Unisys Corporation

Somos, Inc.

Robert J Sliwa

Jeffrey Scott Smith

Sridhar Ramachandran

Li Kong

Kimberly Tashner Shyu

Marc Rudloff Plante

Christopher Anton Wendt

Eduardo Correia Da Silva Brazao

Steven Norman Brumer

Ian Michael Klein

Haofang Yu

John A Landis

Bryan E Thompson

Michael J Didomenico

James R Hunter

Brittney Burchett

David A Kershner

Sriram Sharma

William Carter

Michael Kimmel

Ryan Karnas

Sanjeev Chauhan

Suk Yee Wong

Manisha Bhat

Pamela J Carter

Dewang Lakhani

Alan Stiffler

Jeffery A Stell

Tatyana Martsun

Michael J DiDomenico

Phillip M Hoffman

Jessica A Paragas

Robert K Liermann

Brittney Birchett

Steven D Schatz

Jeffrey A Stell

An apparatus for detecting fraudulent activity includes a device property data processing circuit, a security analysis circuit, an alert circuit, and an alert provisioning circuit. The device property data processing circuit is structured to interpret device property data corresponding to a device registered with an Internet of Things (IoT) device registry. The security analysis circuit is structured to determine, based at least in part on the device property data, that the device is subject to a fraud event. The alert circuit is structured to generate, responsive to the determined fraud event, a message that identifies the device. The alert provisioning circuit is structured to transmit the message.

Systems and methods for fraudulent activity detection

A method for registering one or more Greenfield devices via a virtual Internet of Things Universal Identifier (IoT UID) is provided. The method includes identifying one or more Brownfield devices, generating device property data based at least in part on the one or more Brownfield devices, and transmitting, to an IoT device registrar server, a registration request that includes the device property data. The method further includes interpreting one or more IoT UIDs generated in response to the transmitting of the registration request.

Systems and methods for provisioning virtual Internet of Things Universal IDs (IOT UIDs) in greenfield devices

A method for determining a trust indicator is provided. The method may include interpreting, via an Internet of Things Universal Identifier (IoT UID) processing circuit, an IoT UID corresponding to a device and identifying, via a record management circuit and based at least in part on the IoT UID, a record in a database corresponding to the device. The method may further include determining, via a trust analysis circuit and based at least in part on the record, a risk indicator of the device and transmitting, via an indicator provisioning circuit, the risk indicator.

Systems and methods for an IoT device registry that provides for dynamic trust ratings of registered devices

An Internet of Things device registry display that includes a user input processing circuit structured to interpret one or more user input command values, an Internet of Things Universal Identification (IoT UID) identification circuit structured to determine one or more IoT UIDs, based at least in part on the one or more user input command values, a device lookup circuit structured to: generate a query that includes the one or more IoT UIDs, and retrieve device property data corresponding to the one or more IoT UIDs, a query provisioning circuit structured to transmit the query to an IoT device registrar server, a device property processing circuit structured to interpret the device property data generated by the IoT device registrar server in response to the query, and a display circuit structured to display the device property data with the corresponding one or more IoT UIDs.

Systems and methods for an internet of things device registry display

An apparatus including a display circuit, a requestor circuit, a request provisioning circuit, an Internet of Things Universal Identification (IoT UID) processing circuit, and an IoT UID provisioning circuit. The display circuit generates a graphical user interface (GUI) configured to receive one or more user input command values corresponding to device property data for one or more Brownfield devices. The requestor circuit generates a registration request that includes the device property data. The request provisioning circuit transmits the registration request to an Internet of Things (IoT) device registrar server. The Internet of IoT UID processing circuit interprets one or more IoT UIDs generated by the IoT device registrar server in response to the registration request. The IoT UID provisioning circuit at least one of: transmits the one or more IoT UIDs; or displays the one or more IoT UIDs on an electronic display.

