Abstract: Electronic network include multiple users. Each user operates Wallet software application on his/her endpoint devices (special purpose, computer or smartphone). Each Wallet integrates with Cloud-based Identification-as-a-Service(s) (IDaaS) In context of present invention—IDaaS provides real-time, multi-factor, malware-resilient, context-sensitive Strong Identification-as-a-Service of the user and enables Cryptographic Keys Management of the Wallet. Each Wallet provides various Cryptographic functionalities. Each Wallet may be connected with multiple centralized Marketplace software applications, thus allowing these Cryptographic functionalities to interact with specific Marketplace software application. Each Wallet may be connected with multiple decentralized peer-to-peer software applications, thus allowing these Cryptographic functionalities to interact with specific peer-to-peer software application.

Abstract: A cryptography module for at least temporarily controlling an operation of at least one computing device. The cryptography module is designed to check at least one memory area of a memory unit capable of being accessed by the computing device, and to control the operation of the at least one computing device as a function of the check. The cryptography module is designed to receive a first control command from the computing device, which characterizes at least one memory area of the memory unit to be checked, and to check the memory area characterized by the first control command.

Abstract: A consent and privacy preferences management environment (300) includes an application (302) and a Consent Management System (CMS) (304). The CMS (304) stores and processes consent information (306) of an end user (308). The application (302) obtains the consent information and uses the CMS (304) to manage choices of the end users (308) about certain activities, events, or other situations. Third parties (310) use the application (302) to submit requests for consent. The application (302) maps the request into fields of an API (314) for processing by the CMS (304) and receives a response from the CMS (304). The application then provides or denies consent regarding the end user (308) based on the response and filters or masks data based on organizational policies, end user consent, and the context. The data structure of the CMS (304) adapts to a wide variety of consent application environments.

Abstract: In an example, a logic circuitry package is configured to communicate with a print apparatus logic circuit. The logic circuitry package may be configured to respond to communications sent to a first address and to at least one second address. The logic circuitry package may comprise a first logic circuit, wherein the first address is an address for the first logic circuit. The package may be configured such that, in response to a first command indicative of a task and a first time period sent to the first address, the package is accessible via at least one second address for a duration of the time period.

Abstract: Examples for authenticating applications to allow access to a service being offered by a service entity, are described. In one example, a request from an application for accessing services is received over a handshake session adhering to a security protocol. It is determined whether a root certificate corresponding to the application is installed in the service entity. Based on the determination, the request is authenticated to allow access to the services. The authenticating is performed in the handshake session.

Abstract: A method for document authorization and distribution is provided. The method is based on a system including a repository server, communicating with or hosting a repository; a blockchain network, including a plurality of peers; and a plurality of user devices, each communicating with the repository server or the blockchain network. The repository contains a plurality of published documents. A plurality of document publication records, a plurality of document dissemination records, and an access control smart contract are distributed over the peers. The method includes: when an access request for a published document is submitted by a user from a user device, retrieving the published document; verifying the document access right; encrypting the published document with a document password encrypted using the user's public key; signing and posting a document dissemination record, including the document password; and placing the document contents and a signed document hash value in a container document.

Abstract: Embodiments of the present disclosure disclose a distributed ledger technology (e.g., blockchain)-based system that provides tools and mechanisms to place users in control of their data. In embodiments, the system may include a platform device configured to initiate a connection with a lab test service provider whose systems (e.g., computer systems) may store data pertaining to the user. In embodiments, the platform device is configured to secure the data stored at the lab test service provider by facilitating deployment of that data into a distributed ledger. Once the data is secured in the distributed ledger, the platform device may be configured to provide controlled distribution or sharing of the secured data with other users or other third-party systems.

Abstract: A XR device and a method for controlling the XR device are discussed. The method includes accessing to a public DB (Database), generating a private DB based on key information of the public DB, where the public DB includes public AR (Artificial Intelligence) information, and the private DB includes private AR information and a whitelist, and acquiring the public AR information or the private AR information.

