Abstract: Embodiments for a module for scheduling sleep/wake intervals for a first one or more communication devices are disclosed. The module includes a computer readable medium having instructions thereon. The instructions, when executed by one or more processing devices, cause the one or more processing devices to obtain a coverage prediction for the one or more mobile communication devices. The coverage prediction indicates a start and an end of at least one future interval during which one or more orbiting communication platforms are predicted to be within range of the one or more mobile communication devices. The instructions also cause the one or more processing devices to generate at least one future sleep interval having a start and an end and at least one future wake interval having a start and an end to control the one or more mobile communication devices based on the coverage prediction.

Abstract: A method of generating a plan for a vehicle is provided. The method includes receiving information indicating a location of each of a plurality of communication nodes and the vehicle during a first time period and a second time period. The vehicle is configured to send wireless signals to and receive wireless signals with the plurality of communication nodes. The method includes developing a plan that defines a path of motion for the vehicle and a configuration for an antenna on the vehicle during the first time period and the second time period based on connectivity between the vehicle and the plurality of communication nodes.

Abstract: Embodiments for a method of tracking provenance information for data in a database are disclosed. The method includes storing data in a first one or more cells of a database, translating provenance information for the data into a new block for a provenance blockchain corresponding to the first one or more cells, and storing the new block in the database.

Abstract: A communication optimization system/method for mobile networks uses a server that generates waypoints based on a first communication network within a route to be travelled by an aerial vehicle, the aerial vehicle comprising a communication hub configured to communicate with at least one communication node, a communication hub controller configured control movement of a steerable antenna, and an aerial vehicle controller configured control movement of the aerial vehicle. The server then transmits the waypoints to the aerial vehicle controller; periodically monitors networks not connected to the communication hub; when a second communication network not connected to the communication hub satisfies a threshold, transmits causes the communication controller to steer the steerable antenna in a direction of the second communication network, further causing the communication hub to communicate and connect with the second communication network.

Abstract: Embodiments for a computer readable medium including a software module are provided. The software module causes one or more processing devices to obtain a biometric identifier from a user. Access to a resource is requested by providing a software credential token and the biometric identifier. The software credential token corresponds to a hardware credential token, and the hardware credential token is one of a set of hardware credential tokens that are used to access the resource. An indication that access to the resource has been granted is received and after receiving the indication an indication that the access to the resource has been revoked is received. After receiving the indication that access to the resource has been revoked, a biometric identifier is re-obtained from a user and access to the resource is re-requested by providing a software credential token and the re-obtained biometric identifier.

Abstract: Embodiments for a computer readable medium including a software module are provided. The software module causes one or more processing devices to obtain a biometric identifier from a user. Access to a resource is requested by providing a software credential token and the biometric identifier. The software credential token corresponds to a hardware credential token, and the hardware credential token is one of a set of hardware credential tokens that are used to access the resource. An indication that access to the resource has been granted is received and after receiving the indication an indication that the access to the resource has been revoked is received. After receiving the indication that access to the resource has been revoked, a biometric identifier is re-obtained from a user and access to the resource is re-requested by providing a software credential token and the re-obtained biometric identifier.

Abstract: Described herein are methods and systems to send/receive medical data from one or more electronic devices to a secondary medical unit in delayed, intermittently-connected, low-bandwidth (DIL) environments. An application executing on the electronic devices may, in response to detecting a disruption within a communication network, execute an offline communication protocol to transmit medical data among a predetermined number of other electronic devices, wherein the offline communication protocol does not use the communication network. The application may then receive a request from a server of the secondary medical unit to transmit at least a part of the medical data. In response to authenticating the request, the application then transmits the medical data using an online communication protocol that uses the communication network or using an offline communication protocol.

Abstract: A method of generating a flight path for an aircraft is provided. The method includes modeling geographic space and time that includes a plurality of mobile communication nodes. The model includes locations of each of the plurality of mobile communication nodes as those nodes move over time. The model also provides an indication of wireless connectivity between a radio on each of the plurality of communication nodes and a radio of the aircraft at their respective location. The method further includes running a plurality of flight paths through the model in order to identify a selected flight path that provides a desired level of connectivity between the aircraft and the plurality of communication nodes.

Abstract: A distributed file integrity checking system is described. The described peer integrity checking system (PICS) may negate an attack by storing a properties database amongst nodes of a peer-to-peer network of hosts, some or all of which co-operate to protect and watch over each other.

Abstract: A communication optimization system/method for mobile networks uses a server that generates waypoints based on a first communication network within a route to be travelled by an aerial vehicle, the aerial vehicle comprising a communication hub configured to communicate with at least one communication node, a communication hub controller configured control movement of a steerable antenna, and an aerial vehicle controller configured control movement of the aerial vehicle. The server then transmits the waypoints to the aerial vehicle controller; periodically monitors networks not connected to the communication hub; when a second communication network not connected to the communication hub satisfies a threshold, transmits causes the communication controller to steer the steerable antenna in a direction of the second communication network, further causing the communication hub to communicate and connect with the second communication network.

