Abstract: Memory optimization of integrated circuit (IC) design using generic memory models is presented. One method includes accessing a register transfer level (RTL) description for the IC design that includes generic memory interface calls to generic memory models for each memory instance. The generic memory call interface includes a set of memory parameters. The method also includes processing the RTL description of the IC design as a step in a design flow for the IC design by processing specific memory models for the memory instances, wherein the specific memory model for each memory instance is generated from the generic memory model using the memory parameters corresponding to the memory instance. The method can also include generating specific memory models (e.g., simulation model, timing model, and layout model) for each memory instance based on a given set of values of memory parameters for the memory instance.

Abstract: An integrated circuit includes a cell and a first plurality of conductive segments. Each of the first plurality of conductive segments has a first predetermined width, and the first plurality of conductive segments includes a first conductive segment, and a second conductive segment. The first conductive segment and the second conductive segment are coupled to the cell to transmit a signal, and a distance between the first conductive segment and the second conductive segment is greater than the first predetermined width.

Abstract: The present invention discloses a method for fixing hold time violations in circuits. The method comprises: creating a topology diagram of the circuit with a branch indicating a signal path where the hold time violation occurs in the circuit, and a node on the branch indicating a port of an element where the hold time violation occurs; dividing the circuit into a plurality of regions; and placing a hold time correction element selectively in a region corresponding to the node in the topology diagram to fix the hold time violation thereof, according to a circuit element density of the region corresponding to the node in the topology diagram. With this method there will be no new element in a region whose circuit element density is excessively large, and it is unnecessary to move an element which has been placed in the circuit and an input/output pin thereof.

Abstract: At least one method, apparatus and system disclosed involves circuit layout for an integrated circuit device. A design for an integrated circuit device is received. The design comprises a functional cell. A first substitute functional cell for a first value of shift of a set of routing tracks respective to the boundary of the functional cell is provided. The first substitute functional cell comprises at least one pin moved by an amount of the first value. A determination is made as to whether an amount of shift of the set of routing tracks corresponds to the first value. The functional cell is replaced with the first substitute functional cell in response to a determination that the amount of shift of the set of routing tracks corresponds to the first value.

Abstract: The invention relates to a method for reducing the number of flip-flops in a VLSI design that require data retention, thereby eliminating the respective backup cells for those flip flops, the method comprises the steps of: (a) defining one or more criteria for non-essentiality of backup cells! (b) during the physical design stage, analyzing the VLSI design based on said one or more criteria for non-essentiality, and finding those flip-flops that meet these criteria, wherein said analysis is performed at the gate level, independent from any higher level representation of the design; and (c) eliminating from the VLSI design those backup cells for all non-essential flip-flops that meet one or more of said criteria for non-essentiality, thereby leaving in the design only those backup cells for those flip-flops that do not meet any of said criteria.

Abstract: A computer-implemented method for calculating an effect on timing of moving a pin from an edge position to an inboard position in processing large block synthesis (LBS). The method includes determining first timing details at the inboard position, based on internal wire segments between a signal source and the inboard position. The method further includes selecting an upper metal layer as a virtual wire between the edge position and the inboard position. The method further includes calculating capacitance and resistance of the virtual wire. The method further includes updating driver strength of a driver between the signal source and the inboard position. The method further includes determining second timing details at the inboard position, based on wire loads of the virtual wire. The method further includes modifying an assertion of the pin at the inboard position, based on the first timing details and the second timing details.

Abstract: A computer program, method, and system for locksmithing. The computer program, method, and system receive vehicle information, obtain a key code for a lock based on the vehicle information, decrypt the key code to determine key specification data, and provide the key specification data to a user, such that a duplicate key corresponding to the lock can be formed.

