Browse Topic: Cryptography

Items (81)

aster combustion and lower cycle-to-cycle variability are mandatory tasks for naturally aspirated engines to reduce emission levels and to increase engine efficiency. The promotion of a stable and coherent tumble structure is considered as one of the best way to promote the in-cylinder turbulence and therefore the combustion velocity. During the compression stroke the tumble vortex is deformed, accelerated and its breakdown in smaller eddies leads to the turbulence enhancement process. The prediction of the final level of turbulence for a particular engine operating point is crucial during the engine design process because it represents a practical comparative means for different engine solutions. The tumble ratio parameter value represents a first step toward the evaluation of the turbulence level at ignition time, but it has an intrinsic limit. The tumble ratio parameter represents the value of the angular velocity of a single macro vortex, while the flow-field is often characterized by multiple vortexes, sometimes some rotating and some counter-rotating. The idea at the basis of the paper is: To develop a quasi-predictive 0D model for defining the final mean level of the turbulence at the ignition time. The model is fed by the curtain intake valve mass flow rate and the intake valve lift trend. In order to validate the 0D model the results were compared versus 3D CFD results. To extract from a 3D CFD flow field at IVC the type and the number of the vortexes. The 3D CFD RANS simulations were performed by AVL Fire code v. 2010. To demonstrate through some 3D CFD results that the flow field structure was a function only of the engine type and the load condition. Finally the flow field structure could be used in the 0D model on varying the engine speeds as a means of improvement of the model prediction capability.

Mutagaana, Festo

Blockchain Applications for Rotorcraft Component Tracking

F-0076-2020-16304

10/5/2020

In this paper we propose a hierarchical distributed database architecture (HDDA) for tracking rotorcraft configuration, usage, and health state down to the component-level. We leverage key blockchain technologies to guarantee data integrity and provide auditable and verifiable data lineage records, enabling a fleet-wide distributed architecture that scales from onboard edge nodes to enterprise server clusters. HDDA's unique design supports key rotorcraft use cases at all organizational levels, including onboard collection of rotorcraft health and usage data by edge nodes, automated record keeping to reduce maintenance burden and error for ground support personnel, fleet-wide data analysis of individual rotorcraft components to achieve longer maintenance free operating periods and improved rotorcraft health state awareness at all organizational levels. We describe the high-level design of HDDA and provide rationale for our design choices.

Taijala, Taavi, Moffatt, John, Bharadwaj, Raj

Protecting Patients and Their Data from Cyberattacks Aimed at Their Connected Health Devices

TBMG-37357

8/1/2020

The security of connected health technology is often assumed to exist when it does not, or considered to be prohibitively expensive or complex, or, worst of all, relegated to an afterthought. This is dangerous thinking, especially as the industry increasingly moves to a smartphone-based command-and-control model for these safety-critical applications.

Challenges in Integrating Cybersecurity into Existing Development Processes

2020-01-01444/14/2020

For an established development process and a team accustomed to this process, adding cybersecurity features to the product initially means inconvenience and reduced productivity without perceivable benefits. Adapting development processes to take cybersecurity into account introduces challenges not present in engineering divisions so far. Strategies designed to deal with these challenges differ in the way in which added duties are assigned and cybersecurity topics are integrated into the already existing process steps. Cybersecurity requirements often clash with existing system requirements or established development methods, leading to low acceptance among developers, and introducing the need to have clear policies on how friction between cybersecurity and other fields is handled. A cybersecurity development approach is frequently perceived as introducing impediments, that bear the risk of cybersecurity measures receiving a lower priority to reduce inconvenience. Moreover, this leads to frustration among cybersecurity developers when their proposals are not accepted, and they feel their work is not appreciated. On the other hand, putting too much emphasis on cybersecurity leads to feature creep and makes the development unnecessarily complicated without producing appropriate results. It seems natural to orientate oneself by how safety topics are handled in the development process and adjust this to accommodate cybersecurity. It is, however, not clear in which way these added responsibilities should be assigned, as conflicts of interest occur when a single person must additionally take cybersecurity goals into account, which might be clashing with other project goals this person is responsible for. Ideally, cybersecurity aspects are considered and integrated into development processes not only to fulfill customer and legal requirements, but also to enable developers of functionalities not directly related to cybersecurity to produce better and more robust results as shortcuts are no longer easily possible.

Lenhart, Patric, Arndt, Paul, von Wedel, Jana, Beul, Christian, Weldert, Jan

Data Security Services

J1760_201910 (Current)10/9/2019

The scope of this SAE Recommended Practice is to require the use of the same Security Services as defined by the International Standard ISO/CD 15764, modified by the Class of Security as determined by the resource provider and referenced in Table 1, Extended Data Link Security References.

