Abstract: Systems and methods for loading a cargo aircraft are described. The system includes at least one rail disposed in an interior cargo bay of a cargo aircraft that extends at an angle relative to an interior bottom contact surface of a forward portion of the interior cargo bay, through a kinked portion and an aft portion of the interior cargo bay. Payload-receiving fixtures are described that can be used in conjunction with the rail system, allowing for large cargo, such as wind turbine blades, to be transported by aircraft. Methods of loading a cargo aircraft can include advancing the large payload into the interior cargo bay of the aircraft such that at least one of the payload-receiving fixtures rises relative to a plane defined by the interior bottom contact surface of the forward portion of the interior cargo bay. Various systems, methods, components, and related tooling are also provided.

Abstract: Methods of determining a final space reservation for a new aircraft are disclosed. The methods include using parametric definitions of potential payloads to generate a population of representative payloads for use in creating an initial space reservation. The methods include accounting for and applying a variety of margins on each potential payload and taking the union of potential payloads. Alternatively, the union can be taken first and then the margins applied. A homogenous space reservation can be determined based upon a variety of differently shaped or sized payloads, including a margin build-up to mitigate risk of unknowns associated with future changes in specific payload shapes and sizes, build tolerances, environmental conditions, and/or loading and unloading motions and clearances. Once this space reservation is known, it is possible to design an external shape of a carrying vehicle by staying outside of this space reservation.

Abstract: This disclosure is related to devices, systems, and techniques for controlling a flow of network traffic between two or more devices. For example, a network device includes a control unit, a forwarding unit including a forwarding manager including a server configured to store a tunnel hierarchy structure, and a packet processor. The packet processor is configured to receive, via an interface card of a set of interface cards, a packet including a packet header. The forwarding manager is configured to parse the packet header in order to identify a service corresponding to the packet, wherein the service is associated with a service color, identify, based on the tunnel hierarchy structure, a set of tunnels, wherein each tunnel of the set of tunnels is associated with a tunnel color, and determine whether at least one tunnel of a set of tunnels associated with the tunnel color is in an online state.

Abstract: A system, method, and computer program product are provided for implementing hardware backed symmetric operations for password based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system utilizing hardware backed symmetric encryption. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.

Abstract: A mobile wireless communications device may include a housing, a wireless transceiver carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing. The processor is configured to implement a digital wallet including a multi-mode user card having first and second user interface modes, and selectively change the multi-mode user card from the first user interface mode to the second user interface mode based upon a current location, a current time, or a determined event. The second user interface mode includes one or more of a mapping interface mode, a survey interface mode, or a purchase interface mode.

Abstract: In one aspect, methods of treating cancer are disclosed. A method described herein, in some embodiments, comprises quantifying ZEB1 expression in a cancerous cell population and administering silver nanoparticles to the cancerous population if the quantified ZEB1 expression meets or exceeds a ZEB1 expression threshold. In some embodiments, the quantified ZEB1 expression is compared to a ZEB1 expression threshold above which a cancerous cell population response to silver nanoparticles.

Abstract: A method for generating a real-time context-based emoticon may include receiving conversation information associated with a conversation between a set of users. The method may include identifying an attribute associated with the conversation. The method may include generating a base emoticon. The method may include generating an output shape based on a fiducial point of the base emoticon. The method may include transforming the output shape of the base emoticon with an accessory. The method may include generating the real-time context-based emoticon for the conversation, based on transforming the output shape of the base emoticon with the accessory.

Abstract: A system, method, and computer program product are provided for sensitive data recovery in high security systems. In operation, a client device receives a request by a user to initiate a data recovery process to recover data that is encrypted. The client device generates a new data recovery request key pair. The client device creates a data recovery request that includes a data recovery request public key. The client device signs the data recovery request using an identity private key that is associated with a certificate issued by a certification authority (CA). The client device sends the data recovery request to a server system storing the data. The server system accesses an offline data recovery subsystem (ODRS) storing a data recovery key pair to authenticate the user. The ODRS generates and stores a secret data recovery code. The client device receives the secret data recovery code that was communicated to the user.

Abstract: A mobile wireless communications device includes a housing, a wireless transceiver carried by the housing, a memory carried by the housing, a display carried by the housing, and a processor carried by the housing. The processor is configured to implement a digital wallet including a multi-mode user card having first and second user interface modes, and selectively change the multi-mode user card from the first user interface mode to the second user interface mode based upon a current location, a current time, or a determined event. The second user interface mode includes one or more of a mapping interface mode, a survey interface mode, or a purchase interface mode.

Abstract: This disclosure is related to devices, systems, and techniques for controlling a flow of network traffic between two or more devices. For example, a network device includes a control unit, a forwarding unit including a forwarding manager including a server configured to store a tunnel hierarchy structure, and a packet processor. The packet processor is configured to receive, via an interface card of a set of interface cards, a packet including a packet header. The forwarding manager is configured to parse the packet header in order to identify a service corresponding to the packet, wherein the service is associated with a service color, identify, based on the tunnel hierarchy structure, a set of tunnels, wherein each tunnel of the set of tunnels is associated with a tunnel color, and determine whether at least one tunnel of a set of tunnels associated with the tunnel color is in an online state.