Abstract: A method and apparatus for establishing a wire network for a platform. The apparatus for establishing a wire network for an aircraft comprises a wire manager and a layout manager. The wire manager sorts a plurality of wires for the aircraft into a plurality of bundles based on a plurality of categories established for the plurality of wires with respect to operation of the aircraft. The plurality of categories includes an essential category and the plurality of bundles includes a primary bundle corresponding to the essential category. The layout manager generates a primary layout output for the primary bundle based on an available space within the aircraft. Forming and installing a primary wire harness corresponding to the primary bundle in the aircraft based on the primary layout output independently of a remaining portion of the plurality of bundles improves a build efficiency of the aircraft.

Abstract: The present invention is applicable in the field of molecular dynamics, said invention consisting of computing methods for predicting the structure and function of biomolecules, and particularly of proteins, by means of simulating the protein folding process and the interaction process of proteins with other biomolecules in a solvent. More particularly, the invention relates to a method and a system for controlling simulation stability and for choosing the timestep used in the numerical integration of the equations of motion. The invention successfully reduces the molecular dynamics simulation time by means of optimizing the timestep choice through an adaptive control or allowing larger timesteps correcting the trajectories based on a power control.

Abstract: The present invention provides a method for evaluating (predicting, etc.) an individual difference (the tendency of every individual) in terms of drug sensitivity and disease vulnerability, comprising using a gene polymorphism of a cyclic AMP responsive element binding protein gene or the like. The method for evaluating drug sensitivity and the method for evaluating disease vulnerability according to the present invention comprise associating a gene polymorphism of a cyclic AMP responsive element binding protein gene or a haplotype constituted by the gene polymorphism with the drug sensitivity and disease vulnerability of an individual.

Abstract: A computer-implemented method for processing and/or analyzing nucleic acid sequencing data comprises receiving a first data input and a second data input. The first data input comprises untargeted sequencing data generated from a first nucleic acid sample obtained from a subject. The second data input comprises target-specific sequencing data generated from a second nucleic acid sample obtained from the subject. Next, with the aid of a computer processor, the first data input and the second data input are combined to produce a combined data set. Next, an output derived from the combined data set is generated. The output is indicative of the presence or absence of one or more polymorphisms of the first nucleic acid sample and/or the second nucleic acid sample.

Abstract: A system for tracking a medical procedure includes a set of macros, a scanning device, and a control unit. Each macro in the set of macros is associated with instructions that execute a tracking step of a medical procedure. The scanning device is controlled by a user during the medical procedure to select a macro from the set of macros. The control unit executes the instructions associated with the selected macro to track the medical procedure.

Abstract: A system for confidentially retrieving data from a person, such as by authorized personnel. One embodiment provides a data carrier item such as jewelry, having encrypted data imparted upon the item in manner that is only intelligible after being unencrypted. Such data can be encrypted and/or invisibly disposed such that the data is not identifiable by the public, but can be quickly and accurately retrieved by authorized personnel.

Abstract: Techniques and apparatus for managing contributions to an accruable health spending account in an employer-sponsored plan offering a member an employer-funded defined contribution, at least one insurance premium option and the ability to specify an allocation of the defined contribution for payment of option premiums and in turn, a directed contribution amount designated to such accruable account are disclosed. The accruable account may be used to reimburse the member for qualified medical expenses, and the member may pay any premium shortfall using a tax-advantaged process such as a premium only payment plan. Also disclosed are techniques and apparatus directed to presenting member-specific out-of-pocket expenses for a selected procedure offered by at least one health-care provider.

Abstract: A system and method processes blood donation data for presentation on an operator interface. A handheld computing device has a touch screen display and a processing circuit to provide an icon associated with an executable application on a first display screen, the icon configured to be positioned along with icons for other executable applications on the first display screen. The processing circuit is to retrieve an indication of a need for a particular blood component, wherein the particular blood component is selected from the group comprising whole blood, double red cells and plasma. The processing circuit is to provide the indication of the need for a particular blood component to the display. The processing circuit is to provide to the touch screen display a remaining time or a date the blood donor is next eligible to donate a blood component based on a donation eligibility guideline.

