Back to results
US 10,769,286 B2Granted
Non-intrusive data authentication systems and methods
AssigneeNational Technology & Engineering Solutions of Sandia, LLC
InventorsMaikael A. Thomas, Ross W. Hymel, George T. Baldwin
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed that create a separate digital and cryptographically secure signal “branch” to a secondary observer from a primary signal path of an information system. The information system may be a measurement system. The secure signal branch is creating without interfering with the primary signal path. In such a manner, the secondary observer may authenticate reported data while not interfering with the signal of the information system.
Claims57
A system, comprising:
- an information system;
- a junction box connected to the information system;
- a primary observer connected to the junction box, the primary observer receiving data from the information system;
- a secondary observer connected to the junction box;
- wherein the junction box comprises:
- a secondary observer side that comprises hardware, firmware, and software that monitors and copies the data to form a data copy, cryptographically secures the data copy, and securely transmits the data copy to the secondary observer;
- and
- wherein the data is copied and transmitted to the secondary observer without manipulation of the data;
- and
- wherein the secondary observer is electrically isolated from the primary observer;
- wherein the data is galvanically isolated from the data copy where the data copy is copied from the data.
8 more elements
A system, comprising:
- an information system;
- a junction box connected to the information system;
- and
- an observer connected to the junction box;
- wherein the junction box comprises:
- an observer side comprising hardware, firmware, and software that monitors, copies and cryptographically secures the data to form a secure data copy, and transmits the secure data copy to the observer;
- and
- wherein the data is copied and transmitted to the observer without manipulation of the data;
- wherein the data is galvanically isolated from the secure data copy where the secure data copy is copied from the data.
6 more elements
A method, comprising:
- providing a data stream comprising data to a primary observer;
- creating a branched data stream comprising cryptographically secure data from the data stream;
- wherein the branched data stream is created without manipulation of the data stream;
- and
- providing the branched data stream to a secondary observer;
- and
- wherein the branched data stream is electrically isolated from the data stream;
- wherein the branched data stream is galvanically isolated from the data stream where the branched data stream is created from the data stream.
5 more elements
A method, comprising:
- creating a cryptographically secure data stream from a data stream without manipulation of data stream data;
- and
- transmitting the cryptographically secure data stream to an observer;
- wherein the cryptographically secure data stream is electrically isolated from the data stream.
1 more element
The method of 17, wherein the cryptographically secure data stream is galvanically isolated from the data stream.
A data routing device, comprising:
- a data input for receiving data from an information system;
- a data output for outputting the data to a primary observer;
- and
- a second data output for transmitting a secure copy of the data to a secondary observer;
- wherein the data routing device further comprises a secondary observer side comprising hardware, firmware, and software that monitors the data, copies the data, cryptographically secures the data copy to form the secure copy of the data, and transmits the secure copy of the data from the data routing device to the secondary observer;
- and
- wherein the data is copied to form the secure copy of the data without manipulation of the data;
- and
- wherein the secondary observer is electrically isolated from the primary observer;
- wherein the secure copy of the data is galvanically isolated from the data where the secure copy of the data is copied from the data.
7 more elements
The data routing device of claim of 24, wherein the circuits comprise resistive coupling elements.
A data routing device, comprising:
- a data input for receiving data from an information system;
- a data output for outputting a secure copy of the data to an observer;
- and
- wherein the data routing device further comprises an observer side comprising hardware, firmware, and software that monitors the data, copies the data, cryptographically secures the data copy to form a secure copy of the data, and transmits the secure copy of the data from the data routing device to the observer;
- and
- wherein the data is copied to form the secure copy of the data without manipulation of the data;
- and
- wherein the observer is electrically isolated from the data output;
- wherein the data is galvanically isolated from the data copy where the data copy is copied from the data.
6 more elements
The data routing device of claim of 31, wherein the circuits comprise resistive coupling elements.
A monitored measurement system, comprising:
- a system having a parameter;
- a sensor unit connected to the system for measuring the parameter;
- a primary observer connected to the sensor unit;
- a secondary observer connected to the sensor unit;
- wherein the sensor unit comprises:
- a sensor package for measuring the parameter, creating data representing the measured parameter, and transmitting the data to the primary observer;
- and
- a secondary observer side of the sensor unit comprising hardware, firmware, and software that monitors and copies the data to form a data copy, cryptographically secures the data copy, and securely transmits the data copy to the secondary observer;
- wherein the data is copied and transmitted to the secondary observer without manipulation of the data;
- and
- wherein the secondary observer is electrically isolated from the primary observer;
- wherein the data copy is galvanically isolated from the data where the data copy is copied from the data.
9 more elements
The monitored measurement system of claim of 39, wherein the circuits comprise resistive coupling elements.
A method of monitoring a measurement system comprising:
- inserting a sensor unit into a system for measuring a parameter of the system;
- connecting a primary observer connected to the sensor unit;
- connecting a secondary observer connected to the sensor unit;
- wherein the sensor unit comprises:
- a sensor package for measuring the parameter, creating data representing the measured parameter, and transmitting the data to the primary observer;
- and
- a secondary observer side of the sensor unit comprising hardware, firmware, and software that monitors and copies the data to form a data copy, cryptographically secures the data copy, and securely transmits the data copy to the secondary observer;
- wherein the data is copied and transmitted to the secondary observer without manipulation of the data;
- and
- wherein the secondary observer is electrically isolated from the primary observer;
- wherein the data is galvanically isolated from the data copy where the data copy is copied from the data.
8 more elements
The method of claim of 47, wherein the circuits comprise resistive coupling elements.
A sensor unit, comprising:
- a sensor package for measuring a parameter, creating data representing the parameter, and transmitting the data to the primary observer;
- a first output for providing the data to a primary observer;
- a second output for providing a secure data copy to a secondary observer;
- and
- a secondary observer side of the sensor unit comprising hardware, firmware, and software that monitors and copies the data to form the data copy, cryptographically secures the data copy to form the secure data copy, and transmits the secure data copy to the secondary observer;
- wherein the data is copied and transmitted to the secondary observer without manipulation of the data;
- and
- wherein the secondary observer is electrically isolated from the primary observer;
- wherein the data is galvanically isolated from the secure data copy where the secure data copy is copied from the data.
6 more elements
The sensor unit of claim of 55, wherein the circuits comprise resistive coupling elements.
Dependencies are inferred from the claim text.