Abstract: Various embodiments are directed to a cutting board tray for capturing foodstuffs removed from the cutting board. The cutting board tray comprises a a planar base portion configured to be positioned between a bottom surface of a cutting board and a support surface on which both the cutting board and tray are positioned; at least one raised edge extending perpendicular from the base portion; and at least one open edge. In various embodiments, the planar base portion is sufficiently thin that the cutting board remains stable when a contact portion of the bottom surface of the cutting board is positioned on the base portion.

Abstract: A system, method, and computer program product are provided for end-to-end security of centrally accessible group membership information. In use, membership information defining a user group in a messaging system is accessed from a central server, where the membership information includes (1) at least one change to members of the user group, and (2) for each change of the at least one change, a digital signature of a user that made the change. Additionally, a verification process on the membership information is performed, including: for each change of the at least one change, verifying the digital signature of the user that made the change. Further, members of the user group are determined, as a result of the verification process, and at least one action is performed in association with the members of the user group.

Abstract: A system, method, and computer program product are provided for implementing hardware backed symmetric operations for password based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system utilizing hardware backed symmetric encryption. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.

Abstract: A system, method, and computer program product are provided for sensitive data recovery in high security systems. In operation, a client device receives a request by a user to initiate a data recovery process to recover data that is encrypted. The client device generates a new data recovery request key pair. The client device creates a data recovery request that includes a data recovery request public key. The client device signs the data recovery request using an identity private key that is associated with a certificate issued by a certification authority (CA). The client device sends the data recovery request to a server system storing the data. The server system accesses an offline data recovery subsystem (ODRS) storing a data recovery key pair to authenticate the user. The ODRS generates and stores a secret data recovery code. The client device receives the secret data recovery code that was communicated to the user.

Abstract: A system, method, and computer program product are provided for performing hardware-backed password-based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.

Abstract: An apparatus, computer program, and method are afforded for providing a peer-to-peer security protocol. In operation, a message is identified that is directed from a first peer device to a second peer device. Further, the message is copied, so that a copy of the message is caused to be sent to an auditing server.

Abstract: Techniques are described for signaling a resource reservation point-to-multipoint (P2MP) label switched path (LSP) in a ring network. For example, the techniques include sending a single resource reservation request message without the ingress needing to send multiple resource reservation request messages, one for each leaf network device of the P2MP ring LSP. The resource reservation request message includes a leaf identification object from which network devices of a P2MP ring LSP may explicitly or implicitly identify themselves as prospective leaf network devices of the P2MP ring LSP. A network device determined to be a leaf network device may send a resource reservation response message back to the ingress network device of the P2MP ring LSP and send a modified resource reservation request message (if explicit) and/or the same resource reservation request message (if implicit) to a next hop network device along the P2MP ring LSP.

Abstract: Techniques are described for detecting egress network devices of a point-to-multipoint (P2MP) label switched path (LSP). For example, a network device may include one or more processors configured to identify a P2MP LSP for receiving multicast traffic from a multicast source for a specific multicast group for which the network device has an interested receiver, wherein the network device is to be an egress network device of the P2MP LSP; and send, to an ingress network device of the P2MP LSP, a P2MP egress identification message to add the network device as an egress network device of the P2MP LSP, wherein the one or more processors are further configured to output the P2MP egress identification message into a multipoint-to-point (MP2P) ring LSP for which the ingress network device of the P2MP LSP is a sole egress network device of the MP2P ring LSP.

Abstract: Techniques are described for signaling a resource reservation point-to-multipoint (P2MP) label switched path (LSP) in a ring network. For example, the techniques include sending a single resource reservation request message without the ingress needing to send multiple resource reservation request messages, one for each leaf network device of the P2MP ring LSP. The resource reservation request message includes a leaf identification object from which network devices of a P2MP ring LSP may explicitly or implicitly identify themselves as prospective leaf network devices of the P2MP ring LSP. A network device determined to be a leaf network device may send a resource reservation response message back to the ingress network device of the P2MP ring LSP and send a modified resource reservation request message (if explicit) and/or the same resource reservation request message (if implicit) to a next hop network device along the P2MP ring LSP.

Abstract: A system, method, and computer program product are provided for multi-layer encryption of an efficient broadcast message. In use, a message is identified that includes data to be broadcasted to a plurality of recipients as well as identifiers of the plurality of recipients. The message is encrypted using a first encryption process to form a first header portion and a first data portion. Additionally, the message with the first data portion is encrypted using a second encryption process to form a second header portion and a second data portion. Further, the first header portion is encrypted using a third encryption process to form a third header portion. A multi-layer efficient broadcast message is then formed for broadcasting the data to the plurality of recipients, the multi-layer efficient broadcast message including the second header portion, the third header portion, and the second data portion.