Abstract: In some embodiments, an apparatus includes a memory and a processor. The processor is configured to receive an index file that associates a characteristic in a set of documents with a set of information associated with the characteristic in the set of documents. The processor is further configured to generate an index identifier associated with the index file and calculate a set of pseudorandom logical block identifiers associated with a set of storage locations of a database based on the index identifier. The processor is then configured to parse the index file into a set of index data portions and send a signal to the database to write each index data portion from the set of index data portions at a different storage location within the database as indicated by a different identifier from the set of pseudorandom logical block identifiers.

Abstract: The invention relates to a ruggedized integrated modular reinforced case having, in one preferred embodiment, a floating protective chamber for safely transporting a laptop computer, as well as other valuable, or fragile objects.

Abstract: Embodiments of the present disclosure provide systems and methods for defining database roles to allow sharing of the objects within a database in a more granular fashion. A database role is created within a database, and privileges are granted to the database role by a provider account. The database role may be granted to a share object, which would result in the share object being indirectly granted all privileges that have been granted to the database role. Once the share object has been hydrated in the consumer account, the local administrator can then decide which local roles are granted usage on the shared database role, thus ultimately allowing some level of filtering as to which shared objects can be accessed by which local roles.

Abstract: A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.

Abstract: In one embodiment, a method includes receiving a request to transfer a handle to an object from a first process to a second process, accessing a first security context of the handle and a second security context of the second process, identifying one or more security policies based on at least one of the first security context and the second security context, determining that the handle is allowed to be transferred to the second process by applying the one or more security policies on the first security context of the handle and the second security context of the second process, and transferring the handle to the second process in response to the request.

Abstract: In an embodiment, the disclosed technologies include receiving a query that requests aggregate information about entity event data relating to digital content delivered digitally by an entity management system to entities of the entity management system, the query associated with a requester account; determining a first privacy allocation for the requester account; determining a first privacy value, the first privacy value computed based on the query and a selected privacy algorithm; deducting the first privacy value from the first privacy allocation to produce a first privacy balance; causing executing of the query on the entity event data and providing a result set in response to the query only if the first privacy balance indicates that the first privacy allocation has not been depleted.

Abstract: A block chain-based data query method, performed by a server of a block chain system, is provided. In the method, a data identifier of first data to be queried is obtained according to a query request, the query request including a user identifier of a user that initiates the query request. Data permission information in a target block in a target block chain of the block chain system is obtained according to the data identifier. Based on the data permission information not including the user identifier, a query permission request is transmitted to at least one target server in the block chain system, the query permission request including the user identifier and the data identifier. Based on a received query permission response satisfying a target policy in the data permission information, the first data is obtained from a data storage system according to the data identifier.

Abstract: One or more embodiments of the present specification provide methods and apparatuses for chaining service data. Service data to be chained that is generated for each service processing node for a target service is obtained, where the service data to be chained includes feature values corresponding to a plurality of service data fields. A smart contract deployed in a blockchain is invoked to generate, based on the feature values corresponding to the plurality of service data fields and at least one predetermined digest information field, service data digest information corresponding to each service processing node, where the at least one predetermined digest information field includes at least one specified data field in a unified digest data structure built for a plurality of service processing nodes. The service data digest information generated for each service processing node and the corresponding service data to be chained are stored in the blockchain.

Abstract: Systems, methods, and devices for implementing secure views for zero-copy data sharing in a multi-tenant database system are disclosed. A method includes receiving, by a cross-account, a grant to access a share object comprising a secure view and usage functionality associated with a secure user-defined function (UDF) to underlying data. The method includes accessing, by the cross-account, the share object using the grant. The method includes sending a request to a share component to cause the share component to implement the secure view and the usage functionality associated with the secure UDF. The method includes sending a query to the share component to cause the share component to implement the secure UDF.

Abstract: Described herein are various technologies pertaining to de-identifying patient data. A computing system removes protected health information and/or sensitive information from patient data by selectively replacing data in the patient data to retain the clinical relevance of the patient data after the patient data is de-identified, thereby retaining the utility of the de-identified patient data for tasks such as statistical analysis of patient data, testing of healthcare software functionality, and others.

