Abstract: A hardware device comprising an accelerator enclave and a hardware security module, HSM, the HSM including a first true random number generator, TRNG. The accelerator enclave includes a second TRNG and an accelerator. The HSM is configured to: generate a first session key using the first TRNG; establish a first secure communication channel with a cloud user using the first session key; receive an encrypted hardware configuration bitstream through the first secure communication channel; decrypt the hardware configuration bitstream; configure functional blocks in the at least one accelerator based on the hardware configuration bitstream. The accelerator enclave is configured to: generate a second session key using the second TRNG; establish a second secure communication channel with the cloud user using the second session key as encryption key; receive encrypted input data through the second secure communication channel; decrypt the encrypted input data; process the input data using the functional blocks.

Abstract: A method for processing an intrusion in a communication network including a plurality of node equipment, including a current node, which: discovers of a neighborhood of the current node, including assigning a resilience group to the neighboring node, according to at least one piece of information representative of a resilience level of the neighboring node to at least one type of attack; detecting an intrusion affecting at least one suspect node of the neighborhood of the current node; establishing a consensus concerning the at least one suspect node in a neighborhood by counting a number of resilience groups having detected the intrusion in the neighborhood of the suspect node and a total number of resilience groups represented in the neighborhood of the suspect node; and deciding to change a status of the suspect node based on a result of the consensus by comparison of both numbers.

Abstract: A method for processing an intrusion in a communication network including a plurality of node equipment, including a current node, which: discovers of a neighbourhood of the current node, including assigning a resilience group to the neighbouring node, according to at least one piece of information representative of a resilience level of the neighbouring node to at least one type of attack; detecting an intrusion affecting at least one suspect node of the neighbourhood of the current node; establishing a consensus concerning the at least one suspect node in a neighbourhood by counting a number of resilience groups having detected the intrusion in the neighbourhood of the suspect node and a total number of resilience groups represented in the neighbourhood of the suspect node; and deciding to change a status of the suspect node based on a result of the consensus by comparison of both numbers.