Abstract: A method, system, and computer program product perform distributed timing analysis of an integrated circuit design. Aspects include dividing the integrated circuit design into non-overlapping design partitions, each design partition including nodes and edges, each edge interconnecting a pair of the nodes. Aspects also include identifying speculative nodes among the nodes, each speculative node having at least one and less than all timing inputs available and being associated with a speculative processing task, and identifying non-speculative nodes among the nodes, each non-speculative node having all timing inputs available and being associated with a non-speculative processing task. Assigning each of the non-speculative processing tasks to a respective processor of a processing system specific to each design partition for timing analysis processing is done prior to assigning any of the speculative processing tasks.

Abstract: A processor may receive a transistor level integrated circuit (IC) design to be modelled. The processor may determine that the transistor level IC design has a first stage and a second stage. The processor may determine a first cross-current effective capacitance of the first stage and a second cross-current effective capacitance of the second stage. The processor may then determine a cross-current effective capacitance for the transistor level IC design by accumulating the first and second cross-current effective capacitances.

Abstract: A design tool can implement phase algebra based design evaluation to evaluate a circuit design with a compact representation of waveforms without simulating the individual waveforms. The tool can determine whether module instances of a register level circuit design share a common usage, each instance being associated with a mapping. Two instances share a common usage if a sequence of signal transition representations received by the first instance can be mapped using a first mapping to the same common sequence of signal transition representations as a mapping of another sequence of signal transition representations received by the second instance using a second mapping. A result sequence of signal transition representations was generated by a previous propagation of the common sequence through the common usage. If the two instances share the common usage, the result sequence is mapped to an output sequence for the second instance using the second mapping.

Abstract: Systems and methods for designing reconfigurable integrated circuits receive target data and training data; and generate a circuit design for implementing the target data which is over-provisioned with respect to the target data according to the training data.

Abstract: In an approach for generating a file, a computer generates a modified layout for an integrated circuit. The computer receives a draft layout for an integrated circuit. The computer identifies a resonator, wherein the resonator comprises a capacitor connected to ground and an inductor connected to a clock grid. The computer creates alternative resonator wiring of the received draft layout associated with the identified resonator. The computer generates a modified draft layout based on the created alternative resonator wiring for the integrated circuit.

Abstract: One aspect is a method that includes identifying a substantially uniform distribution of signal vias for a multi-layer circuit board based on a design file defining a layout that includes via groups in a two-to-one signal-to-ground via ratio configuration. A signal via pitch is determined as a center-to-center distance between a neighboring pair of signal vias. The signal via pitch is compared to a target minimum drilling distance. A ground via is identified proximate the neighboring pair of the signal vias. Based determining that the signal via pitch of the neighboring pair is less than the target minimum drilling distance, at least one of the signal vias is positioned closer to the ground via such that after the positioning, the signal via pitch of the neighboring pair meets or exceeds the target minimum drilling distance. The design file is modified to include the positioning of the signal vias.

Abstract: A virtual hierarchical layer (VHL) is constructed for a semiconductor design in order to reduce the computational requirement of design rules checking (DRC) and design rules for manufacture (DRM) procedures. In order to form the VHL, a negative plane is created. A cell and multiple instances of the cell are then identified in the semiconductor design and polygons which overlap the cell and its instances are determined. The polygons are pushed into the negative plane to create holes in the plane. Shapes overlapping other instances of the cell which fall onto holes in the solid virtual cell plane are ignored. The resulting holed solid virtual cell plane can then be inverted to create a VHL to be used for design simulation and verification.

Abstract: A method of automatically generating a set of test layouts for testing a design rule checking tool is described. A layout is a point in a space of several coordinates, and the design rule comprises N design constraints numbered 1 to N, wherein N is greater or equal two and each design constraint is a boolean-valued function of one or more of the coordinates. The set of test layouts includes: one or more zero-error layouts; one or more one-error layouts; and one or more two-error layouts. A zero-error layout is a layout that satisfies all of the design constraints. A one-error layout is a layout that violates exactly one of the design constraints. A two-error layout is a layout that violates exactly two of the design constraints.

