Abstract: An advanced data guard with an encrypted keyword list that allows wild card constructions in the encrypted keyword list without the need to perform any decryption of the keyword list. The data guard may include a message parsing section that extracts individual words from a message, a wild card expansion section that expands each extracted message word into an expanded list of all possible wild card constructions, an encryption section that encrypts the individual message words in the expanded list to produce an encrypted list and a comparison section that compares each word in the encrypted message list against each encrypted word in the encrypted keyword list. The result of the comparison section may be presented to a rules engine to determine the appropriate action, which may include, for example, prohibiting or permitting transmission of the message, sending an alarm and/or logging the event.

Abstract: A system and method for dynamic security domain data protection through passive monitoring of data storage. The present invention may be implemented using data breakpoints to trigger invocation of the data flow analysis routines. A data breakpoint register may be associated with the memory location of each item of target data. Upon attempted access, a data breakpoint interrupt is triggered, which pauses execution and runs data flow analysis and security routines to determine the appropriate action. The present invention may be implemented using a virtual paging system having a memory management unit configured to generate a page fault upon any attempt to access target data. The virtual paging system may have a virtual page that contains target data and that page may be actively managed so that each attempted access to target data results in a page fault, which pauses execution and runs data flow analysis routines to determine appropriate action.

Abstract: A method of scheduling and controlling asynchronous tasks to provide deterministic behavior in time-partitioned operating systems, such as an ARINC 653 partitioned operating environment. The asynchronous tasks are allocated CPU time in a deterministic but dynamically decreasing manner. In one embodiment, the asynchronous tasks may occur in any order within a major time frame (that is, their sequencing is not statically deterministic); however, the dynamic time allotment prevents any task from overrunning its allotment and prevents any task from interfering with other tasks (whether synchronous or asynchronous).

Abstract: A method of scheduling and controlling asynchronous tasks to provide deterministic behavior in time-partitioned operating systems, such as an ARINC 653 partitioned operating environment. The asynchronous tasks are allocated CPU time in a deterministic but dynamically decreasing manner. In one embodiment, the asynchronous tasks may occur in any order within a major time frame (that is, their sequencing is not statically deterministic); however, the dynamic time allotment prevents any task from overrunning its allotment and prevents any task from interfering with other tasks (whether synchronous or asynchronous).

Abstract: A system and method utilizing two image sensors to simultaneously capture images of a FOV (field of view). The image sensors are arranged along the same optical path for viewing the FOV. The FOV is illuminated by an illuminator of a specific frequency band. An image is captured by the first image sensor which has a filter that passes at least a portion of the light of the frequency band of the illuminator. An image is captured by the second image sensor that has a filter to pass a band of frequencies adjacent to, but generally not including the frequency band of the illuminator. The images may be manipulated, for example, to provide enhanced performance and/or compensate for variables in the system. A processor subtracts the images to produce an image that represents light reflected back from the illuminator, excluding ambient light at the frequency of the illuminator.

Abstract: A system and method utilizing two image sensors to simultaneously capture images of a FOV (field of view). The image sensors are arranged along the same optical path for viewing the FOV. The FOV is illuminated by an illuminator of a specific frequency band. An image is captured by the first image sensor which has a filter that passes at least a portion of the light of the frequency band of the illuminator. An image is captured by the second image sensor that has a filter to pass a band of frequencies adjacent to, but generally not including the frequency band of the illuminator. The images may be manipulated, for example, to provide enhanced performance and/or compensate for variables in the system. A processor subtracts the images to produce an image that represents light reflected back from the illuminator, excluding ambient light at the frequency of the illuminator.