Abstract: A computer system may receive one or more requests for access to one or more cloud services and may store the one or more requests in a request log. The computer system may receive one or more access rules applicable to cloud service access rights. The computer system may aggregate the one or more requests of the request log to determine access requirements for a container, the container being configured to store one or more applications. The computer system may generate and store container access policies that define access of a container and the one or more cloud services, the container access policies based at least in part on the aggregated one or more requests and the one or more access rules. The computer system may send the container access policies to a request forwarder of a compute instance in a production environment.

Abstract: Techniques are described for performing packet level data centric protection enforcement. Instead of being restricted to perimeter-based security and defining and creating rules that are difficult to maintain, techniques described herein allow users to create data-centric, intent-based policies that are enforced at different enforcement points within one or more networks. In some examples, a method comprises receiving a packet at an enforcement point (EP) within one or more networks that include a plurality of enforcement points (EPs); accessing enforcement data that indicates allowed communications between the EP and one or more other EPs, wherein the data are generated from a policy that specifies how traffic flows the one or more networks and a determination of possible data movements between at least two of EPs in the plurality of EPs; and enforcing the flow of the packet at the EP based on the data.

Abstract: Techniques are described for using taints and assertions to protect data within one or more networks. Instead of being restricted to perimeter-based security and defining and creating rules that are difficult to maintain, techniques described herein allow users to protect data using assertions that are enforced at different enforcement points within one or more networks. According to some configurations, the assertions/policy statements defined by a user specify where data is allowed to travel throughout one or more networks. Assertions/policy statements can be as simple as “Red data never leaves my tenancy”, “Blue data never reaches the internet”, “Blue data is not stored with Red data”, “Green data never leaves Data Zone 2”, and the like. In some examples, a policy statement can protect the flow of data based on a number of hops the resource is from where the data is stored.

Abstract: Systems and methods for analysing milk are described. A plurality of First Type Sensors (FTPs) are provided, each associated with a respective one of a plurality of Milking Clusters (MKs) of a milking system and configured to analyse milk extracted from an animal by the MK to determine at least one FTP value of a parameter of the milk across an event period. At least one of a Second Type Sensor (STP) associated with at least one of the plurality of MKs is configured to analyse the milk to determine at least one STP value of the parameter within the event period, wherein the STP is less susceptible to animal specific bias than the FTP. An Animal Specific Bias Correction (ASBC) is determined based on the at least one FTP value and the at least one STP value and applied to FTP values for milk extracted from the animal.

Abstract: A signal from a mobile communication device (102) of an unmanned aerial vehicle (103) is received, via cellular network communication, by each of a plurality of cellular network base stations (106, 107, 108). A position of the unmanned aerial vehicle (103) is determined based on a triangulation operation performed using the signal received by the cellular network base stations (106, 107, 108). Vehicle navigational data derived from the position determination is used to determine that a navigation assistance notification should be communicated to a notification receiver (102, 114) and, in response, communication of the navigation assistance notification to the notification receiver (102, 114) is initiated.

Abstract: A mobile communication device (102) of a vehicle (103) is associated with a navigation system (202). Vehicle navigational data derived from the navigation system (202) is received, via cellular network communication, from the mobile communication device (102) of a vehicle (103). The vehicle navigational data is used to determine that a navigation assistance notification should be communicated to the mobile communication device (102) and, in response, communication of the navigation assistance notification to the mobile communication device (102) is initiated.

Abstract: The invention generally relates to systems and methods for separating ions at about or above atmospheric pressure. In certain embodiments, the invention provides systems that include an ionization source that generates ions and an ion trap. The ion trap is maintained at about or above atmospheric pressure and includes a plurality of electrodes and at least one inlet configured to receive a gas flow and at least one outlet. The system is configured such that a combination of a gas flow and one or more electric fields produced by the electrodes separates the ions based on mass-to-charge ratio and sends the separated ions through the at least one outlet of the ion trap.

Abstract: The invention generally relates to systems and methods for synthesizing a reaction product and increasing yield of the same. In certain aspects, the invention provides a multi-mode reaction system in which in a first mode one or more valves of the system are configured to cause reagents to flow from one or more reagent reservoirs of the system through one or more components of the system to generate a reaction product; and in a second mode the one or more valves are configured to change flow within the system such that the one or more reagent reservoirs are isolated from a remainder of the system and the generated reaction product and any remaining reactants are recycled back through the multi-mode reaction system to increase a yield of the reaction product.

