Abstract: Embodiments of the invention concern zero-trust packet routing. Zero-trust packet routing (ZPR) is a way of implementing policy-enforcing networks with tight integration into identity and device management systems. Unlike conventional networks, which route traffic based only on the information inside of the packets, ZPR networks forward every packet based on the authenticated identity of the users and services that communicate through those packets, and global policies that govern their communications.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: Disclosed herein is a biochip with a plurality of endothelial cells (e.g., Schlemm's canal cells) having a plurality of pores (e.g., transcellular pores) and methods of making and using the same.

Abstract: Methods and apparatus for coupling two or more bones together with a flexible connector.

Abstract: A sensor module having multiple sensors for collecting, analyzing, storing, and transmitting data related to environmental and plant growth data in an agricultural habitat, such as a greenhouse, is disclosed. One or more modules are placed at various locations in a greenhouse, to collect data including any of temperature, temperature gradient, humidity, light levels, light frequencies, soil moisture, soil composition, plant health, plant growth, plant quality e.g. maturity and/or fruit quantity and/or ripeness. The sensor module is adapted for robotic placement within the greenhouse, although the module ay initially be placed by hand. The module is powered by internal batteries or a large capacitor or capacitor array and is recharged by a greenhouse robot that may comprise any of a robot arm configured for movement within a greenhouse via a conveyer or track system, a wheeled robot, or a drone.

Abstract: In a cluster derotation assembly, a tube clip for joining a locking tube to a link member. The tube clip has a first clip arm and a second clip arm joined to a threaded shaft. One or both of the first clip arm and the second clip arm has an inner surface configured to engage with a complementary surface of a locking tube.

Abstract: Methods and apparatus for coupling two or more bones together with a flexible connector.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: A hybrid compressed gas-electric piston engine includes a piston configured to move longitudinally inside of a cylinder for rotating a crank shaft. A first electromagnetic component is affixed to the piston. A second electromagnetic component is affixed in position on the engine relative to the cylinder. Wherein, the piston is configured to be moved longitudinally inside of the cylinder for rotating the crank shaft via compressed gas, electricity, or a combination thereof. For compressed gas, the piston is moved by introducing the compressed gas into the cylinder. For electricity, the piston is moved by electricity flowing into the first electromagnetic component affixed to the piston, the second electromagnetic component affixed in position on the engine relative to the cylinder, or both, thereby creating magnetic forces between the first electromagnetic component and the second electromagnetic component.

Abstract: Data in a portable electronic device is protected by using external and internal status detection means to determine if the device is misplaced, lost, or stolen. The device then takes, singly or in combination, one of several actions to protect the data on the device, including declaring its location to an owner or service provider, locking the device or specific functions of the device to disable all data retrieval functionality, erasing or overwriting all the stored data in the device or, where the data has been stored in the device in an encrypted format, destroying an internally-stored encryption key, thereby preventing unauthorized access to the encrypted data in the device.

Abstract: The invention provides an instrument control panel that is easily customized and reconfigured, and yet provides the familiar tactile sensation of physical knobs, sliders, and buttons. The instrument control panel comprises one or more interface components that are removably coupled to an interface display wherein the interface components communicate with one or more control components disposed behind the interface display. The present invention lends itself particularly well to an instrument panel.

Abstract: A method for laying multiple conductors in a container may be provided. The method may comprise receiving the multiple conductors at a monitoring station; receiving the multiple conductors at a drive; and receiving the multiple conductors at the container.

Abstract: Consistent with embodiments of the invention, a cable package may be provided. The cable package may comprise a cable and a chamber. The cable may comprise a winding and at least one free end. The chamber may define an internal volume containing the cable. The chamber may comprise a continuous opening. The continuous opening may comprise at least one surface arranged to apply pressure to a portion of the cable located proximate to the continuous opening.

Abstract: Systems and methods are described for configuring and using displays, speakers, or other output devices positioned by an article of clothing or other such structure wearable by a healthcare recipient, for example, in a clinic or residential care facility.

Abstract: A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

Abstract: Secure network communications are described. In one aspect, a secure network can include a passbuilder that provides policy information related to performance characteristics of the secure network. A sender can receive the policy information and transmit packets to a receiver if the policy information is complied with by the potential packet transmission.

Abstract: At least one embodiment of this disclosure includes a method for an autonomous vehicle (e.g., a fully autonomous or semi-autonomous vehicle) to communicate with external observers. The method includes: receiving a task at the autonomous vehicle; collecting data that characterizes a surrounding environment of the autonomous vehicle from a sensor coupled to the autonomous vehicle; determining an intended course of action for the autonomous vehicle to undertake based on the task and the collected data; and conveying a human understandable output via an output device, the human understandable output expressly or implicitly indicating the intended course of action to an external observer.