Abstract: In general, certain embodiments of the present disclosure provide techniques or mechanisms for automatically filtering network messages in an aviation network for an aircraft based on a current system context. According to various embodiments, a method is provided comprising receiving a network message transmitted from a source avionic device to a destination avionic device via one or more network packets within the aviation network. A current system context, indicating an aggregate status of avionic devices within the aviation network, is determined based on monitoring the avionic devices. The network message is analyzed by identifying a plurality of attributes corresponding to header and data fields of the one or more network packets corresponding to the network message. The acceptability of the network message within the current system context is determined based on one or more filter rules that specify what attributes are allowed within a particular system context.

Abstract: In general, certain embodiments of the present disclosure provide methods and systems for automatic generation of filter rules based on functional network flows for e-Enabled aviation systems. According to various embodiments, a method is provided comprising capturing network packets corresponding to a functional network flow transmitted within a networked aviation system, and parsing the network packets in order to extract one or more network messages corresponding to the functional network flow. The network message is examined in order to identify and classify a plurality of attributes corresponding to the header and data fields of the network packets. A table corresponding to the network messages is automatically generated, which includes one or more filter rules. In some embodiments, the table may be used to determine which communications are authorized during a particular context of the networked aviation system. The method further comprises validating the one or more filter rules.

Abstract: Provided are methods and systems for terrestrial data transmission between aircrafts and external networks connected to gates at airports. This type of data transmission is performed through an electrical power cable that includes multiple conductors interconnecting electrical components of an aircraft and a gate. Each conductor may be used to establish a separate broadband over power line (BPL) communication channel using its own frequency range that does not overlap with frequency ranges of other channels. As such, no radio frequency (RF) shielding is needed in the cable and any standard multi-conductor cable may be used. A channel management unit is used to control allocation of data domains among different communication channels depending on characteristics of the data domains, characteristics of the channels, and other factors. For example, one channel may be designated for secure data transfer of specific data domains, such as aircraft control data.

Abstract: An apparatus and method of verifying the trustworthiness of position information from an onboard tracking system on an aircraft. An onboard tracking system message comprising onboard tracking system position information indicating a first position of the aircraft is generated by the onboard tracking system and transmitted to an off board aircraft tracking system via a communications satellite in a satellite communications system. The satellite communications system adds a header comprising transmitter position information identifying a second position for transmission of the onboard tracking system message received by the communications satellite to the onboard tracking system message to form a message. The message is received from the satellite communications system by the off board aircraft tracking system and the first position from the onboard tracking system message is compared to the second position from the header to determine whether the onboard tracking system position information is trustworthy.

Abstract: Provided are methods, systems, and computer program products for inspecting composite items. Specifically, a method involves analyzing an image of or, more generally, data characterizing condition of a top layer, which is disposed over a bottom layer. The method also involves performing a structural integrity check based on any anomalies detected in the top layer during this analysis as well as based on any anomalies previously detected in the bottom layer. As such, this structural integrity check accounts for characteristics of multiple layers, in some embodiments, all layers applied up to point of this inspection. In addition to the detected anomalies, the structural integrity check may account for previously performed repairs. The structural integrity check may be performed on individual portions of a composite item while, for example, other portions continue receiving a new composite layer, which may be referred to as an inline inspection.

Abstract: In one or more embodiments, a disclosed method involves transmitting a first transmit signal(s) having a first signal strength and/or a first field of view (FOV), thereby establishing a first radiation region. The method further involves receiving a first receive signal(s) radiated from an EMID tag(s). Also, the method involves transmitting a second transmit signal(s) having a second signal strength and/or a second field of view (FOV), thereby establishing a second radiation region. In addition, the method involves receiving a second receive signal(s) radiated from an EMID tag(s). Additionally, the method involves subtracting the second radiation region from the first radiation region to determine a difference region. Also, the method involves determining which of the EMID tags are located within the difference region by using the first receive signal(s) and the second receive signal(s). Further, the method involves determining a location of the EMID tag(s) located within the difference region.

Abstract: A passenger control unit is provided that may include a push-button, power assembly, and control and communication circuitry. The push-button may be for control of a passenger service unit (PSU) onboard a passenger vehicle, and may also generate mechanical energy when pushed. The power assembly may convert the mechanical energy to electrical energy, and store the electrical energy, solely from which the control and communication circuitry may be powered. The control and communication circuitry may include a microprocessor and a communications interface. The microprocessor may receive an indication when the push-button is pushed, and generate an instruction to control the PSU in response thereto. And the communications interface wirelessly transmit the instruction to a control unit configured to effect control of the PSU based thereon.

Abstract: A system, method, and apparatus for a network topology aided by a smart agent download are disclosed. The method involves authenticating, with at least one authenticator device, at least one claimant. The method further involves transmitting, by at least one transmission source, the smart agent download to at least one receiving source associated with at least one claimant. In one or more embodiments, at least one transmission source is employed in a Lower Earth Orbiting (LEO) Iridium satellite. Also, the method involves receiving, by at least one receiving source, the smart agent download. In addition, the method involves executing, by at least one processor, the smart agent download. Further, the method involves monitoring, by the smart agent download, network behavior. The monitoring of network behavior includes monitoring the users on the network, monitoring data passing through the network, and monitoring the quantity of data passing through the network.

Abstract: A passenger control unit is provided that may include a push-button, power assembly, and control and communication circuitry. The push-button may be for control of a passenger service unit (PSU) onboard a passenger vehicle, and may also generate mechanical energy when pushed. The power assembly may convert the mechanical energy to electrical energy, and store the electrical energy, solely from which the control and communication circuitry may be powered. The control and communication circuitry may include a microprocessor and a communications interface. The microprocessor may receive an indication when the push-button is pushed, and generate an instruction to control the PSU in response thereto. And the communications interface wirelessly transmit the instruction to a control unit configured to effect control of the PSU based thereon.

