General Electric Company

Ge Capital Commercial Finance, Inc.

Nbcuniversal Media, LLC

Intelligent Platforms, LLC

William David Smith, Ii

Walter Vincent Dixon, Iii

Melvin Kurt Simmons

David R Safford

Wesley Michael Skeffington

Jonathan Peter Stillman

Safayet Nizam Uddin Ahmed

Daniel White Sexton

Austars Raymond Schnore, Jr

Joel Frederick Markham

Jon Marc Diekema

Joseph Czechowski, Iii

Anthony G Casciano

James J McKay, Iii

Ferdinand Steyer

Krzysztof Kepa

Radislav Alexandrovich Potyrailo

Kenneth Brakeley Welles

Philippe Schottland

Marc Brian Wisnudel

Eugene George Olczak

Pingfan Peter Wu

David Gilles Gascoyne

Vandita Pai-Paranjape

Richard Paul Messmer

Adil Minoo Dhalla

Steven Hector Azzaro

Yogendrasinh Bharatsinh Chauhan

Joshua Nathaniel Edmison

Sriramakrishna Maruvada

Myron L Smith

William Mandel

Daniel Halvard Miller

Terry Michael Topka

Atul Chandrakant Kshirsagar

Mahesh Amritlal Morjaria

Bharat Singh

Mark Richard Gilder

William Cree Steward

Abdul Jabbar

Rupesh Bhikaji Pawar

Ashok Menon

Virginia Ann Zingelewicz

Steven Sanicola

Michael Yoensky

John Ronald Burr

Joshua M Temkin

Xi Wang

Christopher Duane Carothers

Willard Monten Wiseman

Philip F Carfora

Robert J Santimays

Jacques M DesMarteau

James R Persico

Daniel R Pengue

Thomas R Boehm

Keith George McNab

Steven J Sullivan

James Weston Nash

James Arthur Bush

A network access control system includes a communication device and an authorization system. The communication device is configured to communicate time-critical messages through a time-sensitive network during scheduled time windows. The communication device is further configured to be communicatively connected to a candidate device and to receive a network access request from the candidate device while blocking the candidate device from communicating through the time-sensitive network. The authorization system is communicatively connected to the communication device and configured to authorize the candidate device via a multi-factor authentication protocol that requires a user of the candidate device to successfully provide multiple identification factors. In response to the authorization system authorizing the candidate device, the communication device is configured to grant the candidate device restricted access to one or more of send or receive approved messages through the time-sensitive network.

Network access control system

An apparatus is provided. The apparatus including a plurality of network interfaces, including a first network interface and a second network interface. The apparatus also includes a processor with two or more independent processing units, including a first independent processing unit and a second independent processing unit. The apparatus further includes a memory having first instructions and second instructions stored thereon. Execution of the first instructions, cause the first independent processing unit to execute operations associated with a first operating system and communicate, via the first network interface, over a bi-direction communication, with one or more platform computing devices. Execution of the second instructions, cause the second independent processing unit to execute real-time operations associated with a second operating system and communicate, via the second network interface, with one or more computing devices each having one or more sensors thereon.

Industrial internet connected control system

A secure communication path device includes a first secure communication validator providing a one-way communication path from a security domain by implementing a secure protocol parser, a second secure communication validator providing a one-way communication path from a second security domain by implementing a secure second protocol parser. Each validator including respective serial/de-serializer units providing a unidirectional communication path from their respective security domain. The device hardware segregating respective communications of the security domains within the secure communication path device.

Provably secure application-specific cross-domain solutions

Provided are a device and method for allocating system resources. In one example, the method includes identifying resources that are available from a plurality of devices included in a system, allocating available resources of the plurality of devices to a plurality of components operating in the system, the allocating comprising reserving a set of resources from the plurality of devices in the system for each respective component, from among the plurality of components, based on operating requirements included in the metadata of the respective component, and managing the system based on the allocated resources. By allocating resources to components executing in the system, in advance, and preventing other components from consuming those resources, the system can operate with improved stability.

Method and device for allocating resources in a system

The example embodiments are directed to a system and method for secure provisioning of secrets into MPSoC devices using untrusted third-party systems. In one example, the method includes generating a random number sequence from a true random number generator to produce secret information, storing the secret information in an on-chip secure storage, encrypting, in a device and using public key encryption, the secret information to generate an encrypted message, and transmitting the encrypted message to a third-party system.

Secure provisioning of secrets into MPSoC devices using untrusted third-party systems

According to some embodiments, a system may include a communication port to exchange information with a client device associated with an industrial control system. A network security server coupled to the communication port may include a computer processor adapted to provide a network security service for the client device. The computer processor may further be adapted to record security information about the client device via a blockchain verification process (e.g., by registering a validation result within a distributed ledger). The network security service might comprise, for example, an integrity attestation service providing software verification for the client device.

