Abstract: According to various embodiments, a forensics module (250) for an embedded system may comprise: a secured memory area (202s) comprising first data implementing a key (305s); an interface (208) for reading (301) second data (302) representing a system state of the embedded system (150); and one or more than one processor (204) configured to: read (301) the second data (302) by means of the interface (208), wherein the second data (302) comprises a plurality of data sets; determine (303) a commitment (310) to a plurality of aperture values, each aperture value being associated with exactly one of the plurality of data sets, based on the second data (302) and using a cryptographic commitment process configured such that each data set may be individually verified using the commitment (310) and the respective associated aperture value; encrypt (305) the second data (302) and the plurality of aperture values using the key (305s).

Abstract: According to various embodiments, a forensics module (250) for an embedded system may comprise: a firewall (612); an interface (208) for communicating with an embedded system (150); at least one memory area (202s) secured by means of a firewall (612) and/or separated from the interface, comprising first data implementing a reference key; one or more than one processor (204) configured to perform an authentication sequence for a system startup sequence of the embedded system (150), wherein the authentication sequence is privileged to penetrate the firewall (612) and comprises: determining, prior to executing a first stage of the system startup sequence, a first key using a cryptographic process based on: stored first stage second data, and the reference key, and preferably a unique verification key; determining, upon executing the first stage and/or prior to executing a subsequent second stage of the system startup sequence, a second key using the cryptographic process based on: stored second stage third data

Abstract: According to various embodiments, a forensics module (250) for an embedded system may comprise: a secured memory area (202s) comprising first data implementing a key (305s); an interface (208) for reading (301) second data (302) representing a system state of the embedded system (150); and one or more than one processor (204) configured to: read (301) the second data (302) by means of the interface (208), wherein the second data (302) comprises a plurality of data sets; determine (303) a commitment (310) to a plurality of aperture values, each aperture value being associated with exactly one of the plurality of data sets, based on the second data (302) and using a cryptographic commitment process configured such that each data set may be individually verified using the commitment (310) and the respective associated aperture value; encrypt (305) the second data (302) and the plurality of aperture values using the key (305s).

Abstract: According to various embodiments, a forensics module (250) for an embedded system may comprise: a firewall (612); an interface (208) for communicating with an embedded system (150); at least one memory area (202s) secured by means of a firewall (612) and/or separated from the interface, comprising first data implementing a reference key; one or more than one processor (204) configured to perform an authentication sequence for a system startup sequence of the embedded system (150), wherein the authentication sequence is privileged to penetrate the firewall (612) and comprises: determining, prior to executing a first stage of the system startup sequence, a first key using a cryptographic process based on: stored first stage second data, and the reference key, and preferably a unique verification key; determining, upon executing the first stage and/or prior to executing a subsequent second stage of the system startup sequence, a second key using the cryptographic process based on: stored second stage third data

Abstract: A managing computing device positioned in an ATM can receive a dispense request for an amount of currency and account information from a user. A controller of a currency dispenser can generate a first number. The first number, the dispense request, and the account information can be sent to a remote, host computing device that shares a secret key with the controller. The host device can generate a first message authentication code (MAC) based on at least one of the first number and the amount of currency and can send it to the controller. The controller can generate a second MAC based on at least one of the first number and the amount of currency, confirm identity between the first and second MACs, and control the currency dispenser to dispense the amount of currency to the user.

Abstract: A managing computing device positioned in an ATM can receive a dispense request for an amount of currency and account information from a user. A controller of a currency dispenser can generate a first number. The first number, the dispense request, and the account information can be sent to a remote, host computing device that shares a secret key with the controller. The host device can generate a first message authentication code (MAC) based on at least one of the first number and the amount of currency and can send it to the controller. The controller can generate a second MAC based on at least one of the first number and the amount of currency, confirm identity between the first and second MACs, and control the currency dispenser to dispense the amount of currency to the user.

Abstract: An advertising system includes at least one source of dynamic data (e.g., weather, sport scores, airline prices/availability . . . ) and an advertisement (e.g., an advertisement for a product or service). Software running on a processor receives the dynamic data from the at least one source of dynamic data, analyzes the dynamic data as related to the advertisement, and determines a priority for the advertisement. The software then controls placement of the advertisement based upon the priority. In some embodiments, the advertisement is modified based upon the dynamic data and/or includes some part of the dynamic data.

Abstract: A cooling arrangement for an internal combustion engine is described, with a coolant balancing tank which is capable of being filled with coolant and the inlet side of which is connected via a first venting line to an internal combustion engine and/or via a second venting line to a cooler for cooling the coolant, and the outlet side of which is connected via a coolant return line to the inlet side of a pumping device for pumping the coolant through the internal combustion engine. The cooling arrangement has, furthermore, a flow control unit for variably limiting the coolant volume flow in the venting line.

Abstract: A cooling arrangement for an internal combustion engine is described, with a coolant balancing tank which is capable of being filled with coolant and the inlet side of which is connected via a first venting line to an internal combustion engine and/or via a second venting line to a cooler for cooling the coolant, and the outlet side of which is connected via a coolant return line to the inlet side of a pumping device for pumping the coolant through the internal combustion engine. The cooling arrangement has, furthermore, a flow control unit for variably limiting the coolant volume flow in the venting line.

Abstract: A rear suspension system for a bicycle is disclosed. The system includes a link member (30) and chain stay (20) each pivotably mounted to the sprung mass. The seat stay (18) mounts the rear axle (22) and is pivotably mounted at its upper end to link member (30) and is pivotably mounted at a point intermediate its length to chain stay (20).