Abstract: A software update apparatus controls software update of an electronic control unit. The software update apparatus includes a control unit configured to, when a software update process of the electronic control unit is executed, control a timing for executing an approval request process for requesting an approval for the software update process according to the type of non-volatile memory included in an electronic control unit to be updated.

Abstract: A data distribution device for a master device transferring an update data to electronic control devices: acquires multiple update data corresponding to the electronic control devices as a writing target; acquires recombination information for the master device to execute a transfer process; divides the update data based on the recombination information to generate a division data; packages the division data to generate packages; and distributes the packages to the master device.

Abstract: Technology described herein relates to dynamic adjustment of power capping for one or more servers of a subset of servers. A method can comprise generating, by a system operatively coupled to a processor, for a first server subset of a server system, weighted average values comprising a first weighted average value of current workload priority at the first server subset, a second weighted average value of current performance efficiency of the first server subset, and a third weighted average value of predicted future power usage for the first server subset, ranking, by the system, the first server subset as compared to a second server subset of the server system that does not overlap servers with the first server subset, wherein the ranking is based on at least one of the weighted average values, and applying, by the system, a power cap to the first server subset based on the ranking.

Abstract: A method includes receiving interaction data indicating a performance of a specified action by a user of a user device, identifying a last-in-time action associated with the user and an initiation action associated with the user and the specified action, generating, based on the identified last-in-time and initiation actions, a first attribution associated with the identified last-in-time action and the specified action and a second, additional attribution associated with the identified initiation action and the specified action, propagating, to two or more different models, the first attribution and the second, additional attribution, and generating, based on the first attribution and the second, additional attribution, one or more visual representations of the first attribution and the second, additional attribution.

Abstract: A method conducted using a mobile device is disclosed. The method includes maintaining a plurality of software modules, wherein each software module of the plurality of software modules is built and executed independently of other software modules. The mobile device receives first interaction initiation data corresponding to a first transaction. In response to receiving the first interaction initiation data, a first subset of the plurality of software modules is selected via an application interface to execute the first transaction. The mobile device receives second interaction initiation data corresponding to a second transaction. In response to receiving the second interaction initiation data, a second subset of the plurality of software modules to execute the second transaction is selected via the application interface. The first subset of the plurality of software modules is different than the second subset of the plurality of software modules.

Abstract: A system includes an interface, a processor, and a memory. The interface is configured to receive a version of a model from a model registry. The processor is configured to store the version of the model, start a process running the version of the model, and update a proxy with version information associated with the version of the model, wherein the updated proxy indicates to redirect an indication to invoke the version of the model to the process. The memory is coupled to the processor and configured to provide the processor with instructions.

Abstract: A mailbox mechanism is used for communication of secure messages from a server to the firmware of a device. Mailbox content provided by the server is authenticated in a driver execution environment of the device, using reboots across the communication sessions, and then stored in secure storage. The communication sessions include first receiving a signed server key, and then receiving a message from the server that is based on a hash of a nonce generated by the device.

Abstract: A method for generating a differential upgrade package, adaptable for upgrading a firmware of an embedded system with the differential upgrade package. A differential comparison is performed on an original file and a new file to generate global discrepancy information, comprising addresses and lengths of matched data portions in the new file and the original file. Thereafter, based on the global discrepancy information, the new file is divided into a plurality of blocks, with patch parameters for each of the blocks determined. Based on the patch parameters, a plurality of differential blocks are generated, respectively corresponding to each of the blocks. In the end, the differential upgrade package generation equipment combines the differential blocks into the differential upgrade package, allowing the embedded system to sequentially load each of the differential blocks from the differential upgrade package to upgrade the firmware. A differential upgrade package generation equipment is also provided.

Abstract: Methods, apparatus, and processor-readable storage media for automated software deployment are provided herein. An example computer-implemented method includes obtaining at least one request to merge one or more code changes associated with a first branch of software code with a second branch of software code; performing one or more tests to validate the at least one request; in response to validating the request, performing a merge operation that merges the one or more code changes with the second branch of software code; and deploying the second branch of software code to at least one cloud-based computing environment based at least in part on a version tag that identifies the merge operation corresponding to the request and a previous version tag that identifies a most recent merge operation completed for a previously deployed version of the second branch of software code.