Abstract: A computer-implemented method capable of preparing a design rule indicative of a terminal metal area size of a transistor, minimizing a plasma-induced charging effect to the transistor in a plasma-based process for a dielectric layer performed on a metal layer above the transistor, is provided. The method includes a non-transitory computer readable medium, a design rule generator engine possessing a capability of accurately and swiftly simulating, evaluating and delivering design solutions for interconnect metals and dielectrics while largely saving test chip layout space, and performing the design-for-manufacturing process based on minimized plasma-induced charging effect to the transistor of the integrated circuit design. The disclosed method is applicable to all metal layers in the plasma-based process.

Abstract: An apparatus for generating a test case includes a constrained description generator configured to define a plurality of constrained verification spaces in a total verification space, and generate a constrained description for each of the plurality of constrained verification spaces; and a test case generator configured to generate a test case using the constrained description.

Abstract: Disclosed are embodiments for modeling integrated circuit (IC) performance. In these embodiments, a parasitic extraction process is performed to generate a netlist that, not only accounts for various parasitics within the IC, but also accounts for substrate-generated signal distortions (e.g., substrate-generated harmonic signal distortions) that occur within the IC. During this netlist extraction process, the design layout of the IC is analyzed to identify parasitics that are to be represented in the netlist and to also identify any circuit elements with output signals that are subject to substrate-generated signal distortions. When such circuit elements are identified, signal distortion models, which were previously empirically determined and stored in a model library, which correspond to the identified circuit elements, and which account for the signal distortions, are selected from the model library and incorporated into the netlist.

Abstract: A system and method for genotyping tandem repeats in sequencing data. The invention uses Bayesian model selection guided by an empirically-derived error model that incorporates properties of sequence reads and reference sequences to which they map.

Abstract: A medical image evaluation and diagnosis system to dynamically connect clinical tools, clinical applications and clinical findings includes a work context auto alignment manager (WAALM). The WAALM extracts, from a clinical application and tool initiation request, clinical application and tool information for a first clinical taskflow, and connects, with at least a first clinical application initiated in response to the clinical application and tool initiation request, at least a first clinical tool based on the extracted clinical application and tool information, the first clinical tool being independent of the first clinical application.

Abstract: Embodiments are directed to detecting and uploading measurement data of a non-connected medical measuring device. Embodiments include capturing an image of an identification object and a beginning event image of a medical measuring device and extracting identification data from the image of the identification object. Based on detecting that the identification object has been removed, an ending event image of the medical measuring device is captured. Embodiments include determining if a measurement event has occurred by comparing the ending event image and the beginning event image. Based on determining that the measurement event occurred, a measurement data of the ending event image is extracted and upload to a personal health record database.

Abstract: A method and a system for processing electronic documents are provided. The method includes displaying a first image. The first image includes one or more portions. The one or more portions are associated with metadata. A first portion of the one or more portions of the first image is selected. Upon selection of the first portion, at least one subsequent image is displayed based on a first selection. The subsequent images also include one or more portions associated with metadata. One or more subsequent portions of the at least one subsequent image is selected. Upon selecting the portions of the first image and the subsequent image, one or more electronic documents corresponding to the selections are retrieved.

Abstract: A medical documentation system and a CDI system may be linked together, or integrated, so there is a tie between the two systems that allows for a much more efficient and effective CDI process. In one disclosed embodiment, a CDI system receives from a medical documentation system a structured data set including at least some information relating to one or more medical facts the medical documentation system automatically extracted from text documenting a patient encounter.