Motor Vehicle Council

Hands-on Cybersecurity Studies: Multi-Perspective Analysis of the WannaCry Ransomware

TBMG-348648/1/2019

Ransomware is malware that obstructs a user from accessing digital assets through various mechanisms. These assets are held hostage and inaccessible until the user pays a ransom. In most cases, this is accomplished using encryption where, once the malicious program executes, it will target and encrypt certain files and will release the decryption key at the time of payment. Some ransomware instances target only certain common user-generated files such as media and documents. In this case, system files and others required for the operating system to function correctly (user authentication, process execution, etc.) are unaffected. Others encrypt much more and seek to lock out entire systems.

Single-Photon Detector for Potential Encryption and Sensing

TBMG-346006/1/2019

Light is widely used for communications, carrying phone conversations and video signals through fiber optic cables around the world in pulses composed of many photons. Single photons are the weakest signal that can be transmitted and they have a wide range of applications including implementing an encryption technique called quantum key distribution and creating high-resolution maps. Single photons of light typically have very little energy, making them difficult to detect.

Risk Analysis of Blockchain Application for Aerospace Records Management

2019-01-13443/19/2019

Blockchain as a technology has been successfully deployed in the financial industry. As the technology continues to mature, there are opportunities to use this to solve operational challenges in Aerospace. One of the common use cases is replacing paper records as a proof of compliance with a blockchain enabled distributed ledger. Commonly available open source blockchain frameworks have security ingrained in the components. However, replacing paper records with a blockchain based distributed ledger will require investigation of potential risks involved in the end to end usage of this technology for records management. The objective of this paper is to elucidate potential risks in an aviation record management workflow environment enabled by blockchain and suggest requirements to mitigate the risks. In addition requirements for Blockchain based systems will be proposed, which will guarantee minimum functional requirements like Protection of confidential information Integrity of the information in a record Safeguards against unauthorized access The potential gaps are understood using an illustrative end to end blockchain based process along with their conceptual high level intermediate steps. For example: Authenticated trusted digital identities of the participants whose transactions are recorded in distributed ledgers Trusted source which distributes these identities and has a mechanism to update, revoke and safely secure these identities Trusted methods to ensure detection if the digital identities are compromised Trusted method to demonstrate controlled authorization process for digital identities as per access control rules Trusted methods to demonstrate the generation of accounting logs

Kar, Satyanarayan, Kasimsetty, Vinay, Barlow, Susan, Rao, Sujay

Proactive Cybersecurity Saves Healthcare Organizations from Data Breaches

TBMG-339933/1/2019

Over the past few years, healthcare organizations have increasingly become one of the leading targets for cyber criminals with data breaches exposing personal patient data, medical records, and financial information, resulting in millions of dollars of added cost to these institutions. As the healthcare organizations become savvier with their cybersecurity, the criminals just get more creative.

Efficient Security for Cloud-Based Machine Learning

TBMG-339223/1/2019

Outsourcing machine learning is a rising trend in industry. Major tech firms have launched cloud platforms that conduct computation-heavy tasks, such as running data through a convolutional neural network (CNN) for image classification. Resource-strapped small businesses and other users can upload data to those services for a fee and get back results in several hours.

Faster Photons Could Make Data Totally Secure

TBMG-328399/1/2018

Transferring data using light passed along fiber optic cables has become increasingly common over the past decades, but each pulse currently contains millions of photons. That means that in principle, a portion of these could be intercepted without detection. Secure data is already encrypted, but if an eavesdropper was able to intercept the signals containing details of the code, in theory they could access and decode the rest of the message.

Transmitter Protects Wireless Data from Hackers

TBMG-328529/1/2018

Today, more than 8 billion devices are connected around the world, including medical devices, wearables, vehicles, and smart household and city technologies. Those devices are vulnerable to hacker attacks that locate, intercept, and overwrite the data, jamming signals. One method to protect the data is frequency hopping, which sends each data packet, containing thousands of individual bits, on a random, unique radio frequency (RF) channel, so hackers can't pin down any given packet. Hopping large packets, however, is just slow enough that hackers can still execute an attack.

