SYSTEMS AND METHODS FOR A SECURED COMMUNICATION BETWEEN COMPUTERS AND PERIPHERAL DEVICES

    公开(公告)号:WO2023043896A1

    公开(公告)日:2023-03-23

    申请号:PCT/US2022/043623

    申请日:2022-09-15

    IPC分类号: G06F21/85 G06F21/60 H04B10/25

    摘要: A system for a secured communication between a computer and peripheral devices includes a fiber isolator transmitter coupled to a computer and one or more fiber-optic pairs; a fiber isolator receiver coupled to one or more peripheral devices and the one or more fiber-optic pairs; and the one or more fiber-optic pairs configured to transfer optical data signals between the fiber isolator transmitter and the fiber isolator receiver. The fiber isolator transmitter and the fiber isolator receiver are configured so corresponding video data and audio data flows from the computer to a corresponding display device(s) and/or speaker(s), respectively, of the one or more peripheral devices via one optical fiber of a corresponding fiber optic pair of the one or more fiber-optic pairs and USB data flow from the one or more peripheral devices to the corresponding computer via a particular optical fiber of the one or more fiber optic pairs.

    DISPENSING DEVICE, DECRYPTION DEVICE AND ACCESS DEVICE

    公开(公告)号:WO2023042088A1

    公开(公告)日:2023-03-23

    申请号:PCT/IB2022/058655

    申请日:2022-09-14

    申请人: INEPRO GROUP B.V.

    IPC分类号: G06F21/60 G06F21/35 G06F21/85

    摘要: A dispensing device (100) an operating system (13) for controlling a product and access means (15) that selectively provide a user with access to the product. The access devices receive an dispense request (25) from a user's personal access device (20,22) and route it to the operating system (13). The access means include identification means (16,17) to generate a unique request identifier with the dispense request and are capable of cryptographically encrypting the dispense request (25) together with the unique request identifier (∑,ID) into a cryptographically encrypted dispense request (35). The operating system (13) is coupled with decryption and validation means (50,55) capable and configured to decrypt the cryptographically encrypted dispense request (35) and derive the unique request identifier (∑,ID) from it. The decryption and validation agents validate the decrypted dispense request (25) based on the unique request identifier (∑,ID) and will value the decrypted request identifier as being valid only once.

    PROCEDE ET DISPOSITIF DE CONTROLE D'ACCES A UN SUPPORT DE STOCKAGE

    公开(公告)号:WO2022269207A1

    公开(公告)日:2022-12-29

    申请号:PCT/FR2022/051251

    申请日:2022-06-24

    申请人: ORANGE

    摘要: Un procédé de contrôle d'accès à un support de stockage via un bus de communication comporte la réception (E11), via le bus de communication, d'un ensemble de signaux électriques comportant un signal électrique représentatif d'une commande d'opération destiné à mettre en œuvre une opération sur au moins une zone du support de stockage. Le procédé de contrôle comporte en outre : - la vérification (E2) de la valeur d'au moins un paramètre relatif à au moins un signal électrique de l'ensemble de signaux électriques reçu; et - l'autorisation (E31) ou le refus (E32) de la mise en œuvre de la commande d'opération sur ladite au moins une zone du support de stockage, en fonction du résultat de ladite vérification (E2).

    VEHICLE NETWORK FOR MANAGING A BOOT INTEGRITY FAILURE

    公开(公告)号:WO2022100903A1

    公开(公告)日:2022-05-19

    申请号:PCT/EP2021/073334

    申请日:2021-08-24

    摘要: The invention relates to a vehicle network for managing a boot integrity failure, comprising: - a central communication unit, - a plurality of domains comprising one or a plurality of electronic control units, each electronic control unit being configured to execute a secure boot process, - said central communication unit being configured to communicate with each electronic control unit via a primary communication channel, Wherein said vehicle network further comprises: - a vehicle integrity supervisor, - a local integrity supervisor within some electronic control units, - a secondary communication channel between each local integrity supervisor and the vehicle integrity supervisor, - said local integrity supervisors being further configured to send a failure log to the vehicle integrity supervisor via the secondary communication channel when there is a boot integrity failure, - said vehicle integrity supervisor being further configured to send back to said local integrity supervisors via said secondary communication channel an acknowledgment and/or an appropriate countermeasure command regarding said failure log, - said local integrity supervisor being further configured to enforce said appropriate countermeasure command.

    TESTING-AND-MANUFACTURING KEYS FOR A SYSTEM-ON-CHIP

    公开(公告)号:WO2022093185A1

    公开(公告)日:2022-05-05

    申请号:PCT/US2020/057504

    申请日:2020-10-27

    申请人: GOOGLE LLC

    摘要: Systems and techniques are described for implementing testing-and-manufacturing keys for a system-on-chip (SoC). A hardware test portion of the SoC is configured to exercise features of domains that process data being communicated across the fabrics during an externally initiated test. In response to receiving a testing-and-manufacturing token from an external test system, a testing- and-manufacturing key support component of the SoC generates a testing-and-manufacturing key. The hardware test portion is configured to execute a test function to promote security of the SoC, however, only in response to the testing-and-manufacturing security component authenticating the testing-and-manufacturing key. Through implementing testing-and-manufacturing keys this way, the system-on-chip secures access to potentially sensitive functions and secrets, while allowing their unencumbered and authorized access for testing the system-on-chip during various life cycle states.

    SECURE DATA EXTRACTION FROM COMPUTING DEVICES USING UNIDIRECTIONAL COMMUNICATION

    公开(公告)号:WO2021247674A1

    公开(公告)日:2021-12-09

    申请号:PCT/US2021/035406

    申请日:2021-06-02

    摘要: A micro data capture device can be configured to operate as a unidirectional connection from a first computing device to a second computing device. The micro data capture device can include a data capture side comprising a first universal serial bus (USB) interface configured to connect to the first computing device so as to extract data from the first computing device. The micro data capture device can further include a monitoring apparatus comprising an interceptor configured to copy data from the data capture side so as to define the unidirectional connection. Further, the micro data capture device can define a data storage side comprising a second USB interface configured to connect to the second computing device so as to transfer data to the second computing device. The data storage side can be configured to receive data from the data storage side via the monitoring apparatus. In some cases, the data capture side has only volatile memory, and the data storage side includes non-volatile memory. Further, the data capture side can be physically separate from the data storage side.