Abstract: The present invention relates to a method and apparatus for controlling power distribution by a control system that only requires a broadcast medium between a controller (30) and appliances or loads (20-1 to 20-n) and information about the current total power consumption of the system to precisely reach a target consumption level in a stepwise, fast converging way without “seesaw” effects and with “fair distribution” of any power reduction.

Abstract: A cryptographic device (200) is provided to compute a key dependent cryptographic function for an input message. The cryptographic device has a data store arranged to store multiple variables (w) on which the cryptographic device acts to compute the cryptographic function, a variable (w) being distributed over multiple shares (wj) and represented in the data store as multiple encoded shares (xj), an encoded share being an encoding (xj=Encj (wj, sj)) of a share (wj) together with a state (sj), the multiple states (sj) corresponding to the same variable (w) having a relationship with the input message (M) so that there exists an injective mapping (?) from the input message (M) to the multiple states (?(M)=(s0, . . . , sn?1)).

Abstract: A computing device is provided configured to compute a data function on a function-input value comprising an electronic storage storing a table network configured for the data function and an electronic processor coupled to the storage and configured to compute the data function by applying the table network, wherein the device is configured to obtain the function-input value as an encoded input value, the encoded input value combines the function-input value together with a state-input value encrypted together into a single value, the table network is configured to take as input the encoded input value and produce as output an encoded output value, the encoded output value combines a function-output value together with a state-output value encrypted data function together into a single value, wherein the function-output value equals the result of applying the data function to the function-input value, and the state-output value equals the result of applying a state function to the state-input value.

Abstract: A system, method, and devices for communicating from a primary station to a plurality of secondary station are disclosed. The method includes the step of allocating a resource to the secondary stations over time on the basis of a hash function such that for a particular subframe the control channel elements to be searched in the search space are assigned at an equal probability for different secondary stations, and such that for any pair of subframes, the number of secondary station identifiers which can generate output values i and j is approximately the same for any values of i and j.

Abstract: A system for performing an operation on data using obfuscated representations of the data is disclosed. Obtaining means are configured to obtain a first obfuscated representation of a first data value and obtain a second obfuscated representation of a second data value. A determining means 102 is configured to determine an obfuscated representation of a third data value, by performing the corresponding operations on the obfuscated representation of the first data value and the obfuscated representation of the second data value. Obfuscating means 101 may be configured to generate the first obfuscated representation based on the first data value and generate the second obfuscated representation based on the second data value. De-obfuscating means 103 may be configured to de-obfuscate the obfuscated representation of the third data value in order to obtain the third data value using a system of equations.

Abstract: An initiating key-agreement device (100) and a responding key-agreement device (200) are provided, configured to generate a symmetric key shared between them. The devices are configured for generating in electronic form a private random value (112, 212), obtaining in electronic form a public set of bivariate polynomials (122) and computing a univariate polynomial (124, 222) by summing the univariate polynomials obtained by substituting the private random value (112, 212) into the polynomials of the public set (122). The devices are configured to send their computed univariate polynomial to the other device, and to compute or reconstruct the shared symmetric key (214, 312) by substituting its generated private random value (112, 212) in the received univariate polynomial.

Abstract: The invention relates to controlling power consumption of a group of plurality of groups of power consuming devices by determining power consumption control value for controlling power consumption of devices of the group by use of at least one of the following: load shedding flexibility value of at least one group of plurality of groups, wherein the load shedding flexibility value of the corresponding group indicates maximum amount of power, by which power consumption of devices of the corresponding group can be reduced such that minimum power consumption permissible in the corresponding group is maintained; load restoration flexibility value of the at least one group of plurality of groups, wherein the load restoration flexibility value of the corresponding group indicates maximum amount of power, by which the power consumption of devices of the corresponding group can be increased such that maximum power consumption permissible in the corresponding group is maintained.

