Apple Inc.

Telecom Italia S.p.a.

Ben-gurion University of the Negev Research and Development Authority

Primesense Ltd

Secretskydb Ltd.

Deutschetelekom Ag

Packet Technologies, Inc.

Moshe Zezak

Yaniv Shafira

Niv Gilboa

Drory Shohat

Alexander Shpunt

Haim Bezdin

Shlomi Dolev

Ofer Hermoni

Eyal Felstaine

Roei Remez

Keith Lyon

Scott Thomas Smith

Zafrir Mor

Noah Denis Bedard

Jonathan Pokrass

Refael Della Pergola

Robert S Upton

Gershon Rosenblum

Emanuel Mordechai

Oz Barak

Arnaud Laflaquière

Paolo Pellegrino

Zeev Roth

Shlomo Dolev

Andrea Bragagnini

Milan Maksimovic

Marina Kopeetsky

Yaniv Shapira

Yohai Zmora

Maoz Ovadia

Daniel Kravitz

Shiomi Dolev

Ronen Akerman

Omer Korech

Brian Mccall

Zac Sadan

Luca Scevola

Diego Buffa

Ximing Li

Rafael Halfon

Dan Brownstein

An image sensing device includes a detector assembly, which includes a matrix of optical sensing elements having a predefined pitch. Each optical sensing element includes an active area having a width that is less than 90% of the pitch. An array of optical apertures are respectively aligned with the optical sensing elements such that each optical aperture is positioned at a distance from a respective optical sensing element that is no less than twice the width of the active area. Objective optics are configured to focus light from a scene onto the detector assembly.

Imaging array with directional response

An optical device includes a first array of emitters disposed on a substrate and configured to emit respective beams of optical radiation in a direction perpendicular to the substrate. A second array of microlenses is positioned on the substrate in alignment with the respective beams of the emitters, having respective sag profiles that vary over an area of the substrate. The second array includes at least first microlenses in a central region of the substrate and second microlenses in a peripheral region of the substrate, such that the first microlenses have respective first focal powers, while the second microlenses have respective second focal powers, which are less than the first focal powers.

Microlens array with tailored sag profile

A broadcast encryption method that allows a broadcaster to send encrypted content to a set of users such that only a subset of authorized users can decrypt the content, and to perform both temporary and permanent revocation of users. Accordingly, during a Setup stage, a Key Service generates a public key and a Master Secret Key (MSK) and sends the Public Parameters PP used to generate the public key to a broadcaster and to all users. The broadcaster uses the Public Parameters PP to create a message M, with which the broadcaster encrypts the content, and further creates a Cipher Text (CT), which is sent to all users. During a Key Gen stage, whenever a user wishes to decrypt the message M for decrypting the content, the user sends a request with his ID1 to the Key Service. The Key Service generates a corresponding secret key SKand the secret key SKis sent to the user ID1 via a secure data channel. During a Decrypt stage, the user uses the secret key SK, to decrypt the Cipher Text (CT) and obtain the message M. During a Revoke stage of k users (k=1, 2, 3, . . . ) a State Update Message (SUM) which is sent to all users, is provided and each user updates his state with the SUM he received, such that the k users having identities ID, ID, . . . IDwill not be able to update their state and will be permanently revoked, while all the remaining users being admitted users will be able to update their state and will not be revoked. Temporary revocation is done by inserting a list of IDs (ID, ID, . . . ID) to be revoked into the CT.

Method and system for performing broadcast encryption with revocation capability

Optical scanning apparatus includes a triangular prism, having first and second side faces and a base. A transmitter directs a beam of optical radiation into the prism through the first side face, which refracts the beam so that the optical radiation is incident on and reflects from the base within the prism at a reflection angle that is greater than a total internal reflection (TIR) angle of the prism and exits the prism through the second side face. At least one scanning mirror is positioned to intercept and reflect the beam back into the prism while scanning the beam over an angular range selected such that after refraction of the scanned beam at the second side face, the scanned beam is incident on the base at a transmission angle that is less than the TIR angle and is transmitted out of the prism through the base.

