Abstract: Target data may be associated with a location requirement established by a data owner. A data access module may be used to attempt access to the target data. Location requirement and provenance metadata associated with the target data are obtained. The provenance metadata must be validated, and evidence only approved data access locations identified in the location requirement. A current location of a computing device attempting access to the target data must also meet the location requirement. The computing device is allowed to access the target data only in response to the current location and each location identified in the provenance metadata meeting the location requirement. The provenance metadata is updated to include a new record including the current data access location.

Abstract: A method for threat intelligence in a peer group includes identifying, at a first node in a network, a potential security threat. The first node is one of a plurality of nodes in a peer group and each node in the peer group has a level of trust for each node in the peer group. The method includes receiving a security communication from one or more other nodes of the peer group. Each security communication indicates that the node of the peer group sending the security communication has identified a potential security threat similar to the potential security threat identified by the first node. The method includes taking a corrective action to neutralize the potential security threat in response to reaching a consensus with the other nodes of the peer group that sent a security communication regarding the identified potential security threats that are similar.

Abstract: Baseboard management controller (‘BMC’) group administration includes: receiving, by a member BMC from a leader BMC, a leader certificate and a request to join a group of the leader BMC, where the request is signed by the leader BMC and the leader certificate is signed by a certificate authority; authenticating, by the member BMC, the leader certificate and the request; and sending, by the member BMC, an acknowledgement to the leader BMC to join the leader BMC's group.

Abstract: Target data may be associated with a location requirement established by a data owner. A data access module may be used to attempt access to the target data. Location requirement and provenance metadata associated with the target data are obtained. The provenance metadata must be validated, and evidence only approved data access locations identified in the location requirement. A current location of a computing device attempting access to the target data must also meet the location requirement. The computing device is allowed to access the target data only in response to the current location and each location identified in the provenance metadata meeting the location requirement. The provenance metadata is updated to include a new record including the current data access location.

Abstract: Baseboard management controller (‘BMC’) group administration includes: receiving, by a member BMC from a leader BMC, a leader certificate and a request to join a group of the leader BMC, where the request is signed by the leader BMC and the leader certificate is signed by a certificate authority; authenticating, by the member BMC, the leader certificate and the request; and sending, by the member BMC, an acknowledgement to the leader BMC to join the leader BMC's group.

Abstract: Systems and methods for managing access to data based on a geographic location requirement are disclosed herein. According to an aspect, a system includes a first computing device comprising a data storage manager configured to manage access to stored data based on one or more predetermined rule(s) that specifies geographic location requirement(s) for permissible access to the stored data. The manager is also configured to receive, from a second computing device, a request to access the data. Further, the manager is configured to determine a geographic location of the second computing device, determine whether the geographic location of the second computing device meets the geographic location requirement(s), and permit or deny access to the stored data by the second computing device in response to determining that the geographic location of the second computing device meets the geographic location requirement(s).

Abstract: Systems and methods for selecting cryptographic settings based on computing device location are disclosed. According to an aspect, a method includes determining a location of a client of a server. The method also includes selecting, at the server and based on the location of the client, one of several different cryptographic settings for communication with the client or data management. The method may also include implementing, at the server, the selected cryptographic setting.

Abstract: Systems, computing devices, and methods for authenticating privileged subsystem access by policy and by use of a security key generated at boot are disclosed herein. According to an aspect, a method includes generating a security key upon boot of a host-facing interface for a client. The method also includes communicating the security key to a baseboard management controller. Further, the method includes authenticating, to the host-facing interface commands, based on the security key. The method may also include implementing a policy associated with the security key. Further, in response to determining that a received command is not allowed by policy or the security key is not authenticated, an external server port or debug header may be disabled to prevent execution of the command.

Abstract: The present disclosure provides a computing apparatus and a method for securing access to the computing device. The computing apparatus comprises a housing, a data storage device disposed in the housing, a cover movably coupled to the housing to secure the data storage device in the housing, and a controller coupled to the data storage device. The controller is configured to grant access to the data storage device upon detecting an authorized attempt of opening the cover and to deny access to the data storage device upon detecting an unauthorized attempt of opening the cover.

Abstract: Systems and methods for selecting cryptographic settings based on computing device location are disclosed. According to an aspect, a method includes determining a location of a client of a server. The method also includes selecting, at the server and based on the location of the client, one of several different cryptographic settings for communication with the client or data management. The method may also include implementing, at the server, the selected cryptographic setting.

Abstract: Systems, computing devices, and methods for authenticating privileged subsystem access by policy and by use of a security key generated at boot are disclosed herein. According to an aspect, a method includes generating a security key upon boot of a host-facing interface for a client. The method also includes communicating the security key to a baseboard management controller. Further, the method includes authenticating, to the host-facing interface commands, based on the security key. The method may also include implementing a policy associated with the security key. Further, in response to determining that a received command is not allowed by policy or the security key is not authenticated, an external server port or debug header may be disabled to prevent execution of the command.

