Qinetiq Limited

Deep-secure Limited

Qubitekk, Inc.

Simon Robert Wiseman

Brian Sinclair Lowans

Stephen Gerard Ayling

Richard Middleton Hicks

Katherine Jane Hughes

Richard Andrew Oak

Ewan David Finlayson

Christopher James Cant

Cant Christopher James

Cant Christopher James James

A data structure is transmitted from a first computer to a second computer by transmitting a plurality of messages from the first computer to the second computer. Each message contains data of a node of the structure and one or more references to child pointer locations in previously transmitted nodes. The data of each transmitted node is stored in the second computer, and the location of each node is stored in a table of addresses and the or each reference includes an index into the table of addresses. The first computer may then use indexes into the table to identify which nodes need updating, and thus avoid the need for the first computer to know how the second computer is allocating nodes in memory. The or each reference may include an index into an array of child pointers belonging to a node, may include the sequence number of the parent node of the node being transmitted and may also include the index into the parent node's children to the pointer to the node being transmitted.

Method of transmitting data structures from one computer to another computer

Apparatus () for connecting two or more computer networks having two or more network interface machines () each arranged to be connected to a respective computer network with a bidirectional communications link () enabling the network interface machine to receive data from and transmit data to the computer network. The network interface machines are connected together with at least one content checker () to enable data to be transmitted from one network interface machine to another, and arranged such that data transmitted from one network interface machine to another network interface machine must pass via a content checker. Each network interface machine is arranged to transmit flow control data. The network interface machines are connected to the content checkers only by unidirectional communications links. This provides an interconnection between networks with different security classifications with the advantages of bidirectional communication links but avoiding the risks of such links.

Apparatus and method for connecting computer networks

Methods, apparatus, and programs for a computer for network security content checking: in particular ones which simplify the critical element of a content checker so it can be trusted and implemented in logic.

Network security content checking

Protection of a computer system () against attacks using malformed files is applied to an application () configured to process files of a predefined Headerless format indicated by a Characteristic pattern of bytes. An incoming file's Characteristic pattern is checked by comparing its leading bytes with Characteristic patterns. If its leading bytes have such a pattern, the file () is subjected to a full content check; the file is discarded () if it lacks such a pattern or has contents considered damaging. A file is checked regarding suitability for further processing by comparing its leading bytes with the Characteristic pattern of the predefined Headerless format. A full content check of the file may also be carried out. The application () is permitted to process files having the Characteristic pattern of the predefined Headerless format and appropriate file contents. The method can deal with ZIP files (b) etc. starting with redundant data beven if polymorphic, provided that the file is not potentially damaging.

Protection of computer system

A system for automated checking of data content includes content checkers () to () arranged in parallel and connected between an input sub-system () and an output sub-system (). The content checkers () to () check different data formats. Incoming data from an external computer system () is passed by the input sub-system () to the checkers () to (), which report check results to both input and output sub-systems () and (). From the four check results, the input sub-system () judges the data's acceptability for forwarding to a sensitive computer system (). Unacceptable data is discarded; acceptable data passes to the output sub-system (), which also judges the data's acceptability from the four check results. The output sub-system () only receives such data if the check results are all positive or if the input sub-system () malfunctions: in the latter case the check results are not all positive, and the output sub-system () will not forward the data unless it also malfunctions. The decision to forward data is therefore split between the input and output sub-systems () and ().

Checking data content

A data content checker arrangement for protecting communication between a sensitive computer system () and an external computer system (). The arrangement includes a store () connected to input and output sub-systems () and () and to content checkers () and () arranged in parallel. The input and output sub-systems () and () are connected to the external computer system () and the sensitive computer system () respectively. Data received from the external computer system () is encrypted by the input sub-system () using an encryption key to which the content checkers () and () have access. The content checkers () and () can therefore decrypt, read and check the data. If the data passes a content checker's checks, the checker digitally signs and stores it, decrypted, in the store (); if the checks are not passed, the checker discards the data. The output sub-system () delivers data to the sensitive computer system () if the data has received both content checkers' digital signatures indicating acceptability.

Data content checking

Methods and apparatus for network security content-checking, in particular simplifying the critical element of a content-checker so that it can be trusted and implemented in hardware logic. A method comprises determining whether a digitally encoded document contains any embedded documents; content-checking, by means of at least one hard-ware-implemented content-checker, at least one of the embedded documents separately from those parts of the digitally encoded document within which it was embedded; and releasing a version of the digitally encoded document responsive to the content-checking.

