Architecture Technology Corporation

Other

Jordan C Bonney

Deborah K Charan

Barry Alan Trent

Ranga S Ramanujan

Benjamin L Burnett

Ian J McLinden

Jafar Al-Gharaibeh

Ryan L Hagelstrom

Clint Michael Sanders

Edward Raymond Mandy

Richard H Carl

Ian Mclinden

Disclosed herein are embodiments of an aerial network system including a first transceiver configured to transmit and receive free space optical (FSO) signals and a second transceiver configured to transmit and receive radio frequency (RF) signals. A processor provides modulated data signals to the first and second transceivers for transmission and receives demodulated signals from the first and second transceiver. The processor is configured for policy-based multipath admission of requests for access to an IP-routing enabled overlay network. The processor includes an inverse mission planning system configured for predictive traffic load balancing of transmitted FSO signals and RF signals. The inverse mission planning system includes radio behavior models and aerial platform models, and is configured for geographic simulation and optimization of mission planning data based upon user-inputted mission-specific data. Forward error correction (FEC) coding of transmitted communications via packet erasure coding provides resiliency with a low bit error rate.

Aerial networks with hybrid communication links

Embodiments for a computer readable medium including a software module are provided. The software module causes one or more processing devices to obtain a biometric identifier from a user. Access to a resource is requested by providing a software credential token and the biometric identifier. The software credential token corresponds to a hardware credential token, and the hardware credential token is one of a set of hardware credential tokens that are used to access the resource. An indication that access to the resource has been granted is received and after receiving the indication an indication that the access to the resource has been revoked is received. After receiving the indication that access to the resource has been revoked, a biometric identifier is re-obtained from a user and access to the resource is re-requested by providing a software credential token and the re-obtained biometric identifier.

Software credential token process, software, and device

A computing device may authenticate a user of the computing device as an authorized user. The computing device may, in response to authenticating the user of the computing device as the authorized user, transition from a locked state to an unlocked state. The computing device may, in response to authenticating the user of the computing device as the authorized user, determine one or more computing devices that are proximate to the computing device. The computing device may, in response to determining the one or more computing devices that are proximate to the computing device, send to each of the one or more computing devices an indication of successful user authentication by the computing device to enable each of the one or more computing devices to transition from the locked state to the unlocked state without performing user authentication.

Secure authentication using companion trust

This disclosure is directed to network optimization in a complex joint network for increasing the network utility of the complex joint network. A computing device in the complex joint network may receive a data flow via a complex joint network. The computing device may determine, based on a network template, a mission utility associated with the data flow and a traffic class associated with the data flow. The computing device may control one or more quality of service decisions based at least in part on the mission utility associated with the data flow and the traffic class associated with the data flow.

Autonomous network optimization using network templates

A communication optimization system/method for mobile networks uses a server that generates waypoints based on a first communication network within a route to be travelled by an aerial vehicle, the aerial vehicle comprising a communication hub configured to communicate with at least one communication node, a communication hub controller configured control movement of a steerable antenna, and an aerial vehicle controller configured control movement of the aerial vehicle. The server then transmits the waypoints to the aerial vehicle controller; periodically monitors networks not connected to the communication hub; when a second communication network not connected to the communication hub satisfies a threshold, transmits causes the communication controller to steer the steerable antenna in a direction of the second communication network, further causing the communication hub to communicate and connect with the second communication network.

Communications system for controlling steerable antennas

Hybrid communications based upon aerial networks

Optimizing joint aerial-layer networks using steerable antennas

In general, the techniques of this disclosure describe a computing device in a secure domain that is configured to receive, via a guard device, an authentication factor from at least one authentication device of a plurality of authentication devices each in a non-secure domain. The respective authentication factor comprises a respective identifier of a respective user of the respective authentication device. The computing device may then determine whether the respective user of each respective authentication device is a particular trusted user based on the received authentication factors. Responsive to determining that the respective user of each respective authentication device is the particular trusted user, the computing device may enable access to one or more applications on the computing device. Once access is enabled, the computing device may continue to enable access so long as the authentication devices send additional authentication factors that confirm the identity of the user.

Secure authentication using fast authentication factors

Embodiments for a method for issuing a software credential token with reliance on a hardware credential token are disclosed. A data server that allows access thereto via a set of hardware credential tokens is provided. The method includes receiving a request for a software credential token from a personal computing device. The request includes an indication of a hardware credential token upon which the request relies. An email address and a public key corresponding to the hardware credential token are obtained. The method also includes sending an email to the email address. The email includes a one-time password encrypted with the public key. Access to the email is restricted to an individual to which the hardware credential token was issued. The method also includes receiving an inputted password from the personal computing device. If the inputted password matches the one-time password, a software credential token is issued to a user.

Software credential token issuance based on hardware credential token

The present application relates to an implementation of a reliable transport protocol that provides receiver-based congestion control within a computing system. An exemplary system includes a first network device and a second network device within a network. During a handshake procedure, a transmission rate at which data can be sent as well as an acceptable corruptive loss rate for a data path between the first network device and the second network device in the network is determined. The second network device then receives data sent from the first network device at the transmission rate. When the acceptable corruptive loss rate for received data has been exceeded, the second network device determines an amount by which to reduce the transmission rate, and then sends a notification to the first network device indicating the amount by which to reduce the transmission rate for subsequently transmitted data.

Reliable transport protocol providing receiver-based congestion control

A system is described for monitoring and testing enterprise networks that tend to have a number of geographically dispersed devices and interconnected sub-networks. The system includes a plurality of distributed agents to capture packets from a network. The system further includes an aggregation module coupled to the network to receive and aggregate the captured packets. During the aggregation process, the aggregation module identifies duplicate packets that were captured by different agents as an originating packet traverses the network. A display is coupled to the aggregation module, presents the non-duplicate network packets, giving a user a clear illustration of network activity. For the duplicate packets, the aggregation module presents a representative packet, such as the originating packet, that may be expanded by the user to view the details of the duplicate packets.

Distributed packet capture and aggregation

A system is described for monitoring and testing computer networks, such as enterprise networks that tend to have a number of geographically dispersed devices and interconnected sub-networks. The system includes a plurality of distributed agents coupled to a computing network. The system further includes a replay module coupled to the network that has a storage medium to store replay data. The replay module communicates respective portions of the replay data to the agents, and issues commands to the agents to control introduction of the network packets on the computing network by the agents. In this way, the system recreates network activity in order to test the computer network. The replay data stored by the storage medium may define a conditional flow for introduction of the network packets by the agents. Accordingly, the replay module may issue commands to the agents in accordance with the conditional flow.

Growing community of inventors

Bloomington, MN, United States of America

Jordan C Bonney