Abstract: A system and approach for integrating of health parameters from wearable cloud connected access control devices to provide life safety measures, and also for controlling access to facilities. A monitoring system may incorporate a device for a wearer or holder and a sensor at an entrance to or exit from a specified facility, and a processor connected to the sensor. The device may sense a parameter of the wearer or holder selected from a group of items incorporating heartbeat, blood pressure, blood oxygen, pulse rate, and body temperature. If the selected parameter indicates an abnormal or worsening condition, then the wearer or holder may obtain access to a hospital or health care facility. Health professionals may hold or wear a device that permits them to enter a restricted facility to aid a person within the facility needing medical assistance.

Abstract: A method, computer-readable storage device and apparatus for calculating a health quality measure are disclosed. For example, a method receives characteristics of motion information, wherein the characteristics of motion information is based upon gait information, monitors the characteristics of motion information over a time period to determine a plurality of different modes of motion within the time period, and calculates the health quality measure based upon the plurality of different modes of motion.

Abstract: A system and method for generating options for treatment options and pertinent disease information for treating an animal of a first species suffering from an ailment comprises receiving input data representative of a diagnosis of the ailment for the first species, retrieving from a memory at least one treatment protocol associated with the diagnosis as received, and outputting the retrieved at least one treatment protocol. The memory is populated with a plurality of diagnoses each associated with at least a corresponding one of a plurality of treatment protocols adapted for treating at least one animal species and at least one ailment. Each one of the plurality of treatment protocols is supported by evidence-based research.

Abstract: A computer network system and method for printing accompanying information and prescription labels in pharmacies, comprises: a central CS; a PMS; a data transmission network through which said PMS and said central CS can communicate; wherein said PMS includes an I/O terminal, a scanner, and a first printer; wherein said PMS includes a PMS SO and a Catalina SO; said PMS SO is configured to receive and store prescription information for a prescription, and to associate a prescription identification with said prescription; said Catalina SO is configure to select accompanying information for said prescription, to format and save said accompanying information in an accompanying information print file; and said PMS is configured to print a prescription label for said prescription and said accompanying information print file.

Abstract: A pharmaceutical storage and retrieval system and a method of storing and retrieving pharmaceutical containers from the system. The system includes a pharmaceutical storage and retrieval and a controller operatively coupled to the device to control storage and retrieval functions of the device. The device includes a gantry assembly, a shelving assembly, a user access assembly, and a user authorization system that function in a coordinated manner to carry out the storage and retrieval functions of the device.

Abstract: A computer-implemented method for identifying and assessing public health events, and a corresponding system and apparatus, includes capturing public health-related information from structured and unstructured sources, where the information is contained in one or more documents, extracting meta-data from the captured public health-related information, creating an index of the extracted meta-data; archiving the meta-data and the documents, where the index links meta-data to its associated document, processing the extracted meta-data according to one or more detection algorithms to determine if an anomaly exists, and where an anomaly exists, providing a public health event notification, and monitoring and evaluating the responses to the public health events.

Abstract: The present invention provides for a method and apparatus for distributing digital information, such as software applications, to application users. By providing the digital information on unused memory space of a computer system, and providing a process for authorizing access to the information, the information can be efficiently and cost effectively transferred to users. Traditional inventory and distribution channel difficulties are avoided.

Abstract: A digital rights management (DRM) including a transfer of a rights object (RO) to a second user in consideration of requirements of a movement of a rights object of a first user (a terminal, an equipment), charge, etc., by providing a post browsing session when the rights object occupied by the first user is transferred to a second user via a server.

Abstract: Systems and methods, including computer software adapted to perform certain operations, can be implemented for remotely defining security data for authorizing access to data on a client device. Permission indicators are associated with a sequence of instructions, and a protected activity is associated with one or more of the permission indicators and with an instruction within the sequence of instructions. The one or more permission indicators and the sequence of instructions are provided to a remote device. The remote device determines whether execution of the instruction is permitted based, at least in part, on the one or more permission indicators, and the remote device performs the protected activity if execution of the instruction is permitted.

