Abstract: Up front authorization of a workflow and a security context for workflow execution are disclosed. All possible authorizations that may be required by a workflow are identified up front. A requestor is allowed to execute the workflow only when the authorizations of the user include the authorizations that may be required by the workflow. A security context is generated and associated with the workflow or an instance thereof. The security context scopes or limits the workflow to at least the type or capacity of work requested, work uniquely identified in the security context, and/or service/workflow/call paths that the request is allowed to be processed through.

Abstract: Up front authorization of a workflow and a security context for workflow execution are disclosed. All possible authorizations that may be required by a workflow definition are identified up front. A requestor is allowed to execute the workflow only when the authorizations of the user include the authorizations that may be required by the workflow. An immutable security context is generated and associated with the workflow or an instance thereof. The immutable security context can prevent or reduce failures associated with changes to a requestor's authorizations and may also scope or limit the workflow to at least the type or capacity of work requested and/or work uniquely identified in the security context. The immutable security context is managed in a security context that is separate and independent of the workflow execution context.

Abstract: A contact lens product, a packaging case thereof, and a detection method for the same are provided. The packaging case (1) includes an accommodating slot body (11) and a sheet body (12) connected to the accommodating slot body (11). The accommodating slot body (11) has a plurality of optical microstructures (11c) formed on an inner surface (11b) thereof. Each of the optical microstructures (11c) has a height-to-width ratio being within a range from 0.01 to 0.1, whereby the accommodating slot body (11) has a first transparency. The accommodating slot body (11) is configured to allow at least part of the optical microstructures (11c) to be in contact with a preservation liquid (4) for enabling a part of the accommodating slot body (11) corresponding in position thereto to have a second transparency that is greater than the first transparency.

Abstract: The present invention discloses an urban traffic velocity estimation method based on multi-source crowd sensing data. This method, based on roadside pedestrian data and road navigation data collected by smart phones, obtains a final estimated velocity through the steps of missing data filling, self-view velocity aggregation and multi-view velocity fusion. This fine-grained large-scale urban traffic velocity estimation method can achieve velocity estimation on all types of roads, including suburban road sections and paths, instead of just focusing on main roads in a city center. According to the present invention, based on data driving, the urban traffic velocity estimation method does not need to install additional devices on roads, and is low in cost and high in universality. Compared with the prior art, the urban traffic velocity estimation method has higher practicability, theoretical property and applicability, and is of great significance for improving traffic management and planning.

Abstract: A semiconductor device and the method of forming the same are provided. The semiconductor device may comprise a first plurality of nanostructures, a second plurality of nanostructures over a substrate, a first gate stack extending between the nanostructures of the first plurality of nanostructures, a second gate stack extending between the nanostructures of the second plurality of nanostructures, a first source/drain region in contact with a first nanostructure of the first plurality of nanostructures, a second source/drain region in contact with a first nanostructure of the second plurality of nanostructures, wherein the second source/drain region may be separated from the first source/drain region, a silicide layer between the first source/drain region and the second source/drain region, and an isolation layer between the silicide layer and the substrate.

Abstract: The present invention discloses a method for outputting a command by detecting a movement of an object, which includes the following steps. First, an image capturing device captures images generated by the movement of the object at different timings by. Next, a motion trajectory is calculated according to the plurality of images. Further next, a corresponding command is outputted according to the motion trajectory. The present invention also provides a system which employs the above-mentioned method.

Abstract: Systems, methods and apparatus are provided for transistors having a channel region comprising a crystalline spinel indium-gallium-zinc-oxide (IGZO) material.

Abstract: The present disclosure relates, according to some embodiments, to methods for preparing a library for sequencing. For example, a method may comprise (a) in a coupled reaction, (i) contacting a population of nucleic acid fragments with a tailing enzyme to produce tailed fragments, and (ii) ligating to the tailed fragments a sequencing adapter with a ligase to produce adapter-tagged fragments; and/or separating adapter-tagged fragments from the tailing enzyme and the ligase to produce separated adapter-tagged fragments and, optionally, separated tailing enzyme and/or separated ligase. In some embodiments, a tailing enzyme and/or a ligase used in library preparation may be immobilized enzymes.

Abstract: A method of this disclosure may include performing a named entity recognition on text information related to requirements for a wireframe by a first artificial intelligence (AI) model, so as to extract entities and relations of the entities from the text information. The method may further comprise inputting the extracted entities and relations to a second AI model to generate the wireframe, wherein the second AI model is trained so that a difference between resultant relations of the entities of the generated wireframe and the extracted relations of the entities from the first AI model is decreased.

