Abstract: A system for producing a product is disclosed. The system includes a production facility for producing a product using a chemical process involving chemical reactions, and an information processing device comprising a computer processor that simulates, using a hybrid model, the chemical reactions in the chemical process that produces the product to obtain a predicted output, wherein the hybrid model is a combination of a first-principles model and a data-driven model, determines, using an observer model, expected concentrations and levels of all substrates for the simulated process, sets derived optimal conditions for the chemical process based on the estimated concentrations and levels of all substrates, and predicts future production results based on a current status of the production facility.

Abstract: A cloud node in a cloud-based system includes one or more processors and memory storing instructions that, when executed, cause the one or more processors to: communicate with a user associated with a tenant of a plurality of tenants; obtain policy and configuration for the user based on the tenant, from a central authority in the cloud-based system; provide the one or more cloud services to the user, based on the policy and configuration; and crawl one or more cloud providers having a plurality of files for the user, based on the policy and configuration. The cloud node is inline between a user device of the user and the Internet, as well as connected to the one or more cloud providers.

Abstract: A cloud management server and method for performing automatic placement of clients in a distributed computer system uses a list of compatible clusters to select an affinity cluster to place the clients associated with an affinity constraint. As part of the placement method, a cluster that cannot satisfy any anti-affinity constraint associated with the clients and the affinity constrain is removed from the list of compatible clusters. After the affinity cluster has been selected, at least one cluster in the distributed computer system is also selected to place clients associated with an anti-affinity constraint.

Abstract: A Cloud Access Security Broker (CASB) system includes a controller; a message broker connected to the controller; and a plurality of workers connected to the message broker and connected to one or more cloud providers having a plurality of files contained therein for one or more tenants, wherein the plurality of workers are configured to crawl through the plurality of files for the one or more tenants, based on policy and configuration for the one or more tenants provided via the controller, and based on assignments from the message broker. The plurality of workers can be further configured to cause an action in the one or more cloud providers based on the crawl and based on the policy and the configuration. The action can include any of allowing a file, deleting a file, quarantining a file, and providing a notification.

Abstract: Among other things, we describe systems and method for implementing data security in an autonomous vehicle system. The systems and methods can include inter-process communication security via key management, in which asymmetric cryptography and other validation techniques are used to validate data received from sensors. The systems and method can also include penetrative testing, in which valid sensor inputs are modified and transmitted throughout a distributed network through one or more sensors.

Abstract: Among other things, we describe systems and method for implementing data security in an autonomous vehicle system. The systems and methods can include inter-process communication security via key management, in which asymmetric cryptography and other validation techniques are used to validate data received from sensors. The systems and method can also include penetrative testing, in which valid sensor inputs are modified and transmitted throughout a distributed network through one or more sensors.

Abstract: Various disclosed embodiments include illustrative door assemblies, vehicles, and methods of assembling door assemblies. In an illustrative embodiment, a door assembly has a right horizontal track, a left horizontal track, a counterbalance assembly having a right end and a left end, a right connector plate, and a left connector plate. The right connector plate is configured to be connected to the right horizontal track and to the right end of the counterbalance assembly. The left connector plate is configured to be connected to the left horizontal track and to the left end of the counterbalance assembly.

Abstract: Systems and methods include causing a scan by Cloud Access Security Broker (CASB) system of a plurality of users associated with a tenant in a Software-as-a-Service (SaaS) application where the scan includes any of identifying malware in content in the SaaS application and identifying confidential data in the content in the SaaS application; during the scan which is covering historical data in the SaaS application, receiving notifications of the content being actively modified by any of the plurality of users; and including the content being actively modified in the scan with the historical data. The systems and methods can further include maintaining geolocation of the any of the plurality of users; and causing the content being actively modified in the scan to be processed by the CASB system based on the geolocation.

Abstract: Power consumption by a first host included in a plurality of hosts in a clustered computing system, where each of the hosts executes one or more applications, is managed by detecting that a utilization level of the first host falls below a threshold value and, responsive to the detecting, migrating one or more applications executing on the first host to a second host. After the migration is completed, the first host is caused to consume less power while remaining powered on.

Abstract: A Cloud Access Security Broker (CASB) system includes a controller; a message broker connected to the controller; and a plurality of workers connected to the message broker and connected to one or more cloud providers having a plurality of files contained therein for one or more tenants, wherein the plurality of workers are configured to crawl through the plurality of files for the one or more tenants, based on policy and configuration for the one or more tenants provided via the controller, and based on assignments from the message broker. The plurality of workers can be further configured to cause an action in the one or more cloud providers based on the crawl and based on the policy and the configuration. The action can include any of allowing a file, deleting a file, quarantining a file, and providing a notification.