Abstract: Disclosed are methods, circuits, apparatuses, systems and associated computer executable code for metering software usage. The usage of a software application instance is detected by assessing a level of user interaction with the software application instance, in order to: classify users based on their usage patterns, determine the license type needed for a variety of user and application combinations, save on excess licensing, and/or facilitate the transition of users between on-premise applications and cloud based applications.

Abstract: A method of enforcing copyright rights over a distributed computer network includes the steps of transmitting website content to a remote user computer, transmitting computer executable instructions to the remote user computer, the computer executable instructions being operable to identify execution of a copy command applied to at least a portion of the website page content, receiving notification, via the computer executable instructions, of execution of a copy command applied to at least a portion of the website content, receiving identification information associated with either the remote user computer or a user of the remote user computer, and identifying publication of the at least a portion of the website page content.

Abstract: Systems and methods related to DRM content usage mechanisms for both online and offline usage of content are disclosed, including systems providing secure access to data regardless of network state or connectivity state to the networked access control mechanism. An access control mechanism having a secondary offline access control mechanism is presented, further including multiple implementations for data encapsulation, as well as providing a method for writes to files and to the filesystem itself by externally created applications with no API or modification to their operation.

Abstract: A computer system includes a mechanism supporting a Secure Object that includes information that is cryptographically protected so that other software on the computer system cannot access or undetectably tamper with the information, thereby protecting both a confidentiality and an integrity of the Secure Object information from other software while making an unencrypted form of the Secure Object information available to the Secure Object itself during execution of the Secure Object. The Mechanism includes a crypto engine that decrypts and integrity-checks Secure Object information as the Secure Object information moves into the computer system from external storage and encrypts and updates an integrity value for Secure Object information as the Secure Object information moves out of the computer system to the external storage.

Abstract: A system and method of detecting and limiting unsolicited data uploads. Downloaded content such as web pages and emails are scanned for web forms and/or links. A watermark is added where appropriate and the modified downloaded content is forwarded to the person who requested the content. A check is made to determine whether information received from a user includes appropriate watermarks. If so, the watermark is removed and the information is forwarded to its destination.

Abstract: A method and apparatus for account intercommunication among APPs. The method comprises: acquiring account information entered by a user in a current APP; and, after using the account information to log in successfully, providing the account information to other APPs having intercommunication permissions with the current APP for the other APPs to log in. Via the disclosed method, account information entered in any APP may be shared among APPs having intercommunication permissions with the APP, so that other APPs may be logged into using an intercommunicated account after they are opened, without the need to manage account information about various APPs through a unified entrance, and thus the APP need not access the entrance in advance, and login can be realized without the need to exit the APP to open the entrance; obviously, the flexibility and independence of APP login are improved, and the complexity of operation is reduced.

Abstract: A method for requiring justifications for predetermined user operations may include maintaining a plurality of policies in a policy store, and detecting a user operation, via a policy module, that triggers a policy of the plurality of policies. The method may also include pausing user operation, notifying the user of the impact of the user operation that triggered the policy, and requesting justification from the user for the user operation. The method may further include storing user-provided justification in a predetermined location, and then resuming the user operation.

Abstract: The present invention is provided with the page responding unit 33, the login performing unit 31, the logout performing unit 35, the counting unit 37, and the logout managing unit 39. The page responding unit 33 submits a response of a Web page in response to an automatic request or a manual request from a user. The login performing unit 31 performs login by user authentication. The logout performing unit 35 performs logout of the user in a case in which the request from the user who logged in is not received within the login timeout period. The counting unit 37 counts the automatic request upon reception of the automatic request within the login timeout period. The logout managing unit 39 makes the logout performing unit 35 perform logout in a case in which the accumulated refreshing time exceeds the login timeout period.

Abstract: There is provided an authentication control system including an acquisition unit configured to acquire information detected by a sensor, an evaluation unit configured to evaluate suitability for use of each of one or more sensors in environmental conditions indicated by the information, and an authentication mode selection unit configured to select an authentication mode from among a plurality of authentication modes based on an evaluation result obtained by the evaluation unit, each of the authentication modes using any one of the one or more sensors.