Autonomous Vehicle Engineering: August 2018

18AVEP088/2/2018

Editorial V2Reality Blockchain Unchained! The weird world of cryptocurrency exists because of the intense mathematics of blockchain technology. The mobility sector is looking beyond Bitcoin to put blockchain to work in potentially game-changing ways. Are Blockchain and 'Smart Contracts' the Secure Future? Legal risk and reward of blockchain and smart contracts as a prescription for automotive applications Software Building Blocks for AV Systems Elektrobit's unique software framework is designed to smooth development of automated driving functions. Cyber Security Goes Upstream The first cloud-based solution for connected vehicles was born in Israel and is now pilot testing at global OEMs. Electronic Architectures Get Smart Upgradable, scalable and powerful new architectures will help enable data-hungry connected, autonomous vehicles. Aptiv's VP of Mobility Architecture explains. Reliability, Safety, and AV Development An overemphasis on safety without a robust and equivalent reliabili-ty process and organization will result in errors that could be catastrophic. Understanding the Self-Driving Revolution A new book on autonomy from one of the ultimate insiders. Software Rewrites the Rules Revenue streams and business models are changing as more vehicle functions move to software. Blackberry QNX's John Wall explains. Truck Platoons on the Move Trials increase to determine if fuel economy, safety improvements make platooning worthwhile-but issues still need to be resolved. Defanging Driverless Cars A pioneering program gives everyday people the chance to ride in an automated vehicle on public roads.

Handheld Tracking and Communications Device

TBMG-287044/1/2018

Leaders of teams such as first responders must maintain situational awareness to effectively react, coordinate, and respond to circumstances that can often become hazardous. Effective communications and positional information of assets, including personnel, are critical to decision-makers in coordinating such activities.

Integrated Genomic and Proteomic Information Security Protocol

TBMG-287404/1/2018

The evolving nature of the Internet will require continual advances in authentication and confidentiality protocols. Nature provides some clues as to how this can be accomplished in a distributed manner through molecular biology. Cryptography and molecular biology share certain aspects and operations that allow for a set of unified principles to be applied to problems in either venue.

How to Secure Wireless Sensor Networks

TBMG-285273/1/2018

The Internet of Things (IoT) promises to integrate all sorts of devices, near and far, into a connected web. This web is forecast to see exponential growth. But in the rush for companies to maximize their market share by bringing out new products, there could be a temptation to cut corners by neglecting security issues. Unfortunately, there are no true industry standards in place for IoT right now — they are still evolving.

Tackle the Intricacies of Medical Device Development with a Solid Platform

TBMG-281361/1/2018

Secure Wireless Command Post

TBMG-2765610/1/2017

Pacific Star Communications, Inc. (PacStar) Portland, OR (503) 403-3000

Authenticated Sensor Interface Device

TBMG-268395/1/2017

Researchers at the Savannah River National Laboratory (SRNL) have developed a device to read data, encrypt the information, and distribute it electronically to multiple locations, providing a one-way data pathway that segregates each destination to prevent cross-party data manipulation. Previous “data diode” devices employ computer-based communication channels such as fiber-connected data cards between the sender and receiver. No integrated data authentication is performed, and data is sensitive to external attack and manipulation.

Ad Hoc Selection of Voice Over Internet Streams

TBMG-268735/1/2017

NASA seeks interested parties to license the Ad Hoc Selection for Voice Over Internet (VoIP) Streams technology developed by engineers at Johnson Space Center. This technology features the ability to select specific audio streams from one or more sources and then convert them into a multicast to the user's audio player. This selection ability benefits the user by allowing a wide range of information and/or data to be monitored from a remote location using existing network technologies in near real time. For example, a user with a personal computer equipped with special-purpose audio player software first needs to launch the program and provide an identification and a password. Once both access control checks are completed, the audio software graphic is displayed, including audio stream and volume control buttons. The user can now select up to 21 streams to monitor simultaneously.

Secure and Privacy-Preserving Data Collection Mechanisms for Connected Vehicles

2017-01-16603/28/2017

Nowadays, the automotive industry is experiencing the advent of unprecedented applications with connected devices, such as identifying safe users for insurance companies or assessing vehicle health. To enable such applications, driving behavior data are collected from vehicles and provided to third parties (e.g., insurance firms, car sharing businesses, healthcare providers). In the new wave of IoT (Internet of Things), driving statistics and users’ data generated from wearable devices can be exploited to better assess driving behaviors and construct driver models. We propose a framework for securely collecting data from multiple sources (e.g., vehicles and brought-in devices) and integrating them in the cloud to enable next-generation services with guaranteed user privacy protection. To achieve this goal, we design fine-grained privacy-aware data collection and upload policies that balance between enforcing privacy requirements and optimizing resource consumption (e.g., processing, network bandwidth). The optimal policy will be determined by the privacy index of the integrated multi-source data to be used by the specific service and the desired resource usage. Real-world experiments and privacy leakage analysis are conducted to address privacy issues in vehicle data collection and integration, raise public awareness around privacy leakage, and validate the proposed system.

