Abstract: Embodiments of the invention concern zero-trust packet routing. Zero-trust packet routing (ZPR) is a way of implementing policy-enforcing networks with tight integration into identity and device management systems. Unlike conventional networks, which route traffic based only on the information inside of the packets, ZPR networks forward every packet based on the authenticated identity of the users and services that communicate through those packets, and global policies that govern their communications.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: A sensor module having multiple sensors for collecting, analyzing, storing, and transmitting data related to environmental and plant growth data in an agricultural habitat, such as a greenhouse, is disclosed. One or more modules are placed at various locations in a greenhouse, to collect data including any of temperature, temperature gradient, humidity, light levels, light frequencies, soil moisture, soil composition, plant health, plant growth, plant quality e.g. maturity and/or fruit quantity and/or ripeness. The sensor module is adapted for robotic placement within the greenhouse, although the module ay initially be placed by hand. The module is powered by internal batteries or a large capacitor or capacitor array and is recharged by a greenhouse robot that may comprise any of a robot arm configured for movement within a greenhouse via a conveyer or track system, a wheeled robot, or a drone.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: Systems and methods are described for configuring and using displays, speakers, or other output devices positioned by an article of clothing or other such structure wearable by a healthcare recipient, for example, in a clinic or residential care facility.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: At least one embodiment of this disclosure includes a method for an autonomous vehicle (e.g., a fully autonomous or semi-autonomous vehicle) to communicate with external observers. The method includes: receiving a task at the autonomous vehicle; collecting data that characterizes a surrounding environment of the autonomous vehicle from a sensor coupled to the autonomous vehicle; determining an intended course of action for the autonomous vehicle to undertake based on the task and the collected data; and conveying a human understandable output via an output device, the human understandable output expressly or implicitly indicating the intended course of action to an external observer.

Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a data store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.

Abstract: The invention is a modular vehicle that is intended for a variety of operations including both military and civilian operations. The vehicle addresses the issue of performing special purpose tasks that the vehicle is asked to do. Such tasks can be accomplished by configuring the vehicle as an ambulance, as a fire-fighting vehicle, as a communications van, as a command and control vehicle, etc. Thus, the vehicle is readily adapted using standardized and customized modules that are readily attached to a standardized platform that includes an appropriate interconnection means.

Abstract: Methods, devices, and system related to secure communication systems are disclosed. In one example aspect, a secure communication system enabling secure transport of information includes a secure network comprising one or more nodes communicatively coupled by an internal communication system and a set of policies. The secure network internally transports the information in the form of internal packets. Each of the internal packets is associated with a visa that references the policies. A node among said one or more nodes transmits an internal packet of said information only if allowed by said policies as referenced by said visa.

Abstract: At least one embodiment of this disclosure includes a method for an autonomous vehicle (e.g., a fully autonomous or semi-autonomous vehicle) to communicate with external observers. The method includes: receiving a task at the autonomous vehicle; collecting data that characterizes a surrounding environment of the autonomous vehicle from a sensor coupled to the autonomous vehicle; determining an intended course of action for the autonomous vehicle to undertake based on the task and the collected data; and conveying a human understandable output via an output device, the human understandable output expressly or implicitly indicating the intended course of action to an external observer.

Abstract: The disclosed technology includes a system comprising a tire-mounted inertial measurement unit (IMU). The IMU can be configured to measure linear acceleration data and angular velocity data associated with a tire, and the system can be configured to determine various indicators of tire health based on the linear acceleration data and angular velocity data. The system can be configured to determine a distance between the IMU and an outer rolling surface of the tire. The system can be configured to monitor changes in this distance over time, which can be indicative of tread wear over time. Accordingly, the system can be configured to monitor change in the tread depth over time such that the system is configured to monitor tread depth of the tire.

Abstract: In a trust framework that enables secure communication, a configurer establishes an initial set of potential trusted relationships between a client and one or more anchors associated with one or more hosts. Once configured, the client can use a trusted relationship to securely communicate with a host without reliance on trusted third parties.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.