Intel Corporation

John B Vicente

Hong C Li

Mark D Yarvis

Rita H Wouhaybi

James R Blakley

Prashant Dewan

Kirk Smith

Robert Chavez

Sanjay Rungta

Winson Chan

Ansuya Negi

Sharad K Garg

Atul N Hatalkar

Aaron R Berck

Xubo Zhang

Ron Kuruvilla Thomas

Casey T Rathbone

Roderick E Kronschnabel

Matthew J Schneider

Chris D Lucero

Jeff Sedayao

Steven M Brown

Mandeep Shetty

Jeremy Ouillette

Dilip Krishnaswamy

Gang Ding

Suman Sharma

John Du

Navneet Malpani

Carlton D Ashley

Richard Robak

Luis A Gimenez

Glen J Anderson

Hormuzd M Khosravi

John Charles Weast

Lama Nachman

Justin Lipman

Adam Jordan

Joshua J Ratcliff

Mohammad R Haghighat

Abhilasha Bhargav-Spantzel

Uri Kahana

Charles C Smith

Oliver W Chen

Christiaan M Mets

Systems and methods may provide for receiving web content and determining a trust level associated with the web content. Additionally, the web content may be mapped to an execution environment based at least in part on the trust level. In one example, the web content is stored to a trust level specific data container.

Differentiated containerization and execution of web content based on trust level and other attributes

Various systems and methods for implementing a software defined industrial system are described herein. For example, an orchestrated system of distributed nodes may run an application, including modules implemented on the distributed nodes. In response to a node failing, a module may be redeployed to a replacement node. In an example, self-descriptive control applications and software modules are provided in the context of orchestratable distributed systems. The self-descriptive control applications may be executed by an orchestrator or like control device and use a module manifest to generate a control system application. For example, an edge control node of the industrial system may include a system on a chip including a microcontroller (MCU) to convert IO data. The system on a chip includes a central processing unit (CPU) in an initial inactive state, which may be changed to an activated state in response an activation signal.

Distributed software-defined industrial systems

Various systems and methods may be used to implement a software defined industrial system. For example, an orchestrated system of distributed nodes may run an application, including modules implemented on the distributed nodes. The orchestrated system may include an orchestration server, a first node executing a first module, and a second node executing a second module. In response to the second node failing, the second module may be redeployed to a replacement node (e.g., the first node or a different node). The replacement mode may be determined by the first node or another node, for example based on connections to or from the second node.

Distributed dynamic architecture for error correction

Technologies for establishing and utilizing a decentralized cloud infrastructure using a plurality of mobile computing devices include broadcasting for the formation of the decentralized cloud computing and storage infrastructure and establishing wireless communications between the plurality of mobile computing devices. The plurality of mobile computing devices self-organize and cooperate with one another to establish a structured decentralized cloud infrastructure to expose and sharing resources, services, and/or applications for ad hoc or socially-driven decentralized, cloud computing purposes.

Ad hoc decentralized cloud infrastructure

Technologies for monitoring data storage location for cloud data include a cloud monitoring server configured to communicate with one or more cloud customer computing devices and cloud service providers. The cloud monitoring server receives monitoring requests from the cloud customer computing devices and retrieves provider information from the cloud service providers. The cloud monitoring server compiles response data based on the monitoring requests and the provider information, and sends response data to the cloud customer computing devices. Cloud customer computing devices may send on-demand monitoring requests and/or continuous, policy-based monitoring requests. For policy-based monitoring, the cloud monitoring server continually monitors the provider information and provides response data when one or more conditions specified in the policy are satisfied. The cloud monitoring server may also make recommendations and provide feedback based on the monitoring requests or the provider information. Other embodiments are described and claimed.

Cloud data storage location monitoring

Apparatuses, methods, and computer-readable media for a context-based access mediator ('CAM') are described. The CAM may be configured to mediate access to computer-accessible resources by a user using a computing device after receiving a request from the computing device for the computing device to access a computer-accessible resource. The computer-accessible resource may be local or remote to the computing device. The CAM may be configured to receive the request and to mediate access to the requested resource. Such mediation may be performed through the CAM determining whether the resource may be accessed by the computing device and/or through the CAM determining which resources are available to the be accessed by the computing device. The CAM may be configured to mediate access to computer-accessible resources based on information about a context for the computing device and/or computer-accessible resource. Other embodiments are described and claimed.

Context-based resource access mediation

Technologies for remote device authentication include a client computing device, an identity provider, and an application server in communication over a network. The identity provider sends an authentication challenge to the client. A capability proxy of the client intercepts an authentication challenge response and retrieves one or more security assertions from a secure environment of the client computing device. The capability proxy may be an embedded web server providing an HTTP interface to platform features of the client. The client sends a resource access token based on the security assertions to the identity provider. The identity provider verifies the resource access token and authenticates the client computing device based on the resource access token in addition to user authentication factors such as username and password. The identity provider sends an authentication response to the client, which forwards the authentication response to the application server. Other embodiments are described and claimed.

Technologies for authentication and single-sign-on using device security assertions

Growing community of inventors

Roseville, CA, United States of America

John B Vicente