Abstract: A peripheral device, for use with a host, comprises one or more compute elements a security module and at least one encryption unit. The security module is configured to form a trusted execution environment on the peripheral device for processing sensitive data using sensitive code. The sensitive data and sensitive code are provided by a trusted computing entity which is in communication with the host computing device. The at least one encryption unit is configured to encrypt and decrypt data transferred between the trusted execution environment and the trusted computing entity via the host computing device. The security module is configured to compute and send an attestation to the trusted computing entity to attest that the sensitive code is in the trusted execution environment.

Abstract: A computer device instantiates a first Transport Layer Security (TLS) endpoint having access to a trusted execution environment (TEE) of the processor; generates in the TEE in an endpoint-specific public-private key pair bound to the first TLS endpoint; generates of attestation data verifying that the endpoint-specific public-private key pair was generated in the TEE and is bound to the first TLS endpoint; and signs the attestation data in the TEE using a TEE private key securely embedded in the processor. The device generates a TEE signature using an endpoint-specific private key of an endpoint-specific public-private key pair; and indicates of the attestation data, an endpoint-specific public key of the endpoint-specific public public-private key pair and the TEE signature to a second TLS endpoint within a TLS handshake message exchange between the first TLS endpoint and the second TLS endpoint.

Abstract: The present disclosure is related to computing devices, systems, and methods for a new task-engine system that connects to a variety of task-interaction providers, enabling a user to use any one of multiple task-interaction providers to create and complete tasks within a workflow. That is, the connection to a variety of task-interaction providers allows a user to interact with the workflow through any of the task-interaction providers and create and/or complete any number of tasks in the workflow. The task-engine system may also update the creation and/or completion of a workflow task in all other task-interaction providers, such that all users may be aware of, or notified of, the current state of the workflow through any of the task-interaction providers.

Abstract: Disclosed here are systems and methods that allow users, upon detecting errors within a running workflow, to either 1) pause the workflow and directly correct its design before resuming the workflow, or 2) pause the workflow, correct the erred action within the workflow, resume running the workflow, and afterwards apply the corrections to the design of the workflow. The disclosure comprises functionality that pauses a single workflow and other relevant workflows as soon as the error is detected and while it is corrected. The disclosed systems and methods improve communication technology between the networks and servers of separate parties relevant and/or dependent on successful execution of other workflows.

Abstract: Disclosed here are systems and methods that allow users to create and customize workflow tolerances. The designed tolerances define and set guidelines, such as parameters, limitations, and tolerances, for the expected values of a workflow's input and output actions. The disclosed systems and methods, upon identifying values that fall out of determined guidelines, may: notify users of such values, trigger processes that pause or stop the workflow, and require user approval before resuming the paused/stopped workflow. Embodiments may comprise machine learning components that identify incorrect/irregular values without prior user designation. Such systems and methods improve communication technology between the networks and servers of separate parties relevant and/or dependent on successful execution of other workflows and processes; allowing for effective understanding, implementation, and engagement of workflows and processes across organizational boundaries.

Abstract: In various examples there is a computing device comprising: a first microcontroller comprising a first immutable bootloader and first mutable firmware. The first immutable bootloader uses a unique device secret burnt into hardware of the computing device in order to generate an attestation of the first mutable firmware. The computing device has a second microcontroller. There is second mutable firmware at the second microcontroller. There is a second immutable bootloader at the second microcontroller which sends a measurement of the second mutable firmware to the first immutable bootloader whenever the second microcontroller restarts, such that the first microcontroller is able to include the measurement in the attestation.

Abstract: A peripheral device, for use with a host, comprises one or more compute elements a security module and at least one encryption unit. The security module is configured to form a trusted execution environment on the peripheral device for processing sensitive data using sensitive code. The sensitive data and sensitive code are provided by a trusted computing entity which is in communication with the host computing device. The at least one encryption unit is configured to encrypt and decrypt data transferred between the trusted execution environment and the trusted computing entity via the host computing device. The security module is configured to compute and send an attestation to the trusted computing entity to attest that the sensitive code is in the trusted execution environment.

