Abstract: A method and apparatus for revoking and replacing digital certificates issued by distributed servers is disclosed. An architecture in which issued certificates from distributed factory and field provisioning servers are gathered into a centrally managed certificate authority which manages the full certificate lifecycle. Revocation and rekey approvals are performed through this central certificate authority, while the resulting revocation status and rekey approvals are made available for consumption by those same distributed servers.

Abstract: A system and method for detecting and managing aberrant use of a remote data signing, encryption and obfuscation utility is disclosed. In one embodiment, the method comprises generating a first account activity characteristic pattern associated with the account, the first account activity characteristic pattern generated from execution of one or more first activities associated with the account occurring over a first temporal period, generating a second account activity characteristic pattern, the second account activity characteristic pattern generated from execution of one or more second activities associated with the account occurring over a second temporal period, comparing the first account activity characteristic pattern and the second account characteristic activity pattern, and flagging the account for action according to the comparison.

Abstract: A visual search method, a visual search device, and an electrical device are provided. The method includes determining a first object in a visual search process. A power consumption of the first object in the visual search process is greater than a power consumption of a second object in the visual search process. The first object includes at least one of a program and an algorithm and the second object includes at least one of a program and an algorithm. The method further includes performing a visual search through an optimized object of the first object. At least one of a calculating speed of the optimized object is greater than a calculating speed of the first object and a total calculating time of the optimized object within a unit time is less than a total calculating time of the first object within the unit time.

Abstract: Disclosed is a double-spliced foldable tent with central lifting and automatic opening and closing structure, including two groups of central tops, one group of middle frame and two groups of edge frames. Any group of edge frame and middle frame are connected by telescopic fork frame. Two groups of side inclined frames are arranged between a group of central top and middle frame. At least one group of side inclined frame is arranged between a group of central top and a group of edge frame. One group of central tops includes an upper top and a lower support locked or separated by spring pin. One group of side inclined frame includes a first inclined rod hinged on upper top at one end and a second inclined rod hinged on lower support at one end, of which the other end is hinged on the side wall of first inclined rod.

Abstract: Disclosed is a foldable tent with central lifting and automatic opening and closing structure, including a central bracket group and inclined frames. The central bracket group includes an upper frame and a base bracket. The inclined frame includes a first inclined rod hinged with the upper frame at one end, and a second inclined rod hinged with the first inclined rod at one end. The upper frame includes an upper top and a middle piece. The upper top is provided with a mounting hole in a non-circular structure. The middle piece is provided with an upper section and a lower section both in a non-circular structure. The lower section is provided with a spring pin. The base bracket is provided with an insertion hole in a non-circular structure. The side wall of the insertion hole is provided with a pin hole capable of locking the spring pin.

Abstract: A residual estimation with an I/O kernel (“RIO”) framework provides estimates of predictive uncertainty of neural networks, and reduces their point-prediction errors. The process captures neural network (“NN”) behavior by estimating their residuals with an I/O kernel using a modified Gaussian process (“GP”). RIO is applicable to real-world problems, and, by using a sparse GP approximation, scales well to large datasets. RIO can be applied directly to any pretrained NNs without modifications to model architecture or training pipeline.

Abstract: A system is provided for distribution of device key sets over a network in a protected software environment (PSE). In the system, a client device includes a connection interface for receiving a crypto hardware (CH) token belonging to a user, untrusted software, a quoting enclave, and a PSE for generating a provisioning request for a device key set. An attestation proxy server (APS) receives the provisioning message using a first network connection, and transmits the provisioning message to an online provisioning server (OPS) using a second network connection. The OPS constructs a provisioning response and an encrypted device key set, and delivers the provisioning response to the untrusted software using the first and second network connections. The PSE decrypts the encrypted device key set to obtain the device key set, re-encrypts the device key set with a local chip-specific key, and stores the re-encrypted device key set.

Abstract: A method and apparatus for providing user key material from a server to a client is disclosed. The method comprises receiving a first message from the client in a server, the first message having a user key material request, an access token and an identifier of a transport key (TrK-ID), validating the user key material request according to the access token, generating a response having user key material responsive to the user key material request, encrypting the response according to the transport key (TrK), and transmitting a second message comprising the response from the server to the client. The client decrypts the second message according to the transport key (TrK) and validates the second message using the identifier of the transport key (TrK-ID).

Abstract: In a system comprising an customer providing a service to a plurality of client devices, a method and system for providing an customer-specific digital certificate to a client device of the plurality of client devices is disclosed. The method comprises receiving, in an intermediate certificate authority, a pre-generated digital certificate and an encrypted client device private key encrypted according to a private key encryption key PrKEK, receiving, from the client device, a request for the customer-specific digital certificate, the request comprising at least one of client device identifying information and information identifying the customer, the request signed according to a pre-provisioned client device digital certificate, and transmitting the customer-specific digital certificate and the encrypted client device private key to the client device.

Abstract: A method provides an origin certificate that can be issued as a digital certificate online. The method includes receiving an origin digital certificate and an encrypted client device private key from an offline certificate authority wherein the client device private key is encrypted according to a private key encryption key PrKEK. The method further includes receiving from the client device, a request for a client device digital certificate and the encrypted client device private key, selecting a digital certificate template for the client device, the digital certificate template having attributes that vary according to the client devices, building the client device digital certificate from the origin digital certificate and the selected digital certificate template, signing the client device digital certificate with an online certificate authority signing key, and transmitting the signed client device digital certificate and the encrypted device private key.

