Abstract: A cloud infrastructure is enhanced to provide a context-based security assurance service to enable secure application deployment. The service inspects network and cloud topologies to identify potential security capabilities and needs. Preferably, these options are then surfaced to the user with easy-to-understand, pre-configured templates representing security assurance levels. When a template (e.g., representing a pre-configured assurance level) is selected by the user, the system then applies specific capabilities and controls to translate the user-selected generalized specification (e.g., “high security”) into granular requirements for a specific set of security resources. Preferably, the identification of these security resources is based on system configuration, administration, and information associated with the pre-configured template.

Abstract: A cloud infrastructure is enhanced to provide a context-based security assurance service to enable secure application deployment. The service inspects network and cloud topologies to identify potential security capabilities and needs. Preferably, these options are then surfaced to the user with easy-to-understand, pre-configured templates representing security assurance levels. When a template (e.g., representing a pre-configured assurance level) is selected by the user, the system then applies specific capabilities and controls to translate the user-selected generalized specification (e.g., “high security”) into granular requirements for a specific set of security resources. Preferably, the identification of these security resources is based on system configuration, administration, and information associated with the pre-configured template.

Abstract: A cloud infrastructure is enhanced to provide a context-based security assurance service to enable secure application deployment. The service inspects network and cloud topologies to identify potential security capabilities and needs. Preferably, these options are then surfaced to the user with easy-to-understand, pre-configured templates representing security assurance levels. When a template (e.g., representing a pre-configured assurance level) is selected by the user, the system then applies specific capabilities and controls to translate the user-selected generalized specification (e.g., “high security”) into granular requirements for a specific set of security resources. Preferably, the identification of these security resources is based on system configuration, administration, and information associated with the pre-configured template.

Abstract: A cloud infrastructure is enhanced to provide a context-based security assurance service to enable secure application deployment. The service inspects network and cloud topologies to identify potential security capabilities and needs. Preferably, these options are then surfaced to the user with easy-to-understand, pre-configured templates representing security assurance levels. When a template (e.g., representing a pre-configured assurance level) is selected by the user, the system then applies specific capabilities and controls to translate the user-selected generalized specification (e.g., “high security”) into granular requirements for a specific set of security resources. Preferably, the identification of these security resources is based on system configuration, administration, and information associated with the pre-configured template.

Abstract: A content filtering mechanism is enhanced to resolve conflicts in filtering rules (e.g., those created by a whitelist, on the one hand, and a blacklist, on the other hand). Preferably, a conflict between or among content filtering rules is resolved by selecting among conflicting rules based on a notion of “risk” associated with the rules. According to this risk-based approach, when two or more rules conflict with one another, the particular rule whose risk value has a predetermined relationship (e.g., aligns most closely) with a risk level associated with the application (applying the rules) then takes precedence. By selecting among conflicting rules based on risk, the potential or actual conflicts are disambiguated, with the result being that the content is filtered appropriately.

Abstract: A method for identity mapping across web services uses a delegated authorization protocol, such as OAuth. In response to a request from a first user at a first web service, a connection to a second web service is established using the protocol. The second web service responds by sending information associated with a second user of the first web service who previously logged into the second web service from the first web service using the protocol. The second user may be a “contact” of the first user. The information received from the second web service is a access token that was obtained by the second user during that prior login. The access token is provided in lieu of data associated with the second user's account at the second web service. Thereafter, the first web service uses the access token it received to map to an identity of the second user.

Abstract: A content filtering mechanism is enhanced to resolve conflicts in filtering rules (e.g., those created by a whitelist, on the one hand, and a blacklist, on the other hand). Preferably, a conflict between or among content filtering rules is resolved by selecting among conflicting rules based on a notion of “risk” associated with the rules. According to this risk-based approach, when two or more rules conflict with one another, the particular rule whose risk value has a predetermined relationship (e.g., aligns most closely) with a risk level associated with the application (applying the rules) then takes precedence. By selecting among conflicting rules based on risk, the potential or actual conflicts are disambiguated, with the result being that the content is filtered appropriately.

Abstract: A method for identity mapping across web services uses a delegated authorization protocol, such as OAuth. In response to a request from a first user at a first web service, a connection to a second web service is established using the protocol. The second web service responds by sending information associated with a second user of the first web service who previously logged into the second web service from the first web service using the protocol. The second user may be a “contact” of the first user. The information received from the second web service is a access token that was obtained by the second user during that prior login. The access token is provided in lieu of data associated with the second user's account at the second web service. Thereafter, the first web service uses the access token it received to map to an identity of the second user.

Abstract: A prosthesis for the replacement of a diseased or traumatized facet of a mammalian vertebra includes a surface that articulates with another prosthetic facet or a natural facet, a portion that replaces at least a bony portion of the diseased or traumatized spine facet which is to be replaced, and an element to attach the prosthesis to the vertebra in a manner that does not require attachment to or abutment against the posterior arch. A method of installing the prosthesis includes the steps of resecting at least a portion of a facet and attaching the prosthesis in a manner that does not require attachment or abutment against the posterior arch.

Abstract: A prosthesis for the replacement of at least a portion of the bone of a facet located on a mammalian vertebra, comprising: an articulating surface that articulates with another facet; a bone contacting surface that contacts a surface of the vertebra, the articulating surface being connected to the bone contacting surface; and a fixation element that attaches the bone contacting surface to the vertebra, the fixation element being adapted for implantation into an interior bone space of a pedicle of the vertebra; wherein the prosthesis is configured so that no portion of the prosthesis contacts the posterior arch of the vertebra.

