Abstract: An aircraft recorder system is provided in which a vibration sensor including at least one of a micro-electromechanical systems (MEMS) microphone and a MEMS accelerometer. The system further includes a cockpit voice recorder (CVR) and an active microphone. The active microphone and the vibration sensor each output signals to a signal processor including a subtractor configured to output, to the CVR, a signal that is a result of a subtraction of the signal from the vibration sensor from the signal from the active microphone.

Abstract: Described herein are radio tray assemblies that include space for a specific radio and its power supply and that additionally provide cooling and power conversion and control functionalities. The disclosed radio tray assemblies are designed to have a form factor compatible with legacy radio systems (e.g., MIDS-LVT) while enabling installation of a new radio system (e.g., MIDS-JTRS). The disclosed radio tray assemblies are configured so that the radio and its power supply are secured to a tray so that the radio and power supply are side-by-side and parallel lengthwise. A cooling module or assembly of the disclosed radio tray assemblies is disposed immediately behind the radio and its power supply and is configured to cool these units using forced air cooling directed lengthwise through the radio and its power supply. A power converter and controller module converts input power into the power required by the radio power supply.

Abstract: A fault-tolerant display system includes a dual thin film transistor (TFT) panel with pixel cells having two independently-controlled switching transistors; as such, primary source and gate drivers are operative to drive the display with first TFT transistors, while secondary source and gate drivers are operative to drive the display with second TFT transistors. As the display incorporates an additional TFT within the pixel cell which is driven independently, reliability is increased even at the pixel level. In this way, individual pixels of the LCD panel are driven simultaneously and independently by two pairs of source drivers and gate drivers, such that if one of the driver pairs fails due to some fault, the other driver pair can continue to drive the LCD panel without loss of information despite the failure of the first driver pair.

Abstract: Various systems may benefit from appropriate thermal protection. For example, various flight recorder systems may benefit from thermal isolation of a flight recorder memory core. A system can include a memory core of a flight recorder. The system can also include an inner chamber housing the memory core. The system can further include an outer chamber housing the inner chamber with a vacuum between the inner chamber and the outer chamber. The system can additionally include a signal path from avionics equipment to the memory core through the outer chamber and the inner chamber. The system can also include a power path for the memory core through the outer chamber and the inner chamber.

Abstract: Methods and systems are disclosed for service provider based advanced threat protection. A service provider network may include one or more network devices. The service provider network may be configured to determine network isolation configuration information for a client device, on a local area network (LAN), associated with a client account. The network isolation configuration information may include an identification of trusted network destination and/or untrusted network destinations for the client device. The service provider network may send the network isolation configuration information to the client device. The service provider network may be configured to authenticate a segregated memory space operating on the client device.

Abstract: A host computer system may be configured to connect to a network. The host computer system may be configured to implement a workspace and an isolated computing environment. The host computer system may be configured to isolate the isolated computing environment from the workspace using an internal isolation firewall. The internal isolation firewall may be configured to prevent data from being communicated between the isolated computing environment and the workspace, for example, without an explicit user input. The host computer system may be configured to implement one or more mechanisms that prevent malware received by the host computer system from receiving external communications from an external source. The one or more mechanisms may be configured to prevent control of the malware by the external source. The one or more mechanisms may be configured to prevent the malware from establishing a command channel with the external source.

Abstract: Methods and systems are disclosed for an internet isolation system implemented using a browser application. The host computer system may be configured to receive a request to communicate with a first network destination. The host computer system may determine whether the first network destination is trusted or untrusted. The host computer system may instantiate a browser application. The browser application may be configured to, on a condition that the first network destination is determined to be trusted, enable communication with the first network destination via a first browser process executed in a workspace of the host computer system. The browser application may be configured to, on a condition that the first network destination is determined to be untrusted, implement an isolated computing environment using an internal isolation firewall and enable communication with the first destination via a second browser process executed in the isolated computing environment.

