Abstract: In an example embodiment, a solution is used to provide for a highly efficient application installer. A software packaging format, known as vSolution, is provided that allows software developers to ship multiple artefacts of different types in a single container. Unlike traditional mechanisms, this container does not contain a dedicated installer executable or any sort of installation routine. Rather, the container format encourages a declarative approach to describe what an installation routine should perform, via the organization of the artefacts based on content type and using a naming convention.

Abstract: Systems, methods, and computer-readable media for preserving trust data during operating system updates of a secure element of an electronic device are provide. An update package is received to update an existing secure element operating system to a new secure element operating system by exporting trust data from the existing secure element operating system, after the exporting, uninstalling the existing secure element operating system, migrating the exported trust data using a migration operating system when a data format version of the existing secure element operating system is different than a data format version of the new secure element operating system, installing the new secure element operating system, and importing the migrated trust data into the installed new secure element operating system.

Abstract: Methods, apparatus, systems and articles of manufacture for platform firmware resilience are disclosed. An example apparatus includes a baseboard management controller interface to access a notification from a baseboard management controller that a firmware image is available in a baseboard management memory. A host communicator is to identify, in response to the notification, an occurrence of a boot process of the host processor, the host communicator to halt the boot process. A baseboard management memory interface to access the firmware image in the baseboard management memory. An image validator to validate the firmware image. A firmware memory interface to, when the firmware image is valid, write the firmware image to a firmware memory of the host processor, the host communicator to enable the boot process using the firmware image stored in the firmware memory.

Abstract: Technologies are provided for non-monotonic eventual convergence for desired state configuration (“DSC”). In some situations DSC cannot move toward a desired state without first moving further from that state. For example, a file that needs to be replaced with a newer version but that is currently executing (desired state of “operating”) cannot be replaced without first being stopped. But stopping moves in the wrong direction relative to the desired state, which is to have the service operating. This moving away so as to be able to move forward is a problem for conventional DSC systems that results in failures. The solution to this problem is non-monotonic eventual convergence (“NMEC”) which enables a DSC system to configure a target system for a desired state by moving further away from a desired state if that is needed to eventually reach the desired state.

Abstract: A system and method is provided for analyzing and fulfilling file requests within an organization, the file requests including multiple data items. The system and method includes storing delivered data items in at least one computer memory and executing instructions using at least one computer processor to perform multiple steps. The file request may be received over a network from a system user and analyzed to identify data items corresponding to the delivered data items. The request may then be cleansed by creating a delta list removing the data items corresponding to the delivered data items. The cleansed request may be transmitted for fulfillment to a fulfillment source. When a file corresponding to the fulfilled request is received, a response file combining the file corresponding to the received request with the data items corresponding to the delivered data items is created.

Abstract: A method for operating, by an MEC operator, a multi-access edge computing (MEC) system in which applications are provided by MEC tenants for deployment on MEC hosts of the MEC system and in which various levels of privileges are provided by the MEC operator to the MEC tenants. The method includes assigning, by an MEC broker, privileges to the MEC tenants; initiating, by the MEC broker via interactions with one or more of an MEC Orchestrator, an MEC platform manager, and a user app LCM proxy, operations. The operations can include one or more of application package on-boarding, application instance installation on selected MEC hosts, application provisioning, through configuration of appropriate parameters, and application life-cycle management operations including one or more of bootstrapping, termination, migration, scaling. The method further includes pre-validating, using the privileges provided to the MEC tenants, operation requests issued by the MEC tenants.

Abstract: A system and method are described for performing service-initiated updates to IoT devices.

Abstract: An application management service may be used to determine which agents of an application need to be installed and/or licensed on one or more smart sensors. The application management service may determine which agents are associated with a given application and may determine which agents are currently installed and/or licensed on the one or more smart sensors. The application management service may determine which agents are not currently installed or licensed on the one or more smart sensors and that are associated with the application and may cause those agents to be installed or licensed on the one or more smart sensors.

Abstract: Systems and methods are disclosed herein for monitoring, detecting, and mitigating hardware and software failures. An error detection module monitors the execution of software processes and detects failures of the monitored processes. The error detection module may monitor reboot events and correlate reboot events with failures of the monitored software processes. If a monitored process fails, the error detection module may log the failure and its cause. If the same process has failed numerous times, causing the user device to experience a reboot loop, remedial action may be taken based on the cause of the failure.

