Abstract: Virtual firewalls may be established that enforce sets of policies with respect to computing resources maintained by multi-tenant distributed services. Particular subsets of computing resources may be associated with particular tenants of a multi-tenant distributed service. A tenant may establish a firewalling policy set enforced by a virtual firewall for an associated subset of computing resources without affecting other tenants of the multi-tenant distributed service. Virtual firewalls enforcing multiple firewalling policy sets may be maintained by a common firewalling component of the multi-tenant distributed service. Firewalling policy sets may be distributed at multiple locations throughout the multi-tenant distributed service. For a request targeting a particular computing resource, the common firewalling component may identify the associated virtual firewall, and submit the request to the virtual firewall for evaluation in accordance with the corresponding firewalling policy set.

Abstract: Embodiments are directed to managing data in a file system. The file system that includes storage nodes that may be associated with storage volumes that may have a different capacity for storing data. A storage capacity of the file system may be determined based on a number of stripes of data that fit in the file system such that each stripe may be comprised of chunks that have a same chunk storage capacity. Slots in the file system that each match the chunk storage capacity may be determined based on the storage volumes. The chunks may be assigned to the slots in the file system based on the capacity of the storage nodes such that a number of chunks allocated to a same storage volume or a same storage node may be based on protection factor information.

Abstract: An apparatus for use in treating a neurological disorder of the auditory system, including a sound processing unit, an audio stimulation unit and a somatosensory stimulation unit. The audio stimulation unit includes an input for receiving the modified audio signal from the sound processing unit. The sound processing unit includes a processor operable to analyze an audio signal and generate a modified audio signal and a plurality of actuation signals therefrom representative of the audio signal. The somatosensory stimulation unit includes an array of stimulators to apply a somatosensory stimulation to a subject, and an input for receiving the plurality of actuation signals from the sound processing unit and directing individual actuation signals in a predetermined output for delivering an audio stimulation to the subject.

Abstract: Embodiments are directed to a replication engine that provides a root node for a file that may be associated with a replication snapshot where the file is comprised of the root node, internal nodes, and data nodes. The replication engine may start at the root node and traverse the file system. If a visited internal node has an epoch value that matches the epoch, the replication engine may continue the traversal by visiting a next unvisited adjacent internal node. If the visited internal node has an epoch value that mismatches the epoch, the replication engine may backtrack to a nearest adjacent internal node that matches the epoch. And, in response to visiting a data node the replication engine may be arranged to determine blocks that are associated with the data node and communicate a copy of the blocks to a target file system.

Abstract: Techniques are provided for establishing a session with an application using asymmetric cryptography. Techniques include secure single-sign on capabilities using asymmetric cryptography. With asymmetric signatures, the use of browser local storage and the Web Crypto application programming interface (API), the key cannot be extracted from the browser that it was generated for. The mechanism allows a web domain to track a user login session using a non-extractable asymmetric key stored in the client's web browser, and leverage the non-extractable asymmetric key for single sign-on.

Abstract: Techniques are provided for establishing a session with an application using asymmetric cryptography. Techniques include secure single-sign on capabilities using asymmetric cryptography. With asymmetric signatures, the use of browser local storage and the Web Crypto application programming interface (API), the key cannot be extracted from the browser that it was generated for. The mechanism allows a web domain to track a user login session using a non-extractable asymmetric key stored in the client's web browser, and leverage the non-extractable asymmetric key for single sign-on.

Abstract: Systems and methods for controlling access to one or more computing resources relate to generating session credentials that can be used to access the one or more computing resources. Access to the computing resources may be governed by a set of policies and requests for access made using the session credentials may be fulfilled depending on whether they are allowed by the set of policies. The session credentials themselves may include metadata that may be used in determining whether to fulfill requests to access the one or more computing resources. The metadata may include permissions for a user of the session credential, claims related to one or more users, and other information.

Abstract: A method of reducing anxiety in a subject. In some embodiments, the method includes the steps of: providing an audio input to the subject, the audio input including a sequence of tones in a frequency range comprising about 100 Hz to about 8000 Hz and having intensities adapted to audiometric parameters of the subject; producing a plurality of actuation signals correlated with the audio input; delivering an actuation signal of the plurality of actuation signals to each of a plurality of electrodes in contact with a tissue surface of the subject's body to provide tactile stimuli to the tissue surface; and reducing anxiety in the subject.

Abstract: A tinnitus treatment system is provided. The system includes a sound processing unit, a haptic stimulus unit and an audio delivery unit. The sound processing unit includes a processor input for receiving an audio signal; and a digital signal processor to analyze the audio signal and generate a plurality of actuation signals therefrom which are representative of the audio signal. The digital signal processor may spectrally modify the audio signal in accordance with a predetermined modification profile to generate a modified audio signal. The haptic stimulus unit includes an array of stimulators each of which independently apply a tactile stimulus to a subject; and a stimulus unit input receives the plurality of actuation signals generated by the digital signal processor and directs individual actuation signals to individual stimulators. The audio delivery unit includes an audio delivery unit input for receiving the modified audio signal generated by the digital signal processor.

Abstract: Systems and methods for controlling access to one or more computing resources relate to generating session credentials that can be used to access the one or more computing resources. Access to the computing resources may be governed by a set of policies and requests for access made using the session credentials may be fulfilled depending on whether they are allowed by the set of policies. The session credentials themselves may include metadata that may be used in determining whether to fulfill requests to access the one or more computing resources. The metadata may include permissions for a user of the session credential, claims related to one or more users, and other information.