Abstract: A computer implemented user authentication method, according to which a mobile application is installed on the mobile terminal device of the user and when the user inputs his username and password, the mobile application creates a private and public encryption keys and encrypts the password with the public key. Data including the encrypted password, the username and the public key is sent to a dedicated server and stored therein as an encrypted file under the username, along with information required for contacting the user's mobile terminal device. The user to selects, and enrolls to, an advanced authentication mechanism, which creates an authentication key for validating the identity of the user and encrypting the private key. The encrypted private key is stored on the user's terminal device. Upon launching the mobile application, the user selects a preferred advanced authentication mechanism which returns an authentication key upon successful authentication of the user.

Abstract: Methods are described herein related to providing a workspace that is associated with a voice-request account workspace and that is capable of establishing a session for a user-account. An example method may involve: (a) providing, by a computing system, a workspace on a virtual machine, where the workspace is associated with a voice-request account, where the workspace is accessible to one or more guide computing systems, (b) receiving, at the computing system, authentication information for a user-account, (c) receiving, at the computing system, a request to establish a session for the user-account in the workspace associated with the voice-request account and responsively establishing the session, and (d) providing, by the computing system, the one or more guide accounts with access via the workspace to the session for the user-account.

Abstract: A mobile device comprises a pupil information collecting module and a master control module, such that the pupil information collecting module may be used for collecting pupil characteristic information of a user. The master control module may receive the pupil characteristic information of the user when the user accesses a controlled unit, and may determine, on the basis of the pupil characteristic in formation of the user, if the user is allowed to access the controlled unit. The mobile device may use the pupil characteristic information of the user to perform identity verification.

Abstract: The present invention is a method of and a system for enabling an initiating party to capture, store, and retrieve a video image of at least one acknowledging party performing an acknowledgement requested by the initiating party where the acknowledging party(s) may be remotely located from the initiating party.

Abstract: A system and method of granting and removing a user's security access to applications on a computer using proximity of authorized RFID tags is disclosed. A user having an authorized RFID tag that is located near the computer will be granted access to pre-authorized applications.

Abstract: Challenge-response authentication protocols are disclosed herein, including systems and methods for a first device to authenticate a second device. In one embodiment, the following operations are performed by the first device: (a) sending to the second device: (i) a challenge value corresponding to an expected response value known by the first device, and (ii) a hiding value; (b) receiving from the second device a masked response value; (c) obtaining an expected masked response value from the expected response value and the hiding value; and (d) determining whether the expected masked response value matches the masked response value received from the second device. The operations from the perspective of the second device are also disclosed, which in some embodiments include computing the masked response value using the challenge value, the hiding value, and secret information known to the second device.

Abstract: Disclosed is a method for unlocking an electronic equipment, and the method includes: the electronic equipment detects periodically whether there is an unlocking key in its surrounding environment, and when there is an unlocking key in the surrounding environment, transmits an unlocking request to the unlocking key; the unlocking key receives the unlocking request, determines in accordance with the unlocking request whether the electronic equipment matches the unlocking key, and when it is determined that the electronic equipment matches the unlocking key, transmits an unlocking signal to the electronic equipment so as to unlock the electronic equipment. Further disclosed are a device for unlocking an electronic equipment and an unlocking key for unlocking an electronic equipment. By means of the present disclosure, the unlocking key is enabled to automatically unlock an electronic equipment when it is disposed near the electronic equipment.

Abstract: A technique for detecting unauthorized manipulation of a circuit. In one embodiment, a test data channel of a boundary scan system of a circuit is monitored while the circuit is in operation. By monitoring the test data channel, a monitoring module determines the presence of a signal on the test data channel. During operation, activity on this channel may represent a potential unauthorized manipulation attempt. An alarm condition may therefore be created if a signal is detected.