Abstract: The description relates to surgical computer systems, including computer program products, and methods for implant planning using corrected captured joint motion information. Data representative of a corrected limb pose at a plurality of poses within a range of motion of a joint associated with a particular individual is captured, the joint comprising a first bone and a second bone, while the first bone, the second bone, or both are subject to a corrective force aligning the first and second bones in a desired alignment. The first bone of the joint is represented. The second bone of the joint is represented. A first implant model is associated with the representation of the first bone. A second implant model is associated with the representation of the second bone. Based on the captured data, a relationship is determined between the first implant model and the second implant model at one or more poses of the plurality of poses within the range of motion of the joint.

Abstract: The present invention relates to a method for planning the positioning of an implant relative to a body part, comprising the steps of: —identifying at least one reference feature of the body part and determining, in a first posture of the patient, a biunique positional and/or orientational relationship between the at least one reference feature and at least one adjustment parameter defined for the first posture, for positioning the implant; —identifying the at least one reference feature of the body part in a second posture of the patient; —deriving at least one corresponding adjustment parameter defined for the second posture from the position and/or orientation of the at least one reference feature in the second posture and the positional and/or orientational relationship between the at least one reference feature in the first posture and the at least one adjustment parameter defined for the first posture.

Abstract: Random human eye generators are provided for use in evaluating aspects of treatment in refractive surgery or other therapeutic vision modalities. Exemplary random eye generators include an optical parameter such as a manifest refractive sphere parameter or a wavefront sphere parameter, and incorporate a Rayleigh distribution for such parameters.

Abstract: A system and method for predicting an onset of an exacerbation in a patient is provided. The method includes monitoring core body temperature of the patient; monitoring breath temperature of the patient; calculating a relationship, or a change in relationship, between the core body temperature and the breath temperature of the patient; and detecting the onset of the exacerbation, when the calculated relationship, or a change in relationship, satisfies a predetermined criteria.

Abstract: The present invention provides a diagnosis support system for presenting medical support information on a case. The system includes an inference unit, an acquisition unit, a determination unit, and a display control unit. The inference unit identifies a diagnostic name of the case and obtains its inferred probability in accordance with medical information including a set having a plurality of elements. The acquisition unit acquires an influence of each of first subsets contained in the set and an influence of each of second subsets contained in each of the first subsets upon the inferred probability. The determination unit determines, in accordance with the influence of each of the first subsets and the influence of each of the second subsets, a subset of the plurality of elements that is to be displayed. The display control unit allows a display unit to display the identified diagnostic name and the determined subset.

Abstract: A system for filling a prescription order for a patient includes a plurality of trays each having an RFID tag for storing a unique identifier corresponding to the prescription order, and a plurality of workstations operatively linked to one another, each workstation having an antenna for detecting the unique identifier in one of the plurality of trays, where the detecting is operative to trigger displaying of a profile of at least one prescription item for the corresponding prescription order.

Abstract: An automatic data collection system tracks medical articles by providing a robust electromagnetic (EM) field within an enclosure in which the articles are stored. Respective data carriers, such as RFID tags, attached to each article respond to the electromagnetic field by transmitting data identified with each article. An RFID scanner receives the transmitted RFID tag identification data and a processor compares the received identification data to a data base. The data base associates the identification data with data concerning the medical article to which the RFID tag is affixed, such as the name of the medicine, the size of the dose, and the expiration date. The processor is also programmed to keep track of the number of articles of a particular type remaining in the enclosure, to note receipt of an article in the enclosure, and to note removal of the article.

Abstract: Systems, methods, and devices for detecting infections in a clinical sample are provided. Small-volume clinical samples obtained at a point-of-service (POS) location and may be tested at the POS location for multiple markers for multiple diseases, including upper and lower respiratory diseases. Samples may be tested for cytokines, or for inflammation indicators. Dilution of samples, or levels of detection, may be determined by the condition or past history of a subject. Test results may be obtained within a short amount of time after sample placement in a testing device, or within a short amount of time after being obtained from the subject. A prescription for treatment of a detected disorder may be provided, and may be filled, at the POS location. A bill may be automatically generated for the testing, or for the prescription, may be automatically sent to an insurance provider, and payment may be automatically obtained.

