Abstract: This disclosure generally relates to a battery kiosk that houses and distributes rechargeable batteries for light electric vehicles. The battery kiosk includes various visual indicators that are activated based on the individual's progress with a rechargeable battery exchange process.

Abstract: Improved fluoresced imaging (FI) and other sensor data imaging processes, devices, and systems are provided to enhance display of different secondary types of images and reflected light images together. Reflected light images are converted to a larger color space in a manner that preserves the color information of the reflected light image. FI or secondary images are transformed to a color range within the larger color space, but outside the color area of the reflected light images, allowing the FI or secondary images to be combined with them in a manner with improved distinguishability of color. Hardware designs are provided to enable real-time processing of image streams from medical scopes. The combined images are encoded for an electronic display capable of displaying the larger color space.

Abstract: Attestation of operations by tool chains is described. An example of a storage medium includes instructions for receiving source code for processing of a secure workload of a tenant; selecting at least a first compute node to provide computation for the workload; processing the source code by an attestable tool chain to generate machine code for the first compute node, including performing one or more conversions of the source code by one or more convertors to generate converted code and generating an attestation associated with each code conversion, and receiving machine code for the first compute node and generating an attestation associated with the first compute node; and providing each of the attestations from the first stage and the second stage for verification.

Abstract: In one embodiment, metadata associated with deployment of a container within an orchestration environment includes information indicating security preferences for deployment of the container within the orchestration environment, information indicating a level of communications between the container and other containers, and/or information indicating effects of execution of the container with respect to other containers. The metadata is used to select a particular node of a plurality of nodes within the orchestration environment on which to deploy the container based on the metadata.

Abstract: An endoscope for imaging a fluorescent agent in a patient, the endoscope having a first optical channel communicating light from a first light source and a second light source, the first light source having an excitation wavelength and the second light source having a wavelength different than the wavelength of the first light source; a field stop having a fluorescent indicator; and a second optical channel in optical communication with the first light source and in optical communication with the fluorescent indicator on the field stop. When light from the first light source illuminates the fluorescent indicator on the field stop, the fluorescent indicator is detectable. Image processing components used with the endoscope can identify the fluorescent indicator, or lack thereof, and transmit information to a user.

Abstract: Example methods and systems are directed to reducing latency in providing trusted execution environments (TEES). Initializing a TEE includes multiple steps before the TEE starts executing. Besides workload-specific initialization, workload-independent initialization is performed, such as adding memory to the TEE. In function-as-a-service (FaaS) environments, a large portion of the TEE is workload-independent, and thus can be performed prior to receiving the workload. Certain steps performed during TEE initialization are identical for certain classes of workloads. Thus, the common parts of the TEE initialization sequence may be performed before the TEE is requested. When a TEE is requested for a workload in the class and the parts to specialize the TEE for its particular purpose are known, the final steps to initialize the TEE are performed.

Abstract: Detailed herein are systems, apparatuses, and methods for a computer architecture with instruction set support to mitigate against page fault- and/or cache-based side-channel attacks. In an embodiment, an apparatus includes a decoder to decode a first instruction, the first instruction having a first field for a first opcode that indicates that execution circuitry is to set a first flag in a first register that indicates a mode of operation that redirects program flow to an exception handler upon the occurrence of an event. The apparatus further includes execution circuitry to execute the decoded first instruction to set the first flag in the first register that indicates the mode of operation and to store an address of an exception handler in a second register.

Abstract: This disclosure generally relates to a battery kiosk that houses and distributes rechargeable batteries for light electric vehicles. The battery kiosk includes various visual indicators that are activated based on the individual's progress with a rechargeable battery exchange process.

Abstract: Detailed herein are systems, apparatuses, and methods for a computer architecture with instruction set support to mitigate against page fault and/or cache-based side-channel attacks. In an embodiment, a processor includes a decoder to decode an instruction into a decoded instruction, the instruction comprising a first field that indicates an instruction pointer to a user-level event handler; and an execution unit to execute the decoded instruction to, after a swap of an instruction pointer that indicates where an event occurred from a current instruction pointer register into a user-level event handler pointer register, push the instruction pointer that indicates where the event occurred onto call stack storage, and change a current instruction pointer in the current instruction pointer register to the instruction pointer to the user-level event handler.

Abstract: An endoscope for imaging a fluorescent agent in a patient, the endoscope having a first optical channel communicating light from a first light source and a second light source, the first light source having an excitation wavelength and the second light source having a wavelength different than the wavelength of the first light source; a field stop having a fluorescent indicator; and a second optical channel in optical communication with the first light source and in optical communication with the fluorescent indicator on the field stop. When light from the first light source illuminates the fluorescent indicator on the field stop, the fluorescent indicator is detectable. Image processing components used with the endoscope can identify the fluorescent indicator, or lack thereof, and transmit information to a user.