Abstract: The present disclosure relates to methods and systems for contextual data masking and registration. A data masking process may include classifying ingested data, processing the data, and tokenizing the data while maintaining security/privacy of the ingested data. The data masking process may include data configuration that comprises generating anonymized labels of the ingested data, validating an attribute of the ingested data, standardizing the attribute into a standardized format, and processing the data via one or more rules engines. One rules engine can include an address standardization that generates a list of standard addresses that can provide insights into columns of the ingested data without externally transmitting the client data. The masked data can be tokenized as part of the data masking process to securely maintain an impression of the ingested data and generate insights into the ingested data.

Abstract: An electronic device according to an embodiment includes: a memory configured to store encryption information, a processor, and a switch configured to electrically disconnect the processor from the memory in a first state and to electrically connect the processor and the memory in a second state. The processor is configured to receive a user input for switching the switch from the first state to the second state, provide the encryption information stored in the memory to a secure application executing only in a second execution environment through a secure operating system of the second execution environment, when the switch is switched from the first state to the second state to generate an electrical path between the memory and the processor, acquire signature information for a transaction based on the encryption information, and provide the signature information acquired based on the encryption information to a signature request application.

Abstract: A method for training an obfuscation network is provided. The method includes steps of: a learning device (a) inputting training data into an obfuscation network to generate obfuscated data for training; (b) (i) inputting the obfuscated data for training into a discriminator to output a current obfuscation score for training and (ii) (ii-1) inputting first sub-data for training into a learning network to output first sub characteristic information for training and updating current updated learning parameters of the learning network to first sub updated learning parameters and (ii-2) while increasing an integer k from 2 to n, inputting k-th sub-data for training into the learning network to output k-th sub characteristic information for training and updating (k?1)-th sub updated learning parameters of the learning network to k-th sub updated learning parameters; and (c) updating previous updated obfuscation parameters of the obfuscation network to current updated obfuscation parameters.

Abstract: A computer device performs operations for managing registry access, including monitoring a user process on the computer device and, in response, establishing a set of registry access rules relevant to the user process. Each registry operation requested by the user process is evaluated and, in response, an appropriate action determined. Such action suitably includes at least one of: blocking the registry operation in relation to a particular key in a registry of the operating system, and enabling access to a particular key in the registry of the operating system to perform the requested registry operation. In particular, the operations may be performed using a registry filter driver in a kernel mode of an operating system of the computer device.

Abstract: A consensus method includes: when a first consensus node of a consortium blockchain performs a consensus operation on a consensus proposal, sending a verification signature to a second consensus node of the consortium blockchain, wherein the verification signature is configured to represent at least one consensus verification item set by the first consensus node sending the verification signature for the consensus proposal; receiving, by the first consensus node, a verification signature sent by at least one of the second consensus node or a third consensus node of the consortium blockchain for the consensus proposal; and after the first consensus node reaches a consensus on proposal data of the consensus proposal, generating a block recording the received verification signature corresponding to the consensus proposal and the proposal data, wherein the verification signature recorded in the block is configured to prove validity of the proposal data recorded in the block.

Abstract: Disclosed herein is a data storage device comprising a data path and an access controller. The data path comprises a data port configured to transmit data between a host computer and the data storage device and registers with the host computer system as a block data storage device. A non-volatile storage medium stores encrypted user content data. A cryptography engine is connected between the data port and the storage medium and uses a key to decrypt the encrypted user content data. A data store stores multiple entries comprising authorization data associated with respective authorized devices. The access controller receives from a manager device a public key associated with a private key stored on a device to be authorized, creates the authorization data, and stores the authorization data in association with the public key in the data store, thereby registering the device to be authorized as one of the authorized devices.

Abstract: A method for providing an anti-rollback secure timer service includes determining, at a device which includes a processor providing a trusted execution environment (TEE), a trusted memory, and a real time clock (RTC) accessible through an operating system of the device, an initial reference time value, by a secure timer application running in the TEE, the initial reference time value determined based on an initial value of the RTC obtained during booting of the device and a time delta value. The method further includes determining an updated reference time value based on the initial reference time value, a second value of the RTC, and a previously stored old reference time value, determining an updated time delta value based on the second value of the RTC and the updated reference time value, and storing the updated time delta value and the updated reference time value in the trusted memory.