Abstract: Object-oriented application languages often provide resources to applications for accessing objects stored in the volatile application memory region, and, separately, for packaging objects for persistent storage and network transport by serialization and deserialization involving a storage format. However, this design creates discrepancies between the application language and storage format, and depends on affirmative serialization and deserialization by the application. Presented herein are techniques for providing object access to objects involving persisting the objects as documents in a document store, where such persistence occurs automatically upon object creation and updating, and where such objects are stored in a language format integral to the application language (e.g., when a JavaScript application creates an object, the objects are automatically stored as documents of the document store in a JavaScript Object Notation (JSON) format).

Abstract: The application relates to a method and apparatus for controlling and managing a field device using an industry Internet operating system, in this method, an industry cloud server sends a device identifier configuration strategy to an industry field device, so that the industry field device establishes a communication connection with the industry cloud server, generates the identifier of the industry field device, and further generates a list of device information; and the industry cloud server monitors and manages the industry field device over a cloud according to the list of device information sent by the industry field device on its own initiative. In this way, the industry field device can obtain the device identifier automatically without relying upon any specialized hardware device, and report the device information to the industry cloud server on its own initiative.

Abstract: Techniques for reconfiguring a server to perform various hardware functions are disclosed herein. In one embodiment, a client device sends an instance request to a compute service system for launching an instance. The instance request indicates a resource requirement for the instance. In response to the instance request, the compute service system selects a server from among a plurality of servers in the compute service system based on determining that the server is configurable to at least partially meet the resource requirement. The compute service system then sends a provisioning request to the selected server. The provisioning request includes information for programming a reconfigurable resource of an adapter device in the selected server according to a particular hardware function.

Abstract: A system and method of automating software fix installation rate management for a software package including two or more hierarchical levels include obtaining information from two or more customer systems. The information indicates software fixes installed at each of the two or more customer systems. The method also includes generating a report corresponding with each of the two or more customer systems. The report indicates a number of the software fixes installed at the respective one of the two or more customer systems as compared with an average number of the software fixes installed at the two or more customer systems at one of the two or more hierarchical levels. Determining whether to increase, decrease, or maintain a rate of installation of the software fixes at each of the two or more customer systems is based on the report corresponding with each of the two or more customer systems.

Abstract: A first raw value of a first field from the first set of fields is encrypted to generate a first token using a symmetric key encryption mechanism based on a first cryptographic key associated with a first time window after which the first cryptographic key is no longer valid for tokenization of raw fields of raw log records. After the first time window has elapsed, a second raw value of a second field from the second set of fields is encrypted to generate a second token using the symmetric key encryption mechanism based on a second cryptographic key that is different from the first cryptographic key. The second cryptographic key is associated with a third time window that occurs after the first time window and after which the second cryptographic key is no longer valid for tokenization of raw fields of raw log records.

Abstract: A software agnostic multi-user CAx environment system includes a host computer with a processor and a memory. The processor and memory are configured to operate a multi-user CAx environment. The host computer is configured to communicate with a plurality of local computers. Each of the local computers includes at least one CAx software package and is configured to operate a local CAx environment of the multi-user CAx environment. A part database is configured to store multiple part files. Each of the part files includes at least one component having multiple features. At least one meta data file is stored within the part database. The meta data file is linked to at least one of the plurality of features.

Abstract: A remote management agent apparatus for a remote management system is provided. The remote management system includes a remote device management apparatus and a management target device managed by the remote device management apparatus remotely. The remote management agent apparatus includes a request data receiver configured to receive request data issued from the remote device management apparatus to the management target device, a device agent apparatus identifying unit configured to identify a device agent apparatus capable of communicating in compliance with a communication mode supported by the management target device, and a request data forwarder configured to forward the request data, received by the request data receiver, to the device agent apparatus identified by the device agent apparatus identifying unit.

Abstract: An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Abstract: Multiple instances of a distributed application are run in a Kubernetes cluster. An updated version of the application must undergo some post-launch initialization before a production workload handled by the original version can be switched to the updated version. Accordingly, a temporary update-monitor pod is inserted into the cluster so that it can query the application as to its update status and report it to a log file. A script external to the cluster can read the log file to determine if initialization is complete. If so, the workload can be switched to the update instance. The temporary update-monitor pod is destroyed to free up resources and to ensure that it is does not pose a security vulnerability.

Abstract: An in-vehicle relay device includes: a first determination unit that determines whether or not first data is included in a received communication signal; a non-volatile storage unit that sequentially stores the first data that has been determined by the first determination unit as being included; a second determination unit that determines whether or not second data is included in the received communication signal; and a prohibition unit that, when the second determination unit has determined that the second data is included, prohibits the storage to be performed by the storage unit.

