公开(公告)号：US10708295B1

公开(公告)日：2020-07-07

申请号：US15611074

申请日：2017-06-01

Applicant: Architecture Technology Corporation

Inventor： Ryan L. Hagelstrom ,  Ranga S. Ramanujan ,  Nathan E. Bahr

IPC: H04L29/06 ,  H04L12/715 ,  H04L12/18 ,  H04L12/46

Abstract: A method of cyber-attack protection is provided. The method includes receiving a unicast packet at a first router and determining whether a destination for the unicast packet is behind a cooperating router. If the destination for the unicast packet is behind a cooperating router, the unicast packet is tunneled from the first router to a tunnel multicast address to which the cooperating router subscribes.

公开(公告)号：US10555238B1

公开(公告)日：2020-02-04

申请号：US15916000

申请日：2018-03-08

Applicant: Architecture Technology Corporation

Inventor： John Wu ,  Ranga S. Ramanujan

IPC: H04W40/12 ,  H04L12/721 ,  H04L29/06 ,  H04L29/08 ,  H04W84/18 ,  H04W76/14 ,  H04W4/46

Abstract: Embodiments for a method for enhancing communication for one or more unmanned aerial vehicles (UAVs) are also disclosed. The method includes receiving, at a first communication enhancement module of a first UAV, a STANAG 4586 message from an upstream module. The STANAG 4586 message indicates a MUCS as its destination. A multi-hop path to the MUCS via at least one other communication enhancement module is identified. It is determined whether a point-to-point wireless link or the multi-hop route is a better path to the MUCS. If a point-to-point wireless link is a better path, the message is sent over the point-to-point wireless link to the MUCS. If the multi-hop route is a better path, the message is modified to create a modified message having a format corresponding to the communication enhancement modules. The modified message is then sent to the other communication enhancement module(s) on the multi-hop path.

公开(公告)号：US10482773B1

公开(公告)日：2019-11-19

申请号：US15622142

申请日：2017-06-14

Applicant: Architecture Technology Corporation

Inventor： Barry A. Trent ,  Ranga S. Ramanujan ,  Fabio F. Pozzo

IPC: G08G5/00 ,  G06Q10/04 ,  G05D1/00 ,  G01C21/20

Abstract: A method of generating a path for a vehicle is disclosed. The method includes receiving information indicating a location of each of a plurality of communication nodes. The vehicle is configured to send wireless signals to and receive wireless signals from the plurality of communication nodes. A path of motion for the vehicle is determined based on coverage of the plurality of communication nodes along the path. Coverage corresponds to connectivity between the vehicle and the plurality of communication nodes.

公开(公告)号：US12192181B2

公开(公告)日：2025-01-07

申请号：US18117768

申请日：2023-03-06

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Timothy Hartley ,  Deborah Charan ,  Ranga S. Ramanujan

IPC: H04W12/02 ,  G06F21/60 ,  H04L9/40 ,  H04L47/2441 ,  H04L49/201 ,  H04L69/22 ,  H04W4/06 ,  H04L45/16 ,  H04L69/04

Abstract: Disclosed herein are embodiments of systems, methods, and products comprising a computing device, which provides Efficient Data-In-Transit Protection Techniques for Handheld Devices (EDITH) to protect data-in-transit. An end user device (EUD) may generate a multicast data packet. The EDITH module of the EUD encapsulates the data packet in a GRE packet and directs the GRE packet to a unicast destination address of an EDITH Multicast Router included in an infrastructure. The EDITH module on the EUD double compresses and double encrypts the GRE packet. The EDITH module on the infrastructure decrypts and decompresses the double compressed and double encrypted GRE packet to recreate the GRE packet. The EDITH module on the infrastructure decapsulates the GRE packet to derive the original multicast data packet, and distributes the original multicast data packet to the multiple group member based on the multicast destination address included in the original multicast data packet.

公开(公告)号：US11824930B1

公开(公告)日：2023-11-21

申请号：US17987222

申请日：2022-11-15

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Benjamin L. Burnett ,  Ranga S. Ramanujan

IPC: H04L29/08 ,  H04L29/06 ,  H04L67/1095 ,  H04L67/01

CPC classification number: H04L67/1095 ,  H04L67/01

Abstract: Disclosed herein are embodiments of a cloud data synchronization system enabling an user operating a mobile client device to download mission-specific data sets from a fixed cloud-based server system to a database of the mobile client device, and then use the downloaded data sets independently on the mobile client device when the mobile client device is disconnected from a network connecting to the fixed cloud-based server system. When connectivity to the fixed cloud-based server system is re-established by the mobile client device in an intermittent and bandwidth-limited communication network environment, the fixed cloud-based server system may provide bi-directional data synchronization between records of the fixed cloud-based server system and the mobile client device to update the data sets on the fixed cloud-based server system and the mobile client device while operating in the intermittent and bandwidth-limited communication network environment.

