Arm IP Limited

Arm Limited

Hugo John Martin Vincent

Krisztian Flautner

Amyas Edward Wykes Phillips

Milosch Meriac

James Crosby

Shidhartha Das

Robert George Taylor

Marcus Chang

Brendan James Moran

Matthias Lothar Boettcher

Steven James Ogborne

Vasileios Tenentes

Remy Pottier

Subbayya Chowdary Yanamadala

Michael Bartling

Carl Wayne Vineyard

Jeremy Patrick Dubeuf

Andrew John Pritchard

Gabor Balint

Mbou Eyole

John Eugene Neystadt

Geraint David Luff

Daryl Wayne Bradley

Derek Del Miller

Richard William Earnshaw

Gustavo Federico Petri

Geoffrey Wyman Blake

Dominic Phillip Mulligan

Graham Paul Hazel

Christopher Mark Paola

Balint Gabor

Peter Guy Middleton

Sojtory Szabolcs

Michael James Kanellos

Jacopo Mondi

Amya Edward Wykes Philips

Aspects of the present disclosure relate to an apparatus comprising TEE circuitry configured to maintain a list of trusted devices, and interface circuitry to provide communication between the TEE of the apparatus and TEE circuitry of a device communicatively coupled to the apparatus. The TEE circuitry of the apparatus is configured to perform, with the TEE circuitry of the device, a remote attestation in respect of the TEE circuitry of the device. Responsive to a positive outcome of the remote attestation, the device is added to the list of trusted devices. The TEE of the apparatus receives, from the TEE circuitry of the device, an indication of one or more further devices which are trusted by the device, and adds said one or more further devices to the list of trusted devices.

Methods and apparatus for managing trusted devices

A method and apparatus to control operation of a brain-computer interface, comprising: capturing, at a sensor, a time series of brain activity in response to stimuli; passing data for the time series of brain activity to a history-based challenge generator; receiving, from the history-based challenge generator, a challenge comprising a generated stimulus with a predicted brain response derived from data for the time series of brain activity; issuing the challenge over the brain-computer interface; capturing, at the sensor, a brain response to the challenge; comparing, by an authenticator, the brain response to the challenge with the predicted brain response for the generated stimulus; and responsive to finding no match between the brain response to the challenge and the predicted brain response, preventing further activity over the brain-computer interface.

Brain-computer interface device, system and operating method

A trusted device, such as a wristwatch, is provided with authentication circuitry, used to perform an authentication operation to switch the trusted device into an authenticated state. Retention monitoring circuitry monitors the physical possession of the trusted device by the user following the authentication operation and switches the trusted device out of an authenticated state if the trusted device does not remain in the physical possession of the user. While the trusted device remains in the physical possession of the user, communication triggering circuitry is used to detect a request to establish communication with a target device that is one of a plurality of different target devices and communication circuitry is used to communicate with that target device using an authenticated identity of the user.

Trusted device

A behavioral sensor for creating consumable events can include: a feature extractor coupled to receive an event stream of events performed by a circuit, wherein the feature extractor identifies features of a particular event of the event stream and associates the particular event with a time; and a classifier coupled to receive the features of the particular event from the feature extractor, wherein the classifier classifies the particular event into a classified event associated with the time using predefined categories based on the received features of the particular event; whereby the classified event and subsequent classified events extracted from the event stream within a time frame are appended in a time series forming the consumable events.

Behavioral sensor for creating consumable events

A moderator system that can receive outputs of various stages of the security analytic framework and can receive input from external sources to provide information about emerging styles of attacks. One or more models/behavioral profiles can be curated by the moderator system, and the moderator system can provide updates to components of the security analytics framework.

Moderator system for a security analytics framework

When placing an energy harvesting electronic device in an environment, such as a room, the amount of light energy that will be available at different locations in the environment is predicted () by using a physically based lighting model to simulate the interaction of light from light source or sources in the environment with the geometry in the environment. The predicted amount of light energy at different locations in the environment is then used to generate a display () to the user indicating the suitability of locations in the environment for a light energy harvesting electronic device that is to be placed in the environment.

Methods of and apparatus for locating energy harvesting devices in an environment

An apparatus and system for remote attestation of a power delivery network is disclosed. Embodiments of the disclosure enable remote attestation of the power delivery network by storing a trusted golden reference waveform in secure memory. The trusted golden reference waveform characterizes a power delivery network in response to a load generated on the power delivery network. A remote cloud server generates a server-generated remote attestation of the power delivery network by receiving an attestation packet from the power delivery network and verifying whether the attestation packet is consistent with an expected power delivery network identity.

