Abstract: The application discloses a method and apparatus for imaging a sample by interferometric scattering microscopy, the method comprising illuminating a sample with at least one coherent light source, the sample being held at a sample location comprising an interface having a refractive index change, illuminating the sample with illuminating radiation to generate a backpropagating signal from the sample comprising light reflected at the interface and light scattered by the sample, splitting the backpropagating signal into first and second signals, modifying the second signal using a modifying element such that the second signal differs from the first signal, directing the first and second signals onto first and second detectors to generate, respectively, first and second images and comparing, by a processor, the first and second images to determine one or more characteristics of the sample.

Abstract: A method for providing Cheon-resistance security for a static elliptic curve Diffie-Hellman cryptosystem (ECDH), the method including providing a system for message communication between a pair of correspondents, a message being exchanged in accordance with ECDH instructions executable on computer processors of the respective correspondents, the ECDH instructions using a curve selected from a plurality of curves, the selecting including choosing a range of curves; selecting, from the range of curves, curves matching a threshold efficiency; excluding, within the selected curves, curves which may include intentional vulnerabilities; and electing, from non-excluded selected curves, a curve with Cheon resistance, the electing comprising a curve from an additive group of order q, wherein q is prime, such that q?1=cr and q+1=ds, where r and s are primes and c and d are integer Cheon cofactors of the group, such that cd?48.

Abstract: An elliptic curve random number generator avoids escrow keys by choosing a point Q on the elliptic curve as verifiably random. An arbitrary string is chosen and a hash of that string computed. The hash is then converted to a field element of the desired field, the field element regarded as the x-coordinate of a point Q on the elliptic curve and the x-coordinate is tested for validity on the desired elliptic curve. If valid, the x-coordinate is decompressed to the point Q, wherein the choice of which is the two points is also derived from the hash value. Intentional use of escrow keys can provide for back up functionality. The relationship between P and Q is used as an escrow key and stored by for a security domain. The administrator logs the output of the generator to reconstruct the random number with the escrow key.

Abstract: An enforcement module receives management instructions from a segmentation server for enforcing a segmentation policy. The management instructions include one or more rules specifying one or more groups of workloads that a workload executing on the operating system instance is permitted to communicate with according to certain communication constraints, and membership information specifying workload identifiers for workloads in each of the groups. An optimization module processes the management instructions to reduce the number of rules and the number of workload groups to which the rules apply, thereby simplifying the firewall configuration. The enforcement module then configures a firewall according to the optimized rules to enforce the segmentation policy. The optimization process beneficially improves performance of the firewall and thereby enables more efficient enforcement of the segmentation policy utilizing fewer computing resources.

Abstract: A method for providing Cheon-resistance security for a static elliptic curve Diffie-Hellman cryptosystem (ECDH), the method including providing a system for message communication between a pair of correspondents, a message being exchanged in accordance with ECDH instructions executable on computer processors of the respective correspondents, the ECDH instructions using a curve selected from a plurality of curves, the selecting including choosing a range of curves; selecting, from the range of curves, curves matching a threshold efficiency; excluding, within the selected curves, curves which may include intentional vulnerabilities; and electing, from non-excluded selected curves, a curve with Cheon resistance, the electing comprising a curve from an additive group of order q, wherein q is prime, such that q?1=cr and q+1=ds, where r and s are primes and c and d are integer Cheon cofactors of the group, such that cd?48.

Abstract: A method for key agreement between a first party and a second party over a public communications channel, the method including selecting, by the first party, a first value “a”; multiplying the first value “a” by a second value “b” using Knuth multiplication to create a third value “d”, the third value “d” being a semistandard tableau; sending the third value “d” to the second party; receiving, from the second party, a fourth value “e”, the fourth value being a second semistandard tableau comprising the second value “b” multiplied by a fifth value “c” selected by the second party; and creating a shared secret by multiplying the first value “a” with the fourth value “e” using Knuth multiplication, wherein the shared secret matches the third value “d” multiplied by the fifth value “c” using Knuth multiplication.