Abstract: This disclosure pertains to systems and methods that allow users to specifically detect and correct errors within workflows quickly, efficiently, and with minimal repercussions. Once the error is corrected, users have the option to continue the workflow from the point of failure or from a point prior to the point of failure, while also having the option to bypass completed actions and/or other actions in a workflow. The improved communication technology comprises functionality that pauses relevant workflows or processes as soon as the error is detected and while it is corrected. The disclosure also improves communication technology between the networks and servers of separate parties relevant and/or dependent on successful execution of other workflows or processes; allowing for effective understanding, implementation, and engagement of business processes across organizational boundaries.

Abstract: Systems and methods are provided for generating a combined receipt in a distributed ledger system implemented by replicas of a network. The replicas maintain a distributed ledger comprising a plurality of executed transactions authenticated using a hash tree having a hash root. Some or all of the replicas cryptographically sign the hash root. A combined receipt for a first transaction and second transaction of a plurality of executed transactions is generated by determining path information comprising a minimum set of values required to generate the hash root from either the first transaction or the second transaction given the first transaction and the second transaction. The combined receipt for the first and second transactions comprises: i) the determined path information; and ii) signatures of one or more of the replicas which signed the hash root.

Abstract: Disclosed is a fuel conditioning system (SC) configured to supply an aircraft turbine engine using fuel (Q) from a cryogenic tank (RC), the conditioning system (SC) comprising at least one pumping turbomachine (1), a first heat exchanger (31) configured to heat the fuel (Q) in the fuel circuit (CQ) by circulating an air stream (A), and at least one heating turbomachine (2) configured to supply an air flow (A) to the first heat exchanger (31), the heating turbomachine (2) comprising an air intake compressor (21), a combustion chamber (24) and an air exhaust turbine (22) configured to drive the air intake compressor (21), the combustion chamber (24) being supplied with air taken from the air flow (A) and with the fuel (Q) from the fuel circuit (CQ).

Abstract: A turbofan includes a fan, a casing positioned downstream of the fan and separating a primary flowpath from a secondary flowpath, a compressor, a combustion chamber and a turbine being arranged in the primary flowpath, the turbofan having a differential transmission coupled to the turbine, and a power supply device configured to provide additional power to the one provided by the turbine to drive the compressor.

Abstract: In various examples there is a computing device comprising: a first microcontroller comprising a first immutable bootloader and first mutable firmware. The first immutable bootloader uses a unique device secret burnt into hardware of the computing device in order to generate an attestation of the first mutable firmware. The computing device has a second microcontroller. There is second mutable firmware at the second microcontroller. There is a second immutable bootloader at the second microcontroller which sends a measurement of the second mutable firmware to the first immutable bootloader whenever the second microcontroller restarts, such that the first microcontroller is able to include the measurement in the attestation.

Abstract: A propulsion system includes a drive shaft that rotates about an axis, a fan, a fan shaft that drives the fan about the axis, a reduction mechanism coupling the drive and fan shafts, a compression section driven by the drive shaft, and an inlet channel that extends between the fan and the compression section. The inlet channel includes inner and outer ferrules delimiting an air inlet flow path, the inner ferrule having a minimum radius. The reduction mechanism includes two reduction stages including two or more planet gears circumferentially distributed around the axis, each planet gear including a first portion meshed with the drive shaft and a second portion meshed with the fan shaft and being mounted fixed with respect to the inner ferrule and having a maximum radius greater than the minimum radius such that the air inlet flow path extends partly between the two or more planet gears.

