Abstract: Automatic key rolling for link encryption is described. In accordance with the described techniques, data packets are encrypted at a first endpoint of a communication link using a first data encryption key. The encrypted data packets are communicated over the communication link to a second endpoint. A key rolling event that is known by both the first endpoint and the second endpoint is detected at the first endpoint. Responsive to detecting the key rolling event, the first data encryption key is rolled to a second data encryption key for encrypting data packets communicated over the communication link. In one or more implementations, the second endpoint is also configured to roll from the first data encryption key to the second data encryption key responsive to the key rolling event in order to decrypt data packets encrypted with the second data encryption key which are received from the first endpoint.

Abstract: An apparatus can include at least one test circuit configured to determine if bits sampled at a sample frequency from at least one bit generator are random, and a circuit configured to adjust the sample frequency if the at least one test circuit determines that the sampled bits are not random. The apparatus can be a random number generator. A method may include sampling bits at a first sample frequency, and sampling bits at a second sample frequency if the sampled bits associated with the first sample frequency are not random.

Abstract: Method and apparatus for sanitizing a memory using bit-inverted data. In accordance with various embodiments, a memory location is sanitized by sequential steps of reading a bit value stored in a selected memory cell of the memory, inverting the bit value, and writing the inverted bit value back to the selected memory cell. The memory cell may be erased between the reading and writing steps, as well as after the writing step. Random bit values may be generated and stored to the memory cell, and run-length limited constraints can be used to force bit-inversions.

Abstract: The disclosure is related systems and methods for using operation durations of a data storage medium to generate random numbers. In one embodiment, a device may comprise a random number generator circuit configured to store a value representing a duration of an operation on the data storage medium, and generate a random number based on the value. Another embodiment may be a method comprising recording durations of access operations to a data storage medium, and generating a random number based on the durations.

Abstract: Method and apparatus for the non-destructive, selective purging of data from a non-volatile memory. In accordance with various embodiments, multiple copies of a selected set of confidential user data having a common logical address are stored to a confidential data portion of a non-volatile memory so that each copy is in a different location within the confidential data portion. A nondestructive purge of all said copies from the confidential data portion is carried out responsive to an externally supplied selective purge command so that all said copies are erased and other, non-purged confidential user data remain stored in the confidential data portion.

Abstract: An apparatus includes: a plurality of bit producing circuits; a controller setting a sample frequency at which bits from the bit producing circuits are sampled; and a plurality of test circuits determining if bits sampled from each of the bit producing circuits are random, wherein the controller adjusts the sample frequency if the test circuits determine that the sampled bits are not random. A method performed by the apparatus is also included.

Abstract: Method and apparatus for encrypting and storing data to provide data security and memory cell bit wear leveling. In accordance with various embodiments, input data are provided for writing to a target page of memory in a storage array. A seed value is derived from a count value indicative of a number of times a write access has occurred on the target page of memory. A block encryption routine is applied to the input data using the seed value to generate encrypted output data that are thereafter written to the target page.

Abstract: Method and apparatus for the non-destructive, selective purging of data from a non-volatile memory. In accordance with various embodiments, multiple copies of a selected set of confidential user data having a common logical address are stored to a confidential data portion of a non-volatile memory so that each copy is in a different location within the confidential data portion. A nondestructive purge of all said copies from the confidential data portion is carried out responsive to an externally supplied selective purge command so that all said copies are erased and other, non-purged confidential user data remain stored in the confidential data portion.

Abstract: Method and apparatus for sanitizing a memory using bit-inverted data. In accordance with various embodiments, a memory location is sanitized by sequential steps of reading a bit value stored in a selected memory cell of the memory, inverting the bit value, and writing the inverted bit value back to the selected memory cell. The memory cell may be erased between the reading and writing steps, as well as after the writing step. Random bit values may be generated and stored to the memory cell, and run-length limited constraints can be used to force bit-inversions.

Abstract: The present invention is a data storage device that includes a control chip with a zeroizable root key. In one embodiment, the control chip comprises a digital memory, the zeroizable root key being a derived root key obtained by applying a firmware root key to a different root key stored within the digital memory such that the setting of each bit of the different root key is locked.

Abstract: Method and apparatus for compressing data. In accordance with various embodiments, an input string of data bits is received and arranged into fixed-sized chunks. Multiple successive chunks of the input string are compared to previously received chunks of the input string during a single clock cycle. At least two alternative encoding solutions are identified based on matches obtained during said comparison. The input string is compressed to form a compressed output string using a selected one of the at least two alternative encoding solutions that achieves a fewer number of bits in said output string.

