Abstract: A network authorization system includes an authorization interface, an authorizer, and a network interface. The authorization interface receives a network connection request to access an external network and generates a characteristic of a portable component. The authorizer compares the characteristic to a predetermined characteristic, generates an authorization token responsive to the characteristic matching the predetermined characteristic, uses the authorization token to authenticate the network connection request, and transmits a first notification to the authorization interface that the characteristic matched the predetermined characteristic.

Abstract: A chip-scale gyrometric apparatus is disclosed. In embodiments, the chip-scale gyrometric apparatus includes a dielectric substrate and an antenna element attached thereto for receiving an inbound signal having an initial phase. The apparatus includes a splitter for splitting the inbound signal into two equivalent signals, and two coils connected to the splitter. The first coil carries one of the split signals in a clockwise (CW) path relative to a rotational axis, while the second coil carries the other split signal in a counterclockwise (CCW) path relative to the same axis. An integrated circuit (IC) on the substrate and connected to the first and second coils measures a phase shift between the first and second signals (e.g., deviation from the initial phase) based on their respective CW and CCW paths and determines, based on the measured phase shift, a degree of rotation relative to the common rotational axis.

Abstract: A hardware malware profiling and detection system is disclosed. In embodiments, the system includes a primary (e.g., trusted) system including template processors and hardware sensors. The template processors submit input vectors to the primary system and characterize the system response via power trace data collected by the hardware sensors. Based on the input vectors and power trace data, the template processors generate system templates and derive system challenges therefrom. The template processors submit the system challenges to a remote system under test and characterize the remote system response in real time via identical remote hardware sensors. The template processors correlate the real-time remote system response data with the system templates corresponding to the issued challenges to detect system anomalies or malware within the remote system or its components.

Abstract: A redundant processing system with profile-based monitoring is disclosed. In embodiments, the redundant system includes two or more redundant lanes, each lane having equivalent processing components. In a testing state, template processors and hardware monitoring sensors are connected to a selected trusted lane and input vectors submitted thereto; the hardware sensors characterize the response of the selected lane and the resulting testing data compiled into system templates. In an operational environment, the template processors send challenges based on the input vectors to each of the redundant lanes in real time, collecting response data from each lane via identical sets of monitoring sensors. The template processors correlate the response data with the corresponding system templates, identifying anomalous lanes and system anomalies based on discorrelations between the response data and the system templates.

Abstract: A receiver device includes an acquisition engine and a reconfiguration engine. The acquisition engine uses a first circuit size. The acquisition engine is configured to receive a first signal including a plurality of first satellite vehicle signals, and identify a first satellite vehicle based on the first signal. The reconfiguration engine is configured to receive an indication that the acquisition engine identified the first satellite vehicle, and responsive to receiving the indication, generate a reconfiguration file defining a second circuit size less than the first circuit size. The reconfiguration engine is configured to cause the acquisition engine to be reconfigured based on the reconfiguration file to use the second circuit size.

Abstract: A system-in-package (SIP) incorporating die-in-die cavity packaging may include hybrid dies fabricated by milling or otherwise creating a cavity through the additive surfaces of a primary application specific integrated circuit (ASIC) die configured for flip-chip bonding and encapsulating a secondary die such as a Flash/non-volatile memory module, analog-digital converter (ADC), or other processing circuit into the cavity. The primary and secondary dies are then connected by the addition of redistribution layers. The resulting hybrid die may then be vertically integrated into the SIP along with additional memory modules or dies.

Abstract: A fault indication method for equipment includes receiving a fault signal indicative of a fault of a device; energizing a light emitter based on the received fault indication, in which a luminous material is made to fluoresce based on receipt of light emitted by the light emitter; detecting fluorescence of the luminous material by a light detector, and outputting a voltage and/or current indicative of the fluorescence; and providing a fault output signal when the voltage and/or current exceeds a predetermined value.

