Harris Corporation

Harris Global Communications, Inc.

L3harris Global Communications, Inc.

Harris Solutions Ny, Inc.

Harrison Corporation

Michael Thomas Kurdziel

Marcin Lukowiak

Steven M Farris

Alan R Kaminsky

Stanislaw P Radziszowski

Christopher David Mackey

Robert Paul Clements

Peter Bajorski

John Wesley Nieto

William Nelson Furman

Terence W O'Brien

Duncan G Harris

Bruce T Borsa

John Michael Trinidad

Gary Roger Dennis

William M Batts

Donald J Dever

Matthew Kelly

Stainslaw Radziszowski

Stanislaw Radziszowski

Jeffrey I Murray

Christopher Wood

Stephanie Soldavini

Steven O Chrysler

Daniel F Stafford

Jesse Foote

Systems and methods for protecting intellectual property of a circuit via obfuscation of logic through encryption. The methods comprise: analyzing a combinational circuit (CC) to identify first logic gates that perform first function(s) which is(are) implementable by LUT(s); dividing CC a first portion comprising the first logic gates and a second portion comprising remaining logic gates; protecting gate logic of the first portion by at least storing information implementing the first function(s) in an encrypted LUT format in a memory device of the circuit such that the first function(s) is(are) obfuscated when the circuit is in an at-rest state; and interfacing the remaining logic gates with the memory device such that the circuit is configured to generate an output in accordance with operations of the combinational circuit using the information stored in the encrypted LUT format.

System and method for obfuscation of sequential logic through encryption

Systems and methods for operating a cryptographic system. The methods comprise: obtaining ciphertext by the cryptographic system; performing operations by the cryptographic system to determine whether a given sequence of values exits within the ciphertext; and synchronizing the cryptographic system with another cryptographic system using the ciphertext as a bitrate portion of an initialization value for a cryptographic algorithm and zero as a capacity portion of the initialization value for the cryptographic algorithm, when a determination is made that the given sequence of values exist within the ciphertext.

Self-synchronizing mode of operation for an encryption/decryption algorithm

Systems () and methods () for communicating information. The methods comprise: storing message sets in Communication Devices ('CDs') so as to be respectively associated with speaker information; performing operations, by a first CD, to capture an audio message spoken by an individual and to convert the audio message into a message audio file; comparing the message audio file to each reference audio file in the message sets to determine whether one of the reference audio files matches the message audio file by a certain amount; converting the audio message into a text message when a determination is made that a reference audio file does match the message audio file by a certain amount; generating a secure text message by appending the speaker information that is associated with the matching reference audio file to the text message, or by appending other information to the text message; transmitting the secure text message.

System and methods for speaker identification, message compression and/or message replay in a communications environment

A cross-domain information transfer system includes a key distribution center that generates private encryption keys and a signature key pair as a secret signing and secret verifying key for an attribute associated with a given domain. A sender device generates ciphertext from plaintext based upon the private encryption key, appends an attribute for a given domain to the ciphertext, generates ciphertext with a concealed attribute based upon the secret signing key and broadcasts the ciphertext with the concealed attribute. Domain gateway devices each receive a respective secret verifying key for an associated attribute, receive the ciphertext with the concealed attribute from the untrusted network, and use the secret verifying key to determine if the concealed attribute matches the attribute associated with the domain gateway device, and, when so, pass the ciphertext to at least one receiver device coupled with the domain gateway device.

Cross-domain information transfer system and associated methods

Systems () and methods () for customizing a cryptographic algorithm. The methods comprise: providing an electronic device with the cryptographic algorithm implementing a permutation function &#x192; configured to produce a first keystream using bits input thereto, the permutation function &#x192; comprising a round function &#x192;consisting of a mixing layer in which input bits are combined together; and customizing the mixing layer of the permutation function &#x192; while the electronic device is in the field. The mixing layer is customized by: receiving, by the electronic device, a first user-software interaction for entering a first bit string comprising a plurality of first arbitrary bits; breaking the first bit string into a plurality of equal length segments each comprising only a portion of the plurality of first bits; and translating each of the equal length segments into irreducible polynomial coefficients and/or an irreducible polynomial identifier.