Abstract: Disclosed here are systems and methods that allow users to create and customize workflow tolerances. The designed tolerances define and set guidelines, such as parameters, limitations, and tolerances, for the expected values of a workflow's input and output actions. The disclosed systems and methods, upon identifying values that fall out of determined guidelines, may: notify users of such values, trigger processes that pause or stop the workflow, and require user approval before resuming the paused/stopped workflow. Embodiments may comprise machine learning components that identify incorrect/irregular values without prior user designation. Such systems and methods improve communication technology between the networks and servers of separate parties relevant and/or dependent on successful execution of other workflows and processes; allowing for effective understanding, implementation, and engagement of workflows and processes across organizational boundaries.

Abstract: The disclosed technology is generally directed to code transparency. In one example of the technology, a claim associated with an application is received. The claim is a document that is signed with a claim signature and that includes evidence associated with a policy, and further includes an expected set of at least one binary measurement associated with the application. The evidence is cryptographically verifiable evidence associated with the application. A trusted execution environment (TEE) is used to provide a distributed ledger. The claim is verified. Verifying the claim includes verifying the expected set of at least one binary measurement associated with the application, verifying the claim signature, and, based at least on the evidence, verifying that the application meets the policy. Upon successful verification of the claim, the claim is appended to the distributed ledger. A ledger countersignature associated with the claim is generated.

Abstract: The disclosed technology is generally directed to code transparency. In one example of the technology, evidence associated with a policy is obtained. The evidence includes data that includes cryptographically verifiable evidence associated with initial source code in accordance with the policy. The initial source code is source code for a CTS. The initial binary is based on the initial source code is executed in a TEE such that a CTS instance begins operation. The CTS instance is configured to register guarantee(s) associated with code approved by the CTS instance. The TEE is used to provide a ledger. The evidence is stored on the ledger. Measurement(s) associated with the binary are provided. A service key associated with CTS instance is generated. TEE attestation of the measurement(s), the evidence, and the service key is provided.

Abstract: A propulsion system includes a drive shaft, a fan, a fan shaft, and a reduction device coupling the drive and fan shafts. The reduction device includes a first reduction stage and a second reduction state, and include a sun gear, centered on an axis of rotation of the drive and fan shafts and driven in rotation by the drive shaft, a ring gear, coaxial with the sun gear and that drives the fan shaft in rotation about the axis, and planet gears distributed circumferentially about the axis between the sun and ring gears, each planet gear including a first portion which is meshed with the sun gear and a second portion which is meshed with the ring gear, a diameter of the first portion being different from a diameter of the second portion, and an oil transfer bearing positioned between the fan and the reduction device.

Abstract: A processing system comprising one or more chips, each comprising a plurality of tiles is described. Each tile comprises a respective processing unit and memory, the memory storing a codelet. The processing system has at least one encryption unit configured to encrypt and decrypt data transferred between the tiles and a trusted computing entity via an external computing device. The codelets are configured to instruct the tiles to transfer the encrypted data by reading from and writing to a plurality of memory regions at the external memory such that a plurality of streams of encrypted data are formed, each stream using an individual one of the memory regions at the external computing device.

Abstract: The invention describes a system for controlling the cyclic setting of blades (1) of a turbine engine propeller, the blades (1) being arranged in a plane normal to the axis of rotation (r) of the propeller, the system comprising: —a plate assembly (40) that can be tilted relative to the normal plane (P), —an articulation system (50) articulating the plate assembly (40) relative to the blades (1) such that tilting the plate assembly (40) modifies the setting of the blades (1), —a force sensor (5) designed to measure a force applied in the normal plane (P) by an air flow at the inlet of the propeller blades (1), —a cylinder (60) suitable for tilting the plate assembly (40) in response to a force measured by the force sensor (5).

Abstract: The present disclosure is related to computing devices, systems, and methods for a new task-engine system that connects to a variety of task-interaction providers, enabling a user to use any one of multiple task-interaction providers to create and complete tasks within a workflow. That is, the connection to a variety of task-interaction providers allows a user to interact with the workflow through any of the task-interaction providers and create and/or complete any number of tasks in the workflow. The task-engine system may also update the creation and/or completion of a workflow task in all other task-interaction providers, such that all users may be aware of, or notified of, the current state of the workflow through any of the task-interaction providers.