Abstract: An electronic device according to an embodiment of the disclosure may include a storage device including a memory and a memory controller that controls the memory, and a processor operatively coupled to the storage device, wherein the processor may be configured to: identify a version of firmware for driving the memory controller, stop providing an input/output request to the storage device based on the identified firmware version, transmit updated firmware to the storage device based on the storage device completing an input/output operation corresponding to an input/output request waiting to be processed within a specified time, and reset the storage device to allow the memory controller to execute the updated firmware based on completion of installation of the updated firmware in the storage device.

Abstract: A technique provides network efficient data failover by explicitly protecting one or more common snapshot references at sites of a multi-site data replication environment to improve granularity of control of recovery point objectives (RPO) for data across the sites. A common snapshot reference or recovery point (RP) ensures that, in the event of failure to a site, data designated for failover may be quickly protected by replicating only small incremental changes to the RP so as to maintain RPO requirements across the sites. Illustratively, the technique enhances and extends a disaster recovery (DR) application programming interface (API) protocol through an extension that defines and applies a tag to the RP, wherein the tag enables protection and/or preservation of the RP by ensuring that the sites honor the tag applied to the RP. The tag essentially functions as an advisory lock for the RP that is shared among the sites to prevent deletion of the RP at the sites throughout the duration of the lock.

Abstract: Versions of an application are managed by receiving a request for a version of an application, retrieving, responsive to the received request, a version of a master application component based at least in part on version data that associates a version of the master application component with the version of the application, retrieving a relationship operable to relate the version of the master application component with a corresponding version of a first component on which the master application component depends for a function of the application, retrieving the corresponding version of the first component, responsive to the retrieving of the relationship, assembling the version of the application based at least in part on the retrieved version of the master component, the retrieved relationship, and the retrieved first component, and providing for an execution of the assembled version of the application.

Abstract: Systems and techniques to ensure reliable operation of devices, such as medical devices, that are configured to execute installed software are described. A secure software update process for the device utilizes multiple integrity checks in order to prove that software integrity has not been compromised before the device is allowed to be put into service with the software installed thereon. Also described is a computer architecture for an external defibrillator that isolates the execution of installed software applications by separately compiling the code for those applications and by executing the separately-compiled applications on different processors of the defibrillator. Among other things, this allows the defibrillator to be “brought online” faster, such as to deliver a shock to a patient.

Abstract: A security monitoring system that detects abnormalities in moving body and analyzes a response method includes: a reception unit that receives a security log from the moving body; an attack determination unit that analyzes the security log to determine whether or not there was a cyber attack; a dynamic response permission confirmation unit that confirms whether communication with a software distribution management server (i.e., an over the air (OTA) center or simply a management server) is permitted; an information requesting unit that requests the OTA center for predetermined information when communication with the OTA center is permitted; and an execution instruction unit that instructs the OTA center to execute software update of the moving body based on the received predetermined information.

Abstract: Systems and methods for determining that a new software program is in parity with a legacy software program. In some aspects, the system receives information for multiple threads processed by a legacy software program. The system processes the information using the new software program, which is executed in parallel with the legacy software program. If an output of a particular thread from the new software program varies outside a threshold distance from a corresponding output for the thread from the legacy software program, the system ceases further processing of the particular thread by the new software program. Otherwise, the system allows processing of the particular thread by the new software program to continue.

Abstract: Systems and methods to characterize work unit records of a collaboration environment based on stages within a workflow are described herein. Exemplary implementations may: manage environment state information maintaining a collaboration environment including work unit records; manage workflow information characterizing workflows comprising stages; responsive to work unit records being at individual stages, select the rules that apply at the individual stages; and/or perform other operations.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for identifying anomalies of failure events on a cloud computing system and determining cross-component and cross-layer correlation between change events that occur on the cloud computing system and the failure events associated with the anomalies. In particular, this disclosure describes a system that receives telemetry related to change events and failure events across any number of computing layers of a distributed computing environment (e.g., a cloud computing system) and detects anomalies based on counts of failure events that are manifested over discrete periods of time. Based on these detected anomalies, the anomaly correlation system can determine cross-layer and cross-component correlations between selective change events and the detected anomalies of failure events.

