Gurulogic Microsystems Oy

Salmela-invest Oy

Gurologic Microsystems Oy

Guruligic Microsystems Oy

Tuomas Kärkkäinen

Ossi Kalevo

Valtteri Hakkarainen

Mikko Sahlbom

Jouni Laine

Jani Yli-Alho

Artur Huhtaniemi

Heikki Salmela

A system for providing protected data storage in a data memory of a computing device has an encoder and a decoder. The encoder encrypts unencrypted data using encryption information to generate encrypted data, and stores the encrypted data and the encryption information in an allocated portion of the data memory. The decoder accesses the encrypted data and the encryption information from the allocated portion of the data memory, and decrypts the encrypted data using the encryption information to re-generate the unencrypted data. Each time the unencrypted data is read from the allocated portion of the data memory or the unencrypted data is to be written to the allocated portion of the data memory, the encoder re-encrypts the unencrypted data using newer encryption information to generate newer encrypted data, and replaces previous encrypted data and previous encryption information with the newer encrypted data and the newer encryption information, respectively, in the allocated portion of the data memory. The encoder and the decoder are integrated, so as to operate in a single thread of execution.

System and method for providing protected data storage in data memory

To provide a called one with information on the caller, a reference to a resource containing real-time or near-real-time information relating to the caller, or information deduced using the real-time or near-real-time information, or the real-time or near-real-time information, or the information deduced using the real-time or near-real-time information, is transmitted with a connection establishment request, and the information in the resource or the received information is displayed to the called one before the requested connection is established so that the called one can make a decision whether or not to answer the call.

Additional information on a caller

An encryption system for encrypting data of a party, wherein The encryption key wallet is opened for accessing an encryption key via its reference code, for encrypting data to generate corresponding encrypted data and/or for decrypting encrypted data to generate corresponding decrypted data, wherein the encryption key is reproducibly generated by the encryption key wallet. When the encryption system enables exchange of encrypted data via the encryption system between two or more parties

Encryption system, encryption key wallet and method

A system for protected data storage in a data memory of a computing device includes an encoder and a decoder. The encoder encrypts unencrypted data using encryption information to generate encrypted data, and stores the encrypted data and the encryption information in data memory. The decoder accesses the encrypted data and the encryption information from the data memory, and decrypts the encrypted data using the encryption information to re-generate the unencrypted data. Each time the unencrypted data is read from data memory or the unencrypted data is to be written to the data memory, the encoder re-encrypts the unencrypted data using newer encryption information to generate newer encrypted data, and replaces previous encrypted data and previous encryption information with the newer encrypted data and the newer encryption information, respectively, in the data memory. The encoder and the decoder are integrated, to operate in a single thread of execution.

Protecting usage of key store content at a given user device of an end user includes receiving the key store content at the given user device. The key store content includes key materials encrypted using encryption credentials compatible with the given user device. The key store content is in a format compatible with the given user device. The encrypted key materials of the key store content are imported to a protected key store of the given user device, wherein all the key materials of the key store content are imported at one go. The key materials are stored at the protected key store in the encrypted form, and are non-exportable from the key store. Internally within the protected key store, one or more key store integrated services of the given user device are allowed to access the non-exportable key materials for use, via key references only.

Protecting usage of key store content

A method of encoding input data to generate corresponding encoded data is provided. The method includes encoding the input data into a plurality of symbols in the encoded data, wherein the plurality of symbols represent data as defined by a plurality of palettes indicated and/or included in the encoded data. The method further includes determining mutually different palettes to be used for encoding mutually different parts of the input data, and using the mutually different palettes for encoding the mutually different parts of the input data. Moreover, the method also includes including, within the encoded data, information associating the mutually different palettes with their respective parts of the input data encoded into the encoded data, wherein the information includes palette selection indices for referencing the mutually different palettes on a block-by-block basis.

Encoder, decoder and method employing palette utilization and compression

A data communication system for a local network. The system includes a network node and a plurality of network devices associated therewith. The network node provides a network node service to clients or bots executing on the plurality of network devices. Individual clients or bots are communicably and only programmatically coupled around the network node service in a programmatic star configuration to create the local network. The network node service validates and authenticates local services provided by the clients or bots within the local network. Data is communicated between clients or bots within the local network in real time or near real time, by relaying the data through the network node service. Information content of the data is encrypted prior to communicating the data, by employing a key store associated with a user of the source client or bot.

Data communication system and method

A system for creating one or more group networks between network devices belonging to one or more local networks. Group network devices, dynamically installed at the local networks, are employed to discover network devices connected to their corresponding local networks. Information indicative of a plurality of network devices discovered by the group network devices or selected by a user from amongst the discovered network devices for creation of a group network is received. The plurality of network devices are assigned to the group network, and defined as members of the group network. The group network devices are employed to automatically perform network configurations for the plurality of network devices, regardless of whether the members of the group network are connected to a same physical local network or to different geographically-separated physical local networks. The group network so created enables the members of the group network to communicate and interoperate with each other in their native protocols. The given group network supports different types of transmission paths and/or different transmission protocols defined by the transmission paths.

System and method for creating group networks between network devices

A system for communicating data from a source device to a destination device where the source device has no direct access or has only restricted access to any data communication network. The system includes a network device that is to be coupled in communication with the source device, thereby enabling the source device to transfer to the network device the data to be communicated. The system also includes a network node configured to provide a network node service to a source client executing on the network device and to a destination client associated with the destination device. The network device is to be coupled in communication with the network node via a data communication network. The source client is configured to communicate the data to the destination device, by relaying the data through the network node service, when the destination client is connected to the network node service.

Data communication system

A data security system is provided. The data security system includes at least a first party and a second party that are mutually coupled via a data communication arrangement, wherein the data communication arrangement is operable to provide for user authentications and/or user sign-in. The first and second parties are provided with identical or mutually compatible copies of a digital key code list that includes keys and indexes referencing the keys. The first party is operable to deliver to the second party an authentication message including an index of a key to be derived, a unique identifier (ID) of a digital key code list from which the key is to be derived, and additional information indicative of at least one of: a unique user ID associated with the first party, a session token previously-received from the second party, a date and time at which an attempt for user authentications and/or user sign-in is made. The additional information is provided in an encrypted form. The first and second parties are operable to use, when performing data communication therebetween, for providing user authentications and/or user sign-in, the key that is derived from the digital key code list based upon the index included within the authentication message, and to dispose of the key after use, wherein the key is arranged to be usable only once between the first and second parties.

User sign-in and authentication without passwords

A decoder includes data processing hardware which is operable to: process encoded input data to extract header information indicative of individual blocks and/or packets, and information indicative of transformations employed to the individual blocks and/or packets; create an initial set of individual blocks and/or packets based on received header data, and prepare a data field in a data storage arrangement for receiving decoded individual block and/or packet content; split or combine individual blocks and/or packets in the data field according to information indicative of splitting/combining; retrieve information describing the transformations and then applying an inverse of the transformations for decoding the encoded and compressed original block and/or packet data to generate corresponding decoded block and/or packet content for populating data field; and when the encoded input data has been at least partially decoded, outputting data from the data field as the decoded output data.

Growing community of inventors

Turku, Finland

Tuomas Kärkkäinen