Abstract: An apparatus for use in treating a neurological disorder of the auditory system, including a stimulus generation unit and a somatosensory stimulation unit. The stimulus generation unit operable to analyse an audio signal including a first component comprising a broadband or white noise component and a second component including a plurality of complex tone bursts, and generate a plurality of actuation signals representative of at least one of the first or second component of the audio signal and further to spectrally modify the audio signal to generate a binaural modified audio signal for delivery to a subject. The somatosensory stimulation unit includes: an array of stimulators to apply a somatosensory stimulation to the subject with the modified audio signal, and an input for receiving the plurality of actuation signals from the stimulus generation unit and directing individual actuation signals in a predetermined pattern to individual stimulators in the array.

Abstract: Embodiments are directed to a replication engine that provides a root node for a file that may be associated with a replication snapshot where the file is comprised of the root node, internal nodes, and data nodes. The replication engine may start at the root node and traverse the file system. If a visited internal node has an epoch value that matches the epoch, the replication engine may continue the traversal by visiting a next unvisited adjacent internal node. If the visited internal node has an epoch value that mismatches the epoch, the replication engine may backtrack to a nearest adjacent internal node that matches the epoch. And, in response to visiting a data node the replication engine may be arranged to determine blocks that are associated with the data node and communicate a copy of the blocks to a target file system.

Abstract: An apparatus and method for use in treating tinnitus, employs a sound processing unit, a tactile unit, and an interface therebetween. The tactile unit comprises an array of stimulators each of which can be independently actuated to apply a tactile stimulus to a subject, and an input for receiving a plurality of actuation signals from the interface and directing individual actuation signals to individual stimulators. The sound processing unit receives an audio signal at an input, analyses the signal with a digital signal processor to generate the actuation signals which are representative of the audio signal, and provides the plurality of actuation signals to the interface. In a preferred embodiment the digital signal processor divides the audio signal into a series of frames in the time domain, performs a transform on each frame to generate a set of coefficients representing said frame, and maps the set of coefficients to a set of actuation signals to be applied to the array.

Abstract: Embodiments are directed to a file system engine that provides a file system with parent objects associated with child objects. The file system engine provides a replication snapshot associated with an epoch of the file system such that each child object modified during the epoch and each associated parent object is associated with the replication snapshot. A root object of a portion of the file system included in the replication snapshot may be provided. A replication engine may traverse the portion of file system starting from the root object such that the parent objects that are not associated with the replication snapshot are omitted from the traversal. The replication engine may determine replication objects based on the traversal such that each replication object was modified during the epoch. Then the replication engine may execute a replication job that copies replication objects to a target file system.

Abstract: Embodiments are directed to file systems. A replication engine may establish a secure communication channel between a source file system and a target file system. The replication engine may: instantiate a replication job associated with rules; determine changes in the source file system; determine characteristics of the replication job that may be based on the changes; compare the to the characteristics and a black-out schedule; execute the replication job to communicate the changes in the source file system to the target file system based on a result of the comparison. Upon completion of the replication job, the replication engine may automatically instantiating a next replication job to copy subsequent changes in the source file system to the target file system.

Abstract: An apparatus for use in treating a neurological disorder of the auditory system, comprising a stimulus generation unit and a somatosensory stimulation unit; the stimulus generation unit operable to analyse an audio signal, said audio signal comprising a first component comprising a broadband or white noise component and a second component comprising a plurality of complex tone bursts, and generate a plurality of actuation signals representative of at least one of the first or second component of said audio signal and further to spectrally modify said audio signal to generate a binaural modified audio signal for delivery to a subject; and wherein said somatosensory stimulation unit comprises: an array of stimulators each of which can be independently actuated to apply a somatosensory stimulation to the subject with the modified audio signal, and an input for receiving the plurality of actuation signals from said stimulus generation unit and directing individual actuation signals in a predetermined pattern to i

Abstract: Embodiments are directed to file systems. A replication engine may establish a secure communication channel between a source file system and a target file system. The replication engine may: instantiate a replication job associated with rules; determine changes in the source file system; determine characteristics of the replication job that may be based on the changes; compare the to the characteristics and a black-out schedule; execute the replication job to communicate the changes in the source file system to the target file system based on a result of the comparison. Upon completion of the replication job, the replication engine may automatically instantiating a next replication job to copy subsequent changes in the source file system to the target file system.

Abstract: Virtual firewalls may be established that enforce sets of policies with respect to computing resources maintained by multi-tenant distributed services. Particular subsets of computing resources may be associated with particular tenants of a multi-tenant distributed service. A tenant may establish a firewalling policy set enforced by a virtual firewall for an associated subset of computing resources without affecting other tenants of the multi-tenant distributed service. Virtual firewalls enforcing multiple firewalling policy sets may be maintained by a common firewalling component of the multi-tenant distributed service. Firewalling policy sets may be distributed at multiple locations throughout the multi-tenant distributed service. For a request targeting a particular computing resource, the common firewalling component may identify the associated virtual firewall, and submit the request to the virtual firewall for evaluation in accordance with the corresponding firewalling policy set.

Abstract: Systems and methods for attesting to information about a computing resource involve electronically signed documents. For a computing resource, a document containing information about the resource is generated and electronically signed. The document may be provided to one or more entities as an attestation to at least some of the information contained in the document. Attestation to information in the document may be a prerequisite for performance of one or more actions that may be taken in connection with the computing resource.

Abstract: A plurality of virtual computing resources is detected to have been provisioned. Credentials are distributed to the plurality of virtual computing resources. A credentials map that maps the credentials to the plurality of virtual computing resources is updated. The credentials for the plurality of virtual computing resources are activated to enable the plurality of virtual computing resources to use the credentials to authenticate to a second computer system that manages a resource service, with the credentials being inaccessible to resources of the resource service. A virtual computing resource of the plurality of virtual computing resources is detected to been deprovisioned, and the credentials for the virtual computing resource are deactivated.