Abstract: An apparatus and/or method secures session communications between a first network (having a first encryption device configured to encrypt at least some session communications from the first network to the second network) and a second network. The apparatus and/or method receive, at the first network, given session packets of a given session between the first and second networks, and determine that at least one of the received given session packets is encrypted (“encrypted given session packet”). The given session involves a Layer 7 application that encrypted the at least one encrypted given session packet. Next, the apparatus and/or method controls, in response to determining that the given session packet is encrypted, the first encryption device to permit communication of the given session with the second network without further encrypting a plurality of the encrypted given session packets. Preferably, the first encryption device encrypts none of the given session packets.

Abstract: An intermediate node obtains a lead packet of a plurality of packets in a session having a unique session identifier, modifies the lead packet to identify at least the intermediate node, and then forwards the lead packet toward the destination node though an intermediate node electronic output interface to the IP network. The intermediate node also receives, through an intermediate node electronic input interface in communication with the IP network, a backward message from a next node having a next node identifier. The backward message includes the next node identifier and the session identifier. The intermediate node forms an association between the next node identifier and the session identifier, stores the association in memory to maintain state information for the session, and obtains (e.g., receives) additional packets of the session. Substantially all of the additional packets in the session are forwarded toward the next node using the stored association.

Abstract: A method of routing data across a network receives a session request from a client node to access at least one node in a local network having a plurality of nodes. The method also receives a client certificate (e.g., a digital certificate at least partially specified by known standards, such as the “X509 Standard”) from the client node. The client certificate has client information specifying at least one node to receive packets from the client node. Next, the method uses the client certificate to execute an authentication process. If the authentication process authenticates the client node, then the method routes data packets from the client node to at least one node in the local network as specified by the client information in the client certificate.

Abstract: A system and method for automatically generating radiation therapy treatment plans including one or more processors configured to capture geometries of organs at risk and a target volume specific to a subject, and use a shape-based algorithm to mine (152) a knowledgebase (38) of previously constructed treatment plans for similar geometries to the subject. The system and method interfaces (154) dosimetric information from a plan with a similar geometry as a patient specific starting point for a progressive tuning optimization algorithm resulting in fewer iterations. The progressive tuning algorithm (156, 158, 162) generates an optimized treatment plan. The optimized plan is evaluated against treatment goals. Trade-off plans are generated (164) create alternative plans according to unmet treatment goals.

Abstract: An intermediate node obtains a lead packet of a plurality of packets in a session having a unique session identifier, modifies the lead packet to identify at least the intermediate node and also to identify source and destination port numbers assigned by the intermediate node for a possible forward association, and then forwards the lead packet toward the destination node though an intermediate node electronic output interface to the IP network. The intermediate node also may receive, through an intermediate node electronic input interface in communication with the IP network, a backward message from a next node having a next node identifier. Both the intermediate node and the next node form an association between the intermediate node identifier, the next node identifier, and the source and destination port numbers assigned by the intermediate node. This association is part of a forward association for the intermediate node and is part of a return associate for the next node.

Abstract: An advanced routing system and protocol (referred to herein as “Route Exchange” or “REX”) hides familiar IPv4 and IPv6 addresses and replaces traditional routing logic with words and relationships between named elements. Among other things, this makes IP routing tables significantly easier to understand. In addition, a single routing scheme can be used for any combination of private networks, public networks, IPv4 addressing models, and IPv6 addressing models. Underneath the words lie real IP addresses that move the packets from place to place. These routing addresses abstract away the underlying network.

Abstract: A method of routing data across a network receives a session request from a client node to access at least one node in a local network having a plurality of nodes. The method also receives a client certificate (e.g., a digital certificate at least partially specified by known standards, such as the “X509 Standard”) from the client node. The client certificate has client information specifying at least one node to receive packets from the client node. Next, the method uses the client certificate to execute an authentication process. If the authentication process authenticates the client node, then the method routes data packets from the client node to at least one node in the local network as specified by the client information in the client certificate.

Abstract: Embodiments of the invention relate techniques of implementing role-driven notification. The techniques can include determining a location of a role in a role hierarchy and a corresponding location of a first notification template in a notification template hierarchy. The techniques can also include identifying one or more child roles of the role corresponding to the user and one or more child notification templates of the notification template corresponding to the user. The techniques can include generating a second notification template, the second notification template including the one or more rules included in each of the one or more child notification templates and sending a notification for the user based on the second notification template.

Abstract: A method processes a session having a first session packet received by a current node in an IP network having a plurality of nodes. The plurality of nodes includes a next node, and the current node that communicates with the next node using a Layer 3 protocol. The method receives the first session packet, which has a digital signature, payload data, and meta-data, at the current node. The method uses the payload data and meta-data to produce validation information, and uses the digital signature to produce a comparator digital signature. Next, the method compares the validation information with the comparator digital signature. If the validation information does not match the comparator digital signature, then the method discards the first session packet. If there is a match, then the method digitally signs the first session packet, and routes the first session packet to the next node via the IP network.

Abstract: An intermediate node obtains a lead packet of a plurality of packets in a session having a unique session identifier, modifies the lead packet to identify at least the intermediate node, and then forwards the lead packet toward the destination node though an intermediate node electronic output interface to the IP network. The intermediate node also receives, through an intermediate node electronic input interface in communication with the IP network, a backward message from a next node having a next node identifier. The backward message includes the next node identifier and the session identifier. The intermediate node forms an association between the next node identifier and the session identifier, stores the association in memory to maintain state information for the session, and obtains (e.g., receives) additional packets of the session. Substantially all of the additional packets in the session are forwarded toward the next node using the stored association.

