Q-net Security, Inc.

Picker Corporation

Washington University

Cisco Technology, Inc.

Blendics, Inc.

Blended Integrated Circuit Systems, LLC

Jerome R Cox, Jr

Ronald S Indeck

Donald L Snyder

Rodney Arnold Mattson

Carl J Brunnett

George Lawrence Engel

David Michael Zar

William Berndt Parkinson

Jeremiah Cox O'Driscoll

Jonathan S Turner

Wesley A Clark

Thomas John Chaney

James Moscola

Stephen M Moore

Michael B Grote

Cryptographic techniques are disclosed which employ at least a five-pass protocol (5PP) for a cryptographic exchange of a secret data matrix between two computer systems. This 5PP approach improves the functioning of the computer systems by making their encrypted communications more resistant to potential quantum computing-based attacks while still resisting brute-force attacks by eavesdroppers. For example, the 5PP approach can be used to improve public-key cryptography. The system may comprise a first computer system and a second computer system, where a secret data matrix is known by the first computer system but is not shared with the second computer system in unobscured form. The first and second computer systems can be configured to communicate with each other over a network to share a series of at least five messages in at least five passes between each other that collectively hide the secret data matrix using reversible logic operations that obscure the secret data matrix according to at least five parameters of which (1) at least two are known by the first computer system but are not shared with the second computer system in unobscured form and (2) at least three are known by the second computer system but are not shared with the first computer system in unobscured form.

Method and system for secure cryptographic exchanges using a five-pass protocol

In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. In one embodiment, performing these data plane processing operations does not expose any pilot keys outside the data safe in clear form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. One embodiment uses pilot keys to encrypt data that is subsequently stored in a storage system. One embodiment uses data cryptographic keys to encrypt data, uses the pilot keys to cryptographically-wrap (encrypt) the data cryptographic keys, and stores the cryptographically wrapped data keys and encrypted data in a storage system.

Enhanced securing of data at rest

In one embodiment, data at rest is securely stored. A data safe performing data plane processing operations in response to requests of received read data requests, received write data requests, and received read information responses, with the data safe being immutable to processing-related modifications resulting from said performing data plane processing operations. Performing these data plane processing operations does not expose any pilot keys outside the data safe in plaintext form nor in encrypted form. The pilot keys are used to encrypt information that is subsequently stored in a storage system. In one embodiment, the information encrypted and decrypted by the data safe includes data structure instances including feature-preserving encrypted entries generated using feature-preserving encryption on corresponding plaintext data items. In one embodiment, a data vault performs queries on the data structure instances including feature-preserving encrypted entries after retrieval from storage and decryption by the data safe.

Enhanced securing and secured processing of data at rest

One embodiment includes hardware-based cybersecurity devices that create a physical barrier ('hardware security barrier') between a computer's (or other device's) processor and a public or private network. Hardware security barriers typically use immutable hardware in accomplishing cybersecurity activities including generating and distributing cryptographically secure numbers, encryption, decryption, source authentication, and packet integrity verification. This hardware security barrier protects against remote threats and guarantees that all exported and received data are strongly encrypted. A hardware security barrier can be included in any computing or networking device that contains a network interface. One embodiment of a hardware security barrier is implemented as part of a network interface, such as, but not limited to being part of a network interface controller, or as a standalone unit between a communications interface of a host system and a connection to a network.

Secure network communications using hardware security barriers

A Delay-tolerant Asynchronous Interface (DANI) is typically used to make the clock domains for reusable silicon intellectual property (IP) cores completely independent of each other. In fact, a DANI-wrapped IP core usually appears to its environment as if it were clockless. This property is necessary to address the variability in data transmission-time between source and destination. This variability is a result of increased lack of predictability in today's leading-edge manufacturing processes. A DANI wrapper can be applied to the IP core that is the source of data to be transmitted or it can be applied to the IP core that is the destination of that data. The transmission time over the route between source and destination may vary more than a single clock period.

Delay tolerant asynchronous interface (DANI)

The integrity of a control network for providing reliable communications between different entities is verified. Such a verified control network may be included in a device, system, or design library. The verification of a control network includes, but is not limited to: physically exercising the control network itself and/or its design via modeling, analysis, and/or applying or using other testing or design verification methodologies. For example, a Petri net model of the control network may be analyzed to verify that the control signals cannot be generated which could interfere with each other, that a deadlock condition cannot be reached, and that a control signal on an input port will result in a control signal on an output port, albeit possibly delayed.

Control networks providing reliable communications between different entities

Disclosed are, inter alia, instantaneously restartable clocks and their use. For example, instantaneously restartable clocks can be used to receive data from another independently clocked subsystem in a manner that removes the possibility of metastability errors. A restartable clocking signal generator, relying on oscillating signals typically generated by a continuous oscillating source, is used to generate a restartable clocking signal which can be asynchronously restarted in response to one or more control signals. In one implementation, an apparatus includes multiple independently clocked subsystems and a clockless sequencing network, with the clockless sequencing network being used to initiate the start of a restartable clock in order to reliably receive and process data between the independently clocked subsystems.