Abstract: Systems and methods are provided for managing license objects to applications in an application platform database system. The method includes associating an LMA with an application installed to the application platform by a developer, notifying a license manager to which the license manager application is installed of the installation of the application to the application platform, and managing subscriber access to the application using the license manager application.

Abstract: A haptic-based identification, authentication, authorization, and context aware authorization system usable with a touch-enabled device having a touch screen haptic interface, touch-enabled device receiving a plurality of inputs during interaction with a user which includes a storage space to store a first plurality of inputs corresponding to an authenticated user and a central processing unit (CPU) in communication with the storage space and the touch-enabled device to compare the first plurality of inputs with a second plurality of inputs inputted by the user, wherein the CPU authenticates the user to the touch-enabled device when the inputted second plurality of inputs is determined to be similar to the first plurality of inputs.

Abstract: A method, performed by an electronic device, for verifying a user to allow access to the electronic device is disclosed. In this method, sensor data may be received from a plurality of sensors including at least an image sensor and a sound sensor. Context information of the electronic device may be determined based on the sensor data and at least one verification unit may be selected from a plurality of verification units based on the context information. Based on the sensor data from at least one of the image sensor or the sound sensor, the at least one selected verification unit may calculate at least one verification value. The method may determine whether to allow the user to access the electronic device based on the at least one verification value and the context information.

Abstract: Methods and apparatus, including computer program products, are provided securing information. In some example embodiments, there is provided a method, which may include receiving, at a user equipment, biometric data from a user of the user equipment; receiving, at the user equipment, sensitive data to be encoded and/or decoded; encoding, based on at least one feature detected in the biometric data, the sensitive data, when the user equipment is in a storage mode; and decoding, based on at least the at least one feature detected in the biometric data, the sensitive data, when the user equipment is in a read mode. Related apparatus, systems, methods, and articles are also described.

Abstract: The present invention relates to a method and system for condition authentication based upon temporal-spatial analysis of vibrational responsivity. In particular, the present invention provides temporal tracking of reflected secondary speckle patterns generated when illuminating an object with a source of at least partially coherent beam and while applying a stimulated field at different temporal stimulating frequencies.

Abstract: A mission-specific computer peripheral, incorporating an integrated biometric login system, provides a portable linkable work platform. The device is used for establishing a shareable office computing infrastructure on a host personal computer and for accessing securely thereon (i.e., through biometric identification) a comparatively extensive selection of applications, services, and functions. In its principal embodiment, the device includes data storage (used for reading and writing both system and user data), user executable code (for launching the shareable office computing infrastructure on the host personal computer), and a power button containing an integrated fingerprint scanner (used to capture biometric data for authentication together with a unique device identification code). Incorporation of the biometric login system into the device promotes its accessibility and convenience.

Abstract: The present invention is directed to a system and method for restricting data, or portions thereof, to specific display devices when accessed by a user. Furthermore, the system and method of the invention are directed, in part, to evaluating in real time, the access level of a device and restricting the availability of sensitive information on the device according to the access level as determined by device location and hardware configuration.

Abstract: An accessory for a host medical device that is capable of authenticating itself to the host medical device. The accessory includes an onboard facility for authenticating the accessory to the host medical device. Various embodiments of the accessory enable it to validate itself to the host medical device without the host medical device reading any stored information from the accessory.

Abstract: An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system can also detect a manual user change of a password for a third-party service and cause configuration of client devices of the user to reflect the new password.

Abstract: A system for detecting user credentials comprising an interface and a processor. The interface is configured to receive a plurality of data chunks. The processor is configured to determine a number of continuous bytes in the plurality of data chunks having appropriate values and, in the event that the number of the continuous bytes is greater than or equal to a threshold number of bytes, determine whether continuous byte data of the continuous bytes comprises a credential.

