公开(公告)号：US11190587B1

公开(公告)日：2021-11-30

申请号：US17170597

申请日：2021-02-08

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Benjamin L. Burnett ,  Ranga S. Ramanujan

IPC: H04L29/06 ,  H04L29/08 ,  G06F9/50

Abstract: Disclosed herein are embodiments of a cloud data synchronization system enabling an user operating a mobile client device to download mission-specific data sets from a fixed cloud-based server system to a database of the mobile client device, and then use the downloaded data sets independently on the mobile client device when the mobile client device is disconnected from a network connecting to the fixed cloud-based server system. When connectivity to the fixed cloud-based server system is re-established by the mobile client device in an intermittent and bandwidth-limited communication network environment, the fixed cloud-based server system may provide bi-directional data synchronization between records of the fixed cloud-based server system and the mobile client device to update the data sets on the fixed cloud-based server system and the mobile client device while operating in the intermittent and bandwidth-limited communication network environment.

公开(公告)号：US10659476B2

公开(公告)日：2020-05-19

申请号：US15262979

申请日：2016-09-12

Applicant: Architecture Technology Corporation

Inventor： Ranga Ramanujan ,  Benjamin L. Burnett

IPC: H04L29/06 ,  H04L12/28

Abstract: This disclosure is directed to monitoring a crypto-partitioned, or cipher-text, wide-area network (WAN). A first computing device may be situated in a plain-text portion of a first enclave behind a first inline network encryptor (INE). A second device may be positioned in a plain-text portion of a second enclave behind a second INE. The two enclaves may be separated by a cipher-text WAN, over which the two enclaved may communicate. The first computing device may receive a data packet from the second computing device. The first computing device may then determine contents of a header of the data packet. The first computing device may, based at least in part on the contents of the header of the data packet, determine a status of the cipher-text WAN.

公开(公告)号：US10547679B1

公开(公告)日：2020-01-28

申请号：US15860431

申请日：2018-01-02

Applicant: Architecture Technology Corporation

Inventor： Benjamin L. Burnett ,  Ranga S. Ramanujan

IPC: H04L29/08 ,  H04L29/06

Abstract: Disclosed herein are embodiments of a cloud data synchronization system enabling an user operating a mobile client device to download mission-specific data sets from a fixed cloud-based server system to a database of the mobile client device, and then use the downloaded data sets independently on the mobile client device when the mobile client device is disconnected from a network connecting to the fixed cloud-based server system. When connectivity to the fixed cloud-based server system is re-established by the mobile client device in an intermittent and bandwidth-limited communication network environment, the fixed cloud-based server system may provide bi-directional data synchronization between records of the fixed cloud-based server system and the mobile client device to update the data sets on the fixed cloud-based server system and the mobile client device while operating in the intermittent and bandwidth-limited communication network environment.

公开(公告)号：US20170310638A1

公开(公告)日：2017-10-26

申请号：US15639045

申请日：2017-06-30

Applicant: Architecture Technology Corporation

Inventor： Benjamin L. Burnett ,  Deborah K. Charan ,  Fabio Pozzo ,  Ranga Ramanujan

IPC: H04L29/06 ,  H04L12/24

Abstract: This disclosure describes a context aware scalable dynamic network whereby network information concerning network elements in an untrusted (Black) network are gathered by network sensors, stored at a network sensor collector, and sent to another network sensor collector in a trusted (Red) network through a one-way guard. At the Red network, the network information from the Black network may be combined with network information from one or more Red networks. The combined network information may then be used to visualize a cross-domain network topology of both Red and Black networks, and to implement network management functions.

公开(公告)号：US11824930B1

公开(公告)日：2023-11-21

申请号：US17987222

申请日：2022-11-15

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Benjamin L. Burnett ,  Ranga S. Ramanujan

IPC: H04L29/08 ,  H04L29/06 ,  H04L67/1095 ,  H04L67/01

CPC classification number: H04L67/1095 ,  H04L67/01

Abstract: Disclosed herein are embodiments of a cloud data synchronization system enabling an user operating a mobile client device to download mission-specific data sets from a fixed cloud-based server system to a database of the mobile client device, and then use the downloaded data sets independently on the mobile client device when the mobile client device is disconnected from a network connecting to the fixed cloud-based server system. When connectivity to the fixed cloud-based server system is re-established by the mobile client device in an intermittent and bandwidth-limited communication network environment, the fixed cloud-based server system may provide bi-directional data synchronization between records of the fixed cloud-based server system and the mobile client device to update the data sets on the fixed cloud-based server system and the mobile client device while operating in the intermittent and bandwidth-limited communication network environment.