Design of instantaneously restartable clocks and their use such as in connecting clocked subsystems using clockless sequencing networks

Methods and apparatuses are disclosed for pacing the rate at which packets of one or more information streams are sent from a device, such as, for example, a workstation, computer, communications mechanism, or component thereof. Typically, multiple timing wheels each having a different timing granularity are used to schedule the transmission of packets of information corresponding the to the information streams. Using multiple timing wheels in this manner allows scheduling of a larger range of rates while typically using a significantly smaller amount of memory than a single timing wheel covering the same range of rates. An entry, corresponding to a next portion of an information stream to be sent from the device, is inserted into the timing wheels at a target time for sending the information. At the target time, the entry is removed and placed in a transmit list of items to be sent from the device. In one implementation a single transmit list is used for all timing wheels. In another implementation, multiple transmit lists are used, typically one for each timing wheel. Entries corresponding to portions of the information streams to be sent from the device are removed in a queued or target transmission time order from a transmit list. A packet of information corresponding to a removed entry is sent, and the entry itself is re-inserted in a timing wheel for the determined next transmission target time.

Method and apparatus for pacing the flow of information sent from a device

A display device having 8-bit architecture includes a decoder for decoding 8-bit bytes of data representative of pixel intensities of 12 bits sufficiently fast to enable the display in flicker-free manner of an image having a frame of 1024.times.1024 pixels. The decoder is hardware based and consists of electronic circuitry without the use of programmed devices incorporating software logic. The decoder may be utilized in new display devices or used to retrofit existing 8-bit architecture display devices. An encoder is also disclosed for encoding 12-bit pixel data into 8-bit data for storage or transmission to the display device.

Video display with high speed reconstruction and display of compressed

An improved method and apparatus for transaxial tomographic scanning of a patient. A scanning system is provided having a rotatably mounted X-ray radiation source/detector pair which orbits and radially scans the patient in the plane of orbit. The source provides a plurality of beams of radiation having axes in the orbital plane. The beams pass through the patient to an array of detectors each of which is aligned with one of the beams. Radiation intensity data is collected at predetermined orientations of each beam/detector pair as the assembly orbits about the patient. In a preferred embodiment the rotatably mounted source-detector pair is rotated as a unit through a preselected rotation angle .phi. about an axis effectively passing through the source. The axis and the source-detector pair connected to it are then orbited around the patient through an orbit angle .gamma. while maintaining the preselected rotation angle .phi.. The axis is orbited about an origin lying in the orbital plane. A set of measurements is taken during the orbit as the beams from the X-ray source sweep through substantially uniformly spaced, coplanar points [t(k), .phi.(n)] defined about the origin. After an orbit, the rotation angle .phi. is incremented, and the source detector pair re-orbits the patient for providing a new set of measurement data corresponding to the incremental rotation angle .phi.. Exact reconstruction is achieved after several orbit cycles when measurements are taken at the angles .phi., .gamma. characterized substantially as ##EQU1## WHERE D REPRESENTS THE DISTANCE BETWEEN THE ORIGIN AND THE CENTER OF ROTATION, AND K, N ARE INTEGERS.

Tomography system having nonconcurrent, compound axial scanning

A dual axial scanner in a transverse tomography system collects nonredundant data throughout one or more substantially 360.degree. orbital scan paths with uniform motion about a patient. A set of N X-ray beams scans the patient in a manner to allow collection of two sets of non-redundant data corresponding to a pair of 180.degree. scans in each 360.degree. scan. Overall time to conduct the study is decreased, and the number of required accelerations and decelerations of the assemblies is minimized. Adjacent beams of radiation are separated by an angle .alpha., which is one degree in the preferred embodiment to provide a radiation field of ##EQU1## degrees on either side of a center of the radiation field. The source and detector assemblies are positioned prior to the first orbit such that the field center is offset a distance D from a center of orbit lying in the orbital plane. The source and detector assemblies are mounted for rotation through a rotation angle .phi..sub.j about an orbital source axis which passes through the source assembly at a distance d from the center of orbit. While maintaining the offset distance D, the assemblies orbit the patient, and radiation intensity data is collected at predetermined angles .gamma..sub.j of orbit. In one embodiment for doubling the effective field size of the patient scanned, the source and detector assemblies are rotated about the source axis to provide the distance D. From an initial position on the center of orbit, the assemblies are rotated by an offset angle ##EQU2## degrees where R is the number of total orbits selected to constitute a complete study. In another embodiment for single field exposure the source and detector assemblies are rotated by the offset angle .phi. defined substantially by the equation ##EQU3## degrees, where 'b' is zero for an odd number N of detectors and is one for an even number N of detectors. For multiorbit studies, the assemblies are rotated between orbits by an amount ##EQU4## degrees depending on the study.

Transverse tomography system having multibeam orbital scanning with all

An improved method and apparatus for transaxial tomographic scanning a patient. A scanning system is provided having a rotatably mounted X-ray radiation source/detector assembly which orbits and scans the patient in a plane of orbit. The source provides a plurality of beams of radiation having axes in the orbital plane. The beams pass through the patient to an array of detectors each of which is and respectively aligned with a different one of the beams. Radiation intensity data is collected at predetermined orientation of each beam - detector pair as the assembly orbits about the patient. In one embodiment the source and detector are rotated as a unit through a rotation angle .phi. about center of rotation while the assembly orbits the patient through an orbit angle .gamma.. Measurements are taken as the beams from the X-ray source sweep, due to the source detector rotation relative to a patient, through substantially uniformly spaced, coplanar points [t, (k), .theta.(n)] defined from an origin lying in the plane of orbit. Exact reconstruction is achieved when measurements are taken at the angles .phi., .gamma. characterized substantially as

Growing community of inventors

St. Louis, MO, United States of America

Jerome R Cox, Jr