Prism-based scanner

A mobile device includes a camera module, including a lens and an image sensor. An inertial sensor in the mobile device outputs a signal indicative of an orientation of the device. A controller corrects one or more focal properties of the camera module responsively to the orientation indicated by the inertial sensor.

Sensor-assisted autofocus calibration

Optical apparatus includes an image sensor and objective optics, which are configured to collect and focus optical radiation over a range of wavelengths along a common optical axis toward a plane of the image sensor. A dispersive element is positioned to spread the optical radiation collected by the objective optics so that different wavelengths in the range are focused along different, respective optical axes toward the plane.

Wideband ambient light rejection

Scanning apparatus includes a transmitter, which is configured to emit a beam comprising pulses of light, and a scanner, which is configured to scan the beam along a scan axis over a specified angular range. A scattering line extends across a path of the scanned beam. A receiver is configured to receive the light scattered from the scattering line and to generate an output indicative of an intensity of the scattered light. A controller is coupled to process the output of the receiver so as to monitor operation of the scanner.

Optical monitoring of scan parameters

A method of securely executing practically unbounded input stream of symbols, by non-interactive, multi-party computation, according to which the input stream is distributed among a plurality of parties, which do not communicate among themselves throughout execution, by a dealer with a secret initial state. The dealer distributes shares of the secret state between the parties. The input stream is executed by a finite-state automaton which may be an accumulating automaton with accumulating nodes or an automaton that is defined by a series of cascaded equations. During any execution stage, the input stream and the current state of the original automaton are concealed from any coalition of participants being smaller than a given threshold. Upon receiving a signal from the dealer, the parties terminate the execution and submit their internal state to the dealer, which computes the current state that defines the computation result.

Accumulating automata and cascaded equations automata for non-interactive and perennial secure multi-party computation

The invention is a method for broadcast encryption that allows a broadcaster to send encrypted data to a set of users such that only a subset of authorized users can decrypt said data. The method comprises modifications to the four stages of the basic Cipher-text Policy Attribute-Based Encryption techniques. The method can be adapted to transform any Attribute-Based Encryption scheme that supports only temporary revocation into a scheme that supports the permanent revocation of users.

Method for attribute based broadcast encryption with permanent revocation

A method for resolving disputes between users in network communications using digital arbitration. The method comprising the steps of agreeing on a contract between the users and choosing a set of arbitrators; appealing to the arbitrators by a first user, if he/she suspects the second user violates the agreement; and giving the information needed to reconstruct a resource of the second user, if a large enough number of arbitrators agree that the second user actually violated the agreement.

Digital arbitration

A method for secure communication between a local area network and a wide area network includes integrating a NAT functionality in a firewall associated with the local area network, wherein the NAT functionality is suitable to translate the source port of outgoing data packets with a NAT port value obtained by adding to a NAT offset value the value of the session ED used in a session database. When reply data packets coming from the wide area network are received by the firewall, the session ID is extracted from the NAT port value and is used for directly pointing to the session database, thus reducing the time required to recognize the session.

Method and system for secure communication between a public network and a local network

A method for operating a telecommunications device using a hash table, includes: storing session data concerning received data packets in the hash table by means of a first hash function; monitoring the efficiency of the hash table in performing at least a predetermined operation, and in case the efficiency is below a predetermined threshold, storing further session data concerning received data packets by means of a second hash function different from the first hash function.

Method and system for operating a telecommunication device using a hash table in particular for protecting such device from attacks

A novel and useful virtual private network (VPN) mechanism and related security association processor for maintaining the necessary security related parameters to perform security functions such as encryption, decryption and authentication. A security association database (SAD) and related circuitry is adapted to provide the necessary parameters to implement the IPSec group of security specifications for encryption/decryption and authentication. Each security association (SA) entry in the database comprises all the parameters that are necessary to receive and transmit VPN packets according to the IPSec specification.

Virtual private network mechanism incorporating security association processor

Growing community of inventors

Tel Aviv, Israel

Niv Gilboa