Abstract: There is disclosed in one example an enrollment over secure transport (EST)-capable gateway device, including: a hardware platform including a processor and a memory; a first network interface to communicatively couple to an external network, including an external DNS server; a second network interface to communicatively couple to a home network; a caching DNS server including a local DNS cache, and logic to provide DNS services to the home network; and an EST proxy to authenticate to a local endpoint on the home network, provision a DNS server certificate on the local endpoint, provision an authentication domain name (ADN) on the local endpoint, and provide encrypted domain name system (DNS) services to the local endpoint.

Abstract: A retaining ring comprises a generally annular body. The body comprises a top surface, a bottom surface, an outer surface connected to the top surface at an outer top perimeter and the bottom surface at an outer bottom perimeter, and an inner surface connected to the top surface at an inner top perimeter and the bottom surface at an inner bottom perimeter. The inner surface comprises seven or more planar facets. Adjacent planar facets are connected at corners. The inner bottom perimeter comprises straight edges of the planar facets connected at the corners.

Abstract: A method for ascertaining the state of charge of an electrical energy storage unit is described, said method comprising the steps of: a) ascertaining a voltage gradient at least based on a detected first voltage value of the electrical energy storage unit; b) comparing the ascertained voltage gradient with a predefined voltage gradient threshold value; c) ascertaining the state of charge of the electrical energy storage unit depending on the comparison. A corresponding computer program, a corresponding machine-readable storage medium, a corresponding apparatus and a corresponding electrical energy storage system are also described.

Abstract: A method of forming a semiconductor structure includes forming a sacrificial material over a stack comprising alternating levels of a dielectric material and another material, forming an opening through the sacrificial material and at least some of the alternating levels of the dielectric material and the another material, forming at least one oxide material in the opening and overlying surfaces of the sacrificial material, an uppermost surface of the at least one oxide material extending more distal from a surface of a substrate than an uppermost level of the dielectric material and the another material, planarizing at least a portion of the at least one oxide material to expose a portion of the sacrificial material, and removing the sacrificial material while the uppermost surface of the at least one oxide material remains more distal from the surface of the substrate than the uppermost level of the alternating levels of the dielectric material and the another material.

Abstract: Embodiments disclosed herein are directed to methods and systems of password-based threshold authentication, which distributes the role of an authentication server among multiple servers. Any t servers can collectively verify passwords and generate authentication tokens, while no t?1 servers can forge a valid token or mount offline dictionary attacks.

Abstract: Systems and methods for improved distributed symmetric cryptography are disclosed. A client computer may communicate with a number of cryptographic devices in order to encrypt or decrypt data. Each cryptographic device may possess a secret share and a verification share, which may be used in the process of encrypting or decrypting data. The client computer may generate a commitment and transmit the commitment to the cryptographic devices. Each cryptographic device may generate a partial computation based on the commitment and their respective secret share, and likewise generate a partial signature based on the commitment and their respective verification share. The partial computations and partial signatures may be transmitted to the client computer. The client computer may use the partial computations and partial signatures to generate a cryptographic key and verification signature respectively. The client computer may use the cryptographic key to encrypt or decrypt a message.

Abstract: According to some embodiments, an integration system may include a source data store that contains a plurality of workloads (e.g., data packets). A processing platform may retrieve a workload from the source data store via first unikernel-based workload processing. The processing platform may then process the workload (e.g., filtering or dropping) to generate an output result and arrange for the output result to be provided to a sink destination via second unikernel-based workload processing (e.g., associated with a Linux event loop model of input output multiplexing). In some embodiments, the processing platform initially evaluates the workload in the source data store to determine if the workload meets a predetermined condition. If the workload does not meet the predetermined condition, the retrieving and arranging may be performed via container-based workload processing instead of unikernel-based workload processing.

Abstract: A method including building a recommendation triggering model. The method can include receiving, via a user device of a user through a network, an add-to-cart command associated with an anchor item in a session by the user. The method further can include determining, in real-time after receiving the add-to-cart command, a recommendation for one or more complementary items based at least in part on: (a) the anchor item; and (b) a user profile of the user. The method also can include determining, in real-time after determining the recommendation, a recommendation confidence for the recommendation based at least in part on one or more of: (a) the user profile; (b) the anchor item; (c) the one or more complementary items; or (d) one or more feedbacks from the user associated with one or more prior recommendations in the session.

Abstract: Techniques for maintaining isolation and segregation for network paths through multi-cloud fabrics using VRF technologies. The techniques include running virtual routers in a cloud network that connect the cloud network to an on-premises network using a network overlay that preserves VRF information in data packets. Further, the virtual routers connect to individual gateways in the cloud network using tunnels, and each individual gateway is connected to multiple VPCs without overlapping subnets. The virtual routers may assign a sink VRF to each gateway connection that can be used to perform source-IP based VRF selection by mapping source IP addresses in each tunnel connection to appropriate VRFs for the source IP addresses. In this way, virtual routers may use sink VRFs to translate into the VRF information for data packets from the VPCs via source-IP based lookup, and use the corresponding VRF route table to determine next hops for data packets.