Content-checking of embedded content in digitally encoded documents

This invention relates to an optical star network in which different communities of users, such as different businesses, are provided through use of quantum key distribution (QKD). At least one QKD device is located at the central hub of the star network and communicates with QKD devices at the endpoints to establish a separate quantum key, i.e. a cryptographic key established by QKD, with each endpoint. A separate key manager is provided for each different community and each key manager is arranged to use the appropriate quantum keys for endpoints within that community to deliver the same community key to each endpoint. This community key can be used by for encrypting network traffic between members of the same community with security. Traffic passing through the network switch is encrypted, but the community keys are not delivered via the switch and hence the switch an error in the switch does not compromise security.

Multi-community network with quantum key distribution

The method involves exchange of a quantum signal between a first quantum node and a second quantum node as is usual in known quantum key distribution (QKD) scheme. The first quantum node communicates details of the quantum signal it sent or received with a first remote node. The first remote node thus has all the information to required to take the place of the first quantum node in the key agreement step with the second quantum node. The first quantum node may be arranged to transmit the quantum signal to the second quantum node, in which case the invention provides a distributed quantum transmitter with the control logic in the first remote node being distributed remotely from the actual quantum transmitter in the first quantum node. Communications between the first remote node and first quantum node may comprise or be protected by a quantum key derived by conventional QKD.

Quantum cryptography apparatus

The present invention relates to an improved quantum signal transmitter, which has a plurality of quantum output channels having at least one optical source and at least one optical splitter acting on the output of said at least one source. Such a transmitter can easily be used with existing passive optical network (PON) systems and can be a compact piece of equipment.

Multiplexed quantum key distribution

A method of authentication between first (QNodeX) and second (QNodeY) network nodes within a network suitable for implementing quantum cryptography comprises steps in which the first and second nodes each generate a cryptographic hash ([MXY]AI, [MYX]AJ) of a message ([MXY], [MYX]) using respective authentication keys (AI, AJ) shared with a third network node (QNodeW). The messages may be those exchanged between the first and second nodes during agreement of a quantum key to be used between the nodes. An authentication key to be shared by the first and second nodes may be established using the quantum key. The invention therefore allows an authentication key to be established and shared between the first and second network nodes without direct physical intervention. Networks having large numbers of network nodes may be re-keyed following replacement or maintenance of a network node much more quickly and easily than is the case where re-keying is achieved by physically supplying shared authentication keys.

Method of performing authentication between network nodes

A method of key distribution from a first entity to a second entity including the first entity communicating with a moveable key device so as to share a secret data with said moveable key device, relocating said moveable key device to a location having a quantum link with said second entity, transmitting a quantum signal from said moveable key device to said second entity on said quantum link, the quantum signal being based on said secret data; and said first entity and said second entity undertaking key agreement based on the quantum signal received by the second entity. Such a method allows the principles of quantum key distribution to be applied even in the absence of a suitable quantum communications link between the first and second entities.

Quantum key distribution involving moveable key device

A method of establishing a quantum key for use between a first network node (QNode) and a second network node (QNode) in a network for carrying out quantum cryptography includes a key agreement step carried out by a third node (QNode) and the second node (QNode) and a subsequent authentication step carried out by the first and second nodes directly. As the key agreement step does not involve QNode, another key agreement step may be simultaneously performed by another pair of network nodes QNode, QNodeto agree a quantum key for use by network nodes QNodeand QNode. The invention allows respective quantum keys to be established between a network node and each of a set of other nodes more rapidly than is the case if each quantum key is established serially by key agreement and authentication steps.

Method of establishing a quantum key for use between network nodes

Methods and apparatus for use in quantum key distribution (QKD) are described. A quantum QKD signal is generated at a source and transmitted through a fiber optic network to an endpoint, a key being agreed with communication over a classical QKD channel. The classical QKD channel contains additional information relevant to a network over which keys are distributed, and may be processed at nodes intermediate between the source and the endpoint.

Methods and apparatus for use in quantum key distribution

A method of performing quantum key distribution across a network. The method involves a first node first agreeing a quantum key with a first intermediate node in the path. Next the intermediate node exchanges a quantum signal with the next node in the path&#x2014;which is a targeted node. The intermediate node communicates with the first node using the previous established quantum key details of the quantum signal sent or received by the intermediate node. The first node then performs a key agreement step to agree a quantum key directly with the targeted node. Having established a quantum key with the current targeted node the method can be repeated but with the next node in the network path as the targeted node until a destination node is reached. The final quantum key agreed with the destination node can then be used for encrypting communication between those nodes across the network.

Growing community of inventors

Malvern, United Kingdom

Simon Robert Wiseman