Abstract: A system and method for preventing use of invalid digital certificates is disclosed. The method comprises receiving, in a validation service from a requesting entity, a cryptographic asset and a request to evaluate the cryptographic asset, the cryptographic asset uniquely assigned to one of the plurality of devices by an associated one of the commercially distinct entities, the request comprising the cryptographic asset, determining an evaluation state of the cryptographic asset at least in part from a database derived from a plurality of public keys currently assigned to the plurality of devices and previously received by the validation service, determining a disposition of the cryptographic asset according to a disposition policy associated with the determined evaluation state and the device and effecting the determined disposition of the cryptographic asset.

Abstract: A computer-implemented method optimizing genetic algorithms for finding solutions to a provided problem is described. The method implements a multi-arm bandit algorithm to determine performance scores for candidate individuals from a candidate pool in dependence on successes and failures of the one or more candidates. The method evolves the candidate individuals in the candidate pool by performing evolution steps including: determining a fitness score for each of the candidate individuals in the candidate pool in dependence on the performance scores for the candidate individuals, discarding candidate individuals from the candidate pool in dependence upon their assigned performance measure, and adding, to the candidate pool, a new candidate individual procreated from candidate individuals remaining in the candidate pool after the discarding of the candidate individuals.

Abstract: A data processing method and a storage apparatus are disclosed. The data processing method includes: receiving, by an NVMe storage device, an NVMe write command sent by a host, where the NVMe write command carries a key and a value pointer, the value pointer points to first storage space, and the first storage space is used to store a value; obtaining, by the NVMe storage device, the key from the NVMe write command and a value length, and allocating second storage space to the value according to the value length, where the second storage space is in the NVMe storage device; and obtaining, by the NVMe storage device, the value from the host, and storing the value in the second storage space.

Abstract: The present disclosure discloses a multi-stage apparatus and process for advanced oxidation treatment of wastewater, and belongs to the field of wastewater treatment in environmental protection. The apparatus includes a liquid-liquid mixing unit, a preheating unit, a gas-liquid mixing unit, a parallel photocatalytic reactor group and an oxidation tower connected in sequence. According to characteristics of free radical reactions, the parallel photocatalytic reactor group and the oxidation tower in the apparatus are reasonably designed, utilization rates of the ozone and the hydrogen peroxide are increased, and the wastewater treatment cost is reduced.

Abstract: A system for generating unique digital certificates is provided that generates computed hashes public keys and compares them. The system method computes a hash of a public key, compares the computed hash of the public key with hashes of public keys previously generated, generates the digital certificate having the public key and a device identifier only if the computed hash of the public key does not match any of the hashes of public keys previously generated, and provides the digital certificate.

Abstract: A method and apparatus for providing user key material from a server to a client is disclosed. The method comprises receiving a first message from the client in a server, the first message having a user key material request, an access token and an identifier of a transport key (TrK-ID), validating the user key material request according to the access token, generating a response having user key material responsive to the user key material request, encrypting the response according to the transport key (TrK), and transmitting a second message comprising the response from the server to the client. The client decrypts the second message according to the transport key (TrK) and validates the second message using the identifier of the transport key (TrK-ID).

Abstract: In some embodiments, a program generates a query for a set of data from a dataset. The dataset includes a set of measures and a plurality of dimensions for categorizing the set of measures. The set of data includes a set of locations and measure values for a measure in the set of measures categorized according to a dimension in the plurality of dimensions. The program further sends the query to a computing system configured to manage the dataset. The program also receives the set of data from the computing system. The program further renders a visualization comprising a set of visual elements. Each visual element is configured to present a set of measure values for the measure associated with a location in the set of locations. The set of measure values are categorized according to the dimension. The program also presents the visualization on a display of the device.

Abstract: A system and method for preventing use of invalid digital certificates is disclosed. The method comprises receiving, in a validation service from a requesting entity, a cryptographic asset and a request to evaluate the cryptographic asset, the cryptographic asset uniquely assigned to one of the plurality of devices by an associated one of the commercially distinct entities, the request comprising the cryptographic asset, determining an evaluation state of the cryptographic asset at least in part from a database derived from a plurality of public keys currently assigned to the plurality of devices and previously received by the validation service, determining a disposition of the cryptographic asset according to a disposition policy associated with the determined evaluation state and the device and effecting the determined disposition of the cryptographic asset.

Abstract: A data processing method and a storage apparatus are disclosed. The data processing method includes: receiving, by an NVMe storage device, an NVMe write command sent by a host, where the NVMe write command carries a key and a value pointer, the value pointer points to first storage space, and the first storage space is used to store a value; obtaining, by the NVMe storage device, the key from the NVMe write command and a value length, and allocating second storage space to the value according to the value length, where the second storage space is in the NVMe storage device; and obtaining, by the NVMe storage device, the value from the host, and storing the value in the second storage space.

Abstract: A display device includes a display panel, a first storage device, a second storage device and a control device. The first storage device is disposed on the display panel and stores a first firmware. The second storage device stores a second firmware. The control device is coupled to the first storage device and the second storage device. The control device reads the first firmware and uses the first firmware to update the second firmware, or receives a third firmware transmitted by a host terminal device and uses the third firmware to update the second firmware. The control device executes the updated second firmware to generate an image signal corresponding to the updated second firmware to the display panel. Therefore, the efficiency of updating the firmware of the display device may be effectively increased, and the convenience of use is increased.