Ppip, LLC

Mohamad Ahmad Foustok

Michael Fong

Neric Hsin-wu Fong

Ryan Mark Speers

Nerie Hsin-wu Fong

In accordance with some embodiments, an apparatus includes a crypto engine that provides device independent crypto services. The apparatus includes a housing arranged to hold a device. The apparatus also includes a non-transitory memory that further includes a key store for storing a first key. The apparatus further includes a communication device at least partially supported by the housing and connectable to the device to establish a communication channel with the device. The apparatus also includes a controller (e.g., a crypto engine) that receives, via the communication channel, a first portion of data from the device, performs a cryptographic operation on the first portion of the data using the first key to generate a modified first portion, sends, via the communication channel, the modified first portion to the device, and enables the device to derive a second portion of the data using the modified first portion.

Device independent crypto engine

In accordance with some embodiments, a secure modular apparatus providing a first platform for secure platform integration includes communication device(s) and a key store for storing encryption keys. The apparatus additionally includes a crypto engine operable to use the encryption keys for cryptographic operations. The apparatus also includes a controller and a housing arranged to at least partially support the communication device(s), the key store, the crypto engine, and the controller. The controller, via the communication device(s), exchanges encrypted messages prepared or processed by the crypto engine with a second platform provided by a personal communication device, where the second platform is distinct from the first platform and has a plurality of layers including at least one layer between a hardware layer and high level layers, and the encrypted messages control one or more of a hardware unit in the hardware layer and a component in the high level layers.

Secure apparatus enabled secure platform integration

In accordance with some embodiments, a secure local application communication method is performed at a first apparatus that includes a housing arranged to hold a second apparatus, a controller, a communication interface, and a non-transitory memory storing a matrix. The secure local application communication method includes detecting, via the communication interface, a request originating from a first application executing on the second apparatus to communicate with a second application on the second apparatus. The method further includes determining whether or not to allow the request based on the matrix. The method additionally includes allowing transportation of packets from the first application to the second application in accordance with a determination of allowing the request.

Secure local application communication bridge

In some embodiments, an apparatus (e.g., a first device) for secure execution of software is provided. The apparatus includes a housing arranged to hold a second device. The apparatus includes a memory configured to store a set of instructions of an application, a local communications device, and a processor. The apparatus is configured to execute the application and transmit a first set of data via the local communication device to be processed by the second device. The apparatus may receive, input data from the second device, interpret the input data using the set of instructions of the application, and transmit a second set of data via the local communication device to be processed by the second device, the second set of data may reflect an updated active state of the application.

Secure execution enclave for user equipment (UE)

In accordance with some embodiments, an apparatus that controls device re-configuration for security is provided. The apparatus includes a storage storing a first firmware image for a re-configurable data communication device. In some embodiments, the first firmware image provides one or more operating parameter configurations for the re-configurable data communication device. The apparatus also includes a controller, which is coupled to the storage and the re-configurable data communication device and operable to manage transport of data by the re-configurable data communication device, including obtaining the first firmware image from the storage and loading the first firmware image to the re-configurable data communication device. The apparatus additionally includes a housing at least partially supporting the storage and the controller.

Device re-configuration for security

In accordance with some embodiments, an apparatus and methods for providing alternative communications are provided. The apparatus may include a housing arranged to hold a personal communication device. The apparatus may provide an additional communication path for the personal communication device which was previously not there. In some embodiments, an additional communication mechanism may be provided for a newer telecommunication standard or form of communication. In another embodiment, an added close proximity data communication device may be provided, which enables a personal communication device to perform in close proximity standards that it otherwise may not be able to.

Alternative transport in data communication for mobile device

In accordance with some embodiments, a first apparatus that provides protocol isolation includes a controller, one or more re-configurable data communication devices operable to provide alternative transport of data for a native data communication device on a second apparatus to an external device, and one or more data converters coupled to the one or more re-configurable data communication devices. The protocol isolation method performed by the first apparatus includes establishing a local communication channel with the second apparatus. The method further includes exchanging the data via the local communication channel with the second apparatus according to a first protocol. The method also includes converting the data to a second protocol different from the first protocol. The method additionally includes exchanging, via a first re-configurable data communication device of the one or more re-configurable data communication devices, the converted data with the external device according to the second protocol.

Growing community of inventors

Parkland, FL, United States of America

Mohamad Ahmad Foustok