Web Sensing, LLC

Stephen Taylor

Jason Dahlstrom

A hardware turnstile including a system-on-chip data security appliance (a diode). The diode includes a single-chip device defining a protected boundary co-incident with a boundary of the single-chip device, a first and a second communication interface, an electronic processor located within the protected boundary, a data transfer control component located within the protected boundary, and memory located within the protected boundary. The electronic processor is configured to selectively allow a designated one-way transfer of data appearing on the first communication interface to the second communication interface using the data transfer control component, based on data stored in the memory. The electronic processor is also configured to selectively modify fixed format data appearing on the second communication interface for transmission to the first communication interface using the data transfer control component based on data stored in the memory and discard all other data appearing on the first or second communication interfaces.

Hardware turnstile

System-on-chip data security appliance ('SoC-DSA') and methods of operating the same. In one embodiment, the SoC-DSA includes data security mechanisms enclosed within a protected boundary of a single chip. In some embodiments, isolation and access control features are hidden within an on-chip field-programmable gate array ('FPGA'). The isolation and access control features can be implemented such that they are not visible to or alterable by software executing on the processing cores of the SoC-DSA, which provides for continued data security even in the presence of software exploitation, such as a malicious implant, that otherwise compromises data security in software-only systems. The SoC-DSA can be used to enhance data security in existing data security devices and protocols, such as high assurance guards (&#x201c;HAG&#x201d;) and can be used to create new types of security devices, such as devices enforce alternative human data interactions (&#x201c;HDI&#x201d;) models.

System-on-chip data security appliance encryption device and methods of operating the same

An endpoint and methods of operating the same. In one embodiment, an endpoint is connected to one or more sensors and/or actuators. The endpoint is also connected through a communication channel to a server. Each endpoint uses a unique identifier ('ID') hidden within a protected boundary of the endpoint to associate with a lockless, single-writer thread on the server dedicated to the endpoint. The endpoint ID is encrypted within the protected boundary of the endpoint and is not communicated unencrypted. Furthermore, no association between the ID and private information associated with reader, analysis, or control threads at the server is available outside of a protected boundary of the server and this association is never transmitted on a communication channel. The endpoint can include one or more communication interfaces (e.g., of different modalities) to provide resilience to failures, errors, and computer network attacks.

Endpoints for performing distributed sensing and control and methods of operating the same

System-on-chip data security appliance ('SoC-DSA') and methods of operating the same. In one embodiment, the SoC-DSA includes data security mechanisms enclosed within a protected boundary of a single chip. In some embodiments, isolation and access control features are hidden within an on-chip field-programmable gate array ('FPGA'). The isolation and access control features can be implemented such that they are not visible to or alterable by software executing on the processing cores of the SoC-DSA, which provides for continued data security even in the presence of software exploitation, such as a malicious implant, that otherwise compromises data security in software-only systems. The SoC-DSA can be used to enhance data security in existing data security devices and protocols, such as high assurance guards ('HAG') and can be used to create new types of security devices, such as devices enforce alternative human data interactions (&#x201c;HDI&#x201d;) models.

Growing community of inventors

Hanover, NH, United States of America

Stephen Taylor