Secured automated or semi-automated systems

• US 9,781,141 B2
• Filed: 03/04/2016
• Issued: 10/03/2017
• Est. Priority Date: 10/02/2012
• Status: Active Grant

• Current Assignee: Mordecai Barkan
• Original Assignee: Mordecai Barkan
• Inventors: Barkan, Mordecai
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US15/061,878
• Publication Number:
  US 20160191555A1
• Time in Patent Office: 578 Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/561 Virus type analysis
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

Secured automated or semi-automated systems are provided herein. In one embodiment, a sensor system includes a sensor, a legacy computing environment that is configured to communicate with the sensor and process sensor raw data output, and transmit the processed sensor output to a first network node over the network, and a trusted computing environment configured to receive raw sensor output directly from the sensor and transmit the raw sensor output to an additional network node or the first network node over the network.

Claims

1. A system, comprising:

a sensor generating sensor raw data output;

a legacy computing environment further comprising a hardware processor that is configured to;

communicate with the sensor to receive the sensor raw data output, test input data or a combination thereof and process the sensor raw data output received from the sensor resulting in generation of processed sensor data; and

transmit the processed sensor data to any of a first network node over a network, a trusted computing environment or a combination thereof; and

the trusted computing environment further comprising a hardware processor configured to;

receive the sensor raw data output directly from the sensor;

transmit the sensor raw data output to any of an additional network node, the first network node or a combination thereof, over the network, any of the additional network node, the trusted computing environment, the first network node or a combination thereof, configured to authenticate the processed sensor data by comparing it to the sensor raw data output, to allow any of malware detection, malfunction of system or a combination thereof by feeding any of the sensor raw data output, test input data or a combination thereof, and evaluate the processed sensor data from the legacy computing environment against any of the test input data, sensor raw data or a combination thereof; and

the trusted computing environment configured to perform any function of;

monitoring the legacy computing environment, controlling the legacy computing environment, blocking access to the network by the legacy computing environment, operating parallel to the legacy computing environment or a combination thereof.

2. The system according to claim 1, wherein the trusted computing environment and the legacy computing environment are configured to replace infected programs of the legacy computing environment with uninfected programs.

3. The system according to claim 1, wherein the trusted computing environment is configured to detect malware infection or a malfunction by comparing the sensor raw data output with the processed sensor data of the legacy computing environment.

4. The system according to claim 1, wherein the trusted computing environment is configured to block the processed sensor data from the legacy computing environment.

5. The system according to claim 1, wherein the first network node or an additional network node compares the sensor raw data output to the processed sensor data from the legacy computing environment to detect a malfunction or malware in the legacy computing environment.