Abstract: Embodiments for a module for scheduling sleep/wake intervals for a first one or more communication devices are disclosed. The module includes a computer readable medium having instructions thereon. The instructions, when executed by one or more processing devices, cause the one or more processing devices to obtain a coverage prediction for the first one or more communication devices. The coverage prediction indicates intervals during which a second one or more communication devices are predicted to be within range of the first one or more communication devices. The instructions also cause the one or more processing devices to generate sleep intervals and wake intervals for the first one or more communication devices based on the coverage predictions.

Abstract: Embodiments for a database connector are disclosed. The database connector can encrypt data from an application before storing the data in the database using attribute-based encryption (ABE). The database connector can also decrypt data retrieved from the database using an ABE private key before sending the data to the application. The database connector can generate a logical attribute statement for encryption of data from the application based on attributes, logical relations, and/or relational operators received from the application, directly from a user, or imbedded within rules governing logical attribute statement genesis.

Abstract: A method of routing an Internet Protocol (IP) packet from a routing device is provided. The method includes receiving a first IP packet having a first IP header and a first IP data field, the first IP packet having a final destination corresponding to a destination device communicatively coupled to the routing device via a network route including at least two hops between the routing device and the final destination. A second IP packet having a second IP header and a second IP data field is generated. The second IP data field is a copy of the first IP data field, and a destination IP address field in the second IP header includes an IP address of a next hop on the network route. The second IP packet does not include an IP address of the final destination in the second IP header.

Abstract: A method of routing a packet from a routing device includes receiving a first packet having a first header and a first data field. The first header has a final destination corresponding to a destination device communicatively coupled to the routing device via at least two parallel network links. A second packet having a second header and a second data field is sent over the first network link. The second data field is identical to the first data field. A destination address in the second header corresponds to a device on a first of the parallel network links. A third packet having a third header and a third data field is sent over the second network link. The third data field is identical to the first data field. a destination address in the third header corresponds to a device on a second of the parallel network links.

Abstract: Embodiments for a method for issuing a software credential token with reliance on a hardware credential token are disclosed. A data server that allows access thereto via a set of hardware credential tokens is provided. The method includes receiving a request for a software credential token from a personal computing device. The request includes an indication of a hardware credential token upon which the request relies. An email address and a public key corresponding to the hardware credential token are obtained. The method also includes sending an email to the email address. The email includes a one-time password encrypted with the public key. Access to the email is restricted to an individual to which the hardware credential token was issued. The method also includes receiving an inputted password from the personal computing device. If the inputted password matches the one-time password, a software credential token is issued to a user.

Abstract: A distributed file integrity checking system is described. The described peer integrity checking system (PICS) may negate an attack by storing a properties database amongst nodes of a peer-to-peer network of hosts, some or all of which co-operate to protect and watch over each other.

Abstract: Embodiments for a module for scheduling sleep/wake intervals for a first one or more communication devices are disclosed. The module includes a computer readable medium having instructions thereon. The instructions, when executed by one or more processing devices, cause the one or more processing devices to obtain a coverage prediction for the first one or more communication devices. The coverage prediction indicates intervals during which a second one or more communication devices are predicted to be within range of the first one or more communication devices. The instructions also cause the one or more processing devices to generate sleep intervals and wake intervals for the first one or more communication devices based on the coverage predictions.

Abstract: A distributed file integrity checking system is described. The described peer integrity checking system (PICS) may negate an attack by storing a properties database amongst nodes of a peer-to-peer network of hosts, some or all of which co-operate to protect and watch over each other.

Abstract: A method of routing an Internet Protocol (IP) packet from a routing device is provided. The method includes receiving a first IP packet having a first IP header and a first IP data field, the first IP packet having a final destination corresponding to a destination device communicatively coupled to the routing device via a network route including at least two hops between the routing device and the final destination. A second IP packet having a second IP header and a second IP data field is generated. The second IP data field is a copy of the first IP data field, and a destination IP address field in the second IP header includes an IP address of a next hop on the network route. The second IP packet does not include an IP address of the final destination in the second IP header.

Abstract: A method of generating a path for a vehicle is disclosed. The method includes receiving information indicating a location of each of a plurality of communication nodes. The vehicle is configured to send wireless signals to and receive wireless signals from the plurality of communication nodes. A path of motion for the vehicle is determined based on coverage of the plurality of communication nodes along the path. Coverage corresponds to connectivity between the vehicle and the plurality of communication nodes.