Abstract: Method and apparatus for compressing data. In accordance with various embodiments, an input string of data bits is received and arranged into fixed-sized chunks. Multiple successive chunks of the input string are compared to previously received chunks of the input string during a single clock cycle. At least two alternative encoding solutions are identified based on matches obtained during said comparison. The input string is compressed to form a compressed output string using a selected one of the at least two alternative encoding solutions that achieves a fewer number of bits in said output string.

Abstract: Method and apparatus for encrypting and storing data to provide data security and memory cell bit wear leveling. In accordance with various embodiments, input data are provided for writing to a target page of memory in a storage array. A seed value is derived from a count value indicative of a number of times a write access has occurred on the target page of memory. A block encryption routine is applied to the input data using the seed value to generate encrypted output data that are thereafter written to the target page.

Abstract: An apparatus includes: a plurality of bit producing circuits; a controller setting a sample frequency at which bits from the bit producing circuits are sampled; and a plurality of test circuits determining if bits sampled from each of the bit producing circuits are random, wherein the controller adjusts the sample frequency if the test circuits determine that the sampled bits are not random. A method performed by the apparatus is also included.

Abstract: An apparatus comprises at least one port for coupling signals to the apparatus, a mode selector for setting the apparatus to a normal mode or a debug mode, and a port control for controlling access to secure information in the apparatus through the port in accordance with the selected mode. A method for controlling access to the port is also provided.

Abstract: A data storage system comprises a storage element, and an encryption and decryption unit connected between a host and the storage element, and using a key that is generated in the data storage system.

Abstract: A germicidal method and apparatus for destroying airborne pathogenic bacteria such as tuberculosis bacteria using ultraviolet light. Air is drawn through a filter and into a sterilization chamber that is irradiated with ultraviolet light, and out through an exhaust opening. Consideration for the characteristics of the room in which the apparatus is installed and the positioning of the installation allows effective prevention of transmission of disease through expectoration and inhalation of airborne microdroplets of bacteria-containing sputum. The filter is of the low-density type which traps large particulates, but not small particulates of the size of the microdroplets, so that the filter does not become a bacteria colonization site. Baffles on the air intake opening and air exhaust opening to prevent ultraviolet light from escaping into the environment. The sterilization chamber is constructed such that the air passes the ultraviolet light bulbs twice as it circulates therethrough.

Abstract: A germicidal method and apparatus for destroying airborne pathogenic bacteria such as tuberculosis bacteria using ultraviolet light. Air is drawn through a filter and into a sterilization chamber that is irradiated with ultraviolet light, and out through an exhaust opening. Consideration for the characteristics of the room in which the apparatus is installed and the positioning of the installation allows effective prevention of transmission of disease through expectoration and inhalation of airborne microdroplets of bacteria-containing sputum. The filter is of the low-density type which traps large particulates, but not small particulates of the size of the microdroplets, so that the filter does not become a bacteria colonization site. Baffles on the air intake opening and air exhaust opening to prevent ultraviolet light from escaping into the environment. The sterilization chamber is constructed such that the air passes the ultraviolet light bulbs twice as it circulates therethrough.

Abstract: A germicidal method and apparatus for destroying airborne pathogenic bacteria such as tuberculosis bacteria using ultraviolet light. Air is drawn through a filter and into a sterilization chamber that is irradiated with ultraviolet light, and out through an exhaust opening. Consideration for the characteristics of the room in which the apparatus is installed and the positioning of the installation allows effective prevention of transmission of disease through expectoration and inhalation of airborne microdroplets of bacteria-containing sputum. The filter is of the low-density type which traps large particulates, but not small particulates of the size of the microdroplets, so that the filter does not become a bacteria colonization site. Baffles on the air intake opening and air exhaust opening to prevent ultraviolet light from escaping into the environment. The sterilization chamber is constructed such that the air passes the ultraviolet light bulbs twice as it circulates therethrough.

Abstract: A plurality of angularly offset orifices (29) are disposed within a fuel line (13) to meter a flow of fuel therethrough. A first set (23) of orifices each have a length (L) (27) and a diameter (D) (31) having a first L/D ratio. A second set (35) of orifices each have a second L/D ratio.