Rockwell Collins, Inc.

Raymond A Kamin

David S Hardin

Allen P Mass

Steven E Koenck

James A Marek

T Douglas Hiratzka

John K Gee

David A Greve

Gina M Reyes

Nick M Mykris

Michael H Masters

James L Scheer

A system and method are disclosed for use of a passive sensor within a mobile device as a separate authentication mechanism to exchange a secure key with a desired network. A network access point presents an encoded bit stream via an audio signal over an audio channel or a video signal within a video presentation. Each signal type is configured for reception by a passive sensor on the mobile device. This received information would be used to generate the private key within the mobile device for encrypting the wireless communication channel. Only mobile devices within audio or visual range of the presentation may be authenticated and thus securely connected to the network.

Secure authentication of mobile devices using sensor transfer of keying material

A method and system. The method includes receiving at least one signal and measuring at least one physical layer feature of the at least one signal. The method further includes determining that the at least one signal originated from an emitter of an aircraft based on the at least one measured physical layer feature of the at least one signal.

Verification of aircraft emitter

A trust module suitable for providing and managing network administration across multiple networks with different security levels. The trust module comprises an administration module to provide secure communication rules between and among the networks that define the manner in which the networks exchange secure communication over a data channel. The administration module includes a user interface to enable an administrator to define the secure communication rules and an encryption module to encrypt the secure communication rules. Advantageously, the trust module of the present invention allows for secure communication and attestation across an unsecure network and a secure network.

Administration of multiple network system with a single trust module

The present invention is directed to a system for providing a trusted environment for untrusted computing systems. The system may include a HAC subsystem managing shared resources and a trusted bus switch for controlling a COTS processor to access the shared resources. The shared resources such as memory and several I/O resources reside on the trusted side of the trusted bus switch. Alternatively, the system may include a SCM as an add-on module to an untrusted host environment. Only authenticated applications including COTS OS execute on the SCM while untrusted applications execute on the untrusted host environment. The SCM may control secure resource access from the untrusted host through a plug-in module interface. All secure resources may be maintained on the trusted side of the plug-in module interface.

System for providing secure and trusted computing environments through a secure computing module

System for providing secure and trusted computing environments

An improved computer architecture and system advantageously combine the beneficial characteristics of a high level object oriented programming language with an optimized processor for efficient application to real time embedded computing problems. Additionally, an improved method for resolving symbolic references in code generated by compiling source code written in an object oriented programming language to the corresponding logical memory addresses stores look-up information with the object itself after the first encounter of a given symbolic reference, whereby the logical memory address information is available for subsequent encounters of the symbolic reference, and whereby no modification of the program instructions containing the symbolic reference is necessary. In a preferred embodiment, the Java&trade; programming language is used.

Growing community of inventors

Robins, IA, United States of America

Raymond A Kamin