Abstract: A manner of securing data that includes receiving a first plurality of hashes corresponding to data stored in a database, writing the first plurality of hashes to a private distributed ledger technology (DLT), sealing each block of the private DLT when a predetermined criteria is met to create a plurality of sealed blocks and writing a second plurality hashes corresponding to the plurality of sealed blocks to a public DLT.

Abstract: A gateway device configured to receive, from an integrated development environment (IDE), a system configuration for a target device including application code for execution on the target device, the configuration being received via an encrypted network connection. The gateway device provisions the target device with the application code, receives, from the IDE, instructions via the encrypted network connection to execute the application code on the remote device and instructs the application code to execute on the remote device.

Abstract: The exemplary embodiments are related to a pipeline manager configured to manage a software development pipeline. The pipeline manager receives, via a user interface (UI), a representation of a pipeline comprising a plurality of blocks, wherein each block comprises a defined input and a defined output, executes each block of the pipeline, validates output of each block of the pipeline based on the execution of the block and stores the output of each block and updating data that defines the pipeline based on the output of each block.

Abstract: A high assurance kernel executed by a safety certified hypervised system using a separation kernel. The high assurance kernel includes a first level of the separation kernel configured to perform first security features associated with a hypervisor, the first level configured to run on a primary core and a second level of the separation kernel configured to augment the first security features with second security features, the second level implemented on a separate protected component from the primary core, the first level and the second level communicating with one another through a physical separation between the first and second levels. The high assurance kernel may further include a third level of the separation kernel configured as a virtual machine to perform third security features associated with the hypervisor.

Abstract: The exemplary embodiments are related to a device, a system, and a method for implementing a hardware mechanism that is configured to validate the performance of scheduling software utilized by a safety-critical system. The hardware device may receive an indication that a first frame of a frame schedule is in use. The hardware device may also monitor a time parameter corresponding to the first frame. The hardware device may also determine whether an indication that a second frame of the frame schedule is in use is received prior to the expiration of the time parameter. When the indication that the second frame of the frame scheduler is in use is not received prior to the expiration of time parameter, the hardware device may send a signal to an operating system of the safety-critical system indicating that an error in executing the frame scheduled has occurred.

Abstract: The exemplary embodiments described herein relate to systems and methods for identifying and authenticating a mobile platform. One embodiment relates to a method comprising receiving, by a mobile platform, a digital certificate from an integrated circuit card (“ICC”) via close-proximity radio communication, verifying the digital certificate with a digital signature stored on the mobile platform, and booting the mobile platform upon verification of the digital certificate of the ICC. A further embodiment relates to a mobile platform, comprising a non-transitory computer readable storage medium storing a digital signature, and a processor receiving a digital certificate from an integrated circuit card (“ICC”) via close-proximity radio communication between the ICC and the mobile platform, verifying the digital certificate with the digital signature, booting the mobile platform upon verification of the digital certificate of the ICC.

Abstract: A device, system, and method performs an adaptive simulation. The method performed by a similar includes receiving a release to be incorporated into a user device, the user device being a deployed device. The method includes receiving a profile of the user device, the profile being indicative of settings and usage information of the user device. The method includes generating a simulated user device corresponding to the user device, the simulated user device having a simulated profile corresponding to the profile. The method includes performing, by the simulator, a simulation for the release based upon the simulated user device and the simulated profile.

Abstract: A device, system, and method performs an image compression. The method includes receiving raw image data of an image and identifying objects in the image as one of a foreground object or a background object. The method includes generating first foreground image data for a first foreground object. The method includes generating first metadata for a first background object. The first metadata indicates a first identity and a first descriptive parameter for the first background object. The first descriptive parameter relates to how the first background object is situated in the image. The method includes generating first background image data for the first background object. The first background image data is empty data. The method includes storing processed image data for the image comprising the first foreground image data, the first metadata, and the first background image data.

Abstract: Described is a two-phase spinlock that controls access to a resource from a plurality of threads. The two-phase spinlock receives requests from threads to acquire the resource, places the threads in a first queue associated with a first phase of the two-phase spinlock, determines whether at least one of a predetermined number of slots in a second phase of the two-phase spinlock is available and when the slots are unavailable, processes an interrupt served by a select one of the threads based on a number of attempts by the selected thread to enter the second phase.

Abstract: A method and system for providing configuration information to an Internet of Things (IoT) device. The method is performed at an IoT device and includes identifying a predetermined condition. The method further includes transmitting, via a network, a first signal to a first server based on identifying the predetermined condition and receiving ownership information from the first server. The ownership information includes contact information for a second server that is configured to provide configuration information to the IoT device. The method further includes transmitting a second signal to the second server and receiving configuration information from the second server. The method further includes performing an operation based on the configuration information.

