Isara Corporation

Robert Williams

Alexander Truskovsky

Atsushi Yamada

Alessandro Faieta

Jiayuan Sui

Alan Panezic

Martin Laforest

Parnian Alimi

In a general aspect, a multiple-entity root of trust is constructed and maintained for use in a cryptography system. In some aspects, a genesis data block includes genesis block data entries representing respective member entities of a root of trust consortium. A genesis block is generated by digitally signing the genesis data block. The genesis block is provided for use by end entities as a root of trust in a cryptography system. In some aspects, a hash of an existing block of a chain is obtained, and a data block comprising a data entry is generated. The data entry identifies an action by one or more member entities of the root of trust consortium. A new block of the chain is generated by digitally signing a combination of the data block and the hash of the existing block. The new block is provided for use by end entities as the root of trust in the cryptography system.

Constructing a multiple entity root of trust

In some aspects, a cryptography method includes executing, by operation of a first computing device associated with a first entity, a first handshake process with a second entity according to a first handshake protocol to establish a first symmetric encryption key for a first encryption protocol; executing, by operation of the first computing device, a second handshake process with the second entity to establish a second symmetric encryption key for a second encryption protocol. Executing the second handshake process includes: generating second handshake data according to a second handshake protocol; encrypting the second handshake data using the first symmetric encryption key with the first encryption protocol; and sending the encrypted second handshake data to a second computing device associated with the second entity; and using the second symmetric encryption key and the second encryption protocol for single-encrypted communication over a communication channel between the first and second entities.

Protocol key negotiation

In a general aspect, upgradability scores are determined, and remedial security measures are identified in a computing environment. The computing environment is analyzed to identify computing resources that are eligible to receive a cryptographic security upgrade. Attributes of the computing resources are identified based on communicating with the computing resources. A set of rules, that define upgradability scores as a function of computing resource attributes, is obtained. Sets of intermediate output values are generated for the respective computing resources by applying the set of rules to the identified attributes of the respective computing resources. Upgradability scores are generated for the respective computing resources from the set of intermediate output values for the respective computing resource. Remedial security measures are identified for respective subsets of the computing resources based on the upgradability scores for the respective subsets.

Determining upgradability scores and identifying remedial security measures in a computing environment

Growing community of inventors

Milton, Canada

Robert Williams