Customizable encryption/decryption algorithm

Systems () and methods () for generating encrypted data. The methods involve: combining a cryptographic key with state initialization bits to generate first combination bits; producing a first keystream by performing a permutation function &#x192; using the first combination bits as inputs thereto; and using the first keystream to encrypt first data (e.g., authentication data or message body data) so as to produce first encrypted data. The permutation function &#x192; comprises a round function &#x192;that is iterated R times. The round function &#x192;consists of (1) a substitution layer in which the first combination bits are substituted with substitute bits, (2) a permutation layer in which the substitute bits are re-arranged, (3) a mixing layer in which multiple of the permutation layer are combined together, and (4) an addition layer in which a constant is added to the output of the mixing layer.

Customizable encryption algorithm based on a sponge construction with authenticated and non-authenticated modes of operation

Method for distributing a group session cryptographic key includes initiating at least one pairwise key distribution session including a root node () and at least one communication node (-). The method further includes performing at a communication node which has received the group session cryptographic key a propagated pairwise key distribution session with at least one of the communication nodes which has not previously received said group session cryptographic key. The propagated pairwise key distribution sessions are performed at each of the communication nodes which subsequently receives the group session cryptographic key until the group session cryptographic key has been securely provided to all authorized communication nodes.

Electronic key management using PKI to support group key establishment in the tactical environment

A secure processing device may include an external memory storing encrypted data, and a processor cooperating with the external memory. The processor is configured to generate address requests for the encrypted data in the external memory, cache keystreams based upon an encryption key, and generate decrypted plaintext based upon the cached keystreams and the encrypted data requested from the external memory. For example, the processor may be further configured to predict a future address request, and the future address request may be associated with a cached keystream.

Secure processing device with keystream cache and related methods

A scalable packet analyzer receives data packets from a data packet source for packet analysis and includes a plurality of policy engine arrays, each having a plurality of packet analysis microengines. A policy algorithm loader module is operative with each packet analysis microengine for loading a policy algorithm to each packet analysis microengine such that each packet analysis microengine analyzes specific sections of the data packet in parallel within each policy engine array based on the applied policy algorithm to obtain data about the data packet for further data packet processing.

Scalable packet analyzer and related method

A system () for securing a database including a first and second tables is provided, where the first table includes a first key field and a first data field and the second table includes a second key field and a second data field. The first and second key fields specifying first and second key field entries having one common entry. The system () can replace the first key field entries with first adjusted key field entries based on first initialization vectors. The system () also replaces the second key field entries with second adjusted key field entries based on second initialization vectors different from the first initialization vectors. The system further encodes the first and the second adjusted key field entries based on index keys to generate an encrypted database. In the encrypted database, a value of the common entries in the first and second tables are different.

Enhanced relational database security through encryption of table indices

Authentication and access control device () includes a first security key sub-system (). The first security key sub-system is responsive to an input signal for providing a first key code required for permitting a user access to a controlled resource. The device advantageously also includes a second security key sub-system () for providing a second key code different from the first key code. The second key code is useful for authenticating the user or facilitating secure use of a particular controlled resource ().

Authentication and access control device

A method and apparatus for use in encrypting and decrypting digital communications converting an initial block to final block based on freely selectable control information and secret key information having double the length of prior art keys and maintaining compatibility with the prior art encryption system.

Method and apparatus for data encryption

A cryptographic device includes an input stage receiving an input data block and a key data block made up of a plurality of sub-key data blocks, and generating a plurality of first signals therefrom. An intermediate stage is connected to the input stage and includes a plurality of substitution units. Each substitution unit substitutes data within a respective first signal. A diffuser is connected to the plurality of substitution units for mixing data to generate a diffused signal. An output stage is connected to the intermediate stage for repetitively looping back the diffused signal to the input stage for combination with a next sub-key data block. The output stage provides an output signal for the cryptographic device after the repetitively looping back is complete.

Growing community of inventors

Rochester, NY, United States of America

Michael Thomas Kurdziel