Abstract: An enhanced vision system includes a first optic subsystem and a transparent photodetector subsystem disposed within a common housing. The first optic subsystem may include passive devices such as simple or compound lenses, active devices such as low-light enhancing image intensifiers, or a combination of passive and active devices. The transparent photodetector subsystem receives the visible image exiting the first optic subsystem and converts a portion of the electromagnetic energy in the visible image to a signal communicated to image analysis circuitry. On a real-time or near real-time basis, the image analysis circuitry detects and identifies structures, objects, and/or individuals in the visible image. The image analysis circuitry provides an output that includes information regarding the structure, objects, and individuals to the system user contemporaneous with the system user viewing the visible image.

Abstract: Antennas, systems and methods may be implemented using a feed network with optional balanced to unbalanced conductor (balun) structure printed on one or more varying surfaces (e.g., sides, faces, etc.) of antenna substrates of various shapes including, but not limited to, flat, cylindrical, hemispherical and conical-shaped antenna substrates. Both antenna element/s and feed network/s may be printed onto one or more varying surfaces of a single common antenna substrate, such as printed onto both interior and exterior surfaces of the same hollow antenna substrate.

Abstract: A host computer system may be configured to connect to a network. The host computer system may be configured to implement a workspace and an isolated computing environment. The host computer system may be configured to isolate the isolated computing environment from the workspace using an internal isolation firewall. The internal isolation firewall may be configured to prevent data from being communicated between the isolated computing environment and the workspace, for example, without an explicit user input. When malware is received by the isolated computing environment, the internal isolation firewall may be configured to prevent the malware from accessing data on the workspace of the host computer system. The host computer system may be configured to implement one or more mechanisms that prevent malware received by the host computer system from exfiltrating, to a network destination, data from the host computer system and data from other devices on the network.

Abstract: A host computer system may be configured to connect to a network. The host computer system may be configured to implement a workspace, an isolated computing environment, and a host-based firewall. The host computer system may be configured to isolate the isolated computing environment from the workspace using an internal isolation firewall. The internal isolation firewall may be configured to prevent data from being communicated between the isolated computing environment and the workspace, for example, without an explicit user input. The host computer system may be configured to determine, using one or more environmental indicators, a relative location of the host computer system. The processor may be configured to select a firewall policy based on the relative location of the host computer system. The firewall policy may include a configuration to apply to one or more of the internal isolation firewall or the host-based firewall.

Abstract: Methods and systems are disclosed for isolation of communications between a host computer system and one or more untrusted network destinations. An Internet isolation system may include a network, one or more host computer systems, a border firewall, an authorization device, and/or a proxy device. The Internet isolation system may be configured to implement network isolation between one or more untrusted network destinations, the one or more host computer systems, and/or the network. The network isolation may be implemented via one or more of a host-based firewall on each of the one or more host computer systems, the border firewall, the authorization device, the proxy device, an internal isolation firewall on each of the one or more host computer systems, and/or a segregation of a trusted memory space and an untrusted memory space on each of the one or more host computer systems.

Abstract: Methods and systems are disclosed for isolation of collaboration software on a host computer system. A networked computer system may include a network, a first host computer system, a border firewall and/or a web proxy. The host computer system may be configured to run a collaboration software application or process that enables interaction with one or more other host computer systems. The collaboration software application or process may be run within an untrusted memory space. The collaboration software application or process may enable interaction between a second host computer system and the untrusted memory space such that the second host computer system may access meeting data within a sandboxed computing environment operating within the untrusted memory space.