Abstract: The present disclosure provides a computing apparatus and a method for securing access to the computing device. The computing apparatus comprises a housing, a data storage device disposed in the housing, a cover movably coupled to the housing to secure the data storage device in the housing, and a controller coupled to the data storage device. The controller is configured to grant access to the data storage device upon detecting an authorized attempt of opening the cover and to deny access to the data storage device upon detecting an unauthorized attempt of opening the cover.

Abstract: A fuel injector for a gas turbine engine is disclosed. The fuel injector includes two primary tubes, a secondary tube, a primary gas gallery, and a secondary gas gallery. The two primary tubes are connected in a parallel configuration to provide a main gas fuel to the primary gas gallery. The secondary tube provides the main gas fuel to the secondary gas gallery independent from the two primary tubes and the primary gas gallery. The primary gas gallery and the secondary gas gallery provide the main gas fuel to a premix passage independently allowing for robust control of the gas turbine engine.

Abstract: A fuel injector for a combustion engine includes an injector head including a nozzle, a premixer, and a distributor structured to distribute a plurality of different fuels to different sets of fueling orifices in the premixer. A pilot assembly of the fuel injector is coupled to the premixer and includes a first fueling passage for a first fuel and a second fueling passage for a second fuel. Multiple sets of fueling orifices are positioned within the fuel injector, the fueling orifice sets being selectively connectable to a plurality of different fuel supplies, and both located and sized so as to accommodate a wide range of flow rates to enable a combustion engine coupled with the fuel injector to operate on fuels having a range of Wobbe numbers and compositions.

Abstract: Systems and methods for enhancing the performance of resource state polling are disclosed. According to an aspect, a method includes using at least one processor and memory for transmitting a request and a baseline timestamp for an updated resource state based on a current resource state, wherein the baseline timestamp defines a time period for the updated resource state. The method also includes determining the updated resource state based on the baseline timestamp and the current resource state. The method also includes providing the determined updated resource state and current timestamp of the determined updated resource state. Additionally, the method includes setting a current baseline resource state based on a current timestamp of the determined updated resource state.

Abstract: A fuel injector for a gas turbine engine is disclosed. The fuel injector includes a flange assembly with a distribution block, three main gas tubes, and an injector head. The distribution block evenly distributes a main gas fuel to the three main gas tubes. The injector head includes an injector body with a primary gas gallery including an annular shape. The three main gas tubes are connected in a parallel configuration between the distribution block and the primary gas gallery. The three main gas tubes are all in flow communication with the primary gas gallery and provide the main gas fuel from the same main gas fuel source.

Abstract: A center body assembly for a fuel injector is disclosed. The center body assembly defines a primary liquid passage, a liquid gallery, swirl slots, and a prefilm passage. The primary liquid passage supplies liquid fuel to the liquid gallery. The liquid gallery includes a gallery discharge end and a gallery inlet end that aligns with the primary liquid passage. The liquid gallery tapers down from the gallery inlet end to the gallery discharge end. The swirl slots extend from the liquid gallery to the prefilm passage in a helical pattern. The prefilm passage includes an annular shape that turns inward towards an assembly axis of the center body assembly.

Abstract: A fuel injector for a combustion engine includes an injector head including a nozzle, a premixer, and a distributor structured to distribute a plurality of different fuels to different sets of fueling orifices in the premixer. A pilot assembly of the fuel injector is coupled to the premixer and includes a first fueling passage for a first fuel and a second fueling passage for a second fuel. Multiple sets of fueling orifices are positioned within the fuel injector, the fueling orifice sets being selectively connectable to a plurality of different fuel supplies, and both located and sized so as to accommodate a wide range of flow rates to enable a combustion engine coupled with the fuel injector to operate on fuels having a range of Wobbe indices and compositions.

Abstract: A fuel injector for a combustion engine includes an injector head including a nozzle, a premixer, and a distributor structured to distribute a plurality of different fuels to different sets of fueling orifices in the premixer. A pilot assembly of the fuel injector is coupled to the premixer and includes a first fueling passage for a first fuel and a second fueling passage for a second fuel. Multiple sets of fueling orifices are positioned within the fuel injector, the fueling orifice sets being selectively connectable to a plurality of different fuel supplies, and both located and sized so as to accommodate a wide range of flow rates to enable a combustion engine coupled with the fuel injector to operate on fuels having a range of Wobbe numbers and compositions.

Abstract: A fuel injector for a combustion engine includes an injector head including a nozzle, a premixer, and a distributor structured to distribute a plurality of different fuels to different sets of fueling orifices in the premixer. A pilot assembly of the fuel injector is coupled to the premixer and includes a first fueling passage for a first fuel and a second fueling passage for a second fuel. Multiple sets of fueling orifices are positioned within the fuel injector, the fueling orifice sets being selectively connectable to a plurality of different fuel supplies, and both located and sized so as to accommodate a wide range of flow rates to enable a combustion engine coupled with the fuel injector to operate on fuels having a range of Wobbe indices and compositions.