Abstract: An automated molecular operating system includes at least one centrifuge tube carrying module, a transport module, a plurality of temperature control modules, a capping module, a magnetic field module and an automated processing module. The automated processing module is electrically connected to the transport module, the temperature control modules, the capping module and the magnetic field module, and controls the transport module to move the centrifuge tube carrying module, so that a centrifuge tube contained in the centrifuge tube carrying module makes a reaction in the temperature control modules, and the magnetic field module or the capping module is provided to the centrifuge tube according to requirements, such that a specimen in the centrifuge tube can be automatically subjected to nucleic acid extraction, nucleic acid amplification, primer labeling, reverse transcription or a combination thereof, thereby reducing manual operation errors and increasing the ease of operation.

Abstract: System and method for providing content of an application programming interface (API) server to a user computer are disclosed. A webpage in the user computer includes program code to make web user interface (UI) calls to a web server. A web UI call that corresponds to a web UI specification includes an API identifier, which corresponds to an API specification. The API specification is identified from among several API specifications using the API identifier. The API specification includes a route to an API server. A parameter included in the web UI call is checked for conformance to the API specification. In response to the parameter conforming to the API specification, an API request is made to the API server. A component of the webpage is rendered using a result of the API request provided by the API server.

Abstract: A method and device for issuing an identity certificate to a blockchain node in a blockchain network includes issuing a first identity certificate to a first terminal. a second identity certificate issuance request that is from the first terminal and that is made by using the first identity certificate is received and a second identity certificate is issued to the first terminal, which forwards the second identity certificate to a second terminal. A third identity certificate issuance request that is from the second terminal and that is made by using the second identity certificate is received and a third identity certificate is issued to the second terminal, which forwards the third identity certificate to a third terminal.

Abstract: Disclosed is an identity authentication system for distributed Internet of vehicles (IoV), including a core cloud, a plurality of edge clouds, a plurality of road side units (RSUs) and a plurality of terminal vehicles. The core cloud stores registration information about the terminal vehicles and the RSUs; the edge cloud performs identity verification on the RSUs according to the registration information, and after the verification is passed, the edge cloud generates a temporary shared session key and sends the same to the RSU and the terminal vehicle, and the RSU and the terminal vehicle establish encrypted communication according to the temporary shared session key, to provide a network communication service for the terminal vehicle. In the present disclosure, a vehicle identity authentication efficiency in a scene with a large traffic density can be effectively improved.

Abstract: A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: generating a request for a client identifier or an access token for access to a target application programming interface (API); obtaining an access policy associated with the target API; determining a least privileged API access permission based upon the access policy associated with the target API; and, using the client identifier or access token to access the target API when the least privileged API access permission allows access to the target API.

Abstract: Provided are an adenosine triphosphatase sarcoplasmic/endoplasmic reticulum Ca2+ transporting 2 (ATP2A2) gene-based molecular marker for identifying a chicken feed efficiency trait, and an identification method and use thereof. A nucleotide sequence of the molecular marker is shown in SEQ ID NO: 1, and a base at locus 926 in the nucleotide sequence is T or G. In the present application, by identifying a genotype of the molecular marker in a chicken genome and then selecting the chicken feed efficiency trait according to the genotype, a breeding method for early selection of the poultry feed efficiency trait is established. The method is simple, rapid, and low-cost, does not require special instruments, and is suitable for the needs of marker-assisted selection experiments.

Abstract: A transistor comprises a first conductive contact, a heterogeneous channel comprising at least one oxide semiconductor material over the first conductive contact, a second conductive contact over the heterogeneous channel, and a gate electrode laterally neighboring the heterogeneous channel. A device, a method of forming a device, a memory device, and an electronic system are also described.

Abstract: A method for forming a semiconductor device structure is provided. The method includes providing a substrate having a base, a first fin, and a second fin over the base. The method includes forming a gate stack over the first fin and the second fin. The method includes forming a first spacer over gate sidewalls of the gate stack and a second spacer adjacent to the second fin. The method includes partially removing the first fin and the second fin. The method includes forming a first source/drain structure and a second source/drain structure in the first trench and the second trench respectively. A first ratio of a first height of the first merged portion to a second height of a first top surface of the first source/drain structure is greater than or equal to about 0.5.

Abstract: A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: generating a request for a client identifier or an access token for access to a target application programming interface (API); obtaining an access policy associated with the target API; determining a least privileged API access permission based upon the access policy associated with the target API; and, using the client identifier or access token to access the target API when the least privileged API access permission allows access to the target API.

Abstract: A system can receive an untrusted onboard announcement message from a remote computer, wherein the untrusted onboard announcement message comprises first data that identifies the remote computer and second data that indicates a current configuration of the remote computer. The system can identify a stored indication of an authorized configuration of the remote computer based on the data that identifies the remote computer. The system can determine that there is a mismatch between the authorized configuration of the remote computer and the current configuration of the remote computer. The system can determine a trust metrics evaluation score for the remote computer based on a type of hardware component change between the authorized configuration of the remote computer and the current configuration of the remote computer. The system can, in response to determining that the trust metrics evaluation score is greater than a threshold value, onboard the remote computer.