Abstract: A method is described for communication in a tactical network. A gateway is communicatively couplable to one or more tactical nodes and to one or more other gateways. The gateway is programmed to transmit information to and/or receive information from other gateways. Information exchanged includes gateway attributes, link attributes, service availability, and/or data availability. The gateway optionally provides quality of service, distributed persistence, load balancing, and/or transformation services. Services are provided in a modular, service-oriented architecture (SOA) to accommodate the addition of services and/or applications.

Abstract: A network node for a network having dynamic link states includes a processing unit and computer-readable memory for causing the processing unit to monitor a link state of the network; perform QoS provisioning and make appropriate updates to the QoS provisioning based on changes in the link state and QoS provisioning demands of QoS-aware applications; and provide notification to the QoS-aware applications to allow those applications to dynamically adapt to the link state changes.

Abstract: Systems and methods for trusted mobile communications are described. A network system provisions a mobile client system with a collection of security parameters on a per application basis and a per device basis. The airplane system provides access to the mobile client system based on the established chain of trust without previously having information about the mobile client system even when the mobile client system and the airplane system are offline with respect to the network system.

Abstract: A method for generating sensor data is presented. A number of wireless power signals is sent to a group of sensor units. A number of wireless data collection signals is sent to the group of sensor units after the number of wireless power signals have been sent to the group of sensor units. Sensor data in a number of wireless response signals is received from the group of sensor units.

Abstract: Disclosed herein is a method for executing unprotected mode services in a protected mode computing environment includes initiating a protected mode service that is configured to execute in a protected mode. Further, the method includes verifying an integrity of one or more unprotected mode services configured to execute in an unprotected mode. The one or more unprotected mode services is registered with the protected mode service. The method also includes initiating an unprotected mode service of the one or more unprotected mode services in response to the integrity of the unprotected mode service being verified.

Abstract: A method for generating sensor data is presented. A number of wireless power signals is sent to a group of sensor units. A number of wireless data collection signals is sent to the group of sensor units after the number of wireless power signals have been sent to the group of sensor units. Sensor data in a number of wireless response signals is received from the group of sensor units.

Abstract: Provided are methods and systems for terrestrial data transmission between aircraft and external networks, such as airline networks and/or airport networks. While an aircraft is landed, various data domains may need to be transmitted between the aircraft and such networks using two or more communication channels available to the aircraft. These channels may include wired and/or wireless channels, such as broadband over power line channels, Ethernet channels, Wi-Fi channels, and cellular channels. The available communication channels are allocated to transmit particular data domains based on the security levels of these channels. For example, aircraft control domains may be transmitted using a more secure communication channel than passenger information domains and/or entertainment systems domains. In some embodiments, multiple communication channels may be used to transmit the same domain parsed into multiple transmission packets. The packets are recombined back into the data domain after the transmission.

Abstract: A server includes a memory device configured to store a plurality of computer-executable instructions, and a processor coupled to the memory device. When the processor executes the plurality of computer-executable instructions, the processor is programmed to determine an available spectrum of frequencies within a location over time, and receive a request from a wireless device to access the available spectrum for a predefined duration. The processor is also programmed to select a frequency band within the spectrum that is available to be used by the wireless device for the predefined duration, and transmit an authorization message to the wireless device to use the selected frequency band.

Abstract: A software based wireless infrastructure system is provided. The system has a driver that communicates with the network stack and a network interface card (NIC), a station server in communication with the station driver and an 802.1X supplicant or an 802.1X authenticator. Each NIC provides station and/or access point functionality support. The driver drops packets that have been received if the packet has not been authenticated and associated. Packets that have been fragmented or encrypted are unfragmented and decrypted. An association manager is used in conjunction with a configuration table manager to associate stations and access points via management packets. A manager receives 802.1X data packets from the packet processor and sends them up to a station server that communicates with user mode applications and an 802.1X supplicant or an 802.1X authenticator that are used to authenticate and deauthenticate stations and access points. APIs are provided to enable communication between the components.

Abstract: In one or more embodiments, a disclosed method involves transmitting a first transmit signal(s) having a first signal strength and/or a first field of view (FOV), thereby establishing a first radiation region. The method further involves receiving a first receive signal(s) radiated from an EMID tag(s). Also, the method involves transmitting a second transmit signal(s) having a second signal strength and/or a second field of view (FOV), thereby establishing a second radiation region. In addition, the method involves receiving a second receive signal(s) radiated from an EMID tag(s). Additionally, the method involves subtracting the second radiation region from the first radiation region to determine a difference region. Also, the method involves determining which of the EMID tags are located within the difference region by using the first receive signal(s) and the second receive signal(s). Further, the method involves determining a location of the EMID tag(s) located within the difference region.

Abstract: The disclosed method involves monitoring behavior of at least one node, associated with at least one user, in a network to generate a behavior profile for the user(s). The method further involves comparing the behavior profile for at least one user with a baseline behavior profile for the user(s). Also, the method involves determining when there is a difference between the behavior profile for at least one user and the baseline behavior profile for the user(s). Further, the method involves flagging an event associated with the difference: when the difference exceeds a baseline threshold level, does not exceed a baseline threshold level, meets at least one criterion, and/or does not meet at least one criterion. Additionally, the method involves classifying the event to an event classification. Further, the method involves transmitting the event to at least one other node in the network and/or a network operations center.