Abstract: A segmentation firewall executing on a host enforces a segmentation policy. In a co-existence mode, the segmentation firewall operates in co-existence with a system firewall that enforces a security policy. The segmentation firewall is configured to either drop packets that do not match any permissive rule or pass packets that match a permissive rule to the system firewall to enable the system firewall to determine whether to drop or accept the passed packets. To enable efficient operation of the segmentation firewall when operating in co-existence with the system firewall, the segmentation firewall may include a plurality of rule chains and may be configured to exit a chain and bypass remaining rule chains upon an input packet matching a permissive rule of the segmentation policy.

Abstract: Disclosed are crystalline salt Forms C and D of 6-(cyclopropanecarboxamido)-4-((2-methoxy-3-(1-methyl-1H-1,2,4-triazol-3-yl)phenyl)amino)-N-(methyl-d3)pyridazine-3-carboxamide. Form C is a MSA salt and Form D is a sulfate salt of Compound (I). Characterization data for the Forms are disclosed.

Abstract: A method for key agreement between a first party and a second party over a public communications channel, the method including selecting, by the first party, from a semigroup, a first value “a”; multiplying the first value “a” by a second value “b” to create a third value “d”, the second value “b” being selected from the semigroup; sending the third value “d” to the second party; receiving, from the second party, a fourth value “e”, the fourth value comprising the second value “b” multiplied by a fifth value “c” selected by the second party from the semigroup; and creating a shared secret by multiplying the first value “a” with the fourth value “e”, wherein the shared secret matches the third value “d” multiplied by the fifth value “c”.

Abstract: A gateway includes memory configured to store computer-readable program code; and processing circuitry configured to access the memory and execute the computer-readable program code. The gateway is connected or connectable to a low-power wide area (LPWA) network. The gateway is caused to transmit a common timing reference at a constant interval that delineates an epoch including timeslots assignable to network nodes and a free-for-all interval. The gateway is also caused to join a network node to the LPWA network based on the common timing reference and is further caused to receive a join message including a measure of received signal strength or quality of the common timing reference at the network node. The gateway is also caused to assign one or more timeslots within the epoch, a frequency, a channel, or a modulation to the network node based on the measure of received signal strength or other quality.

Abstract: A weigh-in-motion scale system for a linear synchronous motor conveyor and a method for weighing objects on a linear synchronous motor conveyor are described herein. In one embodiment, the weigh-in-motion scale system includes a support structure for supporting the following: a weigh cell, a section of a linear synchronous motor conveyor track, a vehicle for transporting an object, and an object; and a weigh cell on the support structure on which a section of a linear synchronous motor conveyor track rests directly or indirectly. In one embodiment, the method includes transporting a vehicle with an object thereon along a section of a linear synchronous motor conveyor track; and at a weighing station while the vehicle with the object thereon is being transported, weighing the section of a linear synchronous motor conveyor track, vehicle, and object to determine the weight of the object.

Abstract: A fuel flow limiter assembly includes a limiter body forming a central bore, and including a shutoff piston within the central bore having a closing hydraulic surface exposed to a fluid pressure of the fuel inlet, and being movable from an open position, to a closed position based on a fuel pressure drop from a fuel inlet to a fuel outlet in the limiter assembly. A fuel filter is resident in the limiter assembly and supported in a connector coupled to the limiter body. The fuel filter is elongate and projects from the connector into a fuel flow path from the fuel inlet to the fuel outlet.

Abstract: A device (3000) for loading fluid into nozzle(s) of a nozzle-bearing body (3070) includes a first member (3010), having a first surface (3016), and a second member (3020) protruding from the first member (3010). The second member (3020) has second and third surfaces (3028, 3026), the second surface (3028) extending from the first surface (3016) at an angle. The first surface (3016) substantially complements the shape of the nozzle-bearing body's surface (3070). The device (3000) has a recess (3023) defined therein at least in part by the first and second surfaces (3016, 3028).