Abstract: Methods and systems are disclosed for implementing one or more isolated computing environment via one or more memory spaces. The isolated computing environment may be configured to execute one or more sandboxed applications and/or processes associated with the isolated computing environment. One or more firewalls may be associated with the one or more sandboxed containers. One or more firewalls may be configured to apply a set of criteria (e.g., policies) to each of the applications and/or processes. In examples, the one or more sandbox firewalls may exist for each of the applications and/or processes and may prevent unauthorized communications between the applications and/or processes. In examples, a sandbox firewall may be configured to apply a set of criteria to one or more applications and/or processes associated with the one or more isolated computing environments. The sandbox firewall may be configured to allow authorized communications between the applications and/or processes.

Abstract: Systems and methods are disclosed for a sandbox based network isolation system configured to protect cloud based assets. A host computer system may include a processor and a memory. The host computer system may include a workspace. One or more applications may run in the workspace via a first memory space (e.g., a trusted memory space). The host computer system may include an isolated computing environment. One or more isolated applications may run in the isolated computing environment via a second memory space (e.g., an untrusted memory space). The isolated computing environment may be isolated from the workspace by an internal isolation firewall. The internal isolation firewall may prevent communication between the isolated computing environment and the workspace.

Abstract: Systems, methods, and instrumentalities are disclosed for providing configurable and customizable internet isolation and security schemes for a mobile device. A mobile device (e.g., a cell phone, smart phone, tablet, Internet of Things (IoT) device, etc.) may include a processor and a memory. The mobile device may be configured to implement a workspace and an isolated computing environment. The workspace may enable operation of a set of applications (e.g., trusted applications) via a memory space (e.g., a trusted memory space). The isolated computing environment may enable operation of a set of one or more applications (e.g., untrusted applications) via a memory space (e.g., an untrusted memory space). The untrusted applications may include, for example, one or more of an Internet browser, an email application, a document editing application, or a social media application. The untrusted applications may communicate with one or more untrusted network destinations via a network.

Abstract: Methods and systems are disclosed for internet isolation and security schemes for a host computer system having an internet isolation system. The internet isolation system may be installed on a laptop computer and/or similar devices at or during the time of manufacture, sale, and/or prior to delivery of the laptop computer. The internet isolation system may be pre-installed with a generic configuration. Upon delivery to a user or enterprise, the internet isolation system may be configured with specific rules tailored to the needs of the user. The configuration may identify which applications or processes should be isolated in the laptop computer using a container and/or virtual machine. The configuration may identify which addresses or sites may or may not be accessed from outside an isolated computing system (e.g., from outside a container or virtual machine). The configuration may configure proxy settings and devices for the isolated computing systems.

Abstract: A device receives a first data item. The device stores the first data item in non-volatile memory. The device subsequently receives a second data item, where the second data item was previously generated from the first data item and a cryptographic key. The device performs a function such as, for example, an exclusive-or operation on the first data item and the second data item to generate the cryptographic key. The device uses the generated cryptographic key to encrypt data which may be transmitted over a wireless interface.

Abstract: A host computer system may be configured to connect to a network. The host computer system may be configured to implement a workspace and an isolated computing environment. The host computer system may be configured to isolate the isolated computing environment from the workspace using an internal isolation firewall. The host computer system may be configured to receive a request to communicate with a first network destination. On a condition that the first network destination is determined to be trusted, the processor may be configured to communicate with the first network destination via a first browser process executed in the workspace. On a condition that the first network destination is determined to be untrusted, the processor may be configured to communicate with the first network destination via a second browser process executed in the isolated computing environment.

Abstract: A computing device with a multicore processing unit and a memory management unit (MMU) may provide multi-order failure resistant data isolation and segregation with a cross domain filtration system. The multicore processing unit may include a first processor, a second processor, and a third processor. A first processor may process data via an egress filter task(s). The MMU may allow the egress filter task(s) to write the data to a first segregated physical memory location. A second processor may perform filtering of the data via a cross domain filter task(s). The MMU may allow the cross domain filter task(s) to read from the first segregated physical memory location and write to a second segregated physical memory location. A third processor may process the data via an ingress filter task(s). The MMU may allow the ingress filter task(s) to read the data from the second segregated physical memory location.