Abstract: A system and method for efficiently measuring on-die power supply voltage are described. In various implementations, an integrated circuit includes at least one or more processors and on-chip memory. The on-chip memory has a higher security level than off-chip memory. One of the one or more processors is designated as a security processor. During the processing of the multiple boot steps of a bootup operation, the security processor initializes a message queue in on-chip memory. The security processor also loads multiple modules from off-chip memory into the on-chip memory. The processor executes the multiple loaded modules in an order based on using the message queue to implement inter-module communication among the plurality of boot modules. The security processor transfers requested data between modules using messages from the modules and data storage of the message queue. The modules are completed without reloading any modules from off-chip memory.

Abstract: Various examples are directed to systems and methods for upgrading a cloud-implemented database management application. A cloud service may receive a request from a first user group to upgrade the database management application for the first user group. The cloud service may determine a first version of the database management application used by the first user group and access an upgrade strategy map. Using the upgrade strategy map, the cloud service may determine a set of target versions of the database management application suitable for upgrading from the first version. The cloud service may access an indication of a selected target version from the set of target versions and initiate execution of a first instance of the selected target version for the first user group at the cloud environment. The first instance may access a first data persistence associated with the first user group.

Abstract: Methods, media, and systems for secure provisioning of servers within a cloud computing environment are provided for herein. In some embodiments, a management service can delegate provisioning of a server of the cloud computing environment to an imaging service. In response, the imaging service can generate an operating system image for the server and can utilize disk encryption to protect to operating system image. In embodiments, a volume encryption key of the disk encryption can be encrypted utilizing a public key of a trusted platform manager of the server, to produce an encrypted volume encryption key that is protected by the trusted platform module of the server. The encrypted operating system image and the encrypted volume encryption key can then be transmitted to the server to cause the server to be provisioned with the operating system image. Other embodiments may be described and/or claimed herein.

Abstract: A method or system for automatically detecting vulnerabilities. The system obtains an identifier associated with a vulnerability and one or more vulnerability detection parameters associated with the vulnerability. The system also obtains a script based in part on the one or more vulnerability detection parameters. The system then periodically executes the script to determine whether the vulnerability has been remediated or reintroduced. Responsive to determining that the vulnerability has been remediated, the system transmits a request to a vulnerability tracking system to resolve a security alert. Responsive to determining that the vulnerability has been reintroduced, the system transmits a request to the vulnerability tracking system to reactivate the security alert.

Abstract: A control method for a display device includes, in a state in which first firmware is installed, acquiring version information of second firmware installed in another display device from the other display device, inquiring the other display device about propriety of update of the second firmware to the first firmware when a version of the second firmware is older than a version of the first firmware, receiving the second firmware from the other display device when a notification for denying the update of the second firmware is received from the other display device, and updating the first firmware installed in the display device to the second firmware.

Abstract: A method, computer program product, and computer system for copying, at a new node, reservation metadata volumes of an old node. While a software upgrade is in progress, volume reservation command processing may be enabled on both the new node and the old node when copying is complete. Separate logic may be run to process a volume reservation command of the volume reservation command processing. The old node may be switched to a primary mode, wherein the new node may be switched to a secondary mode to synchronize volume reservation metadata with a primary copy. When the software upgrade is complete, the new node may be switched to a single mode to use only a volume reservation database of the new node.

Abstract: A multi-stage configuration service running in a cloud computing environment receives a transformation request from a client device. Based on a policy identified in the transformation request, the multi-stage configuration service constructs a configuration file containing key-value pairs representing settings of a requested transformation. The settings are set or constrained in accordance with zero or more facets contained in the policy that describe how an application feature is set or constrained in performing a transformation on a source file or files. The multi-stage configuration service determines, in accordance with the policy, whether the configuration file is structurally correct in view of a user-provided overriding property value and either enqueues the configuration file for a publishing agent in the cloud computing environment to perform the requested transformation or returns an error report to the client device.

Abstract: An application operation control device includes processing circuitry configured to store associated file information that indicates, in association with each other, an application and an associated file that is a file whose integrity is to be verified when integrity of the application is determined, and associated application information that indicates, in association with each other, the application and an associated application that is an application that is potentially affected when the integrity of the application is damaged, determine integrity of the associated file of the application, and in a case where, among a plurality of the associated files of the application, integrity of any of the plurality of the associated files is determined to be damaged, extract, as a target application for operation control, an application associated with an associated file the integrity of which is determined to be damaged from the associated file information.