Abstract: The subject disclosure is directed towards securing network data traffic through a trusted partition of the computing environment. A proxy service may communicate transaction data from a client to security-critical code within the trusted partition, which compares the transaction data to a security policy from a commercial electronic entity. If the transaction data includes malicious content, a security component framework of the trusted partition may reject the transaction data and terminate communications with the client. If the transaction data does not include malicious content, the security component framework may communicate a secured version of the transaction data and retrieve response data from the commercial electronic entity, which may be further communicated back to the client.

Abstract: A computerized system and method is described for classifying objects as malicious by processing the objects in a virtual environment and monitoring behaviors during processing by one or more monitors, where the monitoring is conducted in an electronic device that is different than the electronic device within which an analysis of attributes of the objects is conducted beforehand. The monitors may monitor and record selected sets of process operations and capture associated process parameters, which describe the context in which the process operations were performed. By recording the context of process operations, the system and method described herein improves the intelligence of classifications and consequently reduces the likelihood of incorrectly identifying objects as malware or vice versa.

Abstract: A mobile device includes a memory and a processor. The memory is configured to store a plurality of commands; the processor is configured to receive the commands and execute the following steps: receiving a function call and datum of a mobile application; determining if the received function call is a call to an predetermined application programming interface; determining if the received datum is labeled datum; and processing the received function call with a predetermined monitoring procedure when the received function call is the call to the predetermined application programming interface and the received datum is the labeled datum.

Abstract: Systems and methods may include monitoring data input to and output from an application on a mobile device. Such systems and methods may include storing meta-data, which describes a behavior of the data input to and output from the application, on the mobile device. Such systems and methods may include determining whether a behavior of the application is anomalous based on the meta-data stored on the mobile device. Such systems and methods may include providing detailed data, which includes the data input to and output from the application, to another device in response to determining that the behavior of the application is anomalous based on the meta-data stored on the mobile device.

Abstract: Various techniques for detection of malware that attempt to exploit a memory allocation vulnerability are disclosed. In some embodiments, a system, process, and/or computer program product for detecting an attempt to exploit a memory allocation vulnerability includes receiving a malware sample; monitoring an array operation performed by the malware sample using a memory monitoring component; and determining whether the array operation performed by the malware sample is suspicious. For example, an array operation, such as a vector operation performed by an application that is executed using an ActionScript virtual machine, can be monitored to detect any suspicious vector operations.

Abstract: Techniques for recovering from unexpected removal of (or other unexpected power loss) a flash memory device from a computer system. An interpolated device driver notes whenever the flash memory device is unexpectedly removed, or otherwise unexpectedly powers off or enters a locked state. If the flash memory device is reinserted, the interpolated device driver reinitializes the flash memory device, and satisfies any flash memory device security protocol, so the flash memory device and the computer system can be restored to their status just before unexpected removal. The interpolated device driver caches requests to the flash memory device, and when status is restored to just before removal, replays those requests to the flash memory device, so the flash memory device responds to those requests as if it had ever been removed. The computer system does not notice any break in service by the flash memory device due to removal and reinsertion.

Abstract: For a plurality of events, event stage information is stored which describes an event observed by an information system when an attack against the information system is underway, a pre-event stage, and a post-event stage. Observed event notice information is received which notifies an observed event observed by the information system. Event stage information is searched for which describes the observed event notified by the observed event notice information. Event stage information is searched for which describes a post-event stage coinciding with a pre-event stage of the event stage information searched for, or a pre-event stage coinciding with a post-event stage of the event stage information searched for.

Abstract: Disclosed are various approaches for integrating application scanning into a mobile enterprise computing management system. A management service instructs the client device to provide a list of installed applications to the management serviceand receives the list of installed applications from the client device. The management service then adds the list of installed applications to an aggregate listing of applications representing a list of client applications installed on one or more client devices. Subsequently, the management service sends to a scanning service a policy comprising an identifier of a client application that is prohibited on the client device. The management service also sends the aggregate listing of applications to the scanning service. The management service then receives a notification from the scanning service that the prohibited client application is present in the aggregate listing of applications.

