Sun Microsystems, Inc.

Neology, Inc.

Opus Medicus, Inc.

Oracle America, Inc.

International Business Machines Corporation

The Mitre Corporation

Smartrac Technology Fletcher, Inc.

Cme Advantage, Inc.

Thomas Tahan

Jun Liu

Weilin Wang

Martin Woscek

Steven Leonard Cox

Formulating a security architecture for an information system is provided. A description of a target environment of the information system is received. The description includes a network zone architecture. A description of one or more security requirements for the information system is received. One or more reference architectures for the information system are selected from a plurality of reference architectures based on the description of the one or more security requirements for the information system. One or more selected reference architectures are adapted to the target environment for the information system.

Automated security architecture formulation and deployment

A method for updating a group encryption key association, the method includes receiving an encrypted group key from a second device, where the group key has been encrypted using a device key of a first device. The method further includes, in the first device, using the group key to encrypt an input vector, transmitting the encrypted input vector, encrypting privacy-sensitive information using a device key, an encryption algorithm, and the input vector, and transmitting the encrypted privacy-sensitive information to the second device.

Systems and methods for preventing transmitted cryptographic parameters from compromising privacy

A method for secure cryptographic communication includes transmitting information that identifies a group key from a first device to a second device. The method further includes, in the first device, using the group key to encrypt an input vector, transmitting the encrypted input vector, encrypting privacy-sensitive information using a device key, an encryption algorithm, and the input vector, and transmitting the encrypted privacy-sensitive information to the second device.

Techniques, systems, and devices are disclosed for performing secure cryptographic communication. One disclosed technique includes transmitting information that identifies a group key from a first device to a second device. The technique further includes, in the first device, using the group key to encrypt an input vector, transmitting the encrypted input vector, encrypting privacy-sensitive information using a device key, an encryption algorithm, and the input vector, and transmitting the encrypted privacy-sensitive information to the second device.

Systems and methods are provided for viewing portions of a very high-resolution image on a client device. The systems and methods provide for dynamic establishment of hierarchically organized contexts corresponding to regions within the image. The context hierarchy supports image inspection and analysis at increasing resolution levels for successively smaller regions. A context's region can be viewed at a base resolution appropriate for that context, while areas of interest within the context can be examined in more detail in higher resolution. To view areas of interest at resolution levels above the range for a given context, a child context can be established for a smaller region. The client device user can navigate from one area within the image to another by traversing previously established contexts and establishing new contexts.

Systems and methods for high-resolution image viewing

A method for secure cryptographic communication comprises transmitting information that identifies a group key from a first device to a second device. The method further comprises, in the first device, using the group key to encrypt an input vector, transmitting the encrypted input vector, encrypting privacy-sensitive information using a device key, an encryption algorithm, and the input vector, and transmitting the encrypted privacy-sensitive information to the second device.

A system for establishing an encrypted multicast communication session over a communications network can include a client means (e.g., a radio, laptop, workstation, phone, PDA) and a server means. The client means can transmit a request for a first user to join a pre-defined collaborative group, including at least the first user and a second user. The client means can transmit a request for a first user to create or select a collaborative group based on specified criteria. The system can also include a server means that can retrieve, select or generate an encryption key for the collaborative group and transmit the encryption key to the first user via the client means. The server can transmit the encryption key to the second user via a second client means. The client means can communicate via multicast, encrypting end-to-end above the network layer using the encryption key received from the server means.

Method and apparatus for dynamically establishing and joining an encrypted collaborative communication session

Systems and methods are provided for viewing portions of an image in high resolution and in context with a full image, which is displayed at a base resolution that is lower resolution than the resolution of the high-resolution image. A client device can send a request to a server for a composed image comprised of the base-resolution image overlaid at the area of interest with a virtual lens showing the area of interest in high-resolution image. The request can include the coordinates of the area of interest relative to a reference point on the image, the desired resolution level for the high-resolution image, and the virtual lens size and shape. The desired resolution can fall into a range above the resolution of the base-resolution image and up to the resolution of the maximum-resolution image stored on, generated on, or input to the server.

Systems and methods for networked, in-context, composed, high resolution image viewing

Systems and methods are provided for viewing portions of an image in high resolution and in context with a full image, which is displayed at a base resolution that is lower resolution than the resolution of the high-resolution image. A user can select an area of interest from the base-resolution image for viewing at a higher resolution on the client device. The server, or in some implementations the client device, can generate a high-resolution image representing the area of interest and the client device can display a portion of the high-resolution image in a virtual lens overlaid on the base-resolution image.

Systems and methods for networked, in-context, high-resolution image viewing

Systems and methods for networked, in-context, high resolution image viewing

A method for dependent trust in a computer system is provided. In this method, trust dependency relationships are defined among components of the computer system, specifying, for a component, which components it relies on in ensuring the integrity or confidentiality of its code or data. Subsequently, trust dependencies are resolved and the results are used in performing certain operations described in Trusted Computing Group standards including generating an attestation reply, sealing data, and unsealing data. In addition, methods for computing an integrity measurement for a Core Root of Trust for Measurement of a trust-dependent component are included. A system for dependent trust in a computer system is also described.

System and methods for dependent trust in a computer system

A cryptographic module for limiting exposure of cryptographic keys protected by a trusted platform module (TPM) is provided. The cryptographic module includes logic for establishing a session with the TPM on behalf of a cryptographic client and logic for sending a request from the cryptographic client to the TPM to retrieve in plaintext a cryptographic key of the cryptographic client. Logic for receiving the cryptographic key in plaintext from the TPM are also included in cryptographic module. Further, cryptographic module includes logic for performing a cryptographic operation requested by the cryptographic client using the cryptographic key, and logic for sending the results of the cryptographic operation to the cryptographic client. A hardware-based method and system for limiting exposure of cryptographic keys also are described.

System and method for limiting exposure of cryptographic keys protected by a trusted platform module

A method and mechanism of enforcing community access control in a computer network, wherein access to objects by users and processes is controlled. A Multi-Community Node (MCN) processes information for users in multiple communities and must enforce a community separation policy. The enforcement method and mechanism use a database of associations of sets of communities corresponding to users, processes, and system objects. Upon receiving a request for access to an object by a user, the MCN permits access if a user community set (UCS) of the user is a superset of an object community set (OCS) of the object; otherwise, access is denied. Upon receiving a request for access to an object by a process, the MCN permits access if an application process community set (ACS) of the process is a superset the OCS of the object; otherwise, access is denied.

Growing community of inventors

La Jolla, CA, United States of America

Thomas Tahan