Abstract: The invention relates to a proxy node comprising means for managing a proxy table, a receiver for receiving a message from a first resource restricted device, said message being intended to at least one corresponding destination device, control means for checking whether an entry for the first resource restricted device is included in the set of entries of the proxy table, the set of entries of the proxy table indicating the set of resource-restricted devices the proxy node is in charge of, a transmitter for forwarding the message depending on the result of the proxy table checking, the means for managing the proxy table being arranged for cleaning the proxy table of the entry relative to the resource-restricted device by monitoring the relative usage of the proxy node for forwarding messages for the resource restricted device with the usage of competitor proxy nodes for forwarding messages for the resource restricted device.

Abstract: This invention relates to a method for configuring a limited node in a network, said limited node being able to receive data only within limited reception opportunities, the method comprising at a first node: (a) detecting that an update of a network configuration parameter value for the limited node is required; (b) deciding on whether to change a limited node behavior from a first behavior based at least partly on communication characteristics of the limited node, said change of behavior including increasing reception opportunity at the limited node; (c) depending on decision at step (b), triggering delivery of a request of behavior change to the limited node during a first reception opportunity; (d) triggering delivery of the updated network configuration parameter value to the limited node during a second reception opportunity of the limited node.

Abstract: A compiler 134 for compiling a first computer program 110 written in a first computer programming language into a second computer program written in a machine language, the compiler comprises a code generator to generate the second computer program by generating tables 142 and machine language code 144, the generated tables and the generated machine language code together forming the second computer program, wherein the generated machine language code references the tables and the generated machine language code does not contain arithmetic or logic machine instructions, the tables comprising pre-computed results of arithmetic and/or logic machine instructions.

Abstract: A network device (110) is provided which is configured to determine a shared cryptographic key of key length (b) bits shared with a second network device (120) from a polynomial and an identity number of the second network device. A reduction algorithm is used to evaluate the polynomial in the identity number of the second network device and reduce module a public modulus and modulo a key modulus. The reduction algorithm comprises an iteration over the terms of the polynomial. In at least the iteration which iteration is associated with a particular term of the polynomial are comprised a first and second multiplication. The first multiplication is between the identity number and a least significant part of the coefficient of the particular term obtained from the representation of the polynomial, the least significant part of the coefficient being formed by the key length least significant bits of the coefficient of the particular term.

Abstract: A key generation device (100) configured to generate a public key (126) for use in a public key encryption device and a corresponding private key (114) for use in a private key decryption device, the key generation device comprising a private key generator (110) configured for obtaining in electronic form a private random value (112, s), and generating the private key (114), the private key comprising the private random value (112), and a public key generator (120) configured for obtaining in electronic form a public set of bivariate polynomials (122, fi(,)), computing a public univariate polynomial (124) by summing over univariate polynomials obtained by substituting the private random value (112, s) into the polynomials of the public set (122, fi (s,)), and generating the public key (126), the public key comprising the public univariate polynomial (124) and the public set (122).

Abstract: The present invention relates to a method for configuring a network comprising a maintenance entity and a plurality of nodes, the method comprising at the maintenance entity, the steps of: (a) detecting a potential presence in the network of at least one limited node, said limited node being able to receive data only within time periods; (b) determining that an updated network configuration parameter value is required, said network configuration parameter being common to the at least one limited node and to the plurality nodes of the network; (c) postponing a transmission of a signal for updating the network configuration parameter value at the plurality of nodes, based on the detection of the potential presence of the at least one limited node in the network; (d) transmitting a triggering signal for triggering delivery of the updated network configuration parameter value to the limited device; (e) transmitting the signal for updating the updated network configuration parameter value at the plurality of nodes

Abstract: Apparatuses for commissioning a joining node into a mesh network (7) comprising a relay node (2) and a router node (3, 4) is provided, wherein the router node (3, 4) is connected to a wide area network (5) including a server (6) for controlling grant of commissioning requests to join the mesh network (7). A receiving unit (203) is provided for receiving an authentication token from a relay node. A key generating unit (204) is provided for generating a pair-wise identity-based key between the joining node and the router node based on the identity of the joining node and an identity of the router node. A checking unit (205) is provided for checking whether the authentication token is valid based on at least the pair-wise identity-based key. A forwarding unit (206) for forwarding the handshake signal to the server over the wide area network if the authentication token is valid.