Abstract: Disclosed herein are system, method, and device embodiments for tablet mode switching. In an embodiment, an electronic device enters a payment mode associated with a secure processor of the electronic device and suspends access by a primary processor of the electronic device to a component of the electronic device. Further, the electronic device determines that it is connected to a docking hub, permits the primary processor to access a peripheral device connected to the docking hub via a pair connection, and receives, by the primary processor, user input from the peripheral device connected to the docking hub via the pair connection.

Abstract: A method of programming a device comprising acquiring configuration data, loading the configuration data onto a programmable device, processing at least a portion of the configuration data through a one way function to form processed configuration data, and configuring at least one configurable module of the programmable device using the processed configuration data from the processing step.

Abstract: A memory card locking device is provided. The memory card locking device includes an external card reader having a card slot in which a memory card is allowed to be inserted. The external card reader includes a main controller. The main controller is configured to receive a locking instruction from an application, and execute a locking program on the memory card to lock the memory card according to the locking instruction. When the memory card is locked, any device other than the external card reader cannot read and identify the memory card, and thus cannot look up and access data stored in the memory card.

Abstract: A method for operating a bus system, in which a message of the bus system is received and its validity is ascertained, wherein, if it was ascertained that the message is “malicious”, a new message is sent to the designated receiver of this “non-malicious” message, the content of the new message having been previously rated as “non-malicious.

Abstract: A method includes a computing device of a storage network dispersed storage error encoding a plurality of data segments to produce a plurality of sets of encoded data slices. The method further includes the computing device obfuscating a first set of encoded data slices of the plurality of sets of encoded data slices using an obfuscating method to produce a first set of obfuscated encoded data slices. The method further includes the computing device outputting the first set of obfuscated encoded data slices for storage in the storage network.

Abstract: An integrated-circuit device includes a bus system, a plurality of master components, a plurality of slave components, and hardware filter logic. The bus system is configured to carry bus transactions and security-state signals for distinguishing between secure and non-secure transactions. The master components are switchable between a secure and a non-secure state. The hardware filter logic is configured to intercept bus transactions at an interception point, positioned within the bus system such that bus transactions from at least two of the master components and at least two slave components pass the interception point. It is also configured to use i) a slave address of the intercepted bus transaction, and ii) the security state of the intercepted bus transaction, to determine whether to allow the transaction, in accordance with a set of filtering rules, and to block intercepted bus transaction that are determined not to be allowed.

Abstract: Systems and methods for designing one or more unified architecture models for architecting digital products and digital services is provided. The traditional systems and methods provide for architecture frameworks or processes for domain specific architectural concerns.

Abstract: A computer-implemented method for constructing structures using beams bounded by quadric surfaces of revolution includes generating a quador beam within a computer-aided design (CAD) tool. The quador beam comprises two spheres at opposing endpoints, and the beam is bounded by a quadric surface of revolution around an axis of symmetry joining the center of the two spheres. The quadric surface of revolution abuts with tangent continuity with the surface of each of the spheres. Once generated, the quador beam can be visualized in the CAD tool or another display medium.

Abstract: A computer-implemented method, computer program product and prototyping platform creates a design blueprint for a substrate-based microfluidic device. A design and prototyping platform receives at least one blueprint parameter and at least one constraint associated with a proposed substrate-based microfluidic device including a hydrophilic material and arrangement of a pattern of a hydrophobic material. The platform determines an arrangement of a plurality of microfluidic device elements as candidates for implementation of the proposed substrate-based microfluidic device and outputs a design blueprint of the proposed substrate-based microfluidic device.