Abstract: A cloud management server and method for performing automatic placement of clients in a distributed computer system uses a list of compatible clusters to select an affinity cluster to place the clients associated with an affinity constraint. As part of the placement method, a cluster that cannot satisfy any anti-affinity constraint associated with the clients and the affinity constrain is removed from the list of compatible clusters. After the affinity cluster has been selected, at least one cluster in the distributed computer system is also selected to place clients associated with an anti-affinity constraint.

Abstract: A cloud management server and method for performing automatic placement of clients in a distributed computer system uses a list of compatible clusters to select an affinity cluster to place the clients associated with an affinity constraint. As part of the placement method, a cluster that cannot satisfy any anti-affinity constraint associated with the clients and the affinity constrain is removed from the list of compatible clusters. After the affinity cluster has been selected, at least one cluster in the distributed computer system is also selected to place clients associated with an anti-affinity constraint.

Abstract: An imaging system captures images of a work surface having articles of cutlery distributed thereon. An end effector, such as a magnetic end effector, may be used to grasp articles of cutlery and place them in a designated location according to the type of the article of cutlery as determined using an image of the work surface and machine vision. A type of articles of cutlery may be classified based on the image such as according to category (knife, fork, spoon), size, or brand. Multiple articles of cutlery occluding one another may be dealt with by stirring or grasping multiple items and releasing them on a separate work surface in order to disperse them. Whether the end effector is grasping multiple articles of cutlery may be determined by capturing an image of the end effector. Machine vision may determine whether an article of cutlery is contaminated or damaged.

Abstract: A placement simulator is used for testing a placement engine in a virtual machine environment. The placement simulator includes a simulation controller, an event manager, and an inventory manager. The simulation controller receives input data for a simulated datacenter. The event manager invokes event handlers for a sequence of events from the input data. The inventory manager stores states of inventory objects to simulate deployment of virtual infrastructure resources by the placement engine based on the sequence of the events.

Abstract: Power consumption by a first host included in a plurality of hosts in a clustered computing system, where each of the hosts executes one or more applications, is managed by detecting that a utilization level of the first host falls below a threshold value and, responsive to the detecting, migrating one or more applications executing on the first host to a second host. After the migration is completed, the first host is caused to consume less power while remaining powered on.

Abstract: Among other things, we describe systems and method for implementing data security in an autonomous vehicle system. The systems and methods can include inter-process communication security via key management, in which asymmetric cryptography and other validation techniques are used to validate data received from sensors. The systems and method can also include penetrative testing, in which valid sensor inputs are modified and transmitted throughout a distributed network through one or more sensors.

Abstract: The present invention is directed to a composition suitable for forming an implanted light activated drug depot, methods of making the composition, and methods and systems for using the composition. The composition comprises a plurality of drug conjugates, which comprise a drug molecule and a small solubility modulating portion. The drug conjugates are insoluble upon implantation as a drug depot into a subject, and the drug is preferably soluble once cleaved from the depot. One aspect of the invention is directed to a drug conjugate having a modulating portion that modifies the solubility of the drug conjugate by employing a hydrophobic non-polar moiety. Another aspect of the invention is directed to a drug conjugate having a modulating portion that modifies the solubility of the drug by employing a charged moiety that shifts the isoelectric point of the drug conjugate to a physiological pH.

Abstract: Power consumption by a first host included in a plurality of hosts in a clustered computing system, where each of the hosts executes one or more applications, is managed by detecting that a utilization level of the first host falls below a threshold value and, responsive to the detecting, migrating one or more applications executing on the first host to a second host. After the migration is completed, the first host is caused to consume less power while remaining powered on.

Abstract: A turbine blade includes a labyrinth of internal channels for the circulation of coolant received through an inlet formed in a terminal portion of the blade root and leading to a duct-defined wall. A first passage intersects the duct and extends through the blade towards a tip. An end of the first passage is arranged to capture incoming coolant flow. A second passage intersects the duct at a position downstream of the first passage intersection. The duct and/or the passage intersections are configured to create a pressure drop in the duct in the direction from the inlet to the second passage intersection. In an axial direction, a duct wall terminates at a position between the inlet and the second passage intersection.

Abstract: In one embodiment, a method for making an payment from a buyer to an online seller includes providing the buyer with a mobile payment application that is operable when run on one or more processors of a mobile device of the buyer to effect payments to the seller using a payment service provider. The seller is provided with computer code that is operable when run on one or more processors of a web server of the seller to detect whether a mobile device of a buyer in communication with the server has the payment application installed thereon, and if the server detects that the buyer's device has the application installed thereon, the seller's server automatically redirects the buyer to a web server of the payment service provider to effect a payment from the buyer to the seller using the mobile payment application.