Secturion Systems, Inc.

Jordan Anderson

Sean Little

Richard J Takahashi

Lee Noehring

Timothy Paul Abel

Derek Owens

Jacob Frogget

Systems and methods for in-line TCP processing using a systolic array. For example, data received for storage is processed in-line prior to encryption and/or sending to a remote storage device (e.g., cloud storage or server).

In-line transmission control protocol processing engine using a systolic array

Systems and methods for protocol processing using a systolic array (e.g., programmed in an FPGA). For example, protocol processing is performed for incoming data (e.g., received for storage) prior to encryption and/or sending to a remote storage device (e.g., cloud storage or server).

Data stream protocol field decoding by a systolic array

Systems and methods to securely send or write data to a cloud storage or server. In one embodiment, a method includes: establishing a connection to a client using a client-side transport protocol; receiving, over the connection, data from the first client; decrypting, using a client session key, the received data to provide first decrypted data; encrypting the first decrypted data using a stored payload key (that is associated with the client) to provide first encrypted data; encrypting, using a cloud session key, the first encrypted data using a remote-side transport protocol to provide second encrypted data; and sending the second encrypted data to the cloud storage or server.

Cloud storage using encryption gateway with certificate authority identification

Systems and methods to securely store data in a remote storage (e.g., cloud storage or server). In one approach, a method includes: receiving, from a local device, data blocks to be stored; generating a hash from a hash of each data block; storing each respective hash (e.g., in a local or remote memory for later use); and writing the data blocks to remote storage. Data integrity is verified when each data block is read from the remote storage by generating a hash of the respective read data block, and comparing the generated hash to the respective stored hash.

Locally-stored remote block data integrity

A computing device (e.g., an FPGA or integrated circuit) processes an incoming packet comprising data to compute a Galois hash. The computing device includes a plurality of circuits, each circuit providing a respective result used to determine the Galois hash, and each circuit including: a first multiplier configured to receive a portion of the data; a first exclusive-OR gate configured to receive an output of the first multiplier as a first input, and to provide the respective result; and a second multiplier configured to receive an output of the first exclusive-OR gate, wherein the first exclusive-OR gate is further configured to receive an output of the second multiplier as a second input. In one embodiment, the computing device further comprises a second exclusive-OR gate configured to output the Galois hash, wherein each respective result is provided as an input to the second exclusive-OR gate.

Systolic parallel Galois hash computing device

Systems and methods to send or write data or file objects to a remote cloud storage or data server using an encryption gateway. In one embodiment, a communication system includes: an encryption gateway configured to receive TLS (or an equivalent security) encrypted data in a payload from a client application, to terminate the client TLS connection, and to extract the payload and encrypt the payload data with keys from the key manager. The encryption gateway establishes a TLS connection and inserts the encrypted-authenticated data into the TLS payload and sends or writes the TLS encrypted data to a remote cloud storage or data server for storage. The system further includes a key manager configured to provide at least one key to the encryption gateway for encryption of the data in the payload.

Growing community of inventors

Centerville, UT, United States of America

Jordan Anderson