Li, Huaxin, Ma, Di, Medjahed, Brahim, Wang, Qianyi, Kim, Yu Seung, Mitra, Pramita

CERTIFICATES AND SIGNATURES: How to Ensure Authentication in the IoT

TBMG-264893/1/2017

On October 21, 2016, the Internet saw a significant distributed denial of service (DDoS) attack, conducted via a botnet comprising many co-opted Internet-connected devices. The attackers of the network infrastructure were able to control these Internet-of-Things (IoT) devices for a number of reasons, including a lack of strong authentication. Loaded software turned the machines into puppets that interfered with Internet traffic for millions of users.

Learning the "Keys" of IoT Security

TBMG-2561710/1/2016

Network-connected devices provide many opportunities to improve and enrich people’s lives, but the “Internet of Things” has a range of definitions. A consumer’s experience with the “IoT” may be a wearable computer for fitness tracking. A physician may place a connected heartbeat monitor on a patient. An industrial engineer may see the Internet of Things as thousands of sensor points that provide measurements of temperatures, pressures, or valve states.

Secret Sharing Schemes and Advanced Encryption Standard

TBMG-2553310/1/2016

There are many secret sharing schemes and variations available to hide and reconstruct the given secret. Shamir’s Secret Sharing Scheme, making use of linear Lagrange interpolation on the dealer-generated polynomial, was used to reconstruct the secret from the stipulated threshold number of participants’ shares. Such a scheme had been widely analyzed by mathematicians and computer scientists for potential weaknesses in the reconstruction of the secret by an external eavesdropper.

Using Mathematics to Make Computing on Encrypted Data Secure and Practical

TBMG-2553510/1/2016

In order to make computing on encrypted data more practical to use and more secure from attack, it is necessary to discover, develop, and understand the mathematics on which it is based and the mathematics that can be used to attack it.

CDIF - Transfer Format Encoding - ENCODING.1

EIAIS110 (Current)6/15/2016

The CDIF Family of Standards is primarily designed to be used as a description of a mechanism for transferring information between CASE tools. It facilitates a successful transfer when the authors of the importing and exporting tools have nothing in common except an agreement to conform to CDIF. The language that is defined for the Transfer Format also has applicability as a general language for Import/Export from repositories. The CDIF Integrated Meta-model defined for CASE also has applicability as the basis of standard definitions for use in repositories. The standards which form the complete family of CDIF Standards are documented in EIA/IS-106 CDIF - CASE Data Interchange Format - Overview. These standards cover the overall framework, the transfer format and the CDIF Integrated Meta-model. The diagram in Figure 1 depicts the various standards that comprise the CDIF Family of Standards. The shaded box depicts this Standard and its position in the CDIF Family of Standards. This document describes the standard CDIF Transfer Encoding for the standard CDIF Transfer Syntax as defined in EIA/IS-109 CDIF - Transfer Format - Syntax SYNTAX.1.

Systems Management Council

CDIF - Transfer Format General Rules for Syntaxes and Encodings

EIAIS108 (Current)6/15/2016

The CDIF Family of Standards is primarily designed to be used as a description of a mechanism for transferring information between CASE tools. It facilitates a successful transfer when the authors of the importing and exporting tools have nothing in common except an agreement to conform to CDIF. The language that is defined for the Transfer Format also has applicability as a general language for Import/Export from repositories. The CDIF Integrated Meta-model defined for CASE also has applicability as the basis of standard definitions for use in repositories. The standards which form the complete family of CDIF Standards are documented in EIA/IS-106 CDIF - CASE Data Interchange Format - Overview. These standards cover the overall framework, the transfer format and the CDIF Integrated Meta-model. The diagram in Figure 1 depicts the various standards that comprise the CDIF Family of Standards. The shaded box depicts this Standard and its position in the CDIF Family of Standards. This document describes the way that CDIF meta-models are concretely represented during a transfer and the way that CDIF supports multiple exchange Syntaxes and Encodings. No specific exchange Syntaxes or Encodings are described in this document. EIA/IS-109 CDIF - Transfer Format - Syntax SYNTAX.1 and EIA/IS-110 CDIF - Transfer Format - Encoding ENCODING.1 describe one specific CDIF Syntax and one specific CDIF Encoding.