Abstract: The invention generally relates to systems and methods for conducting reactions and screening for reaction products.

Abstract: A system for analysing a fluid is described, including an in-line sensor configured to analyse a fluid flowing past the in-line sensor to determine at least one in-line value of a fluid parameter of the fluid across an event period, and a sample sensor configured to analyse a sample of fluid extracted from the flow of fluid during the event period, to determine a sample value of the fluid parameter for the sample.

Abstract: A storage bag assembly for storing and readily retrieving an article includes a shell, which is semirigid or rigid and has a top that is open, and a hood, which is resiliently flexible. The shell comprises opposed sidewalls, which extend between front and back walls. As the front wall is dimensionally shorter than the back wall, an upper section of each opposed sidewall extends convexly from the front wall to the back wall. The hood comprises a center panel and a pair of side panels. A front edge of the center panel is attached to an upper edge of the front wall and the side panels are attached to its opposing edges. Rear and bottom edges of the side panels are resiliently elastic, enabling the hood to be positionable and self-retained in an open configuration and a closed configuration.

Abstract: The invention generally relates to systems and methods for synthesizing a reaction product and increasing yield of the same. In certain aspects, the invention provides a multi-mode reaction system in which in a first mode one or more valves of the system are configured to cause reagents to flow from one or more reagent reservoirs of the system through one or more components of the system to generate a reaction product; and in a second mode the one or more valves are configured to change flow within the system such that the one or more reagent reservoirs are isolated from a remainder of the system and the generated reaction product and any remaining reactants are recycled back through the multi-mode reaction system to increase a yield of the reaction product.

Abstract: The invention generally relates to two-dimensional mass spectrometry using ion micropacket detection. In certain aspects, the invention provides systems including a mass spectrometer having an ion trap and one or more detectors. The system includes a central processing unit (CPU), and storage coupled to the CPU for storing instructions that when executed by the CPU cause the system to: apply one or more scan functions to the ion trap that excite a precursor ion and eject a product ion from the ion trap; and determine a secular frequency of the product ion by detecting micropackets of the product ion as the micropackets are ejected from the ion trap.

Abstract: The invention generally relates to conducting reactions in Leidenfrost-levitated droplets.

Abstract: The invention generally relates to charged mass label compositions and methods of use thereof for detecting a target analyte in a sample. In certain aspects, the invention provides a charged mass label composition including an affinity reagent, and a mass label precursor bound to the affinity reagent. The mass label precursor includes a label binding unit and a mass label. The label binding unit reversibly binds the mass label to the affinity reagent. The mass label includes a charge unit and a mass label unit having a pre-defined mass-to-charge-value in a mass spectrum.

Abstract: The invention generally relates to systems and methods for separating ions at about or above atmospheric pressure. In certain embodiments, the invention provides systems that include an ionization source that generates ions and an ion trap. The ion trap is maintained at about or above atmospheric pressure and includes a plurality of electrodes and at least one inlet configured to receive a gas flow and at least one outlet. The system is configured such that a combination of a gas flow and one or more electric fields produced by the electrodes separates the ions based on mass-to-charge ratio and sends the separated ions through the at least one outlet of the ion trap.

Abstract: The invention generally relates to systems and methods for collision induced dissociation of ions in an ion trap. In certain aspects, the invention provides a system that includes a mass spectrometer having an ion trap, and a central processing unit (CPU). The CPU includes storage coupled to the CPU for storing instructions that when executed by the CPU cause the system to generate one or more signals, and apply the one or more signals to the ion trap in a manner that all ions within the ion trap are fragmented at a same Mathieu q value.

Abstract: The invention generally relates to electrophoretic mass spectrometry probes and systems and methods of uses thereof. In certain aspects, the invention provides a mass spectrometry probe having a hollow body with a distal tip, an electrically conductive hollow conduit, and an electrode. The electrically conductive hollow conduit may be operably coupled to a reservoir and a power source, and the electrically conductive hollow conduit may be configured to transport a liquid sample into the hollow body and polarize the liquid sample as it flows through the electrically conductive hollow conduit and into in the hollow body. The electrode and the electrically conductive hollow conduit are disposed within the hollow body (e.g., at different heights within the hollow body).

Abstract: The invention generally relates to high-throughput label-free enzymatic bioassays using desorption electrospray ionization-mass spectrometry (DESI-MS).