Abstract: Unlike point-to-point request/reply systems, where data is exchanged between pairs of endpoints, in publish-subscribe systems the publisher entity may have to send data to many subscribing entities (subscribers), which can range from a handful to hundreds, thousands, or more. These systems may be used for critical applications that require security. Security requires an authentication phase where the publisher can securely identify subscribers and determine they have the necessary permissions to receive the information they send. Likewise, the subscribers need to authenticate the publishers to ensure they are entitled to produce the information they send. With this invention, a method is provided for performing secure and scalable distribution of symmetric keys from a publisher to one or more subscribers in publish-subscribe system. In addition, a method is provided for performing secure and scalable distribution of cached data samples from a publisher to one or more subscribers in a publish-subscribe system.

Abstract: Object Management Group (OMG) Data Distribution Service (DDS) DomainParticipants communication methods and system are provided using the Real-Time Publish Subscribe (RTPS) wire protocol over one or more wide area networks (WAN). Three main issues are addressed: Network Address Translation traversal, Changes in IP addresses, and Efficient bandwidth utilization. Embodiments lead to a scalable solution for WAN Connectivity of DDS Applications using RTPS Wire Protocol. This is a connectionless solution that works on top of UDP as the IP transport. The key benefits of this solution are: Low latency communication with reliable and best-effort data delivery, Minimal data loss when moving across networks, including firewalls/NATs, Minimal migration impact for existing applications. No changes to the API, and Scalability using UDP versus legacy TCP solution.

Abstract: Bridging data distributed service (DDS) domains in a networked system based on discovery data is provided. Each DDS domain includes DDS software applications capable of publishing data and subscribing to data. A DDS domain bridge is communicatively coupled with the DDS software applications of both DDS domains. The DDS domain bridge monitors discovery data provided by the DDS software applications for a topic name, a topic type, and/or QoS properties. The DDS domain bridge includes creation rules and enabling rules controlling input/output DDS dataflow objects. Based on the state of the DDS dataflow objects set by the rules, uni- or bi-directional DDS dataflow is established between the input and output DDS dataflow objects enabling data propagation between DDS software applications of DDS domains.

Abstract: Bridging data distributed service (DDS) domains in a networked system based on discovery data is provided. Each DDS domain includes DDS software applications capable of publishing data and subscribing to data. A DDS domain bridge is communicatively coupled with the DDS software applications of both DDS domains. The DDS domain bridge monitors discovery data provided by the DDS software applications for a topic name, a topic type, and/or QoS properties. The DDS domain bridge includes creation rules and enabling rules controlling input/output DDS dataflow objects. Based on the state of the DDS dataflow objects set by the rules, uni- or bi-directional DDS dataflow is established between the input and output DDS dataflow objects enabling data propagation between DDS software applications of DDS domains.