Abstract: A processing load is reduced when a flash memory is used. A storage management device acquires an archive associated with an application, stores the acquired archive to one or more blocks among a plurality of blocks contained in the flash memory, and deletes one block among the plurality of blocks. In the archive storage, the acquired archive is stored in one of the blocks not storing an archive associated with an application different from that of the acquired archive, and in the deletion of one block, when an application is deleted, a block storing an archive associated with the application to be deleted is deleted.

Abstract: A chatbot executes on a user device to gather performance data associated with an application on the user device. During a diagnostics chat with a user, the chatbot receives a plurality of answers from a user of the user device to a plurality of prompts sequentially output by the chatbot to the user regarding a performance issue of an application on the user device. The chatbot also retrieves, from the user device, contextual data of the application during the performance issue. The chatbot packages the answers received from the user and the retrieved contextual data to enable diagnosis of the performance issue of the application.

Abstract: Disclosed are various embodiments for using a distributed ledger to track the evolution or deployment of feature sets for machine-learning. A registration request is received from a first node of a distributed ledger, the registration request comprising a code hash representing a feature set generator and a data hash representing a data set. The registration request is then relayed to a second node of the distributed ledger for approval by the second node. Next, an approval for the registration request is received from the second node. Subsequently, an entry in the distributed ledger comprising the code hash and the data hash is created.

Abstract: Apparatus and methods for deploying a web application including a plurality of binary objects. The methods may include isolating from the plurality of class files a class file in which a run-time behavior occurs. The methods may include updating the class file to produce a modified class file that does not have the behavior. The methods may include testing performance of the modified class file. The methods may include storing the class file in a dynamic configuration database. The methods may include recognizing the modified class file as being modified. The methods may include, using a cron job processor, reading the metadata. The methods may include compiling the modified class file into binary code. The methods may include executing the binary code instead of a different binary code that corresponds to the class file in which the run-time behavior occurs.

Abstract: The present disclosure provides an online upgrade method and system for a multi-core embedded system. The system includes a service system and a multi-core embedded system. The service system is used to provide upgrade firmware files. The multi-core embedded system includes: a system on chip, including a multi-core embedded processor system and a programmable logic module, the programmable logic module maps the memory of the multi-core embedded processor system to the service system; a communication module, establishing the communication connection between the system on chip and the service system, receiving and caches the upgraded firmware files from the service system; a DMA module, used for fast data transfer between the communication module and the memory of the multi-core embedded processor system; an interrupt controller, executing interrupt processing, so that the multi-core embedded processor system can obtain the upgraded firmware files through the memory.

Abstract: A center device manages data to be written into electronic control units mounted on a vehicle and includes an update data storage storing update data for a target device being a target of data update among the electronic control units, a vehicle information storage storing, together with type of the vehicle, vehicle related information, and a device related information storage storing update data related information. Based on information stored in the device related information storage and the vehicle information storage, the center device generates specification data including device type, attribute, the update data related information of the target device, and information indicating rewrite environment related to the data update of the target device, and generates a distribution package including the update data and the specification data.

Abstract: Distribution servers and methods are disclosed for downloading data sets to patient devices. The server has a network interface circuit, a memory and a processing circuit. The memory receives a data set, the data set having parameters to be used by software on the patient devices to perform patient-related functions. The data set has a software version indicator for the data set. A processing circuit compares the software version indicator of the data set to a current software version of the patient device and determines that an inequality exists. Based on this determination, the server distributes the data set to the patient device.

Abstract: The technology disclosed herein enables a processor to receive, at a distribution unit, a first content request from a distribution electronic control unit (ECU) associated with a vehicle, wherein the first content request reflects one or more filtering criteria, determine whether a content item that satisfies the filtering criteria is stored on a storage device of the distribution unit, responsive to determining that the content item that satisfies the filtering criteria is not stored on the storage device of the distribution unit: send, to a managed content delivery service, a second content request, wherein the second content request includes the filtering criteria, and receive, from the managed content delivery service, the content item that satisfies the filtering criteria, and send the content item that satisfies the filtering criteria to the distribution ECU associated with the vehicle.