Abstract: Improved fluoresced imaging (FI) and other sensor data imaging processes, devices, and systems are provided to enhance display of different secondary types of images and reflected light images together. Reflected light images are converted to a larger color space in a manner that preserves the color information of the reflected light image. FI or secondary images are transformed to a color range within the larger color space, but outside the color area of the reflected light images, allowing the FI or secondary images to be combined with them in a manner with improved distinguishability of color. Hardware designs are provided to enable real-time processing of image streams from medical scopes. The combined images are encoded for an electronic display capable of displaying the larger color space.

Abstract: This disclosure generally relates to a battery kiosk that houses and distributes rechargeable batteries for light electric vehicles. The battery kiosk includes various visual indicators that are activated based on the individual's progress with a rechargeable battery exchange process.

Abstract: This disclosure generally relates to a battery kiosk that houses and distributes rechargeable batteries for light electric vehicles. The battery kiosk includes various visual indicators that are activated based on the individual's progress with a rechargeable battery exchange process.

Abstract: Improved fluoresced imaging (FI) and other sensor data imaging processes, devices, and systems are provided to enhance display of different secondary types of images and reflected light images together. Reflected light images are converted to a larger color space in a manner that preserves the color information of the reflected light image. FI or secondary images are transformed to a color range within the larger color space, but outside the color area of the reflected light images, allowing the FI or secondary images to be combined with them in a manner with improved distinguishability of color. Hardware designs are provide to enable real-time processing of image streams from medical scopes. The combined images are encoded for an electronic display capable of displaying the larger color space.

Abstract: Detailed herein are systems, apparatuses, and methods for a computer architecture with instruction set support to mitigate against page fault- and/or cache-based side-channel attacks. In an embodiment, an apparatus includes a decoder to decode a first instruction, the first instruction having a first field for a first opcode that indicates that execution circuitry is to set a first flag in a first register that indicates a mode of operation that redirects program flow to an exception handler upon the occurrence of an event. The apparatus further includes execution circuitry to execute the decoded first instruction to set the first flag in the first register that indicates the mode of operation and to store an address of an exception handler in a second register.

Abstract: In a method for protecting extra-enclave communications, a data processing system allocates a portion of random access memory (RAM) to a server application that is to execute at a low privilege level, and the data processing system creates an enclave comprising the portion of RAM allocated to the server application. The enclave protects the RAM in the enclave from access by software that executes at a high privilege level. The server application obtains a platform attestation report (PAR) for the enclave from the processor. The PAR includes attestation data from the processor attesting to integrity of the enclave. The server application also generates a public key certificate for the server application. The public key certificate comprises the attestation data. The server application utilizes the public key certificate to establish a transport layer security (TLS) communication channel with a client application outside of the enclave. Other embodiments are described and claimed.

Abstract: A method for searching in an encrypted database includes the following steps. A search is formulated as a conjunct of two or more atomic search queries. One of the conjuncts is selected as a primary atomic search query. Search capabilities are generated for a secondary atomic search query using the primary atomic search query and the secondary atomic search query.

Abstract: A method comprises receiving a first cryptographic token for one search term and a second cryptographic token is generated using the one search term and at least another search term. A first search is conducted using the first cryptographic token to generate a first result set, and the second cryptographic token is used for computing a subset of results of the first result set.

Abstract: Methods and arrangements for protecting enterprise data with respect to a hybrid application in a mobile device that accesses a global computer information network using enterprise infrastructure. A hybrid application is recognized in a mobile device, the hybrid application being configured to communicate with an enterprise network and a non-enterprise network. There are provided, in communication with the hybrid application, controls for segregating data flows from the enterprise network and non-enterprise network. A policy service is provided, which applies a policy for the segregating and governed routing of data flows from the enterprise network and the non-enterprise network. Other variants and embodiments are broadly contemplated herein.

Abstract: Improved fluoresced imaging (FI) and other sensor data imaging processes, devices, and systems are provided to enhance display of different secondary types of images and reflected light images together. Reflected light images are converted to a larger color space in a manner that preserves the color information of the reflected light image. FI or secondary images are transformed to a color range within the larger color space, but outside the color area of the reflected light images, allowing the FI or secondary images to be combined with them in a manner with improved distinguishability of color. Hardware designs are provide to enable real-time processing of image streams from medical scopes. The combined images are encoded for an electronic display capable of displaying the larger color space.