Abstract: A system and method for implementing a generation lock for protecting a data structure is provide. The systems and methods synchronizes read and write transactions for a protected data structure in a multitasking environment and provides low latency and improved scalability. For example, a system and method for implementing a generation lock for protecting a data structure may be provided. The generation lock provides an improved mechanism for restricting access to a data structure that is typically read more often than written. Specifically, the generation lock provides a method for reading and writing to a protected data structures that has a low average latency as compared to traditional read/write semaphores. The generation lock also provides a mechanism in which the system is scalable, meaning that the addition of additional processor cores is capable of increasing the performance, e.g., rate of executing requests, of the system, and is not or is not substantially rate limited by a shared resource.

Abstract: A device, system, and method determines a forwarding delay through a networking device. The method is performed at the networking device including a transceiver and an always running timer (ART). The method includes generating a first timestamp using a first clock of the transceiver when a packet to be forwarded has been received. The method includes capturing a first ART time corresponding to the first timestamp. The method includes generating a second timestamp using a second clock of the transceiver when the packet to be forwarded has been transmitted. The method includes capturing a second ART time corresponding to the second timestamp. The method includes determining a forwarding delay based on the first and second timestamps and the first and second ART times.

Abstract: A device, system, and method perform lossy compression for images and signals by identifying regions with a low density of features. The method performed at a sensor communicatively connected to a receiver includes capturing sensor data. The method includes selecting a position in the sensor data. The method includes determining a local entropy of the position based on an entropy operation that indicates a probability distribution of a plurality of available values. When the local entropy is below a predetermined threshold, the method includes applying a first pre-processing operation to the position that averages features included in the position. The method includes transmitting the pre-processed sensor data corresponding to the position to the receiver.

Abstract: A computer readable storage medium storing a set of instructions executable by a processor. The set of instructions is operable to receive, from a first processor, a message to be sent to a second processor; store the message in a portion of a shared memory, the shared memory being shared by the first processor and the second processor; store, in an instruction list stored in a further portion of the shared memory, an instruction corresponding to the message; and prompt the second processor to read the message list.

Abstract: Described herein are systems and methods for implementing a processor-local (e.g., a CPU-local) storage mechanism. An exemplary system includes a plurality of processors executing an operating system, the operating system including a processor local storage mechanism, wherein each processor accesses data unique to the processor based on the processor local storage mechanism. Each of the plurality of processors of the system may have controlled access to the resource and each of the processors is dedicated to one of a plurality of tasks of an application. The application including the plurality of tasks may be replicated using the processor local storage mechanism, wherein each of the tasks of the replicated application includes an affinity to one of the plurality of processors.

Abstract: A device, system, and method processes a request for allocation of a resource of an electronic device utilizing a secure supervisor system call. The method includes receiving a call from a requesting application of the electronic device, the call indicating the request for allocation of the resource of the electronic device. The method includes determining whether the call is authorized to receive the resource of the electronic device. The determining includes determining whether the call includes a signature that is generated based upon a predetermined signature operation and determining whether the signature is valid based upon the predetermined signature operation when the call includes the signature. The method includes processing the request for the allocation of the resource when the call is determined to be authorized.

Abstract: A device, system, and method synchronizes time partition windows. The method performed at a first electronic device includes receiving a clock signal from a second electronic device, the clock signal indicating a modification to synchronize a first clock of the first electronic device to a second clock of the second electronic device. The method includes generating an operating system tick interrupt based on the clock signal, the operating system tick interrupt indicating a modification to synchronize a first operating system tick of the first electronic device to a second operating system tick of the second electronic device. The method includes generating a first schedule of first time partition windows based on the first operating system tick. The first schedule of the first time partition windows is synchronized to a second schedule of second time partition windows of the second electronic device.

Abstract: A device, system, and method protects cryptographic keying material. The method is performed at an electronic device including a plurality of components housed in an enclosure. The method includes determining a tamper state of the enclosure, the tamper state being one of a secure state in which the enclosure has not been physically tampered or an unsecure state in which the enclosure has been physically tampered. When the tamper state is the secure state, the method includes associating a first value with the application. When the tamper state is the unsecure state, the method includes associating a second value with the application. The first value is configured to enable access to the data in the data storage unit. The second value prevents access to the data in the data storage unit.

Abstract: A system includes a memory including a plurality of software applications. The plurality of software applications includes a first software application and a second software application. The system also includes a deterministic group comprising a first processing core. The first processing core executes a first resource monitor and the first software application. The system also includes a constrained group comprising a second processing core. The second processing core executes a second resource monitor and the second software application. The first resource monitor detects an insufficient access to resources by the first software application and sends an indication to the second resource monitor. The second resource monitor receives the indication and instructs the second processing core to modify execution of the second software application.

Abstract: A device, system, and method secures executable operations through verification of an operation prior to execution. The method performed at an electronic device comprising a processor in an execution state and a memory representable with a memory map includes receiving a request for the operation from an application installed on the electronic device, the request including a location in the memory map. The method includes determining whether the location is within one of at least one address range included in a security policy register generated prior to the execution phase, the at least one address range respectively corresponding to at least one authorized operation. The method includes, when the location is within one of the at least one address range, servicing the request to perform the operation.