Abstract: A secured enclosure system and a method for configuring a secured enclosure system are disclosed. The secured enclosure system includes at least one processing module for implementing a processing task, a security module in communication with the processing module for providing a trust anchor functionality to the processing module, a secure backplane in communication with the at processing module for monitoring a connection with the processing module, and a security controller module in communication with the secure backplane for providing a root of trust, for serving as a local system controller, and for serving as a key/certificate manager. An enclosure encloses the components of the system and includes a physical security component for detecting an interference with the enclosure.

Abstract: A method and system for securely distributing human-machine input/output to multi-level displays in a multi-level security environment is disclosed. The method and system in accordance with the present disclosure provides the ability to take input from common input devices and manages the input to ensure that the input is delivered only to the intended security domain/level and that the input is delivered only to the intended display element within the intended security domain/level. Furthermore, architectures configured for supporting the multi-level security display with secure input/output are also disclosed.

Abstract: A present novel and non-trivial decryption system and methods are disclosed for reducing latency associated with the decryption and execution of stored, encrypted instructions. The system comprises a storage device, a processor, a controller, a key generator, a plurality of memory banks, a plurality of bus switches, and a combiner. Upon receiving a processor command, the controller changes the switch positions of a plurality of switches, where a first switch is operatively coupled to a key generator, a second switch to a combiner for performing a combinatory decryption process, and both switches to plurality of memory banks. When a partition is switched, the processor executes data of an instruction immediately upon completion of the combinatory decryption process using at least one character retrieved from one memory bank while the next decryption key is generated and loaded into another memory bank at the same time.

Abstract: A present novel and non-trivial decryption system and methods are disclosed for the secure storing of bulk data using one-time pad (“OTP”) encryption. A storage device could be initialized with an OTP prior to encrypting data received from a data source. Parts of the OTP may be retrieved and used to encrypt the data. Once the data has been encrypted, it may be stored in the same location(s) from where parts of the OTP were retrieved with an optional sterilization of the locations being performed during the encryption process. Besides a data source, an initialize station could be used to facilitate the initializing of the OTP onto the storage device, storing OTP parameters corresponding to the OTP, and deleting the OTP. Additionally, a retrieval station could be used to facilitate the retrieval and decryption of encrypted code using the OTP used in the encryption process.

Abstract: The present invention is directed to an integrated circuit, a method and a system for executing a sequence of instruction loaded from an external storage element and ensuring the authenticity of the sequence of instructions via RAM paging. In one embodiment, the integrated circuit includes a processor for executing a sequence of instructions loaded from an external storage element. To ensure the authenticity of the sequence of instructions from the external storage element, the processor supports Multiple Independent Levels of Security (MILS) or another partitioning scheme. A zeroizer is included to zeroize the on-die memory banks thereby ensuring that the processor is incapable of accessing residual sequences of instructions as loaded and stored from the external storage element thereby ensuring the authenticity of the sequence of instructions executed by the processor.

Abstract: A communication system comprises a covert channel detector. The covert channel detector can be used in a multi-level security system (MLS) or multiple single levels of security (MSLS). The covert channel detector detects covert channels in a cryptographic system. The cryptographic system can be used in a military radio system.

Abstract: A spoofer location system includes a number of receivers that receive positioning signals. A data engine receives information from the receivers and determines a location of a spoofer source signal. The location of the spoofer source signal is determined by determining a range from each of the number of receivers to the source. The system can be employed in a global positioning system. The spoofer location system can be utilized with guided munitions and other vehicles.

Abstract: An electronic device includes a die, a first circuit substrate connected to the die, and a second circuit substrate closely coupled to the first circuit substrate. The die is located between the first and second circuit substrates and is protected from tampering by the close coupling of the first and second circuit substrates. The circuit substrates may be circuit carrying elements (e.g. circuit boards) or may be additional die, may be any number of other substrates, and/or may be a combination of substrates. The device may include a cavity such that the die is located in the cavity. The cavity could be formed by any number of means. The device may also include a second die connected to the second substrate such that the first die and second die are located in proximity to each other on opposite sides of the cavity.