Wind River Systems, Inc.

Arlen Baker

Matt Jones

Robert Williams Abele

Robert Woolley

A manner of securing data that includes receiving a first plurality of hashes corresponding to data stored in a database, writing the first plurality of hashes to a private distributed ledger technology (DLT), sealing each block of the private DLT when a predetermined criteria is met to create a plurality of sealed blocks and writing a second plurality hashes corresponding to the plurality of sealed blocks to a public DLT.

Method and apparatus of securing data

A gateway device configured to receive, from an integrated development environment (IDE), a system configuration for a target device including application code for execution on the target device, the configuration being received via an encrypted network connection. The gateway device provisions the target device with the application code, receives, from the IDE, instructions via the encrypted network connection to execute the application code on the remote device and instructs the application code to execute on the remote device.

Gateway for remote provisioning of software

A high assurance kernel executed by a safety certified hypervised system using a separation kernel. The high assurance kernel includes a first level of the separation kernel configured to perform first security features associated with a hypervisor, the first level configured to run on a primary core and a second level of the separation kernel configured to augment the first security features with second security features, the second level implemented on a separate protected component from the primary core, the first level and the second level communicating with one another through a physical separation between the first and second levels. The high assurance kernel may further include a third level of the separation kernel configured as a virtual machine to perform third security features associated with the hypervisor.

Tri-level secure separation kernel

Application Programming Interfaces (APIs) for a computer program can be verified to be correct. The verification includes receiving updated source code for an application, receiving an application programming interface (API) corresponding to the application, scanning the updated source code, determining if the API has changed from a previous version of the API and determining if a change in the API is an intended change based on a comparison of the API with a predetermined benchmark.

Determination of API changes

A device, system, and method protects cryptographic keying material. The method is performed at an electronic device including a plurality of components housed in an enclosure. The method includes determining a tamper state of the enclosure, the tamper state being one of a secure state in which the enclosure has not been physically tampered or an unsecure state in which the enclosure has been physically tampered. When the tamper state is the secure state, the method includes associating a first value with the application. When the tamper state is the unsecure state, the method includes associating a second value with the application. The first value is configured to enable access to the data in the data storage unit. The second value prevents access to the data in the data storage unit.

Device, system, and method for protecting cryptographic keying material

A device, system, and method secures executable operations through verification of an operation prior to execution. The method performed at an electronic device comprising a processor in an execution state and a memory representable with a memory map includes receiving a request for the operation from an application installed on the electronic device, the request including a location in the memory map. The method includes determining whether the location is within one of at least one address range included in a security policy register generated prior to the execution phase, the at least one address range respectively corresponding to at least one authorized operation. The method includes, when the location is within one of the at least one address range, servicing the request to perform the operation.

Growing community of inventors

Alameda, CA, United States of America

Arlen Baker