Abstract: Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU.

Abstract: In accordance with embodiments of the present disclosure, an information handling system may include a host system comprising a host system processor and a management controller communicatively coupled to the host system processor and configured to provide management of the information handling system. The management controller may be further configured to read a features-to-fixes database having one or more entries, each entry of the features-to-fixes database setting forth an association between an information handling resource feature and one or more firmware fixes, read a usage database having one or more entries, each entry of the usage database setting forth usage of information handling resource features by the information handling system, and compare entries of the features-to-fixes database and the usage database to determine at least one of a criticality and an applicability of the one or more firmware fixes to the information handling system.

Abstract: A method, computer program product, and computing system for receiving a language-generic message identifier from a storage system that is for a client electronic device. A preferred language is identified for the client electronic device. A database is searched using the language-generic message identifier and the preferred language to identify a language-specific notification.

Abstract: Examples are disclosed herein that relate to updating stylus firmware. One example provides a method of performing a stylus firmware upgrade in an interactive display system including a display and a stylus comprising sending, from the display, a signal to the stylus causing the stylus to enter a listen mode, while the stylus operates in the listen mode, sending, from the display, a firmware upgrade notification to the stylus configured for receipt by the listen mode, receiving, at the display, a reply to the firmware upgrade notification from the stylus, determining, at the display, whether the reply was received within a predetermined time range, and, responsive to determining that the reply was received within the predetermined time range, initiating transfer of a firmware update to the stylus if a newer firmware version is available.

Abstract: Devices, computer-implemented methods, and computer-readable media for a redemption header for merchant offers, such as online coupons, are provided. In some embodiments, an offers website may provide offers, such as online coupons, in a browser executing on a user device. When a user selects an online coupon, the browser is redirected to a merchant website associated with the online coupon and a coupon code value is copied to a clipboard. Additionally, a redemption header having the coupon code and instructions is added in the merchant webpage. A webpage element for the redemption header, such as an inline frame, is created in the merchant webpage and the redemption header is provided based on an offer identifier stored in a browser-accessible storage item such as a cookie.

Abstract: Embodiments of the present invention relate to scheduling updates on a personal electronic device based on biometric data gathered from a user. The personal electronic device, or another computing device, may receive a pending software update. The personal electronic device, or another computing device, may receive biometric data of the user from one or more biometric sensors. The biometric data may provide sufficient information to determine a sleep status of the user. The personal electronic device, or another computing device, may determine a sleep status of the user. The personal electronic device, or another computing device, may install the pending software update in response to determining that the user is sleeping. The personal electronic device, or another computing device, may delay the pending software update in response to determining that the user is not sleeping.

Abstract: Information can be displayed on display devices according to information to be notified.

Abstract: A system communicates a client application and a web application and receives configuration data operable within the web application and the client application. The system distributes the configuration data to the client application and the web application. The distributed configuration data is then used to configure the client application and the web application.

Abstract: An information processing device includes a first acquisition unit that acquires information indicative of an installed product being software installed in a device connected with the information processing device through a network from the device; a second acquisition unit that acquires information indicative of an available product being software available for a user of the device from a server connected with the information processing device through the network; and a controller that controls an operation by the user on a product for the device, on the basis of a dependency between plural products including the installed product and the available product.

Abstract: The present disclosure discloses a method and an apparatus for repairing a kernel vulnerability.

Abstract: A method and an apparatus for upgrading a para-virtualized network adapter kernel acceleration module are disclosed. The method includes switching a network flow of a first para-virtualized network adapter kernel acceleration module to a user mode for transmission; removing the first para-virtualized network adapter kernel acceleration module; inserting a second para-virtualized network adapter kernel acceleration module; and switching a transmission of the network flow in the user mode to a transmission by the second para-virtualized network adapter kernel acceleration module. The method and the apparatus for upgrading a para-virtualized network adapter kernel acceleration module switches between a kernel mode and a user mode for a network flow without affecting fluctuations in a network flow of a virtual machine. An upgrade of a para-virtualized network adapter kernel acceleration module is achieved, which is unnoticeable by a user, and user experience is not affected.

Abstract: There is provided a prototype storing method. A prototype storing method executed by a computing device, the method includes selecting an inactive layer not assigned an interaction from among a plurality of layers included in a first prototype assigned at least one interaction, determining whether an interaction has been assigned to at least one layer adjacent to the inactive layer and determining the at least one adjacent layer as a merge target if it is determined that no interaction has been assigned to the at least one adjacent layer, generating a new layer by merging the inactive layer and the layer determined as the merge target; and generating a second prototype comprising the new layer instead of the inactive layer and the at least one adjacent layer in response to a user's input to the first prototype.

