Abstract: Various example implementations are directed to methods and systems for simulating circuit designs having configuration parameters. According to one example implementation, code blocks of a circuit design for which execution of operations described by the code blocks is conditioned on a value of one or more of a set of configuration parameters, are identified. For each identified code block, a respective expression is determined that indicates whether or not the code block will be executed for different sets of values of the set of configuration parameters. The circuit design is simulated for a first set of values for the configuration parameters. The simulation is performed using a model that omits code blocks that describe sets of operations that will not be executed. The determined expressions are evaluated to determine whether or not each identified code block was realized in the simulation model.

Abstract: System and method of automatically performing flip-flop insertions for each net in a logic interface by using the RTL-estimated maximum count as a limit. Based on the timing analysis on the physical layout, a flip-flop insertion count needed for each net is derived and candidate locations for insertions are automatically detected. A set of constraints is applied to identify ineligible locations for flip-flop insertions. If more flip-flop insertions than the count limit are needed to satisfy the timing requirements for a net, timing-related variables are iteratively adjusted using the current layout until the timing requirements can be satisfied using the RTL count limit. If all the nets in the interface need fewer flip-flop insertions than the RTL count limit, the information can be fed back to update the RTL count limit. Each net is then parsed and flip-flops are inserted at appropriated locations.

Abstract: A method for conducting numerical analysis includes defining a plurality of components in a system and a condition to be analyzed, performing a table look-up for components of the plurality of components, if a component of the plurality of components is defined in a table and the table includes the condition to be analyzed, acquiring a result for the condition to be analyzed based on table information, and conducting the analysis of the system using the result based on the table information for the component.

Abstract: A computer-implemented method may include retrieving a design netlist with a processor, identifying, via the processor, a logic structure in the design netlist, generating, via the processor, a driver based on the logic structure, applying, via the processor, a simulation and a formal model based on the driver, and testing, via the processor, an output of the simulation and the formal model.

Abstract: Improving automated timing analysis includes: generating a directed acyclic graph for an input netlist, generating a second order graph distance metric based at least on the directed acyclic graph, and scheduling a timing calculation for a set of nodes of the input netlist based at least on the second order graph distance metric.

Abstract: A method and apparatus are provided for implementing system irritator accelerator field programmable gate array (FPGA) Units (AFUs) residing behind a Coherent Attached Processors Interface (CAPI) unit in a computer system. An AFU is implemented in an FPGA residing behind the CAPI unit, the AFU includes a system irritator accelerator. A processor configures the AFU and enables the AFU system irritator to execute. The AFU system irritator is replicated to create additional irritation and is re-programmable.

Abstract: One aspect is a method that includes identifying, by a power via placement tool executing on a processor of a circuit design system, a source and a sink of a voltage domain of a multi-layer circuit board based on a design file defining a layout of the multi-layer circuit board. A number of power vias to support a maximum current demand from the source to the sink is determined. Positions of a plurality of the power vias are determined at locations of the multi-layer circuit board forming paths through the power vias between the source and the sink and having a substantially equal total path length through each total path defined between the source and the sink through at least one of the power vias. The design file is modified to include the power vias at the positions.

Abstract: System and method of automatically performing repeater insertions in physical design of an integrated circuit. Repeaters are inserted in interconnects in a staggered fashion and spaced apart to accommodate potential flip-flop insertions. The sufficient spacing between the repeaters in combination with the staggered pattern ensures that flip-flop insertions can be performed at any of the repeater locations without space limitation. When rerouting is needed following a flip-flop insertion on an interconnect, automatic rerouting is performed but restricted to a short and specified region along the interconnect. Thereby, the resulted alteration from the current routing configuration is minimal and deterministic.

Abstract: One disclosed method for designing an integrated computational element (ICE) core includes generating with a computer a plurality of predetermined ICE core designs having a plurality of thin film layers, wherein generating the plurality of predetermined ICE core designs includes iteratively varying a thickness of each thin film layer by applying coarse thickness increments to each thin film layer, calculating a transmission spectrum for each predetermined ICE core design, calculating a performance of each predetermined ICE core design based on one or more performance criteria, identifying one or more predictive ICE core designs based on the performance of each predetermined ICE core design, and optimizing the one or more predictive ICE core designs by iteratively varying the thickness of each thin film layer with fine thickness increments, wherein the one or more predictive ICE core designs are configured to detect a particular characteristic of interest.

