality of parallel jobs is run on the plurality of derivative application instances at the same time in parallel to increase data processing throughput and decrease an amount of time and resources needed to fulfill the data processing request. Each job of the plurality of parallel jobs retrieves a particular chunk of a dataset corresponding to the data processing request from a database to process that particular chunk of the dataset to generate a sub-result of the data processing request.

Abstract: The present disclosure relates to a method for authentication with identity providers via a federating authorization server, wherein the federating authorization server has at least one interface to at least one identity provider. Each identity provider is configured to validate user identities using a respective validation method. The method comprises: receiving login data via a webpage, the login data indicating at least an identity provider and a user. The validation method of the indicated identity provider may be determined using the login data. An update of the content of the webpage may be caused for enabling the determined validation method. Identity information of the user may be provided via the updated webpage and verifying the identity information using the determined validation method.

Abstract: Mechanisms are provided for dispatching requests to service instances based on data storage boundaries. A request specifying an identity is received and dispatched to a service instance of a data storage boundary, where each data storage boundary is defined by a regulation or policy restricting data storage of specific types of data to computing devices within a specified boundary. A feedback response, specifying a target location, is received from the service instance in response to determining that the service instance cannot access the data because the data is associated with a different data storage boundary. A dynamic dispatch rule specifying the identity and the target location is generated and a subsequent request specifying the identity is processed by executing this dynamic dispatch rule to dispatch the subsequent request directly to a service instance associated with the target location.

Abstract: A physically unclonable function (PUF) device comprises a plurality of optical fibres, at least some of which are arranged such that they are optically coupled. A media surround at least a portion of the optical fibres and at least one light source is configured to transmit light through one or more of the optical fibres. There is provided at least one light sensor configured to receive the transmitted light from one or more of the optical fibres and provide an output. Circuitry applies a challenge signal to at least one of the fibres using at least one light source and receives the output from the at least one light sensor, using the output to generate an identifying response to the challenge signal. The fibres are arranged such that the identifying response is unique to the device.

Abstract: A physically unclonable function (PUF) device comprises a plurality of optical fibres, at least some of which are arranged such that they are optically coupled. A media surround at least a portion of the optical fibres and at least one light source is configured to transmit light through one or more of the optical fibres. There is provided at least one light sensor configured to receive the transmitted light from one or more of the optical fibres and provide an output. Circuitry applies a challenge signal to at least one of the fibres using at least one light source and receives the output from the at least one light sensor, using the output to generate an identifying response to the challenge signal. The fibres are arranged such that the identifying response is unique to the device.

Abstract: A computer implemented method for deprovisioning a virtual machine is provided. A number of processor units initializes a deprovisioning agent within the virtual machine. The number of processor units monitors a set of metrics in the virtual machine using the deprovisioning agent. The number of processor units deprovisions the virtual machine using the deprovisioning agent in response to the set of metrics meeting a set of criteria for deprovisioning the virtual machine.

Abstract: An expert interface component can automatically connect a system user with a system support expert. A user interface module can present a threat-tracking graphical user interface and a query interface component integrated into the threat-tracking graphical user interface to a system user belonging to a client team to review a potential cyber threat and receive a query for assistance. The query interface component can allow the system user to digitally grab a visual data container displaying information and containing a data object. The query interface component can collect the visual data container from the threat-tracking graphical user interface into a collection window of the query interface component. A communication module provides an incident ticket containing the query and the visual data container to a system support expert at a remote platform.

Abstract: A physically unclonable function (PUF) comprises a plurality of conductors, at least some of which are arranged so that they interact electrically and/or magnetically with one another. A media surrounds at least of portion of each of the conductors and further defines at least one cavity, where the cavity is structured to provide the device with an environmentally dependent characteristic. Circuitry applies an electrical challenge signal to at least one of the conductors and receives an electrical output from at least one of the other conductors to generate an identifying response to the challenge signal that is unique to the device.

