Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a data store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.

Abstract: At least one embodiment of this disclosure includes a method for an autonomous vehicle (e.g., a fully autonomous or semi-autonomous vehicle) to communicate with external observers. The method includes: receiving a task at the autonomous vehicle; collecting data that characterizes a surrounding environment of the autonomous vehicle from a sensor coupled to the autonomous vehicle; determining an intended course of action for the autonomous vehicle to undertake based on the task and the collected data; and conveying a human understandable output via an output device, the human understandable output expressly or implicitly indicating the intended course of action to an external observer.

Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a data store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.

Abstract: A power distribution and communication system includes nodes connected by power lines and communication links. The system receives power from one or more power sources. Each node contains at least one power port, data port and load port. Associated with each power port and load port is a port monitor for measuring current flowing into or out of the port and the voltage difference between the port outlet and ground, which measurements are passed to a processing element. The processing element and monitor analyze measured values to detect fault conditions. Upon fault condition detection, the port is disabled by opening a switch, disconnecting the port from the system voltage. The processing element receives power directly from the power line, thus receiving power from a live power line even if the associated power port is disabled allowing the processing element to enable a disabled node following a failure.

Abstract: Various embodiments relate to apparatuses and methods that can determine an amount of force on a tissue. An apparatus can include an optical fiber including a first end and a second end. An electronics module of the apparatus is coupled to the first end of the optical fiber. The electronics module can include a light emitter that can transmit light to the tissue over the optical fiber and a light sensor that can receive light over the optical fiber. The received light includes a component of the transmitted light reflected by the tissue. The electronics module can include a processor that can determine the amount of force on the tissue based on characteristic(s) of the reflected light. The apparatus can also include an end cap coupled to the second end of the optical fiber. The end cap can introduce the transmitted light into the tissue and receive the reflected light.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: A phased adoption procedure is disclosed for adopting a new communication system that provides potential adopters a high degree of confidence in the reliability of the proposed communication system prior to committed adoption.

Abstract: A plan through a space having a near field and a far field is determined. Using a sensor device, measurements of the far field are obtained and stored in an electronic memory. A processor uses the measurements to determine the viability of each far field plan among a plurality of candidate far field plans. The processor also determines a flexibility score for each of the candidate far field plans and selects a composite plan comprising the viable far field plan having a highest flexibility score among the viable candidate far field plans.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: Described herein are methods and systems to measure dynamics of disease progression, including cancer growth and response, at multiple scales by multiple techniques on the same biologic system. Methods and systems according to the invention permit personalized virtual disease models. Moreover, the invention allows for the integration of previously unconnected data points into an in silico disease model, providing for the prediction of disease progression with and without therapeutic intervention.

Abstract: The present disclosure provides methods and mechanisms for measuring small masses attached to a substrate within a microcantilever. Specifically, the disclosure describes the measurement of small particles accumulated at a substrate that cannot be flowed through a microchannel within a microcantilever. A resonance measurement is acquired at a first time. A pair resonance measurements is then acquired at a second point in time—one with the test mass at a first position off or along the microcantilever, the second with the test mass at a second position along the microcantilever. Comparing the resonance frequencies determined for the two test mass positions allows for disambiguation of changes in the mass of the particles from changes in the resonant behavior of the microcantilever itself.

Abstract: A method of operating a security token to authenticate a user in a multi-factor authentication system is disclosed. The method includes: monitoring user custody of the token, the token having an identifying characteristic representing a possession factor for use through possession factor authentication; during a period of continuous user custody of the token based on the monitoring, obtaining a knowledge factor from a user having the continuous user custody; caching the knowledge factor in a memory of the token; and in response to a second authentication request, retrieving the knowledge factor from the memory to demonstrate to an authentication system knowledge of the knowledge factor, during the period of continuous user custody.

Abstract: A phased adoption procedure is disclosed for adopting a new communication system that provides potential adopters a high degree of confidence in the reliability of the proposed communication system prior to committed adoption.

Abstract: A power distribution and communication system includes nodes connected by power lines and communication links. The system receives power from one or more power sources. Each node contains at least one power port, data port and load port. Associated with each power port and load port is a port monitor for measuring current flowing into or out of the port and the voltage difference between the port outlet and ground, which measurements are passed to a processing element. The processing element and monitor analyze measured values to detect fault conditions. Upon fault condition detection, the port is disabled by opening a switch, disconnecting the port from the system voltage. The processing element receives power directly from the power line, thus receiving power from a live power line even if the associated power port is disabled allowing the processing element to enable a disabled node following a failure.

Abstract: Various embodiments relate to apparatuses and methods of using light transmission thought compressed living tissue to detect force. Transmission of light through living tissue such as a finger is affected by how much the tissue is compressed, for example by the finger being pressing on a surface. Light is introduced into the tissue, passes through the tissue, and a sensor receives the light exiting the tissue. The compression of the tissue can be determined using various characteristics of the received light, such as the light intensity, as determined based at least partly on sensor readings.

Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.