Blockchain verification of network security service

According to some embodiments, an overall chain-of-trust may be established for an industrial control system. Secure hardware may be provided, including a hardware security module coupled to or integrated with a processor of the industrial control system to provide a hardware root-of-trust. Similarly, secure firmware associated with a secure boot mechanism such that the processor executes a trusted operating system, wherein the secure boot mechanism includes one or more of a measured boot, a trusted boot, and a protected boot. Objects may be accessed via secure data storage, and data may be exchanged via secure communications in accordance with information stored in the hardware security model.

Secure industrial control platform

A digital rights management (DRM) scheme enables a user having a valid license to digital content to create one or more copies of the content. The number of copies is limited by the DRM scheme. However, if the user is not connected or connectable to the content provider or licensing party when additional copies are desired, the user is permitted to create one or more additional copies without deleting or disabling other copies even though the additional copies exceed the number otherwise permitted by the DRM scheme. The number of such 'float' copies may be limited. Rights to such additional copies may be withdrawn during a subsequent connection session between the user and the content provider.

Digital rights management flexible continued usage system and method

A system and method for controlling processor instruction execution. In one example, a method for synchronizing a number of instructions performed by processors includes instructing a first processor to iteratively execute instructions via a first set of iterations until a predetermined time period has elapsed. A number of instructions executed in each iteration of the first set of iterations is less than a number of instructions executed in a prior iteration of the first set of iterations. The method also includes instructing a second processor to iteratively execute instructions via a second set of iterations until the predetermined time period has elapsed. A number of instructions executed in each iteration of the second set of iterations is less than a number of instructions executed in a prior iteration of the second set of iterations. The method includes determining whether additional instructions are to be executed.

System and method for synchronizing processor instruction execution

A system and method for controlling processor instruction execution. In one example, a method for controlling a total number of instructions executed by a processor includes instructing the processor to iteratively execute instructions via multiple iterations until a predetermined time period has elapsed. A number of instructions executed in each iteration of the iterations is less than a number of instructions executed in a prior iteration of the iterations. The method also includes determining the total number of instructions executed during the predetermined time period.

Controlling total number of instructions executed to a desired number after iterations of monitoring for successively less number of instructions until a predetermined time period elapse

The acceleration of peer-to-peer downloads of content files wherein a tracker performs a condition based peer selection that is dynamically adjustable. A further feature relates to the use of enhanced message scheme for communications. One embodiment is a system in a swarm having at least one origin seed capable of at least initially storing the content files with at least one tracker maintaining a list of peers wherein the tracker uses at least one dynamically adjusting peer selection algorithm to generate a condition based peer-list and provides the condition based peer-list to a requesting peer.

Accelerating peer-to-peer content distribution

A system for altering a functionality of an optical article from a pre-activated state to an activated state, comprising an optical article comprising an optical data layer for storing data, an external radiation source for generating an external stimulus adapted to interact with the optical article, such interaction causing a change in optical accessibility of optically stored data, a directing material, wherein said directing material is for directing the external stimulus to selective portions of the optical article, thereby altering the functionality of the optical article from a pre-activated state to an activated state; a convertible element capable of responding to the external stimulus to irreversibly alter the optical article from the pre-activated state of functionality to the activated state of functionality, wherein said convertible element comprises a color-shift dye, a magnetic material, a thermo-chromic material, a magneto-optical material, a light scattering material, a phase-change material, dye aggregates, or combinations thereof.

Optical article having anti-theft feature and a system and method for inhibiting theft of same

Methods and apparatus for processing cash advance requests are described. In one embodiment, the system includes a data repository, and a process management and workflow system coupled to the data repository. The process management and workflow system is configured to record a cash advance request, evaluate current collateral information, and evaluate current credit status.

Methods and apparatus for processing cash advance requests

Methods and apparatus for submitting reports to an automated lending system are described. At a lowest level interface, a user manually submits information via a browser, and at a highest level interface, information is submitted via a print driver. Although the broadest spectrum of client base is addressed by having the loosest coupling to the accounting system, i.e., the lowest level interface, the loosest coupling requires the most user interaction. As the interface level increases, the accounting system has a tighter coupling with the system, which provides increased functionality at the expense of restricting the variety of client types that may be supported (e.g., platform and operating system specific).

Methods and apparatus for submitting information to an automated lending system

Growing community of inventors

Schenectady, NY, United States of America

William David Smith, Ii