Abstract: A system for computer-aided design (CAD) of an integrated circuit (IC) uses a computer. The computer is configured to optimize placement, routing, and/or region configuration of the integrated circuit (IC) by maximizing a number of low-power regions in the integrated circuit (IC).

Abstract: A computer-implemented method obtains data describing a plurality of synthesis scenarios associated with a very-large-scale integration design (VLSI), wherein each synthesis scenario describes a different combination of tunable design parameters for a macro of the VLSI design, and wherein the VLSI design includes a plurality of macros being tuned. The plurality of macros is ranked based on the data. The ranking produces a macro waiting list that identifies those of the synthesis scenarios that are associated with each of the macros. A subset of the synthesis scenarios is pushed from the macro waiting list to a job submission queue that is separate from the macro waiting list. The job submission queue ranks the subset of synthesis scenarios in an order in which they are to be synthesized by a synthesis tuning system. At least one synthesis scenario is submitted to the synthesis tuning system according to the order.

Abstract: A system and method for simulating aerodynamics over an aircraft for a deflected position of a movable aircraft control surface using a structured chimera mesh are disclosed. In one embodiment, a mesh assembly of the aircraft is created by overlapping a background mesh and a structured chimera mesh for the deflected position of the movable aircraft control surface. Further, mesh cell sizes within overlapping boundaries of the background mesh and the structured chimera mesh are analyzed. Furthermore, the structured chimera mesh is regenerated based on the analysis. In addition, the mesh assembly of the aircraft is reformed based on the regenerated structured chimera mesh. Also, a masked mesh of the aircraft is created by auto masking the reformed mesh assembly. Moreover, aerodynamics is simulated over the aircraft for the deflected position of the movable aircraft control surface using the masked mesh.

Abstract: The present disclosure provides systems and methods for nucleic acid sequence analysis. A system for processing raw nucleic acid sequence data from a genomic sequencer comprises a data processing server having a housing contained therein one or more processing modules. The one or more processing modules can each comprise an electronic control unit programmed to align nucleic acid sequence data from a genomic sequencing device and perform one or more of variant analysis and structural variant analysis on the nucleic acid sequence data. The system can further comprise a computer server in communication with the processing server. The computer server can be programmed or otherwise configured to process and/or analyze the aligned nucleic acid sequence data.

Abstract: Computer systems, computer readable media, and computer methods for obtaining, calling, and assembling nucleic acid sequences are presented. In some aspects the invention includes the sequencing of template constructs that comprise double stranded portions in partially contiguous constructs, to provide for single molecule consensus sequence determination through one or both of sequencing sense and antisense strands in the same molecule.

Abstract: A computer-based genomic annotation system, including a database configured to store genomic data, non-transitory memory configured to store instructions, and at least one processor coupled with the memory, the processor configured to implement the instructions in order to implement an annotation pipeline and at least one module filtering or analysis of the genomic data.

Abstract: A method comprising using at least one hardware processor for applying a mapping function to a medical image, to generate a semantic description of a visual finding in the medical image. The mapping function is optionally an MRF (Markov random field)-based, SVM (Support Vector Machine) mapping function.

Abstract: Methods to perform an operation comprising receiving, from a first process, a request to access content stored in a memory, determining that the content comprises protected health information (PHI), determining, from a secure table, a set of processes permitted to access the PHI, upon determining the first process is not a member of the set of processes, restricting access to the PHI by the first process, and upon determining the first process is a member of the set of processes, permitting access to the PHI by the first process.

Abstract: A physiological parameter display device displays data representing the current values of one or more physiological parameters of a patient. The device has an operating system that does not allow multiple-program execution. A program runs on the operating system. The program provides functionality that gives a user of the device an ability to install virtual applications on the device. In addition, the program provides functionality that gives the user an ability to run the virtual applications on the device while the device continues to display data representing the current value of the physiological parameter of the patient.

