The Boeing Company

Tirumale K Ramesh

John L Meier

Ming-Yuh Huang

Jason Edward Amanatullah

A distributed security architecture may include: a mobile anti-tamper hardware policy enforcement point configured to control communication behaviors of a mobile or stationary client by enforcing communication policies within a policy decision point; an anti-tamper hardware policy decision point encapsulated within the anti-tamper hardware policy enforcement point; a policy exchange channel for policy distribution modes configured to distribute and/or update communication and routing security policies to the client; a context manager configured to handle system-wide status change update signaling; and an authentication manager configured to provide clients with registration and credential/role assignments based on access policies. The distributed security architecture may be configured to provide open system interconnection layer 3.5 policy-based secure routing, and open system interconnection layer 2 policy-based mandatory access control address filtering to provide secure communication and computing for layers 4, 5, 6, and 7.

Distributed security architecture

A distributed security architecture may include: a mobile anti-tamper hardware policy enforcement point configured to control communication behaviors of a mobile client by enforcing communication policies within a policy decision point; a mobile anti-tamper hardware policy decision point encapsulated within the mobile anti-tamper hardware policy enforcement point; a policy exchange channel for policy distribution modes configured to distribute and/or update communication and routing security policies to the mobile client; a contextual manager configured to handle system-wide status change update signaling; and a mobility authentication manager configured to provide mobile clients with registration and credential/role assignments based on mobile access policies. The distributed security architecture may be configured to provide open system interconnection layer 3.5 policy-based secure routing, and open system interconnection layer 2 policy-based mandatory access control address filtering to provide secure communication and computing for layers 4, 5, 6, and 7.

A chip having an intelligent fabric may include a soft application processor, a reconfigurable hardware intelligent processor, a partitioned memory storage, and an interface to an external reconfigurable communication processor. The reconfigurable hardware intelligent processor may be configured to implement a distributed reconfigurable processor, and to provide cognitive control for at least one of allocation, reallocation, and performance monitoring.

Intelligent fabric system on a chip

An intelligent distributed computing fabric system may comprise a cognitive element, a computing element, a security element, and a network element. The cognitive element may receive inputs from the computing element, the security element, and the network element, and may further receive external information from a sensor interface. The cognitive element may process the inputs from the computing element, the security element, and the network element, and may additionally process the external information from the sensor interface. The cognitive element may make decisions based on the inputs from the computing element, the security element, and the network element, and based on the external information from the sensor interface, to adapt for dynamically varying situations in a fabric infrastructure. The cognitive element may outputs instructions for actions, based on the dynamic decisions, to the computing element, the security element, and the network element in order to virtually interconnect the computing element, the security element, and the network element. The computing element may transmit inputs to the cognitive element. The computing element may receive the dynamic output instructions from the cognitive element. The computing element may follow the dynamic output instructions as commands from the cognitive element. The security element may receive inputs from the computing element and the network element. The security element may transmit current security policy inputs to the cognitive element. The network element may transmit inputs to the security element and to the cognitive element.

Virtual intelligent fabric

A field programmable gate array includes a virtual bus interface that receives a control word from a host processor over a standard I/O bus. A configurable very long instruction word (VLIW) controller receives the control word via virtual bus interface signals mapped from the virtual bus interface. A reconfigurable communication and control fabric controls the data paths and programming modes of single instruction-multiple data (SIMD) processing element cells. The configurable VLIW controller has an interface with the reconfigurable communication and control fabric. SIMD processing element cells are controlled by the configurable VLIW controller through the reconfigurable communication and control fabric via the interface.

Growing community of inventors

Centreville, VA, United States of America

Tirumale K Ramesh