Systems Management Council

DPA Countermeasures — Theory vs. Practice

TBMG-239612/1/2016

In today’s interconnected world, the information that we generate, store, transmit, and receive has become a valuable commodity. We have increasingly turned to cryptography as a tool to protect the confidentiality and integrity of this information, but we read almost daily about those protections being defeated. Skilled practitioners can often successfully mount attacks using only very modest resources to break unprotected devices. Attacks on FPGA bitstream encryption, as often reported in the open literature, represent significant examples of the DPA (Differential Power Analysis) threat for the aerospace and defense community.

A Hardware-Centric Approach to Countering Side-Channel Threats

TBMG-239672/1/2016

From laptops and mobile devices to cars and airplanes, we are seeing near-daily threats to the systems and devices we use. Systems being used and deployed in the aerospace and defense industry are facing the same problem. As their complexity has increased, so has their attack surface, making them increasingly vulnerable to security threats. There has also been substantial growth in malicious, state-sponsored organizations targeting defense systems that are adept at discovering vulnerabilities, and using them to compromise the integrity of systems and exfiltrate sensitive information.

Final High-Fidelity Down-Conversion Source for Secure Communications Using On-Demand Single Photons

TBMG-2347412/1/2015

Secure communication over long distances requires robust encryption. While current encryption algorithms exist using classical methods, there are no unconditionally secure methods of distributing encryption keys classically. However, by exploiting the quantum nature of individual photons, quantum key distribution (QKD) can be proven as an unconditionally secure method for the distribution of encryption keys. Because QKD operates via the transmission and detection of single photons, there are major challenges for practical use in terms of both key generation rate and the maximum distance over which a secret key can be established.

Implementing Secure Command and Control in Unmanned Systems

TBMG-2311610/1/2015

Unmanned vehicles are at the forefront of an evolution, especially with the proliferation of the Internet of Things. After decades of serving mission-critical applications in government and defense, the command and control (C2) capabilities of advanced wireless data communications have begun to migrate into the public safety, research, and commercial markets. The robust and secure infrastructure necessary for the eventual proliferation of unmanned vehicles is slowly being realized. Today, however, industries such as public safety, agriculture and oil and gas are being eyed as key markets that can benefit from the use of Remotely Piloted Aircraft (RPA). For several applications, such as wildfire monitoring and border protection, RPAs can even be used to protect people and save lives.

Automotive Engineering: July 7, 2015

15AUTP077/7/2015

Future ICEs: What comes after 2025? With 2017-2020 products in the pipeline, what are the over-the-horizon solutions for greater light-vehicle engine efficiency? Plotting the vehicle autonomy revolution Advanced vehicle-technology and future-mobility expert Larry Burns makes a compelling case for driverless, shared vehicles in urban use. It's 'do-or-die time' to plan for open platforms The auto industry needs to open its eyes to open-platform opportunities, warns a European information-systems academic-and the industry looks to respond. Automotive HMIs aren't just for driving any more The auto industry needs to open its eyes to open-platform opportunities, warns a European information-systems academic-and the industry looks to respond. To serve and protect As cars become more connected and automated, cybersecurity concerns are rising. Industry engineers have many tools and techniques and are now deploying encryption and standards to ensure that vehicle controls are not altered or usurped by unauthorized people.

Prototype Genomics-Based Keyed-Hash Message Authentication Code Protocol

TBMG-21080

12/1/2014

Cryptography and molecular biology share certain aspects and operations that allow for a set of unified principles to be applied to problems in either venue. A DNA-inspired hash code system is presented that utilizes concepts from molecular biology. It is a keyed-Hash Message Authentication Code (HMAC) capable of being used in secure mobile ad-hoc networks. It is targeted for applications without an available public key infrastructure. Ad-hoc does not mean the users are completely unknown to each other. They could be part of a military unit, police, emergency workers, mobile vendors, or any collection of users in a common geographical area that wish to communicate in a region lacking a PKI (Public Key Infrastructure).

Integrated Genomic and Proteomic Information Security Protocol

TBMG-20967

11/1/2014

The motivation for this research is the fact that, for a variety of reasons, networks and their existing authentication and confidentiality infrastructure are becoming more vulnerable to attack. The protocols in this research are based upon a security architecture that relies upon codes derived from the processes that regulate gene expression. In vivo, these processes control and regulate transcription of DNA into various forms of RNA, translation of messenger RNA into proteins, and a variety of other pre-and post-transcriptional and translational regulatory processes. They utilize networks of protein and nucleic acid complexes. Through use of information theory, the processes of regulation of gene expression are being adapted to network and information security. The approach can be used in conjunction with legacy security architectures, algorithms, and processes as well as Mobile Ad-hoc Networks (MANET).