Abstract: Techniques to reduce false positives in detecting anomalous use of resources are disclosed. In various embodiments, resource access data indicating for each resource in a set of resources respective usage data for each of one or more users of the resource is received. Cluster analysis is performed to determine one or more clusters of users. For each cluster, a set of recommended resources to be associated with the cluster is determined. For each of at least a subset of users, a temporal behavior based model for each user that reflects one or more resources included in the set of recommended resources associated with a corresponding cluster of which the user is a member is generated.

Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.

Abstract: Remote computing resource service providers allow customers to execute one or more applications in a virtual environment on computer systems provided by the computing resource service provider. The customer applications are generally executed by multiple virtual machine instances working together. The virtual machines may be managed by a hypervisor executing on computer systems operated by the service provider. These computer systems may be vulnerable to intrusions and other malicious attack, thereby exposing the virtual machines and corresponding customer applications executing on the computer systems. A monitoring device may be used in one or more of the computing systems, operated by the service provider, in order to monitor and prevent a variety of different attacks.

Abstract: In some embodiments, a content management system can initiate a scan of a content item when the content management system detects that activity associated with the content item triggers a scan policy. In some embodiments, a content management system can initiate a scan of a user's account when the content management system detects that activity associated with the content item triggers a scan policy. A scan policy can specify, for example, a number of shares, downloads and/or previews of the content item allowable in a period of time. When the number of shares, downloads, and/or previews exceeds the specified number in the policy in the specified period of time, the content management system can initiate a scan (e.g., virus scan, malware scan, etc.) of the content item and/or the user's account.

Abstract: A method, system, and computer program product for detecting malicious code insertion in data are provided in the illustrative embodiments. At an application executing using a processor and a memory in a data processing system, a script that has been inserted in a mix of code and content is detected. A content-related portion is removed from the script to form a remaining script structure, the content-related portion referring to the content in the mix. From the remaining script structure, a code construct is selected and replaced with an alphanumeric string to form a normalized construct. Whether the normalized construct matches, within a tolerance, a second normalized construct in a corpus of normalized scripts is determined. Responsive to the normalized construct matching the second normalized construct within the tolerance, a conclusion is drawn that the script is malicious.

Abstract: In an example embodiment, a system determines a set of instructions from the available instructions for a computer application. The determined set of instructions provides specific functionality of the computer application. The system may determine the set of instructions by performing functional testing and negative testing on the specific functionality. The system may reorganize and randomize the set of instructions in memory and write the reorganized set of instructions to a smaller memory space. For each available instruction not in the set of instructions, the system changes the respective instruction to inoperative to prevent execution of the respective instruction. The system may change the respective instruction to inoperative by overwriting the instruction with a NOP instruction. The system then captures a memory address of the computer application being accessed at runtime.

Abstract: Techniques are disclosed for presenting and collecting end user license agreement acceptance for software applications or firmware components executed on a computing appliance. A sentry component allows only certain commands to be executed before the relevant end user license agreements are accepted, e.g., commands to configure a network interface and web server on the appliance executed on a shell over a serial interface. Once configured the web server is used to provide a rich interface for presenting end user license agreements and obtaining acceptance thereof. Once the user accepts the terms of the relevant license agreements, then the appliance is made active and all configuration commands become operational, including commands needed to configure the device and start services which would otherwise be prohibited by the sentry component prior to license acceptance.

Abstract: According to one embodiment, a setting method, includes storing, in a first partition of a storage which stores a first file causing a processor to execute a first program to booting an operating system, a second file having a same path as a path of the first file and causing the processor to execute a second program. The second program is executed by the processor at activation of an information processing apparatus and causing the processor to execute the first program.

Abstract: An apparatus and a method for identifying security of an electronic device are provided. The method includes identifying a security state of a system binary loaded to a memory of the electronic device based on booting of the electronic device in a second operating system of the electronic device, and sending security state information to a first operating system in the second operating system based on a request from the first operating system of the electronic device.