Abstract: A tele-presence system that includes a cart. The cart includes a robot face that has a robot monitor, a robot camera, a robot speaker, a robot microphone, and an overhead camera. The system also includes a remote station that is coupled to the robot face and the overhead camera. The remote station includes a station monitor, a station camera, a station speaker and a station microphone. The remote station can display video images captured by the robot camera and/or overhead camera. By way of example, the cart can be used in an operating room, wherein the overhead camera can be placed in a sterile field and the robot face can be used in a non-sterile field. The user at the remote station can conduct a teleconference through the robot face and also obtain a view of a medical procedure through the overhead camera.

Abstract: A method and system for monitoring a user's intoxication including receiving a set of signals, derived from a set of samples collected from the user at a set of time points; providing a sobriety task to the user proximal to a time point of the set of time points; generating a performance dataset characterizing performance of the sobriety task by the user; receiving a supplementary dataset characterizing a demographic profile of the user and/or a physiological state of the user; determining a set of values of an intoxication metric, derived from the set of signals; generating a predicted temporal profile of the intoxication metric for the user based upon the set of values, the set of time points, and the supplementary dataset; generating an analysis of the user's sobriety based upon the performance dataset and the predicted temporal profile; and providing a notification to the user based upon the analysis.

Abstract: A system and method for communicating and validating patient information including medication delivery information in a care-giving facility is provided. A medical transaction carrier is used to communicate information regarding medication delivery and other patient information between a control system in communication with the care-giving facility's other information systems and a patient specific asset such as an infusion pump. All information carried by the medical transaction carrier is validated both at the patient specific asset and at the control system. This validation allows for positive control of all transactions even if a medical transaction carrier is lost. The medical transaction carrier may be a smartcard, a PDA such as a Palm™ Pilot, laptop computer, pager, mobile phone, or other device capable of storing and communicating information. The system may use either wired or wireless connections to communicate information between the components of the system.

Abstract: A smart carrier has a housing comprising one or more docking locations configured to accept a secure receptacle, a wireless interface module disposed within the housing, and a processor disposed within the housing and operatively coupled to the one or more docking locations and the wireless interface module. The processor is configured to communicate with an external device through the wireless interface module and with a secure receptacle that is mated with one of the one or more docking locations. The smart carrier also has a battery disposed within the housing and configured to provide all operational power to the processor, the wireless interface module, and the one or more docking locations.

Abstract: Medication dispensing system for remote monitoring of the daily dispensing of medication and pre/post dispense monitoring of medication effected physiological functions is disclosed. In one embodiment a dispensing unit equipped with weight sensing mechanism such as scale or balance communicates with a monitoring application residing in a wireless terminal. The monitoring application provides supervision over a medication dispensing process.

Abstract: A medication compliance cap system, cap assembly, and associated methodology enhance compliance of a user's prescribed or scheduled medication regimen. Central to these specifications is a “smart” or intelligent medication cap assembly that basically functions to communicate wirelessly with a remote medication compliance application or software executable via a personal computing device. A power source and signal-generating circuitry are housed within an inner cap housing and an outer cap housing, which circuitry is selectively switched on and/or off via engagement with an upper container rim of a medication container. The medication compliance application schedules medication-taking events and alerts the user when a medication-taking event is due. The user may stop the alert by removing the medication cap assembly from a medication container, at which time an alert cessation signal is transmitted to the medication compliance application.

Abstract: Systems and methods for predictive clinical planning, design, and integrated execution services are provided. The system may comprise a database, a web server, an application server, and a client. The system may be used to develop a strategic map of a proposed clinical plan, wherein the clinical plan may include a draft launch label attribute, one or more strategies, and a schema; linking the clinical plan and schema to one or more trials; subsequently linking the trials to one or more objectives and measures; subsequently linking none, one, or a plurality of objectives to none, one, or a plurality of measures; identifying patient criteria and enrolling patients from one or more investigator sites located in one or more countries; and integrating the clinical plan with a clinical plan execution application.