Abstract: Superior and/or inferior facets of one or more facet joints may be replaced by superior and/or inferior facet joint prostheses. In one embodiment, a kit of superior or inferior prostheses is provided, in which the prostheses have at least two dimensions that vary among members of the kit independently of each other. Each prosthesis may have a bone engaging surface having a surface that is polyaxially rotatable against a corresponding resection of a vertebra. Each prosthesis may also have an articulating surface shaped such that, after attachment to the spine, the replaced or partially replaced facet joints provide a larger medial-lateral range of motion when the spine is flexed than when the spine is extended. Crosslinks may be used to connect left and right prosthesis together in such a manner that they are stabilized in a position in which they are seated directly against the vertebra.

Abstract: A prosthesis for the replacement of a diseased or traumatized facet of a mammalian vertebra includes a surface that articulates with another prosthetic facet or a natural facet, a portion that replaces at least a bony portion of the diseased or traumatized spine facet which is to be replaced, and an element to attach the prosthesis to the vertebra in a manner that does not require attachment to or abutment against the posterior arch. A method of installing the prosthesis includes the steps of resecting at least a portion of a facet and attaching the prosthesis in a manner that does not require attachment or abutment against the posterior arch.

Abstract: A prosthesis for the replacement of multiple diseased or traumatized spinal facets comprises a portion that replaces at least a bony portion of the facets to be replaced and where the prosthesis attaches to the vertebra in a manner that does not require attachment to, or abutment against, the lamina. Multiple configurations of the prosthesis provide for replacement of the two inferior facets, the two superior facets, a superior and inferior facet, or all four facets. A method of installing the prosthesis is provided that is comprised of the steps of resecting at least a portion of the facets that carry the diseased or traumatized spinal facets and attaching the prosthesis in a manner that does not require attachment or abutment against the lamina.

Abstract: An apparatus is designed to attach an implant to bone in a manner that permits rotational adjustment of the implant about multiple axes prior to securement via the apparatus. The apparatus includes separate rotational and translational fasteners that can be individually locked to independently restrict rotation and translation of the implant relative to the bone. The rotational fastener includes an interpositional member, an expandable engagement member, and a rotational locking member that urges the expandable engagement member to advance along the interpositional member. The resulting expansion of the engagement member causes it to engage the implant. The rotational fastener is slidable along a fixation member implanted in the bone until the translational fastener is applied to restrict relative translation between the rotational fastener and the bone.

Abstract: An orthopedic fastener is designed to attach an implant to bone in such a manner that, until the fastener is tightened, the implant may be rotationally adjusted against the bone. The implant may have a semispherical bone apposition surface that permits polyaxial rotation of the implant against the bone. The orthopedic fastener has an interpositional member and a compression member. The interpositional member may be a split ring with a conical exterior surface that mates with a conical surface of the implant. The compression member has a threaded bore that engages a proximal end of a fixation member implanted in the bone such that, in response to rotation of the compression member, the interpositional member is sandwiched securely between the implant and the compression member. The conical surface of the implant compresses the interpositional member about a semispherical surface of the compression member, thereby restricting rotation of the implant.

Abstract: A prosthesis for the replacement of a diseased or traumatized facet of a mammalian vertebra includes a surface that articulates with another prosthetic facet or a natural facet, a portion that replaces at least a bony portion of the diseased or traumatized spine facet which is to be replaced, and an element to attach the prosthesis to the vertebra in a manner that does not require attachment to or abutment against the posterior arch. A method of installing the prosthesis includes the steps of resecting at least a portion of a facet and attaching the prosthesis in a manner that does not require attachment or abutment against the posterior arch.

Abstract: A prosthesis for the replacement of a diseased or traumatized facet of a mammalian vertebra includes a surface that articulates with another prosthetic facet or a natural facet, a portion that replaces at least a bony portion of the diseased or traumatized spine facet which is to be replaced, and an element to attach the prosthesis to the vertebra in a manner that does not require attachment to or abutment against the posterior arch. A method of installing the prosthesis includes the steps of resecting at least a portion of a facet and attaching the prosthesis in a manner that does not require attachment or abutment against the posterior arch.

Abstract: A frame is attachable to first and second bone portions of a patient to facilitate measurement and resection of one or more bony landmarks. The frame has two anchoring features, each of which has a semispherical surface that permits rotational adjustment of the frame against the bone portions until the frame is secured. A bridging structure couples the anchoring features together such that the anchoring features are lockably movable with respect to each other. The bridging structure may have three linear sliders that provide the relative motion. A locking mechanism exerts pressure on all three sliders to lock them in place. An external anchoring feature enables attachment of the frame to a stationary reference to stabilize the frame. The frame also has registration features that permit attachment of measurement or resection tools to the frame. The frame is particularly useful for measuring and resecting spinal facets for facet replacement.

Abstract: A filament retaining washer for mounting about the shank of a bone screw deployed in a bone whereby to retain the filament to the bone, the filament retaining washer comprising a structure having a screw hole extending therethrough for receiving therein the shank of the bone screw deployed in the bone, whereby to secure the structure to the bone, the screw hole defining a first axis, and the structure having a filament hole extending therethrough for receiving a filament therein so as to retain the filament to the structure, the filament hole defining a second axis extending substantially perpendicular to the first axis.

Abstract: A prosthesis for the replacement of the cartilaginous structures of a spine motion segment is described. The prosthesis comprises an intervertebral disc prosthesis in combination with a facet joint prosthesis.