Abstract: The present invention relates to an active defense method based on cloud security comprising: a client collecting and sending a program behavior launched by a program thereon and/or a program feature of the program launching the program behavior to a server; with respect to the program feature and/or the program behavior sent by the client, the server performing an analysis and comparison in its database, making a determination on the program based on the comparison result, and feeding back to the client; based on the feedback determination result, the client deciding whether to intercept the program behavior, terminate execution of the program and/or clean up the program, and restore the system environment. The invention introduces a cloud security architecture, and employs a behavior feature based on active defense to search and kill a malicious program, thereby ensuring network security.

Abstract: Software development kit (SDK) class tree structures of malicious SDKs are created, with each node of the SDK class tree structures representing a class of a corresponding malicious SDK. An app class tree structure of a mobile app is also created, with each node of the app class tree structure representing a class of the mobile app. To determine if the mobile app has been created (e.g., repackaged or originally created) using at least one of the malicious SDKs, the app class tree structure is compared against the SDK class tree structures to find an SDK class tree structure that matches the app class tree structure. For confirmation, the similarity of classes of the app class tree structure relative to classes of the SDK class tree structure can be determined.

Abstract: Disclosed are devices, systems, apparatus, methods, products, media, and other implementations, including a method that includes computing for one or more inputs of a circuit associated metrics representative of degree of influence that values of each of the one or more inputs have on at least one output dependent on the one or more inputs, and determining based, at least in part, on the computed metrics associated with the one or more inputs of a more inputs whether the at least one output dependent on the one or more inputs is part of a potentially malicious implementation.

Abstract: Systems and methods are provide for reconciling access rights of a computing system are described. Access right information that respectively corresponds to access rights of a computing system may be obtained and evaluated. Reconciliation tasks may be performed using the access right information, and a reconciliation report may be generated during performance of at least one of the reconciliation tasks. The reconciliation report may indicate that one or more of the access rights should either be provisioned or revoked at the computing system.

Abstract: Pre-validation of bootloader certificates for firmware bootloaders of an operating system boot list during a setup mode of BIOS boot initiation provides the end user with a tool to address boot certification problems associated with the firmware bootloaders before the operating system boot precludes execution of bootloaders that lack a valid certificate. For example, re-configuration of a boot list to address certification problems before exit of boot setup prevents boot to an inoperative state caused by lack of firmware execution during boot due to a failed certificate, such as a failure to load an unsigned option ROM.

Abstract: A device-local key derivation scheme generates, during a first boot session for an electronic device, a sealing key that is derived at least in part from a device-generated random seed and an internal secret that is unique to the electronic device. After generating the sealing key, access to the internal secret is disabled for a remainder of the first boot session and until a second boot session is initiated. At runtime, the sealing key is used to sign a module manifest that describes the software that is authorized to access the sealing key, and the module manifest containing the sealing key is persisted in non-volatile memory of the electronic device. The module manifest can be used to validate software during a subsequent boot session and to authorize software updates on the electronic device without relying on an external entity or external information to protect on-device secrets.

Abstract: Methods, apparatus, and computer program products for generating a derivative key for an execution environment (EE) are described. An example of a method includes obtaining a device key by a key derivation circuit, obtaining a context string by the key derivation circuit from a one-time writable bit register (OWBR), generating the derivative key for a current EE by the key derivation circuit based on the device key and on the context string from the OWBR.

Abstract: Embodiments of systems, apparatuses, and methods to protect data stored in a storage system of a device from malware alternation are described. In some embodiments, a system receives an indication that the data is to be protected. In addition, the system further triggers an interrupt of the device and secures the data from the malware alternation.