Abstract: Systems and methods for manufacturing aircraft are disclosed. For example, an aircraft manufacturing system for repetitively manufacturing aircraft comprises a first manufacturing zone configured to repetitively manufacture first aircraft subassemblies, a second manufacturing zone configured to repetitively manufacture second aircraft subassemblies, and a third manufacturing zone configured to receive the first aircraft subassemblies from the first manufacturing zone, to receive the second aircraft subassemblies from the second manufacturing zone, and to repetitively assemble the first aircraft subassemblies and the second aircraft subassemblies into the aircraft.

Abstract: Systems and methods for manufacturing aircraft are disclosed. For example, a method for repetitively manufacturing aircraft comprises fractionally pulsing a constituent part down an assembly line by periodically advancing the constituent part down the assembly line by less than a length of the constituent part. The periodic advancing may include advancing the aircraft component by a pulse length that is less than the length of the aircraft component, stopping movement of the aircraft component for a duration and performing work on the aircraft component, and then advancing the aircraft component by the pulse length again. In another example, a method comprises determining a fractional pulse length to fractionally pulse one or more constituent parts of an aircraft based on one or more of a minimum workstation length of one or more assembly line workstations and a minimum section length of one or more work processes to be performed.

Abstract: A segmentation firewall executing on a host enforces a segmentation policy. In a co-existence mode, the segmentation firewall operates in co-existence with a system firewall that enforces a security policy. The segmentation firewall is configured to either drop packets that do not match any permissive rule or pass packets that match a permissive rule to the system firewall to enable the system firewall to determine whether to drop or accept the passed packets. To enable efficient operation of the segmentation firewall when operating in co-existence with the system firewall, the segmentation firewall may include a plurality of rule chains and may be configured to exit a chain and bypass remaining rule chains upon an input packet matching a permissive rule of the segmentation policy.

Abstract: A method at a computing device in a public ledger cryptography system, the method including creating a purpose string, the purpose string defining transaction parameters for an account within the public ledger cryptography system; using the purpose string to create a private key and associated public key for an account within the public ledger cryptography system; and providing the purpose string for use in verification of a transaction from the account within the public ledger cryptography system.

Abstract: A filtration device may include a securement section and a filter. The securement section may be configured to be threadably secured to and extend within an interior of a common rail fuel injector. The securement section may include a passage for fuel. The passage may extend in a direction along a central axis of the securement section. The filter may be configured to be positioned within the interior of the common rail fuel injector to filter the fuel flowing through the common rail fuel injector. The filter may include a plurality of holes that are fluidly connecting to the passage of the securement section. The diameter of the filter may be smaller than a diameter of the securement section.

Abstract: A method for key agreement between a first party and a second party over a public communications channel, the method including selecting, by the first party, from a semigroup, a first value “a”; multiplying the first value “a” by a second value “b” to create a third value “d”, the second value “b” being selected from the semigroup; sending the third value “d” to the second party; receiving, from the second party, a fourth value “e”, the fourth value comprising the second value “b” multiplied by a fifth value “c” selected by the second party from the semigroup; and creating a shared secret by multiplying the first value “a” with the fourth value “e”, wherein the shared secret matches the third value “d” multiplied by the fifth value “c”.

Abstract: A method of manufacturing a motoring system for a gas turbine engine including the steps of: forming a mechanical shaft fuse, the mechanical shaft fuse including a plurality of through holes; forming an outer housing; installing a reduction gear train into the outer housing, the reduction gear train having an input and an output; operably connecting an electric motor to the input; operably connecting a clutch to the output using the mechanical shaft fuse, the clutch in operation engages and disengages the reduction gear train; operably connecting a starter to the clutch, the starter having an output shaft; and operably connecting an accessory gearbox to the output shaft of the starter. The mechanical shaft fuse in operation shears when torque on the mechanical is greater than or equal to a selected value.