Telefonaktiebolaget Lm Ericsson (publ)

Canary Bit Ab

Nicolae Paladi

Christian Gehrmann

Göran Selander

Pegah Nikbakht Bideh

Marco Tiloca

Fredric Morenius

A method of enabling communication protocol translation for encrypted data traffic between first and second devices. The method includes receiving data for the second device from the first device, creating a trusted execution environment ('TEE'), requesting attestation of the TEE from a trusted central device having access to a certificate authority (“CA”) performing the attestation, receiving protocol translation instructions and cryptographic credentials required for securely communicating with the first and second devices, decrypting any encrypted data from the first device using the credentials, translating the decrypted data from a first protocol format utilized by the first device into a second protocol format utilized by the second device in the TEE based on the translation instructions, encrypting the translated data in the TEE using the received cryptographic credentials that allow the second device to decrypt the encrypted translated data, and sending the encrypted translated data to the second device.

Protocol translation for encrypted data traffic

There is provided a method of operating a network controller for enabling secure communication between network endpoints in a distributed network, as well as a network controller and a network switch and a method of operating a network switch. The network controller has a secure channel with each of the network endpoints. The network controller is providing, in connection with establishment of a network flow for communication between the network endpoints, symmetric keying material associated with and valid only for that network flow. The network controller is further enabling provisioning of the symmetric keying material to the network endpoints for allowing cryptographically secure communication between the network endpoints on a per-flow basis.

Security for distributed networking

The present invention relates to a secure component for protecting data in a storage entity and a method at the secure component of protecting data in the storage entity. Further, the present invention relates to a secure domain manager for securely associating a communicating party with a storage domain and a method at the secure domain manager of securely associating the communicating party with the storage domain. Moreover, the present invention relates to a trusted third party for verifying correctness of a launch package created by a secure domain manager to securely associate a communicating party with a storage domain and a method at the trusted third party to verify correctness of the launch package created by the secure domain manager to securely associate the communicating party with the storage domain.

Growing community of inventors

Sollentuna, Sweden

Nicolae Paladi