Abstract: A system for evaluating an electromagnetic performance of a permanent magnet (PM) motor. Parameters update an electromagnetic analytical (EA) model. Each component of the PM motor is associated with regions, and assumptions of the EA model include a relative permeability of regions associated with a rotor core modeled as finite. Calculate a general solution to a governing equation to each region which include unknown coefficients to be determined. Define a set of boundary and interface (B&I) conditions for two neighboring regions, each B&I condition is defined through a set of Maxwell equations using the two neighboring regions sets of assumptions, geometries of the PM motor and electrical and magnetic properties associated with the two neighboring regions. All the unknown coefficients in the general solutions in all regions are solved with a linear system of equations obtained from the B&I conditions between the regions, to solve for a magnetic vector potential.

Abstract: A software-based (“soft”) real-time hub designed and implemented for use in simulation (or control testing) systems such as to provide a modular soft-real-time PIL. A simulation system of the present description typically may include one or more of the following useful subsystems or components: (a) a soft-real-time hub; (b) simulation interfaces; and (c) hardware emulation subsystems/devices. The soft-real-time hub is typically a combination of hardware and software adapted to provide deterministic data transport between simulations and input/output (I/O) emulation. By creating a common point, the hub enables simulation modules to be swapped out as the simulation system progresses without the operator having to worry about interface timing, forcing, or data visualization. A desirable aspect of the simulation system is it allows for testing certain conditions by forcing I/O and then seeing how the controller or system under testing responds.

Abstract: The present disclosure provides a method and an apparatus for obtaining surface potential.

Abstract: Machine assisted systems and methods for enhancing the resolution of an IC thermal profile from a system analysis are described. These systems and methods can use a neural network based predictor, that has been trained to determine a temperature rise across an entire IC. The training of the predictor can include generating a representation of two or more templates identifying different portions of an integrated circuit (IC), each template associated with location parameters to position the template in the IC; performing thermal simulations for each respective template of the IC, each thermal simulation determining an output based on a power pattern of tiles of the respective template, the output indicating a change in temperature of a center tile of the respective template relative to a base temperature of the integrated circuit; and training a neural network.

Abstract: A method includes generating a netlist for a circuit design and predicting, by applying a first machine learning model to the netlist, a first compile time for the circuit design. The method also includes predicting, by applying a second machine learning model to the netlist, a first place and route strategy based on the first compile time. The method further includes adjusting a logic of the circuit design in accordance with the first place and route strategy.

Abstract: Embodiments of the present invention disclose an MRAM cell layout for 32 nm, 45 nm, and 65 nm CMOS process technology.

Abstract: Methods and systems herein can efficiently interconnect processors through a custom grid (a data mesh) utilizing upper metal layer routing in a semiconductor die design to minimize latency. A computer-implemented method of routing interconnects on a semiconductor die includes receiving a set of non-default routes and associated routing rules; identifying a set of critical signals for feedthrough on the set of non-default routes; generating a connectivity matrix including a set of resulting routes, the resulting routes routing the set of critical signals through the set of non-default routes; generating a timing analysis of the connectivity matrix based on a set of latency requirements; responsive to determining that the timing analysis is not compliant with the latency requirements, generating a set of routing constraints; and updating the associated routing rules to include the set of routing constraints.

Abstract: A failure-in-time (FIT) evaluation method for an IC is provided. The FIT evaluation method includes accessing data representing a layout of the IC including a metal line and a plurality of vertical interconnect accesses (VIAs); picking a plurality of nodes along the metal line; dividing the metal line into a plurality of metal segments based on the nodes; and determining FIT value for each of the metal segments to verify the layout and fabricate the IC. The number of the nodes is less than the number of the VIAs, and a distance between two adjacent VIAs of the VIAs is less than a width of the metal line.

Abstract: The present invention relates generally to the technical field of integrated circuit mask design, and more particularly to a method, an apparatus and an electronic device for Hessian-Free photolithography mask optimization. The method includes steps: S1, inputting a design layout of a mask to be optimized; S2, positioning error monitoring points on the design layout of the mask to be optimized; S3, obtaining an optimization variable x of the mask to be optimized; S4, forming an objective function cost on the optimization variable x; and S5, optimizing the objective junction cost by a Hessian-Free-based conjugate gradient method, to obtain an optimization result of the mask to be optimized. Optimizing the objective function cost based on a Hessian-Free conjugate gradient method to obtain an optimization result of the mask to be optimized, which can greatly reduce the computation resources in the optimization process, make the optimization process simpler, feasible, and improve the optimization efficiency.

