Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. The nodes offer an end-to-end solution for protecting against network-based attacks. The nodes can include network gateways that allow remote systems, such as servers located at an entity's place of operation or a data center accessible by the entity, to securely transmit data between the nodes and the remote systems. For example, the network gateways can transmit split data into different portions, and transmit each portion over a different path through a public network to mitigate the effects of man-in-the-middle attacks. Once data reaches a node, transmission of the data from one node to another can pass through multiple intermediary nodes via the dedicated private network. The nodes and/or remote systems may also include cross-domain guard devices that control whether data can pass from one security domain to another.

Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. A user can access data stored in one or more system nodes if a multi-factor authentication is successful. The multi-factor authentication can include using the structure of a person's vein (or artery) as one of the factors used to determine whether to authenticate a user. The structure of a person's vein (or artery) can be captured using a vein reader coupled to or embedded within a user device. For example, the vein reader can be coupled to the user's smartphone or can be embedded within the user's smartphone. Once captured, the vein reader can encode the user's vein structure to produce a vein ID that can then be used for authentication purposes.

Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. The nodes offer an end-to-end solution for protecting against network-based attacks. The nodes can also execute applications locally at the request of a user device such that a user operating the user device can use the applications executed locally on the nodes as if the applications were executing locally on the user device. To protect user data, the nodes may not transmit any user data to the user device. Rather, a node can generate a graphical representation of the environment in which the applications are executed, and transmit the graphical representation to the user device. As the user performs actions that result in a change of a graphical view of the environment in which the applications are executed, the node can generate and transmit new graphical representations of the environment to the user device.

Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. The nodes offer an end-to-end solution for protecting against network-based attacks. For example, a single node can receive and store user data via a data flow that passes through various components of the node. The node can be designed such that communications internal to the node, such as the transmission of encryption keys, are partitioned or walled off from the components of the node that handle the publicly accessible data flow. The node also includes a key management subsystem to facilitate the use of encryption keys to encrypt user data.

Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. A user can access data stored in one or more system nodes if a multi-factor authentication is successful. The multi-factor authentication can include using the structure of a person's vein (or artery) as one of the factors used to determine whether to authenticate a user. The structure of a person's vein (or artery) can be captured using a vein reader coupled to or embedded within a user device. For example, the vein reader can be coupled to the user's smartphone or can be embedded within the user's smartphone. Once captured, the vein reader can encode the user's vein structure to produce a vein ID that can then be used for authentication purposes.

Abstract: A plurality of system nodes coupled via a dedicated private network is described herein. The nodes offer an end-to-end solution for protecting against network-based attacks. For example, a single node can receive and store user data via a data flow that passes through various components of the node. The node can be designed such that communications internal to the node, such as the transmission of encryption keys, are partitioned or walled off from the components of the node that handle the publicly accessible data flow. The node also includes a key management subsystem to facilitate the use of encryption keys to encrypt user data.