Abstract: The present invention enables execution of predetermined content usage control processing without depending on a framework of a content playback program (application). Upon content playback processing, a flag which sets information of determination as to whether or not it is necessary to refer to a management information file such as a token or a usage control information file associated with content is recorded in a content file including encrypted content to be stored in a recording medium. Upon the content playback processing, a playback apparatus acquires the content file including the encrypted content stored in the recording medium, refers to a flag recorded in the content file and determines whether or not it is necessary to refer to the management information file based on a setting of the flag.

Abstract: A method for automating the management and interpretation of digital documents and their rights metadata to generate user access of a document protected by digital rights management (DRM), comprising the steps of a server obtaining a digital document and its associated rights metadata, the server interpreting the metadata to ascertain DRM useful information including identifications (IDs) of the document and its users and associated digital rights, and the server generating entries for a DRM database including policies associated with the document ID and users IDs based on the ascertained DRM useful information to enable DRM protection to the document.

Abstract: This system provides wired and/or wireless access throughout a multimedia network built on a distributed architecture which can be transparent to the user. This multimedia network includes content which is imported or generated within the network. The system allows for the content provider to determine the license status of content and update the license status of content which was previously provided by that provider. The external content can be accessed in real time or downloaded and stored within the system for later access at the convenience of the user. The usage of some content is controlled by the use of encryption and other protection methods. The system allows for storage of live video by storing the digitized video and allowing the user to control how, when and where the content is viewed. The system makes available multiple multimedia services to all users in the network or connected via the internet.

Abstract: Embodiments of the invention provide for user permissions based control of pooled FoD activation keys. In an embodiment of the invention, a method for user permissions based control of pooled FoD activation keys is provided. The method includes pooling one or more authorization codes for access by different end users in activating different features of a set of hardware components using FoD. The method also includes responding to an FoD request to activate one of the features by a particular one of the end users by determining whether or not a pre-defined code usage policy permits the particular one of the end users to use a pooled one of the authorization codes and if permitted according to the pre-defined code usage policy, generating an FoD activation key with the pooled one of the authorization codes and activating the one of the features with the FoD activation key.

Abstract: A method, system and computer program product are provided for implementing block extent granularity authorization processing for a Coherent Accelerator Processor Interface (CAPI) adapter. An Application Client requests authorization to a File from a system processor file system. The file system validates the request, determines the location of each Extent that comprises the File, and requests authorization to each Extent from a System CAPI Authorization manager. The System CAPI Authorization manager requests the CAPI Client manager to assign a Child Client ID and CAPI Server Register range to the requesting Application Client and requests a previously authorized CAPI Parent Client to authorize the Child ID to the list of Extents. The CAPI Parent Client sends a Create Authorizations command to the CAPI Adapter via the Parent's CAPI Server Registers.

Abstract: A method and system for providing access to application, where an association of a plurality of passwords with a login for an account of an application is maintained, wherein each of the plurality of passwords has a corresponding user and a corresponding set of privileges. A request for access to the account is received from a first user including the login and a first password of the plurality of password corresponding to the user, and the user is authenticated in view of the login and the password. Upon authentication of the user, access to the account is granted for the user to execute a corresponding first set of privileges.

Abstract: The invention provides a computer-implemented method of analyzing symbols in a computer system, the symbols conforming to a specification for the symbols, in which the specification has been codified into a set of computer-readable rules; and, the symbols analyzed using the computer-readable rules to obtain patterns of the symbols by determining the path that is taken by the symbols through the rules that successfully terminates, and grouping the symbols according to said paths, the method comprising; upon receipt of a message at a computer, performing a lexical analysis of the message; and, in dependence on lexical analysis of the message assigning the message to one of the groups identified according to said paths. The invention also provides a computer programmed to perform the method and a computer program comprising program instructions for causing a computer to perform the method.