Systems and methods for provisioning embedded Internet of Things Universal IDs (IoT UIDs) in Brownfield devices

An apparatus for provisioning embedded Internet of Things Universal IDs (IoT UIDs) in Brownfield devices. The apparatus includes a display circuit, a requestor circuit, a request provisioning circuit, an IoT UID processing circuit, and an IoT UID provisioning circuit. The display circuit generates a graphical user interface (GUI) configured to receive one or more user input command values corresponding to device property data for one or more Brownfield devices. The requestor circuit generates a registration request that includes the device property data. The request provisioning circuit transmits the registration request to an IoT device registrar server. The IoT UID processing circuit interprets one or more IoT UIDs generated by the IoT device registrar server in response to the registration request. The IoT UID provisioning circuit at least one of: transmits the one or more IoT UIDs, or displays the one or more IoT UIDs on an electronic display.

Systems and methods for provisioning embedded internet of things universal IDS (IoT UIDs) in brownfield devices

A computing fabric includes one or more host computing platforms and a plurality of partitions instantiated across the one or more host computing platforms, each of the plurality of partitions allocated computing resources of the one or more host computing platforms. The computing fabric further includes a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The plurality of partitions includes a persistent partition to which one or more storage devices are allocated, the persistent partition executing software loaded from a trusted storage location and executing from a non-volatile memory.

Persistent guest and software-defined storage in computing fabric

Systems and methods for executing multiple operating systems on a computing system without rebooting the computing system are disclosed. Embodiments may include installing a first OS and a second OS on a computing system. Embodiments may further include executing the first OS on hardware resources of the computing system. Some embodiments may also include suspending execution of the first OS, and executing the second OS on the hardware resources while execution of the first OS is suspended.

Execution of multiple operating systems without rebooting

Methods and systems for securing memory within a computing fabric are disclosed. One method includes allocating memory of one or more host computing systems in the computing fabric to a partition, the partition included among a plurality of partitions, the computing fabric including a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The method includes defining an address range associated with the memory allocated to the partition, receiving a memory operation including an address within the address range, and, based on the memory operation including an address within the address range, issuing, by the hypervisor, an indication that the memory operation is occurring at an encrypted memory location. The method also includes performing the memory operation, and performing an encryption operation on data associated with the memory operation.

Hypervisor-enforced self encrypting memory in computing fabric

A reduced service partition system and method for a host computing device having a host processor and system resources including memory divided into most privileged system memory and less privileged user memory. The system includes a virtualization boot application that operates in the less privileged user memory and divides the host computing device into a resource management partition, at least one virtual service partition and at least one virtual guest partition. The virtual guest partition provides a virtualization environment for at least one guest operating system. The virtual service partition provides a virtualization environment for the basic operations of the virtualization system. The resource management partition maintains a resource database for use in managing the use of the host processor and the system resources. A monitor operates in the most privileged system memory, and maintains guest applications in the at least one virtual guest partition within memory space allocated by the virtual service partition to the at least one virtual guest partition. A context switch between the at least one monitor and the respective virtual guest partitions and the virtual service partition controls multitask processing in the partitions on the at least one host processor.

Reduced service partition virtualization system and method

A secure application system and method for a host computing device. The system includes an ultraboot application divides the host computing device into a resource management partition, at least one virtual service partition and at least one virtual guest partition. The virtual service partition provides a virtualization environment for the basic operations of the virtualization system. The virtual service partition is an isolated secure partition having a secure application executing therein. The isolated secure partition includes a security manifest portion for controlling the execution of the secure application within the isolated secure partition, and a secure application operating system (OS) portion that supports only the execution of the secure application within the isolated secure partition. The secure application is executed within the isolated secure partition without the need for any standard operating system (OS).

Service partition virtualization system and method having a secure application

A computing system using a persistent, unique identifier may be used to authenticate the system that ensures software and configurations of systems are properly licensed while permitting hardware components to be replaced. The persistent, unique system identifier may be coupled to serial numbers or similar hardware identifiers of components within the computing system while permitting some of the hardware components to be deleted and changed. When components that are coupled to the persistent, unique identifier are removed or disabled, a predefined time period is provided to update the coupling of the persistent, unique identifier to alternate hardware component in the system.

System and method for providing a mechanism to virtualize a perpetual, unique system identity on a partitioned computer system

Growing community of inventors

Malvern, PA, United States of America

Robert J Sliwa