Architecture Technology Corporation

Ian J McLinden

Eric R Chartier

Douglas Sweet

Paul C Davis

Ryan L Hagelstrom

Jordan C Bonney

Timothy Hartley

Benjamin L Burnett

Deborah K Charan

Disclosed herein are embodiments of systems, methods, and products comprise a computing device, which allows in-network and network-border protection for Internet of things (IoT) devices by securely partitioning network space and defining service-based access to IoT devices. The disclosed segmented attack prevention system for IoT networks (SAPSIN) segments the IoT network into two virtual networks: a service network and a control network; and define access control rules for each virtual network. In the service network, SAPSIN utilizes a service-based approach to control device access, allowing only configured protocol, applications, network ports, or address groups to enter or exit the network. In control network, the SAPSIN provides the access control rules by defining a threshold for the number of configuration requests within a predetermined time. As a result, SAPSIN protects IoT devices against intrusion and misuse, without the need for device-specific software or device-specific security hardening.

Attack prevention in internet of things networks

This disclosure is directed to network optimization in a complex joint network for increasing the network utility of the complex joint network. A computing device in the complex joint network may receive a data flow via a complex joint network. The computing device may determine, based on a network template, a mission utility associated with the data flow and a traffic class associated with the data flow. The computing device may control one or more quality of service decisions based at least in part on the mission utility associated with the data flow and the traffic class associated with the data flow.

Autonomous network optimization using network templates

A method for minimizing aircraft collisions, includes detecting a flight of an unmanned aerial system (UAS) in a restricted area and determining a location of a radio frequency (RF) emitter in communication with the UAS. The method includes, at each of a plurality of RF sensors of a network of wireless RF sensors, receiving RF emissions within an RF band pertaining to UAS control, processing the received RF emissions, and transmitting data derived from the processed RF emissions. The method further includes at a designated one of the plurality of RF sensors, receiving the transmitted data from the RF sensors, a processor computing, using the transmitted data received from the RF sensors, a location estimate for the RF emitter and to predict the UAS is flying, and based on the prediction, the processor generating an alert.

Mobile emergency perimeter system and method

A computer-implemented method for establishing and controlling a mobile perimeter and for determining a geographic location of an RF emitting source at or within the mobile perimeter includes receiving from RF sensors in a network, processed RF emissions from the source collected at RF sensors. The RF emissions follow a wireless protocol and include frames encoding RF emitting source identification information. The method further includes extracting RF emitting source identification information from the frames, processing the source identification information to identify the RF emitting source, and classifying the RF emitting source by one or more of UAS type, UAS capabilities, and UAS model. The method also includes receiving from the RF sensors, a geographic location of each RF sensor and a time of arrival (TOA) of the RF emissions at the RF sensor; and executing a multilateration process to estimate a geographic location of the RF emitting source.

Systems and methods for identifying, classifying, locating, and tracking radio-frequency emitting objects in a temporary flight restriction area

Disclosed herein are embodiments of an aerial network system including a first transceiver configured to transmit and receive free space optical (FSO) signals and a second transceiver configured to transmit and receive radio frequency (RF) signals. A processor provides modulated data signals to the first and second transceivers for transmission and receives demodulated signals from the first and second transceiver. The processor is configured for policy-based multipath admission of requests for access to an IP-routing enabled overlay network. The processor includes an inverse mission planning system configured for predictive traffic load balancing of transmitted FSO signals and RF signals. The inverse mission planning system includes radio behavior models and aerial platform models, and is configured for geographic simulation and optimization of mission planning data based upon user-inputted mission-specific data. Forward error correction (FEC) coding of transmitted communications via packet erasure coding provides resiliency with a low bit error rate.

Hybrid communications based upon aerial networks

Protection against attacks in internet of things networks

A method for minimizing aircraft collisions, comprising includes detecting a flight of an unmanned aerial system (UAS) in a restricted area and determining a location of a radio frequency (RF) emitter in communication with the UAS. The method includes, at each of a plurality of RF sensors of a network of wireless RF sensors, receiving RF emissions within an RF band pertaining to UAS control, processing the received RF emissions, and transmitting data derived from the processed RF emissions. The method further includes at a designated one of the plurality of RF sensors, receiving the transmitted data from the RF sensors, a processor computing, using the transmitted data received from the RF sensors, a location estimate for the RF emitter and to predict the UAS is flying, and based on the prediction, the processor generating an aircraft collision alert.

A computer-implemented method for establishing and controlling a mobile perimeter and for determining a geographic location of an RF emitting source at or within the mobile perimeter includes receiving from RF sensors in a network, processed RF emissions from the source collected at RF sensors. The RF emissions follow a wireless protocol and include frames encoding RF emitting source identification information. The method further includes extracting RF emitting source identification information from one or more of the frames, processing the source identification information to identify the RF emitting source, and classifying the RF emitting source by one or more of UAS type, UAS capabilities, and UAS model. The method also includes receiving from the RF sensors, a geographic location of each RF sensor and a time of arrival (TOA) of the RF emissions at the RF sensor; and executing a multilateration process to estimate a geographic location of the RF emitting source.

Disclosed herein are embodiments of systems, methods, and products comprise a computing device, which allows in-network and network-border protection for Internet of things (IoT) devices by securely partitioning network space and defining service-based access to IoT devices. The disclosed segmented attack prevention system for IoT networks (SAPSIN) segments the IoT network into two virtual networks: a service network and a control network; and define access control rules for each virtual network. In the service network, SAPSIN utilizes a service-based approach to control device access, allowing only configured protocol, applications, network ports, or address groups to enter or exit the network. In control network, The SAPSIN provides the access control rules by defining a threshold for the number of configuration requests within a predetermined time. As a result, SAPSIN protects IoT devices against intrusion and misuse, without the need for device-specific software or device-specific security hardening.

Systems and methods for segmented attack prevention in internet of things (IoT) networks

A method for establishing and controlling a mobile perimeter and for determining a geographic location of an emitting radio frequency (RF) emitter in a vicinity of the mobile perimeter includes at each of a plurality of RF sensors, receiving an RF transmission, processing the received RF transmission to produce RF signal data, and wirelessly transmitting the RF signal data to a central station. At the central station, a processor: executes a cross-correlation process to: compare characteristics of pairs of RF signal data; based on the compared characteristics, determine a time difference of arrival (TDOA) between RF transmissions received at each RF sensor of a pair of RF sensors, and repeats the cross-correlation process for each pair of RF sensors from which RF signal data are received. Using the TDOA values for two or more pairs of RF sensors, the processor determines a location estimate for the RF emitter.

Growing community of inventors

Minneapolis, MN, United States of America

Ian J McLinden