Abstract: A version control system implemented in software and executed by one or more processors that provides for change set integration for diverse types of objects. The system may be configured to handle a wide range of objects of different types committed to the version system by storing and/or versioning the objects, change sets, and complex relationships between objects and object dependencies. Unified support for development operations may be provided as assets under version control may optionally be deployed, rolled back, compared to a corresponding live environment, and tested thus providing for sophisticated development and operational cycles. The system provides automatic and/or semi-automatic object integration such as may be useful for continuous development and integration and feature based development.

Abstract: The present invention relates to methods for operating a respiration apparatus and a respiration system, and also a respiration apparatus and a respiration system. The respiration system comprises a respiration apparatus and a computer software program for an external computer to operate the respiration apparatus. The respiration apparatus comprises a processor device and an apparatus software program and an apparatus configuration. The validities of the computer software, the apparatus software and the apparatus configuration are in each case characterized by a version. The versions are compared with one another to detect a version conflict. If invalid versions are present, the computer software is provided with a program component with a limit value and a plausibility rule, or the setting parameters are sorted into a first group and a second group. The setting parameters of the first group are retained.

Abstract: Methods and systems for parallelizing processes through the use of predicted data are described herein. A requesting system may send processing requests to a processing system. The processing system may need to have a third-party validation system validate the processing requests before proceeding. The processing system may detect errors and generate modified data that is predicted to resolve the errors in obtained processing requests. The modified data may be sent to the validation system in place of the original data that contained errors. While waiting for validation results from the validation system, the modified data may also be sent to the requesting system to confirm that it is correct. By sending the modified data to both the validation system and the requesting system for approval, increased efficiency and parallelization may be achieved.

Abstract: A system includes an interface, a processor, and a memory. The interface is configured to receive a version of a model from a model registry. The processor is configured to store the version of the model, start a process running the version of the model, and update a proxy with version information associated with the version of the model, wherein the updated proxy indicates to redirect an indication to invoke the version of the model to the process. The memory is coupled to the processor and configured to provide the processor with instructions.

Abstract: Provided are a universal software installer and/or uninstaller. The universal software installer determines a structure of the software to be installed and verifies all necessary software elements are applied or installed on the endpoint during the install. The universal software uninstaller determines a structure of the software to be uninstalled and verifies all related software elements are removed from the endpoint. The universal software installer and/or uninstaller is independent of an operating system platform executing on the endpoint.

Abstract: An information processing device (10) includes a selection receiving unit (110) that receives an input indicating selection of at least one countermeasure among a plurality of countermeasures applicable to a terminal, an operating information specifying unit (120) that specifies a type of operating information corresponding to the countermeasure applicable to the terminal, an operating information acquisition unit (130) that acquires operating information of the type specified by the operating information specifying unit (120), a remaining terminal specifying unit (140) that specifies remaining terminals where a security risk remains when the countermeasure received by the selection receiving unit (110) is applied based on terminal-specific countermeasure information indicating a countermeasure applicable to each terminal against the security risk, a prediction unit (150) that predicts the number of remaining terminals at a future time based on the operating information acquired by the operating information a

Abstract: A system for providing biometric data to a user device. The system includes an electronic processor, the electronic processor configured to receive, from a remote device, biometric data for a user and create a biometric token for the user based on the biometric data. The electronic processor is also configured to transmit the biometric token to a global token repository, periodically create, for a user device, an update package including a subset of updated biometric tokens from the global token repository that are associated with one or more programs associated with the user device, by identifying one or more updated biometric tokens in the global token repository associated with a program GUID of a program of the one or more programs, and transmit the update package to the user device when the user device is next in communicative contact with the electronic computing device.

Abstract: A system and process for onboarding client devices to a key management server. In operation, a device generates an asymmetric key pair including a public key and a private key. The device obtains an access token from an identity management server after successfully authenticating with the identity management server. The device transmits a request including the access token and the public key to the key management server to onboard the client device. The device receives a response including encrypted bootstrap information from the key management server. The bootstrap information included in the response is encrypted using the public key of the asymmetric key pair. The device decrypts the encrypted bootstrap information using the private key of the asymmetric key pair to obtain the bootstrap information and then uses the bootstrap information for encrypting communications transmitted to the key management server or for decrypting communications received from the key management server.