Abstract: A cryptographic system is provided comprising multiple configuration servers (200, 201, 202) arranged to configure multiple network devices (300, 350, 360) for key sharing. Each configuration server comprising a computation unit (220) arranged to compute local key material for the network device from root key material specific to the configuration server and the network device identity number of the network device that is being configured. At least two configuration servers of the multiple configuration servers provide computed local key material to said network device. The network devices are configured to determine a shared key with any one of multiple network devices. A network device comprises a shared key unit (330) arranged to derive a shared key from another network device's identity number and at least two of the multiple local key materials of the network device.

Abstract: A switch device (10) and method for generation of energy for operating the switch device (10), wherein the switch device (10) is provided with a drive unit (120) interacting with an actuation device operable by a user, and with a moving device (130) configured to be set in motion by the drive unit (120), and with an energy harvester (132, 140, 140a) for providing energy to the switch device (10) in dependence on a motion of the moving device (130), such that energy for commands or other operations is provided to the switch device (10). The moving device (130) is configured to be repeatedly repositioned in relation to a defined zero position, as long as it has kinetic energy, in order to provide kinetic energy which can be converted in electric energy by the energy harvester (132, 140, 140a). Such an electromechanical device for generating energy can ensure wireless operation of the switch device (10) without the need of batteries or any other kind of power supply.

Abstract: A key generation device (100) configured to generate a public key (126) for use in a public key encryption device and a corresponding private key (114) for use in a private key decryption device, the key generation device comprising a private key generator (110) configured for obtaining in electronic form a private random value (112, s), and generating the private key (114), the private key comprising the private random value (112), and a public key generator (120) configured for obtaining in electronic form a public set of bivariate polynomials (122, fi(,)), computing a public univariate polynomial (124) by summing over univariate polynomials obtained by substituting the private random value (112, s) into the polynomials of the public set (122, fi(s,)), and generating the public key (126), the public key comprising the public univariate polynomial (124) and the public set (122).

Abstract: The invention relates to a proxy node comprising means for managing a proxy table, a receiver for receiving a message from a first resource restricted device, said message being intended to at least one corresponding destination device, control means for checking whether an entry for the first resource restricted device is included in the set of entries of the proxy table, the set of entries of the proxy table indicating the set of resource-restricted devices the proxy node is in charge of, a transmitter for forwarding the message depending on the result of the proxy table checking, the means for managing the proxy table being arranged for cleaning the proxy table of the entry relative to the resource-restricted device by monitoring the relative usage of the proxy node for forwarding messages for the resource restricted device with the usage of competitor proxy nodes for forwarding messages for the resource restricted device.

Abstract: A computing device is provided configured to compute a data function on a function-input value comprising an electronic storage storing a table network configured for the data function and an electronic processor coupled to the storage and configured to compute the data function by applying the table network, wherein the device is configured to obtain the function-input value as an encoded input value, the encoded input value combines the function-input value together with a state-input value encrypted together into a single value, the table network is configured to take as input the encoded input value and produce as output an encoded output value, the encoded output value combines a function-output value together with a state-output value encrypted data function together into a single value, wherein the function-output value equals the result of applying the data function to the function-input value, and the state-output value equals the result of applying a state function to the state-input value.

Abstract: A method of configuring a network device for key sharing and a method for a first network device to determine a shared key are provided. The method of configuring uses a private modulus (p1) a public modulus (N), and a bivariate polynomial (f1) having integer coefficients, the binary representation of the public modulus and the binary representation of the private modulus are the same in at least key length (b) consecutive bits. Local key material for a network device is generated by substituting an identity number into the bivariate polynomial and reducing modulo the private modulus the result of the substitution to obtain a univariate polynomial. Security may be increased by adding (440) one or more obfuscating numbers to coefficients of the univariate polynomial to obtain an obfuscated univariate polynomial.