公开(公告)号：US11729185B2

公开(公告)日：2023-08-15

申请号：US17663597

申请日：2022-05-16

Applicant: Architecture Technology Corporation

Inventor： Ranga Ramanujan ,  Benjamin L. Burnett

IPC: H04L9/40 ,  H04L12/28 ,  H04L69/22

CPC classification number: H04L63/1408 ,  H04L12/2854 ,  H04L63/1441 ,  H04L63/1458 ,  H04L63/1483 ,  H04L69/22 ,  H04L2463/121

Abstract: This disclosure is directed to monitoring a crypto-partitioned, or cipher-text, wide-area network (WAN). A first computing device may be situated in a plain-text portion of a first enclave behind a first inline network encryptor (INE). A second device may be positioned in a plain-text portion of a second enclave behind a second INE. The two enclaves may be separated by a cipher-text WAN, over which the two enclaved may communicate. The first computing device may receive a data packet from the second computing device. The first computing device may then determine contents of a header of the data packet. The first computing device may, based at least in part on the contents of the header of the data packet, determine a status of the cipher-text WAN.

公开(公告)号：US20230155836A1

公开(公告)日：2023-05-18

申请号：US17931407

申请日：2022-09-12

Applicant: Architecture Technology Corporation

Inventor： Benjamin L. Burnett ,  Jafar Al-Gharaibeh

IPC: H04L9/32 ,  H04L9/06

CPC classification number: H04L9/3236 ,  H04L9/3231 ,  H04L9/0643

Abstract: In general, the techniques of this disclosure describe a system for secure serverless authentication. An authenticator node of the system may receive indications of values of authentication factors associated with an entity. The authenticator node may hash the values of the authentication factors to generate double hashed values of the authentication factors. The authenticator node may compare the double hashed values of the authentication factors with trusted authentication information that is encoded in entity credentials associated with the entity. The authenticator node may determine, based at least in part on comparing the double hashed values of the authentication factors with the trusted authentication information, whether the entity is a trusted entity.

公开(公告)号：US20230063618A1

公开(公告)日：2023-03-02

申请号：US17929926

申请日：2022-09-06

Applicant: Architecture Technology Corporation

Inventor： Benjamin L. Burnett ,  Deborah K. Charan ,  Ian J. McLinden ,  Jordan C. Bonney

IPC: H04L47/2441 ,  H04L47/762 ,  H04L41/084 ,  H04L41/0816 ,  H04L41/08 ,  H04L47/78 ,  H04W16/28 ,  H04W76/19 ,  H04B7/06

Abstract: This disclosure is directed to network optimization in a complex joint network for increasing the network utility of the complex joint network. A computing device in the complex joint network may receive a data flow via a complex joint network. The computing device may determine, based on a network template, a mission utility associated with the data flow and a traffic class associated with the data flow. The computing device may control one or more quality of service decisions based at least in part on the mission utility associated with the data flow and the traffic class associated with the data flow.

公开(公告)号：US10999262B1

公开(公告)日：2021-05-04

申请号：US15959709

申请日：2018-04-23

Applicant: Architecture Technology Corporation

Inventor： Ranga Ramanujan ,  Benjamin L. Burnett

IPC: H04L29/06

Abstract: In general, the techniques of this disclosure describe a hub device that is configured to receive data packets from both secured client devices and non-secured client devices. The hub device may send the data packets from the secured client devices to a host device. For the data packets from the non-secured client devices, the hub device may first process the data packets to ensure the integrity of the received non-secure data packets and then send the non-secure data packets to the host device once the hub device determines that the non-secure data packets meet some threshold level of integrity.

公开(公告)号：US20200328972A1

公开(公告)日：2020-10-15

申请号：US16812917

申请日：2020-03-09

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Ranga S. Ramanujan ,  Benjamin L. Burnett ,  Barry A. Trent ,  Jafar Al-Gharaibeh

IPC: H04L12/741 ,  H04L12/751 ,  H04L12/729 ,  H04W40/00 ,  H04L12/707

Abstract: A method of routing an Internet Protocol (IP) packet from a routing device is provided. The method includes receiving a first IP packet having a first IP header and a first IP data field, the first IP packet having a final destination corresponding to a destination device communicatively coupled to the routing device via a network route including at least two hops between the routing device and the final destination. A second IP packet having a second IP header and a second IP data field is generated. The second IP data field is a copy of the first IP data field, and a destination IP address field in the second IP header includes an IP address of a next hop on the network route. The second IP packet does not include an IP address of the final destination in the second IP header.