Abstract: In one embodiment, a device in a network captures domain name system (DNS) response data from a DNS response sent by a DNS service to a client in the network. The device captures session data for an encrypted session of the client. The device makes a determination that the encrypted session is malicious by using the captured DNS response data and the captured session data as input to a machine learning-based or rule-based classifier. The device performs a mediation action in response to the determination that the encrypted session is malicious.

Abstract: Techniques for handling security of an application and its extension are described. In one embodiment, an application manager of an operating system running within a data processing system launches an application in a first sandboxed environment based on a first security profile associated with the application. In response to receiving a request from the application for accessing a function of an application extension that is associated with the application, the application manager launches the application extension in a second sandboxed environment based on a second security profile associated with the application extension. The application manager is to individually enforce security and manage resources of the application and the application extension in the first and second sandboxed environments based on the first and second security profiles, respectively. The second security profile specifies resources fewer than the first security profile.

Abstract: Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU.

Abstract: An application (“app”) may be associated with a web site, so that an online service may use the connection between the app and the web site. In one example, the online service is an information provider, such as a search engine or advertising engine. The online service provides a web administrator portal, through which a webmaster provides or generates a secret code. The webmaster gives the secret code to an app developer, who gives the code to an app store when the app is published. If the service provides information about the web site (e.g., as a search result or ad impression), the service may also provide an indication of the app, since the use of the code represents confirmation by both the webmaster and app developer that a relationship exists between the web site and the app.

Abstract: A method begins by determining an encryption change regarding one or more sets of encrypted encoded data slices stored in storage units of a dispersed storage network (DSN). The method continues by updating an encryption file to include information regarding one or more of level of encryption, new encryption keys, new encryption key identifiers, and previous encryption file information. The method continues by dispersed storage error encoding the updated encryption file to produce a set of encoded encryption file slices (EEFSs) and outputting the set of EEFSs to a set of storage units of the DSN. The method continues by retrieving EEFSs from the set of storage units, recovering the updated encryption file from the EEFSs. The method continues by re-encrypting the encrypted encoded data slice based on the new encryption key to produce a re-encrypted encoded data slice and storing the re-encrypted encoded data slice in the storage units.

Abstract: Some embodiments of a method and an apparatus for pre-heated software installation have been presented. In one embodiment, packages of updates to software are downloaded from a remote source to a computing system in a background operation of a computing environment in the computing system. Then installation of the packages of the updates is initiated automatically in the background operation in an isolated manner without committing to the software updates.

Abstract: An information processing terminal on which a web browser operates includes a setting unit configured to set a limitation condition for limiting transmission of local storage data to a web server providing a web application, and a determination unit configured to determine a value indicating a status of network connection of the information processing terminal in accordance with the set limitation condition when the status of the network connection of the information processing terminal is online. Even when the status of the network connection of the information processing terminal is online, the transmission of the local storage data to the web server from the web application is limited in accordance with the determined value.

Abstract: An information processing apparatus that transmits a plurality of parameter values of a device to an external apparatus includes a first transmission section that selectively periodically transmits the plurality of parameter values or part of the plurality of parameter values, and a second transmission section that transmits the plurality of parameter values to the external apparatus, in a case where an amount of change in a predetermined parameter value included in the part of the plurality of parameter values satisfies a predetermined condition in a period between a previous periodic transmission and a current periodic transmission, after the predetermined condition is satisfied and before the current periodic transmission is performed.

Abstract: To establish a sign on session among single sign on (SSO)-enabled applications, a user can be prompted by an application for an access code. An access interval key can be generated using a key derivative function based on the access code. The access interval key can be considered a session key, and it can be used during a valid SSO session to decrypt a master key stored in a shared memory. In turn, the master key can be used to encrypt and decrypt the contents of the shared memory. To securely distribute the access interval key among the SSO-enabled applications during a current session, individual SSO-enabled applications can each store a public key in the shared memory. The access interval key can then be encrypted, respectively, by the public keys of the SSO-enabled applications and stored in the shared memory to be retrieved securely by the SSO-enabled applications.

Abstract: The described embodiments set forth techniques for performing live updates to file system volumes (e.g., operating system (OS) file system volumes) of computing devices through the utilization of snapshots. In particular, the techniques enable a computing device to remain active while a majority of an update process is performed, which eliminates the considerable functional downtime that is normally imposed when implementing conventional update techniques. Moreover, the overall robustness of the update process is enhanced as the techniques described herein reduce the amount of time that is required for the computing device to remain in the above-described specialized update mode.

