Nec Corporation of America

Moshe Karako

Yaacov Hoch

Tsvi Lev

Doron Gonen

A method for automatic monitoring of industrial control systems, comprising: monitoring an environment by an electromagnetic sensor to measure a plurality of electromagnetic pulses emitted by at least one industrial control device during operation of the at least one industrial control device; calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses; matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and the at least one normal data pattern to automatically detect at least one abnormal data pattern; and sending automatically a security alert in response to the abnormal data pattern.

Remote monitoring of industrial control systems

A computing device comprises a network element configured for receiving messages sent over a network from a control facility, a reduced instruction set computer processing circuitry comprising a central processing unit (CPU) and a secure hardware-implemented module adapted to verify that a signed PKI message is encoded in the received messages at a plurality of sequential intervals and to either switch the CPU from an operational state to a safe state, or prevent switching of the CPU from the safe state to the operational state, when a receipt of a signed PKI message is not verified in one of the sequential intervals. In the operational state, the CPU accesses a memory address space in the processing circuitry for executing software-based commands. In the safe state the CPU is prevented from executing the software-based commands while access to the memory address space is retained.

Open processor for operation technology and internet of things

A method of authenticating physical activity in a monitored space, comprising: obtaining monitored space activity data from at least one activity detector deployed in the monitored space to capture simultaneously physical activity of a plurality of moving objects in said monitored space; analyzing said monitored space activity data to identify a plurality of spatiotemporal movement patterns in said monitored space; obtaining a plurality of inertial data patterns from each one of a plurality of applications executed in a plurality of mobile devices, each one of said inertial data patterns is recorded using an inertial sensing device installed in one of said plurality of mobile devices, each one of said plurality of mobile devices is associated with one of a plurality of persons; identifying at least one correlation between at least one of said plurality of inertial data patterns and at least one of said plurality of spatiotemporal movement patterns; authenticating said physical activity according to said at least one correlation.

Physical activity authentication systems and methods

A computer implemented method of authenticating a user accessing a secure terminal, comprising obtaining identification information stored in a personal machine readable storage medium exclusively associated with an accessing user attempting to access a secure system, retrieving authentication information exclusively associated with the accessing user from a remote network resource using the identification information, operating one or more privately directed user interfaces to exclusively present to the accessing user a requested alteration to a challenge request generated based on the authentication information and presented via another user interface, receiving a response to the challenge request from the accessing user and granting the accessing user access to the secure terminal in case the response matches the altered challenge request and denying access in case of no match. The privately directed user interface(s) is adapted to make the presentation of the required alteration discernable only by the accessing user.

Private audio-visual feedback for user authentication

A computer implemented method of correlating between detected access events to access client terminals in a monitored location and physical activity of people in the monitored location, comprising detecting one or more access events to access one or more of a plurality of client terminals located in a monitored location and operatively connected to a first network, obtaining sensory activity data from one or more activity detectors deployed in the monitored location to capture physical activity of people in the monitored location wherein the activity detector(s) are operatively connected to a second interconnection isolated from the first network, analyzing the sensory activity data to identify a spatiotemporal activity pattern of one or more persons in the monitored location, correlating between the access event(s) and the spatiotemporal activity pattern(s) to validate the access event(s) and initiating one or more actions according to the validation.

Physical activity and IT alert correlation

A computer implemented method of correlating between detected usage events indicative of using client terminals and an operational state of physical interfaces of the client terminals, comprising monitoring a network in a monitored location to detect one or more usage events indicating of a usage of one or more of a plurality of client terminals operatively connected to the network, obtaining sensory data from one or more interface monitoring sensors having a fixed operation which is unmodifiable after deployed to capture an operational state of one or more physical interfaces of the client terminal(s), analyzing the sensory data to identify the operational state of the physical interface(s), correlating between the usage event(s) and the identified operational state to validate the usage event(s) and initiating one or more action according to the validation.

Growing community of inventors

Kiryat-Ono, Israel

Moshe Karako