Abstract: This patent specification relates to apparatus, systems, methods, and related computer program products for providing home security/smart home objectives. More particularly, this patent specification relates to a plurality of devices, including intelligent, multi-sensing, network-connected devices, that communicate with each other and/or with a central server or a cloud-computing system to provide any of a variety of useful home security/smart home objectives.

Abstract: Methods, systems and devices for multi-factor authentication (MFA) are described. An MFA device includes a plurality of tiles, a frame to hold the tiles and a stylus movable over the frame and the tiles. Each of the tiles includes at least one of visible indicia and tactile indicia, for representing a notation, and at least one track of acoustic code generation indicia. The acoustic code generation indicia of each tile, on being swiped, generate a complex sound waveform that encodes a composite binary pattern. The composite binary pattern comprises information blocks including a device identifier block for a device identifier associating the MFA device with a user, a biometric block for at least a part of a biometric pattern of the user, and a data block for the notation of the corresponding tile.

Abstract: Methods and apparatuses for controlling access to computer systems and for annotating media files. One embodiment includes a method including generating a challenge to a user, wherein the challenge includes a verify part and a read part. The methods also includes prompting the user to solve both the verify part of the challenge and the read part of the challenge; receiving input from the user; determining if the input from the user relative to the verify part of the challenge corresponds with the known answer for the verify part of the challenge; and identifying the input from the user relative to the read part of the challenge as an answer to the read part of the challenge, if the input from the user relative to the verify part of the challenge corresponds with the known answer for the verify part of the challenge.

Abstract: An authentication method requires receiving an order from a server to perform an act which is then verified by the server for liveness. The act may comprise shining a color on an object such as the face of the user, holding a flash at a particular location or a combination of these and other similar acts.

Abstract: Methods of configuring a different authority for a plurality of users to use at least one application in an electronic device. User inputs are received to set passwords for respective user levels, where each user level is associated with a different authority to access applications. The passwords are registered for the respective user levels. At least one application is associated with one of the user levels.

Abstract: Embodiments of systems and methods as disclosed herein may determine that an initiator of a communication on a distributed computer network is an automated script or the like. More particularly, in one embodiment, a web page including a hidden field may be generated in response to a request for the web page. This hidden field is a field included in the web page that is not visible to a human user when the web page is rendered by a browser and presented to the user. By comparing a received value for such a hidden field with an associated value for the hidden field as provided in the web page, the use of an automated script may be detected.

Abstract: Techniques for managing identities are provided. In some examples, identity management, authentication, authorization, and token exchange frameworks may be provided for use with mobile devices, mobile applications, cloud applications, and/or other web-based applications. For example a mobile client may request to perform one or more identity management operations associated with an account of a service provider. Based at least in part on the requested operation and/or the particular service provider, an application programming interface (API) may be utilized to generate and/or perform one or more instructions and/or method calls for managing identity information of the service provider.

Abstract: Providing registration for password/challenge authentication includes receiving an access code or pattern inputted by a user, recording a time message associated with each component of the access code or pattern via a processor, generating a data record in combining each component of the access code or pattern with the associated time message, and storing the data record.

Abstract: A method, system and computer program product are provided for implementing block extent granularity authorization and deauthorization processing for a Coherent Accelerator Processor Interface (CAPI) adapter. The Application Client, such as an Application Child Client sends a Delete Authorizations command to the CAPI Adapter via the Client CAPI Server Registers assigned to the specific Application Client. The CAPI Adapter deletes the Authorizations in all Lists in the Delete Authorizations command.

Abstract: According to one embodiment, a policy update system includes a server apparatus configured to be able to provide a plurality of services to a user, the server apparatus including storage device for storing a first user ID; a policy storage device configured to store a plurality of policies, each policy being composed of condition describing user attribute information in which a plurality of items including a second user ID corresponding to the first user ID are associated, and each policy specifying a use privilege of each service; a policy update apparatus configured to be able to update each stored policy; and a user attribute information storage device configured to store post-change user attribute information, and a change content for each second user ID.

