Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a data store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: A power distribution and communication system includes nodes connected by power lines and communication links. The system receives power from one or more power sources. Each node contains at least one power port, data port and load port. Associated with each power port and load port is a port monitor for measuring current flowing into or out of the port and the voltage difference between the port outlet and ground, which measurements are passed to a processing element. The processing element and monitor analyze measured values to detect fault conditions. Upon fault condition detection, the port is disabled by opening a switch, disconnecting the port from the system voltage. The processing element receives power directly from the power line, thus receiving power from a live power line even if the associated power port is disabled allowing the processing element to enable a disabled node following a failure.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: A phased adoption procedure is disclosed for adopting a new communication system that provides potential adopters a high degree of confidence in the reliability of the proposed communication system prior to committed adoption.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: Essentially coincident with the capture of an image by the imaging device, biometric information indicating the identity of the operator of the device is obtained from at least one biometric sensor. The biometric information and captured image are then stored in a manner reliably associating each with the other. At a later time, biometric information is obtained from a supposed operator of the imaging device. By comparing this candidate biometric information with the stored biometric information, the supposed operator may be authenticated as the operator of the imaging device at the time of capture of the stored image.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: The present disclosure provides methods and mechanisms for measuring small masses attached to a substrate within a microcantilever. Specifically, the disclosure describes the measurement of small particles accumulated at a substrate that cannot be flowed through a microchannel within a microcantilever. A resonance measurement is acquired at a first time. A pair resonance measurements is then acquired at a second point in time—one with the test mass at a first position off or along the microcantilever, the second with the test mass at a second position along the microcantilever. Comparing the resonance frequencies determined for the two test mass positions allows for disambiguation of changes in the mass of the particles from changes in the resonant behavior of the microcantilever itself.

Abstract: Essentially coincident with the capture of an image by the imaging device, biometric information indicating the identity of the operator of the device is obtained from at least one biometric sensor. The biometric information and captured image are then stored in a manner reliably associating each with the other. At a later time, biometric information is obtained from a supposed operator of the imaging device. By comparing this candidate biometric information with the stored biometric information, the supposed operator may be authenticated as the operator of the imaging device at the time of capture of the stored image.

Abstract: The disclosed technology includes a system comprising a tire-mounted inertial measurement unit (IMU). The IMU can be configured to measure linear acceleration data and angular velocity data associated with a tire, and the system can be configured to determine various indicators of tire health based on the linear acceleration data and angular velocity data. The system can be configured to determine a distance between the IMU and an outer rolling surface of the tire. The system can be configured to monitor changes in this distance over time, which can be indicative of tread wear over time. Accordingly, the system can be configured to monitor change in the tread depth over time such that the system is configured to monitor tread depth of the tire.

Abstract: Systems and methods are described for configuring and using displays, speakers, or other output devices positioned by an article of clothing or other such structure wearable by a healthcare recipient, for example, in a clinic or residential care facility.

Abstract: A method of operating a security token to authenticate a user in a multi-factor authentication system is disclosed. The method includes: monitoring user custody of the token, the token having an identifying characteristic representing a possession factor for use through possession factor authentication; during a period of continuous user custody of the token based on the monitoring, obtaining a knowledge factor from a user having the continuous user custody; caching the knowledge factor in a memory of the token; and in response to a second authentication request, retrieving the knowledge factor from the memory to demonstrate to an authentication system knowledge of the knowledge factor, during the period of continuous user custody.

Abstract: A phased adoption procedure is disclosed for adopting a new communication system that provides potential adopters a high degree of confidence in the reliability of the proposed communication system prior to committed adoption.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: Disclosed are a method and apparatus for limiting the number of results returned by a data store in response to a query. Upon receiving an initial query, the data store returns a page of results that includes a subset of the data items within the data store satisfying the conditions of the query. The data store also provides a marker indicating the extent of the set of data items. If a subsequent query that requests additional results which satisfy the same query conditions and that includes the marker is received, the data store returns a page of results that includes a subset of data items that are disjoint from the initial subset, and provides an updated marker which indicates the extent of the union of the initial and subsequent subsets. If still further results are desired from the data store, an additional query containing the updated marker may be submitted.

Abstract: A power distribution and communication system includes nodes connected by power lines and communication links. The system receives power from one or more power sources. Each node contains at least one power port, data port and load port. Associated with each power port and load port is a port monitor for measuring current flowing into or out of the port and the voltage difference between the port outlet and ground, which measurements are passed to a processing element. The processing element and monitor analyze measured values to detect fault conditions. Upon fault condition detection, the port is disabled by opening a switch, disconnecting the port from the system voltage. The processing element receives power directly from the power line, thus receiving power from a live power line even if the associated power port is disabled allowing the processing element to enable a disabled node following a failure.