Abstract: Some embodiments include a camera voice coil motor (VCM) actuator that includes an additive coil structure for shifting a lens along one or multiple axes. The additive coil structure may include a base portion configured to couple with a lens carrier and at least partially surround a perimeter of the lens carrier. In various examples, the additive coil structure may include folded portions that individually include a respective coil that is located proximate a respective magnet. According to various embodiments, the additive coil structure may be formed using an additive process.

Abstract: Example methods, apparatus, systems and articles of manufacture (e.g., physical storage media) to implement contextual key management for data encryption are disclosed. Example apparatus disclosed are to determine whether a key mapping is associated with a combination of two or more context rules defined for a set of context values associated with input data to be encrypted. Disclosed example apparatus are also to, in response to a determination that no key mapping is associated with the combination of two or more context rules, map a key identifier to the combination of two or more context rules and generate a key corresponding to the key identifier. Disclosed example apparatus are further to encrypt the input data based on the key to obtain encrypted data.

Abstract: A system and method are disclosed associated with a cloud platform as a service provider. A monitoring agent, associated with a database service instance running on a client database virtual machine, periodically executes a performance throttling detection engine. The performance throttling detection engine gathers database statistics based on metrics and features of the database service using a rule-based approach. When it is determined that a pre-determined condition is met, the system may transmit the gathered database statistics to an external application. For example, the external application might comprise a database tuning service and the pre-determined condition may be associated with a decision that the database service may potentially need to tune knob configuration parameters (associated with memory knobs, background writer knobs, asynchronous knobs, etc.).

Abstract: A resection guide includes an anchor having bone anchoring features, a cutting block having a cutting guide defined therein, and a linkage flexibly connecting the cutting block to the anchor. The flexibility of the linkage provides the cutting block with six degrees of freedom of motion relative to the anchor.

Abstract: Methods provide for fabricating objects through additive manufacturing in a manner that compensates for deformations introduced during post-print processing, such as sintering. An initial model may be divided into a plurality of segments, the initial model defining geometry of an object. For each of the segments, modified geometry may be calculated, where the modified geometry compensates for a predicted deformation. Print parameters can then be updated to incorporate the modified geometry, where the print parameters define geometry of the printed object (e.g., configuration settings of the printer, a tool path, an object model). The object may then be printed based on the updated print parameters.

Abstract: The present disclosure relates generally to techniques for processing asynchronous queries across multiple data cores including secondary data cores stored in the secondary storage system in a distributed computing system. Secondary data cores are recovered in the data plane from secondary storage in order to be accessible for searching. Using this technique, asynchronous queries are run in parallel allowing the client to dynamically manage the queries and receive notifications when results are available.

Abstract: Various embodiments include a camera with folded optics and lens shifting capabilities. Some embodiments include voice coil motor (VCM) actuator arrangements to provide autofocus (AF) and/or optical image stabilization (OIS) movement. Some embodiments include suspension arrangements.

Abstract: Various embodiments include a camera voice coil motor (VCM) actuator configured to shift an image sensor along multiple axes. Some embodiments include a magnet and coil arrangement. Some embodiments include a position sensing arrangement. Some embodiments include a flexure arrangement. Some embodiments include a coil structure and coil carrier assembly.

Abstract: A system for intelligently deploying applications to nodes on a distributed ledger technology (DLT) network may receive requests from authorized users to deploy DLT-based applications to one or more nodes in a DLT network. The system may further identify the DLT network for deploying the application by analyzing a set of characteristics associated with the application with a set of characteristics associated with a DLT network. The system may also generate deployment scripts for the applications that include instructions compatible with the identified DLT network and to be performed by the one or more nodes to implement the application code.

Abstract: In one aspect, an example method includes (i) determining, by a playback device, a loudness level of first media content that the playback device is receiving from a first source; (ii) comparing, by the playback device, the determined loudness level of the first media content with a reference loudness level indicated by a loudness level profile for the first media content; (iii) determining, by the playback device, a target volume level for the playback device based on a difference between the determined loudness level of the first media content and the reference loudness level; and (iv) while the playback device presents second media content from a second source in place of the first media content, adjusting, by the playback device, a volume of the playback device toward the target volume level.

Abstract: Computational methods and systems that troubleshoot and localize failures in data storage of a multitenant application are executed in a multitenant database management system that comprises a control plane of control plane nodes and a data plane of independent and isolated data plane nodes. Each control plane node receives data requests and data queries. Each data plane node maintains data storage for tenants of the multitenant application and executes data storage and data query operations requested by the control plane nodes. Methods and system determine whether data plane nodes are network connected and whether the data cores of network connected data plane nodes are available to ingest data and respond to data queries. Data cores of disconnected data plane nodes and unavailable data cores are isolated from data ingestion and data queries. Remedial measures are executed to restore disconnected data plane nodes and unavailable data cores.