Blue Armor Technologies, LLC

Blackridge Technology Holdings, Inc.

Charles Andrew Gram

John William Hayes

Christopher Luis Hamlin

Douglas A Laird

Whitfield Diffie

Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present disclosure greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Network security system using statistical object identification

The present invention provides methods and apparatus to generate a statistical object, the deterministic statistical representation of an original object, using a Deterministic Random Bit Generator (DRBG) (). Multiple DRBG Statistical Object Generators () may be chained together to increase security by using independent security configurations () for each DRBG Statistical Object Generator ().

Statistical object generator

Apparatus to enforce network policy based on identity authentication at a network endpoint device by offloading the authentication to a network attached authentication devices is disclosed. The authentication device may use Statistical Object Identification to perform the authentication. The present invention greatly reduces the resources needed by the network endpoint device to perform the authentication and eliminates the topological restrictions found in traditional network appliance based approaches.

Methods and apparatus for a Secure Time Communication System () are disclosed. One embodiment of the invention provides secure and non-interactive communication of clock information over an unsecured communications channel. This communication provides perfect forward secrecy, while detecting and blocking message spoofing, message replay, denial of service and cryptographic performance attacks. This mechanism also bounds the effect of message delay manipulation. The mechanism consists of two components, a filtered time encryptor () and a filtered time decryptor (). The filtered time encryptor () produces a message in two parts; a time token followed by an encrypted message body. The time token is used as a filter to detect most attacks and to determine the message key.

Secure time communication system

A mechanism to activate an original object (S) so that statistical objects (S) generated from the original object can be recognized using statistical object identification is disclosed. An object activation agent () with a clock () and at least one original object (S) communicates the original object (S) and time from the clock () to an object activation service (). The object activation service () provides and communicates keying information () and expiration criterion () for at least one of said original objects (S) back to the object activation agent ().

Growing community of inventors

Reno, NV, United States of America

Charles Andrew Gram