Abstract: Embodiments of systems and method as presented herein allow a user's locally stored authentication credentials to be reset without needing either to contact the domain controller over a network or authenticating a user at the device. Credentials being reset by the user are obtained at the device and encrypted in the same manner as the original locally stored domain credentials such that the new credentials can be used to overwrite the previously stored authentication credentials for the user at the device without contacting the domain controller over the network. The user can then access his device without contacting the domain controller using these new locally stored authentication credentials. Additionally, the user's credentials may be independently reset with respect to the domain controller.

Abstract: A method of dynamically generating a security question for accessing a resource. The method comprises monitoring a behavior of said user during a monitoring period to identify automatically a deviation from a behavioral pattern indicative of repetitive behavior of a user, automatically generating a security question responded to by an indication of said deviation, receiving a user input inputted by a user in response to a presentation of said security question and said deviation, and authenticating, after said monitoring period, an access to a resource according to a match between said user input and said deviation.

Abstract: A technique for generating passwords. The technique includes displaying objects, enabling a degree of simplicity to be set for a password, and generating a password in accordance with the established degree of simplicity. The technique also includes superimposing and displaying a secondary object icon for at least one secondary object available to a primary object on top of the primary object icon for the primary object, and the superimposing and display entails either superimposing and displaying a display on the superimposed secondary object icon to indicate whether or not the superimposed secondary object is available on the basis of the degree of simplicity, or changing the superimposed secondary object icon so as to differentiate the availability of the superimposed secondary object on the basis of the degree of simplicity.

Abstract: A method, system and computer-usable medium are disclosed for identifying risk within an information technology (IT) environment, comprising: analyzing characteristics of a user accessing a system within an IT environment; associating a risk profile with the user based upon the characteristics of the user; determining when the user accesses a system within the IT environment; maintaining a user risk profile record of all systems within the IT environment accessed by the user, the user risk profile record continuing to be associated with the system after access by the user ceases; and, identifying a risk level for all systems within the IT environment based upon the user risk profile record.

Abstract: Exemplary embodiments of the present disclosure are directed to performing an operation in a computing environment that is prohibited by a security application governing the computing environment. Exemplary embodiments can generate a security bypass environment in a computing environment governed by the security application to provide a bypass to the security application. In exemplary embodiments, a request to perform the operation can be received via the security bypass environment and the operation can be performed through the security bypass environment in response to satisfaction of access control criteria specified for the security bypass environment so that the performance of the operation bypasses the security application.

Abstract: The present invention relates to a method and system of controlling the writing of data to a computer storage medium such as a hard drive in a computer system in order to prevent viruses or similar program code from being saved on such medium. Upon the computer system initiating a request to write data to the medium, the application embodying the method and system checks the identity of the running application requesting to perform the write. The method and system then checks a rule database to determine if such requesting application has permission to write to the medium. The system can also check that the data file type that the application seeks to write is a permitted type for that application. In response to the output of the database check, the requested write is allowed to proceed or is blocked. In the absence of a rule, the system presents the request to the computer user. The user can either grant permission or block, and such response can be included in the rule database.

Abstract: Permissions specified within an application permission manifest file of an application may be superseded with customized permissions. A user may customize the permissions by denying permissions, granting permissions, or requesting a prompt prior to an application attempting to access functionality and/or data protected by a permission. A user may customize permissions on a global or per application basis. Upon receiving input to customize a permissions profile, a package manager module creates a new permissions manifest file associated with an application. Upon receiving input to execute an application, a runtime environment that may be provided by the runtime accesses the new permissions manifest file instead of an original permissions manifest file, and operates the application using permissions granted in the new permissions manifest file.

Abstract: Systems and methods for protection from buffer overflow vulnerability due to placement new constructs in C++ are provided. A system for protecting from buffer overflow vulnerability due to placement new constructs, comprises a compiler which is capable of receiving a program including a placement new instruction, and runtime which is capable of receiving binary code from the compiler and determining whether the program includes the placement new instruction and whether the placement new instruction would lead to buffer overflow, wherein the runtime is linked to a library including methods for preventing the buffer overflow, and selects a method for preventing the buffer overflow if the runtime determines that the placement new instruction would lead to the buffer overflow.