Abstract: In implementations of systems for simultaneously modifying multiple variable fonts, a computing device implements a modification system to identify a first range of values of a glyph attribute that are adjustable by changing values of a particular design axis of a first variable font that is common to the first variable font and a second variable font. The modification system identifies a second range of values of the glyph attribute that are adjustable by changing values of the particular design axis of the second variable font. An overlapping range of values of the glyph attribute is determined between the first range of values and the second range of values. The modification system generates an additional instance of the first variable font and an additional instance of the second variable font for display in a user interface based on the overlapping range of values of the glyph attribute.

Abstract: A text preparation apparatus is configured to in the decoding processing: perform first-layer recurrent neural network processing for phrase types to be used in the text and second-layer recurrent neural network processing for words appropriate for each of the phrase types; determine a phrase appropriate for each of the phrase types based on outputs of the second-layer recurrent neural network processing; generate a first vector set from a state vector of a previous step in the first-layer recurrent neural network processing and the feature vector sets, each vector of the first vector set being generated based on similarity degrees between individual vectors in one of the feature vector sets and the state vector; generate a second vector based on similarity degrees between individual vectors in the first vector set and the state vector; and input the second vector to a given step in the first-layer recurrent neural network processing.

Abstract: Different methods and apparatuses applicable to prepare materials for a user. One embodiment includes a device, with an imaging sensor. Based on analyzing a user attribute from the imaging sensor monitoring the user, the device can identify and access an area of the materials for the user. The area includes a section, and the device can layout the section by keeping a piece of text together with an illustration to be displayed in at least two screens of different sizes. Another embodiment includes materials with a text sub file with texts, an illustration sub file with illustrations, and a logic sub file with instructions to prepare materials for the user. Either the text or the illustration sub file can include position information linking at least an illustration to a corresponding piece of text. Annotations could be added to the materials.

Abstract: An assessment system may present one or more string interaction problems to each of a plurality of students. Students may provide answers to string interaction problems in the form of string edits that, for example, identify deletions, additions, or revisions to a text string of each respective string interaction problem. The assessment system may normalize each string edit by converting each string edit into a student range edit. Each student range edit defines a replacement text string (which could be an empty text string) to be inserted within a range of reference locations relative to an original text string of the string interaction problem (which likewise could be an empty text string). An assessor may associate feedback objects with student range edits that match or, in some embodiments, are within a predetermined distance of an assessor-defined range edit.

Abstract: Systems, computer storage media, and methods for real-time rendering based on efficient device and server processing of content updates. One of the methods includes presenting user interface information that includes multiple visual portions associated with input of types of code. User input of code with respect to one or more of the visual portions is received, and code input in a particular visual portion includes code to be compiled and/or imports associated with particular libraries. Rendering of the input code is caused, and the rendering is presented in an output visual portion. A system can receive the code input in the particular visual portion over a network. The system can compile the received code and package the received code with associated libraries. The system can provide the packaged code to the user device to be interpreted during rendering of the input code.

Abstract: An information handling system may detect handwritten text associated with a gesture. The information handling system may request contextual information corresponding to the handwritten text and may receive contextual information corresponding to the handwritten text. The information handling system may display, on a display of the information handling system, the received contextual information.

Abstract: A system comprising a computer-readable storage medium storing at least one program and a method for integrating collaborative spreadsheet data into one or more network applications is presented. Spreadsheet data and an application data schema are accessed. The spreadsheet data corresponds to a spreadsheet having one or more validation rules. The application data schema comprises a set of constraints on application data consumed by an application hosted by an application server. A notification is displayed in response to determining that the one or more validation rules exclude at least one constraint from the set of constraints. The notification includes an indication that the application data is unable to be synchronized with the spreadsheet data and specifies one or more additional validation rules to associate with the spreadsheet to trigger synchronization of the application data with the spreadsheet data.