Abstract: A jobsite computer network has a local server connectable to a remote server via the internet, a network access transceiver connected to the local server, and a wireless device in wireless communication with the network access transceiver. The network access transceiver receives a message from the wireless device and sends a message to the local server. The local server utilizes information from the message to determine the location of the wireless device. The network access transceiver and/or the wireless device generate data which is sent to the remote server.

Abstract: An interchangeable electro-mechanical lock core for use with a lock device having a locked state and an unlocked state is disclosed. The interchangeable electromechanical lock core may include a moveable plug having a first position relative to a lock core body which corresponds to the lock device being in the locked state and a second position relative to a lock core body which corresponds to the lock device being in the unlocked state.

Abstract: The present invention provides an encrypting device including an encryption unit and a communications unit. Paired encrypting devices allow for communication of trusted data between trusted devices over an untrusted network. Data received by the encryption unit is encrypted and provided with a connectionless header for delivery to the communications unit. Data received by the communications units is provided with a complex header for delivery to the paired encrypting device. The encrypting devices may be implemented in hardware or may be virtualized on a server or a plurality of servers. Arrangement of the encrypting devices in a hub-and-spoke topology allows for communication amongst a plurality of trusted devices. The encrypting devices can be used to convert commercially available equipment suitable for high assurance environments.

Abstract: A processor and methods are provided for detecting fault in a control flow. The processor includes an instruction set architecture defining a pair of FLOWSET and FLOWCHECK opcodes and FLOWSET and FLOWCHECK operations. This pair of opcodes and associated operation works together with a CFI shadow stack to detect faults in an intended flow of instructions. Upon detection of a fault, a fault notice is provided. The methods of detecting fault in a control flow may be implemented using hardware or software and a shadow stack.

Abstract: A method of protecting a return address on a computer stack is disclosed. Two stacks are created, the first a normal stack, and the second, or shadow, having shadow frames containing the return address upon a subroutine call, the address on the first stack where the return address is stored, and a user-definable state variable which is used to identify a shadow frame as a return address. Before returning from a subroutine, the two return addresses are compared, and if they do not match, the second stack is searched down, and then up, for a matching return address. If there is a match, the shadow is re-synchronized with the first stack by comparing the stored values of the first stack pointer with the first stack pointer and adjusting appropriately the shadow stack pointer. The matching shadow frame must also be a return address datatype of return address.