Rockwell Collins, Inc.

Karl F Hoech

Robert J Frank

James N Potts

Gunther B Frank

Mark A Bortz

Gregory W Rice

Bruce S Kloster

Daniel M Zange

Sally C Thurman

Frank A Hummer

Carlos J Chavez

Dana J Jensen

Richard L Robertson

Michael N Newhouse

Julianne R Crosmer

Sung J Kim

Wayne A Kraus

Joseph F Jiacinto

Kent D Benson

David K Baugh

A system for preventing a computing device from obtaining unauthorized access to a secure network includes a client agent operably connected to the computing device configured to intercept network traffic information from applications running on the computing device and transmit a network request including application information and the network traffic information. A network token broker operably connected to the network client agent contains a database of application information. The network token broker is configured to cooperate with the network client agent for i) verifying whether the network request should be granted access to the secure network, and ii) cryptographically signing the intercepted network traffic information with a network authorization token, to authorize network access for the intercepted network traffic information. A guard system is configured to inspect the network traffic information from the computing device and reject any traffic information not signed with the network authorization token.

System and method for preventing a computing device from obtaining unauthorized access to a secure network or trusted computing environment

A system for preventing computer software from communicating from a user computer in a network to untrusted remote computers. A host-based credential management agent is operably connected to a user computer for intercepting network traffic information from the user computer and transmitting a network request including credentials of the remote computer and the network traffic information. A trusted credential database contains information identifying trusted entities and corresponding cryptographic certificates. A server cooperates with the management agent for i) verifying whether the user computer in the network request should have network access, and ii) cryptographically signing the intercepted network traffic information with an authorization server key, to authorize network access for the intercepted information. A firewall is operably connected to the user computer and the authorization server. It is configured to inspect the traffic information from the user computer and reject any traffic information not signed with the key.

System and method for protecting certificate applications using a hardened proxy

A system for preventing computer malware from exfiltrating data from a user computer in a network via the internet. A host-based network process monitor intercepts network traffic information from the user computer and transmits a network request including user and application information including the network traffic information. An authorization server cooperates with the host-based network process monitor for i) verifying whether the user and process in the network request should have network access, and ii) cryptographically signing the intercepted network traffic information with an authorization server key, to authorize network access for the intercepted network traffic information. A firewall system is operably connected to the user computer and the authorization server configured to inspect the network traffic information from the user computer and reject any traffic information not signed with the authorization server key.

System and method for preventing computer malware from exfiltrating data from a user computer in a network via the internet

A method is provided to control scheduling of transmission and reception by a TDMA radio. This method allows individual transmissions and receptions to be independently configured for different frequencies, coding rates, modulation schemes, in fact anything which the radio modem allows to be configured. In addition, this scheduling and configuration may be configured and reconfigured in real time without disrupting radio operations.

Real time control and management of a TDMA radio

A spread spectrum communication system includes a transceiver configured to transmit a spread spectrum waveform. The spread spectrum waveform comprises transmitted signals at varying frequencies within a radio frequency spectrum of operation. The frequency variation is controlled according to a hopping sequence. A spectral sensor of the communication system is configured to dynamically scan the radio frequency spectrum of operation and to generate channel occupancy data based upon the scans. A real time hopping sequence generator is configured to dynamically generate the hopping sequence in real time as a function of the channel occupancy data.

Cognitive spectral sensor-based PN hopping/spreading sequence generator

The present invention provides a method for using an Organization and Control Proxy (OCP) to configure a network communications infrastructure. OCP functionality is distributed across nodes possessing OCP elements. Intercommunication between the OCP elements is implemented via a unifying mesh waveform for network discovery, propagation of network and radio-frequency (RF) socket usage information, and management and control of instances of dynamic socket waveforms. An extensible language for specification of waveform properties is used by the OCP elements to negotiate spectral use information and to negotiate configurations between two or more endpoints of a dynamic socket waveform connection. A network stack is configured by the OCP to provide requested service to an end user.

Organizational and control mechanism for spectrally-efficient management of dynamic socket waveforms

A computer-implemented system for implementing maintenance and distribution of revocation information within an ad-hoc network. The system includes at least one network node. The network node includes a computer implemented application configured to maintain revocation information in computer memory and distribute the revocation information to other network nodes using a two stage distribution method. The distribution method includes a first stage wherein the revocation message is transmitted to all certifier nodes within the ad-hoc network, and a second stage wherein each certifier node distributes the revocation message to at least one non-certifier node associated with the certifier node.

System and method for implementing digital certificate revocation in an ad-hoc network

A computer-implemented method for generating a hierarchical set of certifiers nodes for a public key infrastructure within an ad-hoc network. The method includes determining at least one potential certifier node that is eligible to become certifier nodes from a set of nodes in an ad-hoc network, creating a new certifier node from the at least one potential certifier node based on a selection criteria, and creating a parent-child relationship with the new certifier node.

Certifier hierarchy for public key infrastructure in an ad-hoc network

A system capable of operation with dynamic sockets includes a plurality of communications devices. Each of the plurality of communications devices includes high band channel radio resources capable of communications at 900-2800 MHz and socket radio resources capable of communications at 30-1000 MHz. The high band channel radio resources and the socket radio resources are significantly separated in frequency so that the high band channel radio resources and the socket radio resources are suitable for concurrent operation with no interference and minimal isolation, co-site problems to solve in each of the plurality of communications devices. The plurality of communications devices are connected to a unifying mesh network by the high band channel radio resources. The unifying mesh network is suitable for allowing the plurality of communications devices to communicate with one another. When data needs to be transferred among a group of communications devices, a dynamic socket connection is negotiated on the unifying mesh network and is then formed with the socket radio resources. The dynamic socket formation is suitable for allowing the unifying mesh network to offload continuous receiver-directed or multicast traffic from the unifying mesh network channel and to free up public ad hoc communications bandwidth of the unifying mesh network.

Growing community of inventors

Cedar Rapids, IA, United States of America

Karl F Hoech