Abstract: Processing circuitry is configured to obtain a data structure that defines a plurality of conversions of data between pairs of fields; perform a search to identify a plurality of paths from a source node of the data structure to a destination node of the data structure, wherein the source node corresponds to a first field of the fields and the destination node corresponds to a second field of the fields; convert, for each path of the plurality of paths, transforms represented by corresponding edges of the path to a sequence of transforms that conform to a solver format; process the sequence of transforms for each path to determine whether all paths of the plurality of paths are equivalent up to an equivalence relation; and output an indication of whether all paths of the plurality of paths are equivalent up to an equivalence relation.

Abstract: An application of intrusion tolerant concepts to a software infrastructure for supporting secure group applications. This application is suited for use with network layer protocols such as TBRPF and is particularly adapted for wireless networks, and more specifically mobile ad hoc networks.

Abstract: The inventive subject matter provides reliable methods and apparatus for secure communication within a network collaboration group including a VPN. Distribution of critical group data to member nodes (such as encryption keys for communication with other member nodes) is preferably handled by master nodes in a manner relatively resistant to misbehavior by current, past, or other nodes, and to outsider attacks such as replay attacks. A particular embodiment enables distribution of critical group data by master nodes to member nodes in a manner that offers confidentiality (the critical data cannot be read by eavesdropper), integrity (the receiving member node has evidence that the critical data has not been tampered with in transit), authenticity (the receiving member node has evidence that the critical data was sent by a master node), and freshness (the critical data is not a replay of a previous message).

Abstract: The invention provides an inexpensive intrusion tolerant serverless architecture and protocols for authentication and key management for large-scale self organizing networks of small embedded systems. Localized protocols for establishing trust relationships between neighboring devices are provided as well as methodologies for the building of more global authentication and key distribution from such localized trust. Embodiments include wired and wireless networks.

Abstract: Invention provides MANET plus VPN: secure virtual private subgroups communicating within a mobile ad hoc network. Wireless communication system is taught suitable for ad hoc mobile wireless as well as mesh and peer to peer networks. Also taught relative to MANET is an embodiment wherein network protocols, including TBRPF, are employed at the network layer, and upon which another layer, Enclaves, provides capability for secure VPN (virtual private networks) within the MANET.

Abstract: An application of intrusion tolerant concepts to a software infrastructure for supporting secure group applications. This application is suited for use with network layer protocols such as TBRPF and is particularly adapted for wireless networks, and more specifically mobile ad hoc networks.