Verizon Corporate Services Group Inc.

The Johns Hopkins University

Raytheon Bbn Technologies Corp.

Verizon Patent and Licensing Inc.

Bbnt Solutions Llc.

Verizon Corporation Services Group Inc.

Russell Andrew Fink

Matthew Aloysius Brannigan

Shelby Alana Evans

Aswin Morgan Almeida

David R Zaret

Edward A Bubnis, Jr

Shelley Anne Ferguson

Thomas E Keller

David Carroll Challener

Kevin Zachary Snow

Peter S Kruus

Robert M Seng

Paul McNamee

Rachel B Stonehirsch

Samantha M Tyson

Tommy O Johnson

James F Farlow

Shaun T Hutton

A term-based encrypted retrieval privacy (TERP) data retrieval system performs data retrieval from a data repository server. The system includes a client processor included with a data requesting client and a server processor included with the data repository server. The client processor determines a vector forest that is shared with the data repository server, which includes forest vectors assigned with a respective vector ID, and generates a query including an encrypted ciphertext table that cross-references the vector IDs with a corresponding ciphertext entry. The server processor receives the query, and selects a given document from the data repository server that has assigned thereto at least one nearest neighbor vector among the forest vectors. The server processor compares a nearest neighbor vector ID of the nearest neighbor vector to the vector IDs included in the encrypted ciphertext table, and generates an encoded search result based on the encrypted ciphertext entries. The client processor decrypts the encoded search result to obtain results of the query.

Term-based encrypted retrieval privacy

Apparatuses and methods for private information retrieval are provided. One example method may include receiving a query state machine that is an encoding of a search pattern. The query state machine may include a plurality of states and a transition function that defines a plurality of transitions based on the search pattern. The example method may also include performing a private query against a target query string of a target query record by applying the query state machine to the target query string to develop a private encoding. The method may further include transmitting query results based on the private encoding.

Apparatus and method for private information retrieval

A method for providing malware protection in connection with processing circuitry including hardware resources and software resources managed by a primary operating system may include providing a trusted operating system to control access to a portion of a local storage area of the hardware resources. In this context, only the trusted operating system is configured to enable writing to the portion of the local storage area. The method may further include storing backup files for the primary operating system in the portion of the local storage area responsive to the trusted operating system granting access to write to the portion of the local storage area.

Apparatus and method for preventing access by malware to locally backed up data

A translator is provided for translating predetermined portions of packet header information including an address of a data packet according to a cipher algorithm keyed by a cipher key derived by a key exchanger. A mapping device is also provided for mapping the address to a host table stored in memory. If the address does not match an entry in the host table, a security device is triggered.

Method and apparatus for providing adaptive self-synchronized dynamic address translation as an intrusion detection sensor

Methods, apparatus, system and computer program are provided for concealing the identity of a network device transmitting a datagram having a network layer header. A unique local identifier and broadcast address are determined in accordance with a next-hop address. A partially encrypted network layer header is determined by encrypting a plurality of identifying portions of the network layer header, where one portion of the network layer header is the unique local identifier. The datagram is encapsulated with another network layer header whose address is set to the broadcast address. The encapsulated datagram can be received and detunneled, and an address of a recipient can be extracted from the network layer header. The datagram is then admitted into a network domain.

Method and apparatus for anonymous IP datagram exchange using dynamic network address translation

A system and method for identifying and verifying a client to access a secure network. Timing characteristics are acquired from the client, such as a peripheral device, and further verified and identified via a policy enforcement points and a policy decision points, or a measurer device in the secure network.

Identification and verification of peripheral devices accessing a secure network

A communication device is provided for a local enclave. The communication device processes packets to be transferred from the local enclave to a wide area network. The communication device intercepts packets originating from a host on the local enclave, the packets being destined for transmission over the wide area network, extracts predetermined portions from each packet header to form one or more blocks for translation, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header. The purpose of the invention is to obfuscate network machine identities to TCP/IP packets traversing the public Internet to prevent traffic mapping.

Method and apparatus for providing adaptive self-synchronized dynamic address translation

A bastion host is provided for a local area network (LAN). The bastion host processes packets to be transferred from the LAN to a wide area network (WAN). The bastion host intercepts packets originating from a host on the LAN, the packets being destined for transmission over the WAN, extracts bits from predetermined fields from each packet header to form one or more blocks for translation, masks bits from the one or more blocks that vary rapidly packet to packet, applies a predetermined encryption algorithm to translate the one or more blocks after masking; and reinserts bits from the translated block back into the packet header.

Sliding scale adaptive self-synchronized dynamic address translation

An apparatus and method are provided for adapting a link layer address of a network device. A first input/output port is connected to receive data from a first network node The first input/output port has a link layer address and is configurable to one of a plurality of link layer addresses. A second input/output port is connected to output the data to a second network node The second input/output port has a link layer address and is configurable to one of a plurality of link layer addresses. A processor adapts the link layer address of the first input/output port to correspond to a link layer address of the second network node and adapts the link layer address of the second input/output port to correspond to a link layer address of the first network node

Growing community of inventors

Columbia, MD, United States of America

Russell Andrew Fink