Abstract: In a turbomachine having an inlet, a compressor, and a turbine, a closed loop sends fluid from a stage of the compressor to a heat exchanger in the turbine and to the inlet. The closed loop heats the fluid, cools the turbine, and delivers heated fluid to the inlet. A mixer can be interposed between the heat exchanger and the inlet to mix fluid from the heat exchanger with compressor discharge fluid, delivering the mixed fluid to the inlet. The mixer can control flow received so that desired temperature and/or flow rate can be provided to the inlet.

Abstract: Interactive mesh deformation for in-plane 3D segmentation/delineation for radiation therapy planning done on a slice by slice basis of a region/a volume of interest (VOI, ROI). Segmentation starts by some automatic 3D algorithm approximating the organ surface roughly by some triangular surface mesh which mesh is afterwards manually refined by the user who deforms it to bring it closer to the region of interest. The deformation is an invertible, i.e. one-to-one, mapping avoiding self-intersections of the deformed mesh thereby preserving the topology of the anatomy. The deformation mapping involves a Gaussian function (Gaussian deformation kernel) restricting the deformation to a local region. The user picks with the pointer a start point on a selected image slice through the volume and moves it to some end point. The distance the mesh vertices move decreases exponentially with the distance to the start point.

Abstract: The present invention is directed to a continuous process for preparing PBT from PBT oligomer.

Abstract: Implementations of the present disclosure generally relate to the fabrication of integrated circuits. More particularly, the implementations described herein provide techniques for deposition of boron-containing amorphous carbon films on a substrate with reduced particle contamination. In one implementation, the method comprises flowing a hydrocarbon-containing gas mixture into a processing volume having a substrate positioned therein, flowing a boron-containing gas mixture into the processing volume, stabilizing the pressure in the processing volume for a predefined RF-on delay time period, generating an RF plasma in the processing volume after the predefined RF-on delay time period expires to deposit a boron-containing amorphous film on the substrate, exposing the processing volume of the process chamber to a dry cleaning process and depositing an amorphous boron season layer over at least one surface in the processing volume of the process chamber.

Abstract: An improved process for making polybutylene terephthalate resin is disclosed. The resin is prepared from oligomers of purified terephthalic acid and 1,4-butane diol in the presence of a catalyst.

Abstract: Various embodiments of systems, computer program products, and methods for dynamically designing webpages are described herein. In an aspect, a request for designing a webpage may be received. Based upon the request, a metadata related to the webpage may be identified. Based upon the identified metadata, one or more widgets for designing the webpage may be rendered. A selection of a widget from the one or more widgets may be received from a user. Multiple sections of the webpage and the widgets positioned in corresponding sections may be identified. The identified widgets of the webpage may be integrated with one or more security rules.

Abstract: A planning image memory (14) stores a volume diagnostic image. A user inputs data defining clinical objectives including organs-at-risk with a user interface device (32). An auto-planning module (36) generates a candidate treatment plan. A trade-off module (38) having a processor evaluates the treatment plan against the clinical objectives. When one or more objectives is not met, the trade-off module (38) performs a trade-off analysis to determine an effect on other clinical objectives and generates at least one trade-off treatment plan which more closely meets the not met objectives. The candidate and at least one trade-off plan are displayed on a display device (30) and/or analyzed by the processor and a final treatment plan is selected from the at least one trade-off or candidate treatment plan.

Abstract: Techniques are disclosed for methods and apparatuses of an electrostatic chuck suitable for operating at high operating temperatures. In one example, a substrate support assembly is provided. The substrate support assembly includes a substantially disk-shaped ceramic body having an upper surface, a cylindrical sidewall, and a lower surface. The upper surface is configured to support a substrate thereon for processing the substrate in a vacuum processing chamber. The cylindrical sidewall defines an outer diameter of the ceramic body. The lower surface is disposed opposite the upper surface. An electrode is disposed in the ceramic body. A circuit is electrically connected to the electrode. The circuit includes a DC chucking circuit, a first RF drive circuit, and a second RF dive circuit. The DC chucking circuit, the first RF drive circuit and the second RF drive circuit are electrically coupled with the electrode.

Abstract: Methods, systems, apparatuses, and computer program products are provided for developing user applications that include workflows, and in particular, for developing the user applications and workflows in parallel. A first user interface is provided on a display screen that enables a graphical user interface (GUI) of a user application to be configured. Controls are enabled to be selected for inclusion in the GUI of the user application. Workflow logic is enabled to be associated with a control included in the GUI. A second user interface is provided on the display screen concurrent with the first user interface. The second user interface enables the workflow logic to be generated. Steps are enabled to be selected for inclusion in the workflow logic. Each step is configured to operate on data entered via the GUI and/or data of another step of the workflow logic.

Abstract: A workflow development system is described herein that includes a graphical user interface (GUI) that is configured to selectively and dynamically allocate relatively more of a display area to a particular one of a plurality of different, simultaneously-displayed workflow step representations than is allocated to the other workflow step representation(s) to facilitate user interaction the particular workflow step representation. Such allocation may be carried out in response to user interaction with the particular workflow step representation or in response to a determination that a user is otherwise focused on the particular workflow step representation. In embodiments, the workflow step representations represent different workflow steps in a series of workflow steps. In further embodiments, the workflow step representations represent different workflow steps that may be performed depending upon the evaluation of a condition.