Abstract: A physically unclonable function (PUF) device comprises a plurality of conductors, at least some of which are arranged so that they interact electrically and/or magnetically with one another. A media surrounds at least a portion of each of the conductors and a plurality of temperature compensation particles are arranged throughout the media, where the temperature compensation particles have a temperature coefficient selected such that they compensate for temperature-related effects in the PUF device by making the permittivity and/or permeability of the media substantially temperature independent. Circuitry applies an electrical challenge signal to at least one or the conductors and receives an electrical output from at least one of the other conductors to generate an identifying response to the challenge signal that is unique to the device.

Abstract: A physically unclonable function (PUF) device comprises a plurality of conductors, at least some of which are arranged so that they interact electrically and/or magnetically with one another. A media surrounds at least a portion of each of the conductors, and circuitry is configured for applying an electrical challenge signal to at least one of the conductors and for receiving an electrical output from at least one of the other conductors to generate an identifying response to the challenge signal that is unique to the device. The media comprises a plurality of interactive regions, the interactive regions having an electrical and/or magnetic response characteristic which is permanently altered in response to a predetermined environmental event, and the identifying response is altered with the response characteristic.

Abstract: An arrangement for determining a magnitude of an electrical current flowing through a busbar. The arrangement has a measurement conductor which is electrically connected at a first contact point to the busbar and which extends from the first contact point to a second contact point. A third contact point is located on the busbar at a spacing distance from the first contact point. A voltage measurement device is configured to measure a voltage between the second contact point and the third contact point. The arrangement also has a controlled current source which is configured to introduce a measurement current into the measurement conductor.

Abstract: A computer-implemented method for executing a serverless workload on a transient infrastructure is disclosed. The method comprises receiving a request for executing a workload and at least one policy, selecting an infrastructure component of the transient infrastructure for an execution of the workload, wherein the transient infrastructure is implemented utilizing a plurality of geographically distributed computing nodes, and executing the workload on the transient infrastructure. Furthermore, the method comprises upon receiving an interfering event during the execution of the workload causing a stop of the workload execution, freezing the execution of the workload, storing intermediate results and statuses of the workload execution in a cross-domain storage system, terminating the execution of the workload, and continuing the workload execution using the intermediate results and under a constraint defined by the at least one policy.

Abstract: Mechanisms are provided for dispatching requests to service instances based on data storage boundaries. A request specifying an identity is received and dispatched to a service instance of a data storage boundary, where each data storage boundary is defined by a regulation or policy restricting data storage of specific types of data to computing devices within a specified boundary. A feedback response, specifying a target location, is received from the service instance in response to determining that the service instance cannot access the data because the data is associated with a different data storage boundary. A dynamic dispatch rule specifying the identity and the target location is generated and a subsequent request specifying the identity is processed by executing this dynamic dispatch rule to dispatch the subsequent request directly to a service instance associated with the target location.

Abstract: An expert interface component can automatically connect a system user with a system support expert. A user interface module can present a threat-tracking graphical user interface and a query interface component integrated into the threat-tracking graphical user interface to a system user belonging to a client team to review a potential cyber threat and receive a query for assistance. The query interface component can allow the system user to digitally grab a visual data container displaying information and containing a data object. The query interface component can collect the visual data container from the threat-tracking graphical user interface into a collection window of the query interface component. A communication module provides an incident ticket containing the query and the visual data container to a system support expert at a remote platform.

Abstract: A unit verification method to be performed on a unit under test (UUT) comprises connecting a verification device to the UUT. The verification device applies a set of challenge signals to the UUT and then measures the responses of the UUT to the challenge signals. The responses of the UUT are based on the challenge signals and the physical properties of the UUT. A registration key is generated based on the measured responses and is stored. The registration key is unique to the UUT.

Abstract: A method, system, and computer program product for implementing automated serverless runtime container allocation is provided. The method includes defining a number of runtime containers and associated characteristics required for each worker node of a plurality of worker nodes for execution of a specified workload. The specified workload is dispatched to the plurality of worker nodes and a specified portion of the specified workload is assigned to each worker node. An application executing a universal runtime container that includes potential application runtimes and associated supported software versions within a layered modifiable format is generated and unused layers are removed from the universal runtime container. The specified workload is executed via the universal runtime container and a set of available universal runtime containers is refilled on an associated work node.