Abstract: Memory is partitioned and isolated in container-based memory enclaves. The container-based memory enclaves have attestable security guarantees. During provisioning of the container-based memory enclaves from a container image, a purported link in the container to a memory address of the enclave is modified to verifiably link to an actual memory address of the host, such as partitioned memory enclave. In some instances, enclave attestation reports can be validated without transmitting corresponding attestation requests to remote attestation services, based on previous attestation of one or more previous container attestation reports from a similar container and without requiring end-to-end attestation between the container and remote attestation service for each new attestation request.

Abstract: Memory is partitioned and isolated in container-based memory enclaves. The container-based memory enclaves have attestable security guarantees. During provisioning of the container-based memory enclaves from a container image, a purported link in the container to a memory address of the enclave is modified to verifiably link to an actual memory address of the host, such as partitioned memory enclave. In some instances, enclave attestation reports can be validated without transmitting corresponding attestation requests to remote attestation services, based on previous attestation of one or more previous container attestation reports from a similar container and without requiring end-to-end attestation between the container and remote attestation service for each new attestation request.

Abstract: Memory is partitioned and isolated in container-based memory enclaves. The container-based memory enclaves have attestable security guarantees. During provisioning of the container-based memory enclaves from a container image, a purported link in the container to a memory address of the enclave is modified to verifiably link to an actual memory address of the host, such as partitioned memory enclave. In some instances, enclave attestation reports can be validated without transmitting corresponding attestation requests to remote attestation services, based on previous attestation of one or more previous container attestation reports from a similar container and without requiring end-to-end attestation between the container and remote attestation service for each new attestation request.

Abstract: A controller configured to be operatively coupled to a reductant insertion assembly comprising a first pump for inserting a reductant into a selective catalytic reduction system, is programmed to set an insertion interval timer for the first insertion interval in response to receiving a first insertion command. The controller starts the insertion interval timer, records an elapsed time period from the start of the insertion interval timer, and activates the first pump when the timer starts. The controller receives a second insertion command comprising information for activating the first pump for a second duty cycle for second insertion intervals different than the first insertion interval. If the second insertion interval is smaller than the recorded elapsed time period, the insertion interval timer is set for the second insertion interval, the insertion interval timer is started, and if not already activated, the first pump is activated for the second duty cycle.

Abstract: A controller configured to be operatively coupled to a reductant insertion assembly comprising a first pump for inserting a reductant into a selective catalytic reduction system, is programmed to set an insertion interval timer for the first insertion interval in response to receiving a firs insertion command. The controller starts the insertion interval timer, records an elapsed time period from the start of the insertion interval timer, and activates the first pump when the timer starts. The controller receives a second insertion command comprising information for activating the first pump for a second duty cycle for second insertion intervals different than the first insertion interval. If the second insertion interval is smaller than the recorded elapsed time period, the insertion interval timer is set for the second insertion interval, the insertion interval timer is started, and if not already activated, the first pump is activated for the second duty cycle.

Abstract: Memory is partitioned and isolated in container-based memory enclaves. The container-based memory enclaves have attestable security guarantees. During provisioning of the container-based memory enclaves from a container image, a purported link in the container to a memory address of the enclave is modified to verifiably link to an actual memory address of the host, such as partitioned memory enclave. In some instances, enclave attestation reports can be validated without transmitting corresponding attestation requests to remote attestation services, based on previous attestation of one or more previous container attestation reports from a similar container and without requiring end-to-end attestation between the container and remote attestation service for each new attestation request.

Abstract: An aftertreatment system comprises a first bank to receive a first portion of an exhaust gas and a second bank to receive a second portion of the exhaust gas. A first reductant insertion assembly is fluidly coupled to the first bank and a parent controller is communicatively coupled thereto. A second reductant insertion assembly is fluidly coupled to the second bank and a first child controller is communicatively coupled thereto. A third reductant insertion assembly is fluidly coupled to the first bank and a second child controller is communicatively coupled thereto. The parent controller instructs the first reductant insertion assembly to insert reductant into the first bank. The parent controller also instructs the first child controller to command the second reductant insertion assembly to insert reductant into the second bank, and instructs the second child controller to command the third reductant insertion assembly to insert reductant into the first bank.

Abstract: A system for diagnosing a sensor of an exhaust aftertreatment system may include receiving a first tank level value from a sensor. A plurality of reductant dosing command values over a period of time are received. A dosed reductant value is determined responsive to the plurality of reductant dosing command values reaching a threshold integrated value. A second tank level value is received from the sensor responsive to the dosed reductant value reaching the threshold integrated value. A sensor-estimated dosing value is determined based on the difference between the first tank level value and the second tank level value. The sensor may be diagnosed as performing outside of an acceptable calibration range based on the difference between the sensor-estimated dosing value and the dosed reductant value.

Abstract: An aftertreatment system comprises a first bank to receive a first portion of an exhaust gas and a second bank to receive a second portion of the exhaust gas. A first reductant insertion assembly is fluidly coupled to the first bank and a parent controller is communicatively coupled thereto. A second reductant insertion assembly is fluidly coupled to the second bank and a first child controller is communicatively coupled thereto. A third reductant insertion assembly is fluidly coupled to the first bank and a second child controller is communicatively coupled thereto. The parent controller instructs the first reductant insertion assembly to insert reductant into the first bank. The parent controller also instructs the first child controller to command the second reductant insertion assembly to insert reductant into the second bank, and instructs the second child controller to command the third reductant insertion assembly to insert reductant into the first bank.

Abstract: A system for diagnosing a sensor of an exhaust aftertreatment system may include receiving a first tank level value from a sensor. A plurality of reductant dosing command values over a period of time are received. A dosed reductant value is determined responsive to the plurality of reductant dosing command values reaching a threshold integrated value. A second tank level value is received from the sensor responsive to the dosed reductant value reaching the threshold integrated value. A sensor-estimated dosing value is determined based on the difference between the first tank level value and the second tank level value. The sensor may be diagnosed as performing outside of an acceptable calibration range based on the difference between the sensor-estimated dosing value and the dosed reductant value.