Abstract: Methods, apparatus, and systems using dynamic authentication credentials to secure interactions between a user and a computer-based application are disclosed. Dynamic authentication credentials are generated based on a passcode value and a passcode-blinding data element value. The passcode and the passcode-blinding data element values are used to calculate a passcode verifier data element value. The passcode verifier data element value is then used to calculate the dynamic authentication credentials.

Abstract: Methods, apparatus, and systems using a passcode for securing interaction between a user and a computer based application are disclosed.

Abstract: Flow cytometer systems are provided that mitigate aerosols generated during operation of a flow cytometer. A flow cytometer system can include various combinations of: a flow cytometer instrument base, a flow cytometer, and a biosafety hood (BSH). In some embodiments, a subject flow cytometer system includes a flow cytometer instrument base, a flow cytometer, and a BSH. In some embodiments, a subject flow cytometer system includes a flow cytometer instrument base and a flow cytometer. In some cases, a BSH includes an aerosol management system, which provides a redundant air filtration system. Also provided are components of a flow cytometer system (e.g., a BSH configured to attach to a flow cytometer instrument base, a flow cytometer instrument base configured to attach to a BSH, etc.). Also provided are methods, including methods of performing a flow cytometric procedure using a flow cytometer system; and methods of decontaminating a flow cytometer system.

Abstract: Flow cytometer systems are provided that mitigate aerosols generated during operation of a flow cytometer. A flow cytometer system can include various combinations of: a flow cytometer instrument base, a flow cytometer, and a biosafety hood (BSH). In some embodiments, a subject flow cytometer system includes a flow cytometer instrument base, a flow cytometer, and a BSH. In some embodiments, a subject flow cytometer system includes a flow cytometer instrument base and a flow cytometer. In some cases, a BSH includes an aerosol management system, which provides a redundant air filtration system. Also provided are components of a flow cytometer system (e.g., a BSH configured to attach to a flow cytometer instrument base, a flow cytometer instrument base configured to attach to a BSH, etc.). Also provided are methods, including methods of performing a flow cytometric procedure using a flow cytometer system; and methods of decontaminating a flow cytometer system.

Abstract: Secure network location awareness is provided whereby a client is able to use appropriate settings when communicating with an access node of a communications network. In an embodiment a client receives a signed message from the access node, the signed message comprising at least a certificate chain having a public key. In some embodiments the certificate chain may be only a self-signed certificate and in other embodiments the certificate chain is two or more certificates in length. The client validates the certificate chain and verifies the signature of the signed message. If this is successful the client accesses stored settings for use with the access node. The stored settings are accessed at least using information about the public key. In another embodiment the signed message also comprises a location identifier which is, for example, a domain name system (DNS) suffix of the access node.

Abstract: Dynamic host configuration protocol (DHCP) is extended in order to assist with secure network location awareness. In an embodiment a DHCP client receives a signed DHCP response message from a DHCP server, the signed message comprising at least a certificate chain having a public key. In that embodiment the DHCP client validates the certificate chain and verifies the signature of the signed message. If this is successful the DHCP client accesses stored settings for use with the server. The stored settings are accessed at least using information about the public key. In some embodiments signed DHCPOFFER messages and signed DHCPACK messages are used. In another embodiment the signed DHCP message comprises a location identifier which is, for example, a domain name system (DNS) suffix of a DHCP server.

Abstract: Secure network location awareness is provided whereby a client is able to use appropriate settings when communicating with an access node of a communications network. In an embodiment a client receives a signed message from the access node, the signed message comprising at least a certificate chain having a public key. In some embodiments the certificate chain may be only a self-signed certificate and in other embodiments the certificate chain is two or more certificates in length. The client validates the certificate chain and verifies the signature of the signed message. If this is successful the client accesses stored settings for use with the access node. The stored settings are accessed at least using information about the public key. In another embodiment the signed message also comprises a location identifier which is, for example, a domain name system (DNS) suffix of the access node.

Abstract: Dynamic host configuration protocol (DHCP) is extended in order to assist with secure network location awareness. In an embodiment a DHCP client receives a signed DHCP response message from a DHCP server, the signed message comprising at least a certificate chain having a public key. In that embodiment the DHCP client validates the certificate chain and verifies the signature of the signed message. If this is successful the DHCP client accesses stored settings for use with the server. The stored settings are accessed at least using information about the public key. In some embodiments signed DHCPOFFER messages and signed DHCPACK messages are used. In another embodiment the signed DHCP message comprises a location identifier which is, for example, a domain name system (DNS) suffix of a DHCP server.

Abstract: A vacuum chuck apparatus may include chuck plate having a substantially flat chucking surface, one or more lift pins, and a lifting mechanism. The lift pins are configured to clamp a substrate at three or more locations. The lifting mechanism lifts the heads of the pins above the level of the chucking surface subsequently lowers the pins to pull the substrate to substantially conform to the chucking surface. A warped substrate may be secured to the chuck surface by raising the lift pins above the surface of chuck, securing a backside of the substrate with the lift pins at three or more locations, and lowering the lift pins to draw the substrate against the surface of the chuck so that the substrate substantially conforms to the surface of the chuck.

Abstract: A workpiece loading interface is included within a workpiece processing system which processes workpieces, typically wafers, in a vacuum. The workpiece loading interface includes two separate chambers. Each chamber may be separately pumped down. Thus, while a first cassette of wafers, from a first chamber is being accessed, a second cassette of wafers may be loaded in the second chamber and the second chamber pumped down. Each chamber is designed to minimize intrusion to a clean room. Thus a door to each chamber has a mechanism which, when opening the door, first moves the door slightly away from an opening in the chamber and then the door is moved down parallel to the chamber. After the door is opened, a cassette of wafers is lowered through the opening in a motion much like a drawbridge. The cassette may be pivoted within the chamber when the position from which wafers are accessed from the cassette differs from the position from which the cassette is lowered out of the chamber.

Abstract: A method and apparatus is disclosed for handling semiconductor wafers used for the production of integrated circuit structures which permits moving the wafer from one processing station to another without direct handling of the wafer and which also permits equal processing of both the top and bottom surfaces of the wafer. A wafer retaining ring is disclosed having structure for engaging the retaining ring to transfer the wafer and the retaining ring from one processing station to another to perform a plurality of processing steps on one or both surfaces of the wafer without direct handling of the wafer. The retaining ring is also provided with structure for engaging the end edges of the wafer leaving both the top and bottom surfaces of the wafer equally exposed for processing. The retaining ring has an inner diameter sufficiently large with respect to the outer diameter of the wafer so as to not interfere with processing by shadowing either side of the wafer.

Abstract: A combination gate valve and throttle valve is presented for use between a process chamber and at least one pump includes a base plate a lower plate and a gate plate. The base plate is attached to the process chamber and includes a base plate gas port for each pump in the system. Each pump is attached to the lower plate. Where each pump is attached to the lower plate there is a lower plate gas port. Each of the lower plate gas ports lines up with one of the base plate gas ports. The gate plate is attached between the lower plate and the base plate. The gate plate has gate plate gas ports so that when the gate plate is moved into an open position with respect to the base plate and the lower plate, the gate plate gas ports line up with the lower plate gas ports and the base plate gas ports allowing gas to flow from the process chamber through the gas ports to the pumps. When the gate plate is moved into a closed position the process chamber is selaed from the pumps.