Texas Instruments Corporation

Barak Cherches

Yaron Alpert

Avi Baum

Uri Weinrib

Yaniv Tzoreff

Gilboa Shveki

Shmulik Elgavi

Clive D Bittlestone

Eric Thierry Jean Peeters

Asaf Carmeli

Mukesh Kumar

David Levy

Ben Gilboa

Yoav Ben-Yehezkel

Israel Zilbershmidet

Yedidya Yechiel Vachnish

Avi Sammy Berkovich

Guy Shubeli

Nir Shlomo Gross

A network device includes a wireless transceiver configured to establish a bi-directional communication channel with a network gateway. The network device also includes a visible light communication (VLC) interface configured to establish a visible light communication channel with a configurator for the network gateway. The network device further includes a controller configured to operate with the configurator to execute out-of-band (OOB) provisioning of the network device for the network gateway, wherein data communicated on the visible light communication channel includes a portion of information related to bootstrap provisioning the network device with the network gateway using the device provisioning protocol (DPP).

Provisioning a network device for secure communications

Systems and methods for validating operation of a software sequence may include: monitoring signals on a bus of a processor, comparing the contents of the signals on the bus to pre-stored information from compile time. If the comparing generates a match, that may indicate that the software sequence is operating as intended. However, if the comparing generates a mismatch, that may indicate that the software sequence is not operating as intended and may, in fact, indicate a malicious use. Further actions can be taken in response to a mismatch, including resetting a processor, issuing an interrupt, and the like.

Systems and methods for monitoring an instruction bus

In an embodiment, a method includes receiving a logical address from a primary device and determining an address header based on the logical address. The method also includes determining an offset value based on the address header and applying the offset value to a first portion of the logical address to create an offset address portion. The method further includes generating a physical address that includes the address header and the offset address portion and accessing a physical resource using the physical address.

Address space mapping

In at least one example, a method includes establishing, by a sniffer provisioning server (SPS) of a first wireless device, a trusted relationship between the first wireless device and a sniffer tool using a public key of the sniffer tool. An out-of-band (OOB) key exchange provisions the public key of the sniffer tool to the wireless device. The method further includes obtaining, by the SPS, key material uniquely related to a communication session established between the first wireless device and a second wireless device using a shared password. The key material excludes the shared password and a session key uniquely related to the communication session. The method further includes publishing, by the SPS, the key material over a channel to the sniffer tool based on the trusted relationship. The channel is secured using the public key of the sniffer tool.

Secure sniffing of wireless connections with forward secrecy

In some examples, a method includes determining, during a boot sequence of a controller, a hash value for data of a block of a flash storage device, the block including executable code, determining a bit pattern based on a randomly generated number, extracting a subset of data bits of the hash value according to the bit pattern to obtain a snippet, and storing the snippet to a secure storage device.

External memory data integrity validation

A method includes programming first and second values and a first compare enable command into respective first operand, second operand, and first compare enable command registers in a hardware comparator circuit. The method includes determining that a first match exists corresponding to the first and second values, programming a third value into the first operand register and a fourth value into the second operand register, and programming a second compare enable command into a second compare enable command register in the hardware comparator circuit. In response to a determination that a second match exists corresponding to the third and fourth values, the method includes asserting a success interrupt signal, programming a fifth value into the first operand register and a sixth value into the second operand register and programming a second compare enable command into a second compare enable command register in the hardware comparator circuit.

Countermeasure against fault injection attacks

A Wi-Fi device includes a controller coupled to a writeable memory implementing a MAC and PHY layer and to a transceiver. Connection data stored in the writeable memory includes Wi-Fi connection parameters including ≥1 router MAC level information or a most recently utilized (MRU) channel used, and IP addresses including ≥1 of an IP address of the Wi-Fi device, IP address of the MRU router, an IP address of a MRU target server, and an IP address of a network connected device. An accelerated reconnecting to a Wi-Fi network algorithm is implemented by the processor is for starting from being in a network disconnected state, establishing current connection parameters for a current Wi-Fi network connection using the Wi-Fi connection parameters for at least one MAC layer parameter for the MAC layer.

Accelerated network reconnect using previous connection parameters

Device provisioning

In described examples, ownership of a network protocol-based session is distributed across multiple entities. A session is established between a remote entity and a first processing node on a local device, such that the first processing node is the session owner of the session on the local device. During the session, ownership of the session is transferred from the first processing node to a second processing node on the local device, such that the second processing node becomes the session owner of the session on the local device. The session is then operated between the remote entity and the second processing node as the session owner.

Distributed session owner across multiple entities

An integrated circuit includes: a processor; a receiver coupled to the processor; and memory coupled to the processor. The memory stores resource coordinator instructions that, when executed by the processor, cause the processor to: maintain a plurality of active secure sessions; identify a priority session trigger; and allocate receiver resources for incoming packets related to the plurality of active secure sessions based on the priority session trigger.

Network interface with resource coordinator

Techniques related to a technique comprising dividing an update into a number of portions, generating, for the first portion, a first portion hash value, generating, for the second portion, a second portion hash value, generating a first branch hash value comprising a hash of a concatenation of the first portion hash value and the second portion hash value, generating a root hash value by concatenating the first branch hash value and a second branch hash value, generating a signature based on the root hash value and a private key, generating an update header comprising the signature, the root hash value, and a hash tree comprising first and second portion hash values, the first branch hash value, and the root hash value, transmitting the update header to a client device for authentication, and transmitting one or more of the number of portions to the client device.

Technique for authentication and prerequisite checks for software updates

Techniques for updating a client device are provided that include receiving, by a client device, a software update and a certificate associated with the software update, verifying, by the client device, the certificate associated with the software update based on a stored public key of the client device, extracting an update scope value from the certificate, comparing the update scope value against a corresponding attribute of the update, and either applying the software update based on the comparing, or rejecting the software update based on the comparing.

Controlled scope of authentication key for software update

A Wi-Fi device includes a controller coupled to a writeable memory implementing a MAC and PHY layer and to a transceiver. Connection data stored in the writeable memory includes Wi-Fi connection parameters including&#x2265;1 router MAC level information or a most recently utilized (MRU) channel used, and IP addresses including&#x2265;1 of an IP address of the Wi-Fi device, IP address of the MRU router, an IP address of a MRU target server, and an IP address of a network connected device. An accelerated reconnecting to a Wi-Fi network algorithm is implemented by the processor is for starting from being in a network disconnected state, establishing current connection parameters for a current Wi-Fi network connection using the Wi-Fi connection parameters for at least one MAC layer parameter for the MAC layer.

Growing community of inventors

Ramat Hakovesh, Israel

Barak Cherches