Abstract: A request to install a first version of a software application is received. The first version of the software application is stored in a first blockchain in a first distributed blockchain ledger. In response to receiving the request to install the first version of the software application, the first version of the software application is validated by running a hash of the first blockchain. In response to validating the first version of the software application, the first version of the software application is installed from the blockchain to a device. The software application may also be validated after being installed to the device.

Abstract: A method includes receiving a selection of a first change to a project in a first repository of a plurality of repositories and identifying one or more attributes of the first change to the project. The method further includes identifying a second change to the project in the plurality of repositories in view of the one or more attributes of the first change and performing an action in view of identifying the second change to the project.

Abstract: Systems, computer program products, and methods are described herein for synchronizing dataflow migration between technical environments. The present invention is configured to identify one or more resources in a source environment for migration from the source environment to a target environment; capture, using a resource assessment engine, one or more dependencies associated with the one or more resources; generate a migration load based on at least the one or more resources identified in the source environment and the one or more dependencies associated with the one or more resources; generate a snapshot of the source environment based on at least the migration load, wherein the snapshot comprises at least the one or more resources and the one or more dependencies; and store the snapshot of the source environment in a snapshot database repository.

Abstract: The present invention includes embodiments of systems and methods for addressing the interdependencies that result from integrating the computing resources of multiple hardware and software providers. The integrated, multi-provider cloud-based platform of the present invention employs abstraction layers for communicating with and integrating the resources of multiple back-end hardware providers, multiple software providers and multiple license servers. These abstraction layers and associated functionality free users not only from having to implement and configure provider-specific protocols, but also from having to address interdependencies among selected hardware, software and license servers on a job-level basis or at other levels of granularity.

Abstract: An information handling system includes a provisioning server and a server. The server includes a baseboard management controller (BMC) to determine a first hardware inventory profile for the server. The BMC provides the first hardware inventory profile to the provisioning server. The BMC stores first signed provisioning configuration content that is based on a first ownership certificate for a first owner of the server. The BMC determines a second hardware inventory profile for the server, and provides the second hardware inventory profile to the provisioning server. The BMC stores second signed provisioning configuration content that is based on a second ownership certificate for a second owner of the server. In response to an expiration of the second ownership certificate, the BMC removes the second signed provisioning configuration content, compares a current hardware inventory profile to the first hardware inventory profile, and generates a report to indicate any hardware changes.

Abstract: Methodologies for upgrading and patching an in-database application package and its application instances. A data platform determines a number of objects of an application instance running on the data platform at a previous version level of an application package of the application instance. In response to determining the number of objects of the application package running on the data platform at the previous version level of the application package is one or more, the data platform continues determining the number of objects running on the data platform at a previous version level of the application package. In response to determining the number of objects of the application instance running on the data platform at the previous version level of the application package is none, the data platform upgrades the application instance to the new version of the application package.

Abstract: An information processing apparatus which is capable of improving performance without increasing memory or storage capacity. The information processing apparatus includes a storage device that includes a first area in which first firmware is stored, a second area in which second firmware is stored, and a common area that is used in a case where the information processing apparatus is started using the first or second firmware. The information processing apparatus is started in a first startup using the first firmware or started in a second startup using the second firmware. During the first startup, a swap file is created in the common area, and swapping is activated. During the second startup, in a case where a swap file is present in the common area, the swap file is deleted from the common area.

Abstract: A patching method includes generating an original image through compilation for a plurality of files. If a first file in the plurality of files changes, a new index mode of the first file or new data of the first file may be appended to an end of an original image to update the first file to obtain a new image.

Abstract: Techniques for implementing a software-as-a-service (SaaS) infrastructure that supports flexible multi-tenancy are provided. In various embodiments, this SaaS infrastructure employs a hybrid design that can flexibly accommodate both single-tenant and multi-tenant instances of a SaaS application. Accordingly, with this infrastructure, a SaaS provider can advantageously support high levels of isolation between certain tenants of its application (as dictated by the tenants' needs and/or other criteria) while keeping the marginal cost of operating the infrastructure as low as possible.