Remote attestation of system integrity

An apparatus and method for detecting a change in electrical properties in a system is disclosed. Embodiments of the disclosure enable the detection of a change in electrical properties in a system by, in response to a load generated on a power delivery network power in at least part of the system, measuring noise induced in the power delivery network in response to the load. Based on the measured noise, a dynamic-response property of the power delivery network is determined and the dynamic-response property is compared to a stored reference dynamic-response property of the power delivery network based on a predetermined load. In the event of a difference between the dynamic-response property and the reference dynamic-response property, a response to the event is triggered to indicate tampering with the power delivery network.

Power rail noise monitoring to detect attempted security tampering or side channel attacks

Analytics processing circuitry can include a data scavenger and a data analyzer coupled to receive the data from the data scavenger. The data scavenger collects data from at least one element of interest of a plurality of elements of interest of an IC. The data analyzer identifies patterns in the data from the data scavenger over a time frame or for a snapshot of time based on a predefined metric. The analytics processing circuitry can further include a moderator and a risk predictor. The risk predictor generates a risk assessment regarding whether the data collected by the data scavenger is indicative of normal behavior or abnormal behavior based at least on the output of the data analyzer and a behavioral model for the IC, which can be device and application specific. A threat response can be performed based on the risk assessment.

Analytics processing circuitry for mitigating attacks against computing systems

Techniques, supported by corresponding apparatuses and methods, are disclosed for monitoring execution of software in a trusted environment and generating path signatures which are characteristic of the behaviour of the software. Multiple approximate nearest neighbour searching hash tables are generated in dependence on such path signatures and on attribute information defining behavioural classifications for the path signatures. Later execution of the software in a non-trusted environment is monitoring and an observed path signature characteristic of the behaviour of the software is generated. This observed path signature is queried against the multiple approximate nearest neighbour searching hash tables and a behavioural classification is determined in dependence on hash collision-based similarity between the observed path signature and the content of the multiple approximate nearest neighbour searching hash tables.

Monitoring execution of software using path signature

A method of identifying an object within an environment is described for capturing visual data associated with the environment and comparing data defining a candidate object in the environment with an object data store storing object templates providing data pertaining to one or more objects; responsive to matching the data defining the candidate object in the environment and an object template, identifying the candidate object; and responsive to failing to match data representing the candidate object in the environment with an object template, identifying one or more object identifiers disposed in the environment to define identifier search data, and using the identifier search data to interrogate a further object data store to identify the candidate object.

Recognition apparatus and method

A method and authenticator for authenticating a device in a system using the electrical properties of the device is disclosed. Embodiments of the disclosure enable authentication by receiving a plurality of input seed values from a requestor. For each input seed value, load stimuli are generated to produce an electrical load sequence on a power delivery network powering at least part of the system. Noise induced in the power delivery network is measured in response to the electrical load sequence using one or more sensors located on the power delivery network. Based on the measured noise, a dynamic response property (magnitude and phase response as a function of frequency) of the power delivery network corresponding to a respective input seed value can be determined and returned to the requestor.

Dynamic response of power delivery network for attestation and identification

According to the present techniques there is provided a data processing device, for applying to packaging, the device having a flexible substrate, the flexible substrate comprising: storage circuitry to store device data therein; processing circuitry to process the device data; and communication circuitry to communicate with a remote resource to transmit the device data thereto; sensor circuitry to generate sensed device data, and wherein the device is configured to store the sensed device data in the storage circuitry, process the sensed device data and/or transmit the sensed device data to a remote resource.

Device for applying to packaging

A data processing device has a processor which executes software directly from non-volatile memory. The processor has a runtime component which dynamically maps software element identifiers specified by the software to corresponding software elements in memory. Mapping information is used to determine which software elements identifiers correspond to which software elements. This provides a level of indirection which can be used to make software updates more efficient, by updating only parts of the software while leaving old parts of the software as they are. Updated software elements can be stored to memory and the mapping information updated to point to the new elements, while existing mappings may be retained.

Method and device for updating software executed from non-volatile memory

A data processing system and method of operating such a data processing system are disclosed. The data processing system comprises an interface for communication between a first module and a second module and compensation parameter storage to store at least one stored compensation parameter for application in operation of the interface and representing an expected physical state of the interface. Measurement circuitry measures a current physical state of the interface and generates at least one measured compensation parameter which is dependent on that current physical state. Monitoring circuitry receives the at least one measured compensation parameter and compares it against at least one stored compensation parameter representing the expected physical state of the interface and may initiate a defensive response in the system when the at least one measured compensation parameter differs by more than a threshold difference from the at least one stored compensation parameter. The security of the data processing system is thereby improved.

Growing community of inventors

Cambridge, United Kingdom

Hugo John Martin Vincent