公开(公告)号：US11675889B1

公开(公告)日：2023-06-13

申请号：US17093206

申请日：2020-11-09

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Jafar Al-Gharaibeh ,  Timothy Hartley ,  Ranga S. Ramanujan

IPC: G06F21/40 ,  G06F21/60 ,  G06F21/31 ,  H04L9/40

CPC classification number: G06F21/40 ,  G06F21/316 ,  G06F21/602 ,  H04L63/102 ,  H04L63/0815

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise a computing device, which allows a device to be used in different classification levels by powering the device down and booting to a different classified level without the need to switch hard drives. The disclosed software shield and persona switcher (Shielder) module provides independent application environments (personas) for separate security domains while allowing fast transition between personas. Shielder module supports multiple security classification via a minimal system storage partitioning. Shielder module allows efficient collection and reallocation of memory and persistent storage according to need and priority. Shielder module provides secure management of communication media by directing the system communication according to the security profile of the active persona.

公开(公告)号：US11539524B1

公开(公告)日：2022-12-27

申请号：US16946940

申请日：2020-07-13

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Ranga S. Ramanujan ,  Deborah K. Charan ,  Barry A. Trent ,  Jordan C. Bonney

IPC: H04L9/00 ,  H04L9/32 ,  H04L9/40

Abstract: Embodiments for a computer readable medium including a software module are provided. The software module causes one or more processing devices to obtain a biometric identifier from a user. Access to a resource is requested by providing a software credential token and the biometric identifier. The software credential token corresponds to a hardware credential token, and the hardware credential token is one of a set of hardware credential tokens that are used to access the resource. An indication that access to the resource has been granted is received and after receiving the indication an indication that the access to the resource has been revoked is received. After receiving the indication that access to the resource has been revoked, a biometric identifier is re-obtained from a user and access to the resource is re-requested by providing a software credential token and the re-obtained biometric identifier.

公开(公告)号：US11431548B2

公开(公告)日：2022-08-30

申请号：US16813142

申请日：2020-03-09

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Timothy E. Hartley ,  Ranga S. Ramanujan ,  Clint M. Sanders

IPC: H04L29/06 ,  H04L9/40 ,  H04L12/46 ,  H04L45/02 ,  H04L47/785 ,  G06F9/455

Abstract: Embodiments for a method of implementing multiple domains in a network switching device are disclosed. The method includes assigning a plurality of hardware ports to a plurality of domains. Ports are assigned to at least two of the plurality of domains, and none of the ports are concurrently assigned to multiple domains. The method also includes loading rules for forwarding packets between the plurality of ports into a data plane. The rules direct the data plane to forward only between ports in a common domain of the plurality of domains. The method also includes assuring that a packet received at any port assigned to a first domain is not sent in legible form from any port assigned to a second domain if an error causes the data plane to forward or request forwarding the packet to any port assigned to a second domain.

公开(公告)号：US11218569B1

公开(公告)日：2022-01-04

申请号：US16842625

申请日：2020-04-07

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： John Wu ,  Nathan E. Bahr ,  Ranga S. Ramanujan

IPC: H04L29/06 ,  H04L29/08

Abstract: A method of embedding information in a packet with low overhead is provided. The method includes receiving an IP packet at a first networking device and translating it into an intermediary packet having a non-IP header and a data field. Translating includes copying at least the transport layer data field into the data field of the intermediary packet, compressing the IP header, and embedding out-of-band data into the non-IP header of the intermediary packet. The intermediary packet is sent to second networking device. At the second networking device the intermediary packet is translated into a re-created IP packet. The re-created IP packet is sent toward a destination of the original IP packet.

公开(公告)号：US20200328972A1

公开(公告)日：2020-10-15

申请号：US16812917

申请日：2020-03-09

Applicant: ARCHITECTURE TECHNOLOGY CORPORATION

Inventor： Ranga S. Ramanujan ,  Benjamin L. Burnett ,  Barry A. Trent ,  Jafar Al-Gharaibeh

IPC: H04L12/741 ,  H04L12/751 ,  H04L12/729 ,  H04W40/00 ,  H04L12/707

Abstract: A method of routing an Internet Protocol (IP) packet from a routing device is provided. The method includes receiving a first IP packet having a first IP header and a first IP data field, the first IP packet having a final destination corresponding to a destination device communicatively coupled to the routing device via a network route including at least two hops between the routing device and the final destination. A second IP packet having a second IP header and a second IP data field is generated. The second IP data field is a copy of the first IP data field, and a destination IP address field in the second IP header includes an IP address of a next hop on the network route. The second IP packet does not include an IP address of the final destination in the second IP header.