Abstract: An image processor, system and method of processing an image, the method comprising receiving a first image; obfuscating the first image by dividing the first image into at least one sub-image; transmitting the at least one sub-image to at least one user device; receiving, from the or each user device, analysis data relating to the at least one sub-image; and processing the analysis data to provide an analysed image.

Abstract: A method of establishing a network by sharing a secret between a first entity (A) and a second entity (B), comprising the steps of: the first entity (A) broadcasting (100) an ANNOUNCE message announcing its identity and details of other entities it is aware of, wherein each of the other entities of which it is aware is associated with a particular nonce, and the message is encrypted using a broadcast encryption scheme common to the first and second entities (A,B), and; the second entity (B), upon receiving and decrypting the ANNOUNCE message, transmitting (110) to the first entity (A) a SHARE message, wherein the SHARE message comprises a signcryption of the secret, authenticated using signcryption data associated with the particular nonce associated with the second entity (B).

Abstract: Disclosed is a cryptographic key distribution method and apparatus for installing a cryptographic key in an ECU. The method comprises: establishing a first communication link between the ECU and a key source; sending, via the first link, a first cryptographic key from the key source to the ECU; establishing a second communication link between the key source and a key manager; sending, via the second link, the first key from the key source to the key manager; encrypting, by the key manager, using the first key, a second cryptographic key; sending, by the key manager, to the ECU, the encrypted second key; and decrypting, by the ECU, using the first key, the encrypted second key, thereby providing the ECU with the second key.

Abstract: A method and apparatus for use in an ad hoc network, comprising: a node transmitting an extended allowable hold time value to a further node; the node changing its transmission behavior such that the further node stops receiving transmission from the node for an extended period, for example by pausing transmission at least in the direction of the further node; and the further node treating the link to the node as intact during the extended allowable hold time. The transmitting of the extended allowable hold time value may be performed earlier than a next routine transmission of routine allowable hold time value would have been sent. The method may further comprise the node being instructed to maintain topology information for an extended time.

Abstract: A control system for an unmanned vehicle includes a control processing unit which receives input signals from one or more sensors and supplies output signals to one or more actuators. Processing modules are divided into a plurality of successively linked stages. In a first stage, multiple processing modules produce substantially equivalent payload data when operating correctly. Message cryptography units generate cryptographically signed messages containing the payload data. In a second stage, a voting cryptography unit receives and examines the cryptographically signed messages, and applies voting logic to derive a validated payload data for use by the respective processing module of the second stage.

Abstract: A method of establishing a network by sharing a secret between a first entity (A) and a second entity (B), comprising the steps of: the first entity (A) broadcasting (100) an ANNOUNCE message announcing its identity and details of other entities it is aware of, wherein each of the other entities of which it is aware is associated with a particular nonce, and the message is encrypted using a broadcast encryption scheme common to the first and second entities (A,B), and; the second entity (B), upon receiving and decrypting the ANNOUNCE message, transmitting (110) to the first entity (A) a SHARE message, wherein the SHARE message comprises a signcryption of the secret, authenticated using signcryption data associated with the particular nonce associated with the second entity (B).

Abstract: A method and apparatus in an ad hoc network, comprising: a node advertising a theoretical destination it is not currently connected to as part of a theoretical route; allocating to the theoretical destination a special metric value that gives a reduced likelihood of selection as a suitable route compared to conventionally available routes; determining that a message from a further node is to be transmitted via the theoretical route; the node receiving the message from the further node when the node is at a first location and storing the message; the node moving from the first location to a second location thereby transforming the theoretical route into a new real route; and the node transmitting the message to a second further node as part of the new real route.

Abstract: A method and apparatus for use in an ad hoc network, comprising: a node transmitting an extended allowable hold time value to a further node; the node changing its transmission behavior such that the further node stops receiving transmission from the node for an extended period, for example by pausing transmission at least in the direction of the further node; and the further node treating the link to the node as intact during the extended allowable hold time. The transmitting of the extended allowable hold time value may be performed earlier than a next routine transmission of routine allowable hold time value would have been sent. The method may further comprise the node being instructed to maintain topology information for an extended time.

Abstract: A control system (100) for an unmanned vehicle (10) includes a control processing unit (102) which receives input signals from one or more sensors (101) and supplies output signals to one or more actuators (103). Processing modules (110) are divided into a plurality of successively linked stages (120). In a first stage (120A), multiple processing modules (110) produce substantially equivalent payload data when operating correctly. Message cryptography units (140) generate cryptographically signed messages (800) containing the payload data. In a second stage, a voting cryptography unit (130) receives and examines the cryptographically signed messages, and applies voting logic to derive a validated payload data for use by the respective processing module (120) of the second stage. A control method is also described.

Abstract: A method of secure information sharing between a first domain and a plurality of destination domains, the method comprising: a. Processing a file at the first domain to establish a set of attributes of the file, the attributes of the file comprising a destination attribute for determining permitted domains to which the file may be sent, b. Encrypting the file at the first domain using the attributes of the file, and thereby generating an encrypted file, c. providing the first domain with, for a first destination domain, a first egress data guard comprising a destination attribute associated with the first destination domain, d. identifying that the encrypted file is desired to be communicated to the first destination domain, e.