Abstract: An information processing apparatus includes: a memory including a plurality of storage areas including a first storage area and a second storage area each of which stores a same program; and circuitry to: obtain an update program to be used for updating the program stored in each one of the first storage area and the second storage area; update the program stored in the second storage area with the update program, when the first storage area is activated and the second storage area is not activated; and control the information processing apparatus to start operating with the updated program stored in the second storage area, after shutdown and activation of the information processing apparatus.

Abstract: Techniques for reconfiguring a server to perform various hardware functions are disclosed herein. In one embodiment, a server includes a reconfigurable adapter device, where the reconfigurable adapter device includes a reconfigurable resource that is reprogrammable to perform different hardware functions. The server can receive a provisioning request corresponding to a hardware function from a management service. The reconfigurable adapter device can configure the reconfigurable resource according to the hardware function and report the configured hardware function to the server. The reconfigurable resource can be reconfigured using firmware or emulation software.

Abstract: The disclosed computer-implemented method for updating network devices may include (1) determining, by monitoring at least one endpoint device connected to a network device that provides a network connection for the endpoint device, periodic time intervals in which a user of the endpoint device is unlikely to access the network connection via the network device, (2) detecting that a system update is available for the network device that will impair the ability of the network device to provide the network connection for the endpoint device while being applied to the network device, (3) identifying, based on the periodic time intervals in which the user is unlikely to access the network connection, an optimal time at which to apply the available system update to the network device, then (4) applying the available system update to the network device at the optimal time.

Abstract: Methods and systems for providing load balancing are provided. Example embodiments provide a Application Workspace System “AWS” which enables users to access remote server-based applications using the same interface that they use to access local applications, without needing to know where the application is being accessed. In one embodiment, a load balancing message bus is provided that performs load balancing and resource discovery within the AWS. For example, the AWS may use a broadcast message-bus based load balancing to determine which servers to use to launch remote application access requests or to perform session management. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: A system for updating firmware comprises an interface and a firmware update determiner. The interface is for receiving a firmware update bundle, wherein the firmware update bundle comprises a pre-instruction and one or more firmware updates, and for receiving configuration information describing a network cluster. The firmware update determiner is for determining an indication to update a set of nodes of the cluster based at least in part on the configuration information, wherein the indication includes the pre-instruction(s) and the one or more firmware updates. The interface is further for providing the indication to update the set of nodes of the cluster and receiving a summary from each node of the set of nodes of the cluster.

Abstract: A needle electrode deployment shaft includes a central member and a plurality of needle electrodes. The central member has a plurality of needle advancement channels formed therein. The needle electrodes are disposed within the advancement channels and each advancement channel terminates in a ramp portion which deflects the needles radially outwardly as they are axially advanced. The ramps may be spirally or acutely configured in order to increase the distance through which the needles may be bent as they are axially advanced. Additionally, the central member may have a radially reduced distal tip in order to decrease tissue insertion forces.

Abstract: A data patch for a program already installed in an interactive display computer system is received over a network and stored. There is also received a first set of parameters for controlling the installation of the patch. At the computer, a second set of parameters for controlling optimum installation time periods is predetermined wherein the data patch may be installed. The first and second sets of parameters are correlated to determine a set of optimum time periods during which the data patch may be installed, and this set of time periods are displayed so that a user may interactively select an optimum time period for installation of the data patch.

Abstract: A system to reduce strain on server farm computing resources by over-riding “off-peak” patching schedules in response to performance failures occurring on a server farm. Embodiments disclosed herein determine a patching schedule for causing builds of patches to be sequentially installed on server farms during an off-peak usage time-range. Responsive to a performance failure occurring on the server farm, embodiments disclosed herein identify a particular patch that is designed to resolve the performance failure. Then, the patching schedule is over-ridden to expedite an out-of-sequence installation of whichever build is first to include the particular patch. Because resolution of the performance failure is expedited, the impact of the performance failure on the computing resources of the server farm is reduced as compared to existing server farm patching systems.

Abstract: In accordance with one example embodiment, there is provided a method for accessing a configuration database file corresponding to a network comprising a network device and using a device identifier of the network device as a key to the configuration database file to access a file entry containing configuration information for the network device. The configuration information may include identification of a configuration template file and at least one network parameter. The method may further include applying the at least one network parameter to the template file to create a configuration file and configuring the network device using the configuration file.