Anh Ngoc Duong

20080072035, Mar 20, 2008

Nov 1, 2007

11/982112

Robert Johnson - Pottstown PA, US
Anh Duong - Exton PA, US

H04L 9/12

713153000, 713163000

Systems and methods for securing multicast data are described. Data of a multicast, is protected through the use of at least double encryption keys, such as a community-of-interest key and session key. Data of a multicast is also split into portions of multicast in accordance with the session key, and transmitted over a choice of different pathways to one or more endpoints. The community-of-interest key is a prerequisite to joining or requesting deliver of a particular multicast. The community-of-interest key initializes, and exchanges a session key. All endpoints in a particular multicast community-of-interest group share the same session keys values. Endpoints that join a group (tune-in) must be notified of the session keys that are being used by the group at that particular time. A “Join” request is usually sent to an Ethernet address group. That address, is mapped to a community-of-interest of N IP addresses corresponding to each VLAN associated with the community-of-interest (the group) for the multicast.

20130219172, Aug 22, 2013

Mar 14, 2013

13/830988

Unisys Corporation - , US
Thomas Douris - Norristown PA, US
Anh Duong - Exton PA, US

Unisys Corporation - Blue Bell PA

H04L 29/06

713153, 713150

A gateway device is used to control the flow of data to and from a network. To ensure that a message is not transmitted beyond the edge of an intranet without authorization such as outside of a private network, or to a device within the private network without authorization, a gateway will only establish a communication session with a computing device within the private network that possess a requisite community-of-interest key. If either the gateway device or computing device does not possess a matching community-of-interest key then a communication session cannot be established between the computing device and gateway device. Other aspects include transmitting a message destined for another network by converting it into a format in which it can be received outside the private network without knowledge of the type of security measures used within the private network.

20140282892, Sep 18, 2014

Mar 15, 2013

13/832326

- Blue Ball PA, US
Thomas Douris - Norristown PA, US
Anh Duong - Exton PA, US

Unisys Corporation - Blue Ball PA

H04L 29/06

726 4

A system for integrating access to separate and physically partitioned networks from a single client device is described. The system is interposed between the client device and the networks to allow communication between the client device and the networks, such that data remains partitioned between networks. The system includes a scrambler configured to mix portions of data of variable bit lengths. Typically, the scrambler receives the portions of data from each of the plurality of networks, intermixes the portions of data from the networks, then selects different paths for transporting the intermixed portions of data to the client device. Each of the different paths for transporting the intermixed portions of data are physically and/or logically partitioned from each other. Only when the data arrives on the client device is it able to be reassembled, and then only in particular partitioned locations on the client device corresponding to the particular network from which the data originated.

20140122876, May 1, 2014

Mar 14, 2013

13/830879

Unisys Corporation - , US
Thomas Douris - Norristown PA, US
Anh Duong - Exton PA, US

Unisys Corporation - Blue Bell PA

H04L 29/06

713168, 726 3

Portions of split data belonging to a set of data are sent over different data paths to their destinations. The data set is cryptographically spat into portions of the data set, and each portion is transported over a choice of multiple data paths to its destination. For example, a message is physically separated into portions of a message which are encrypted and sent over more than one network path to reach a destination. As a result, a snooper in a network may only be able view a partial set of random, disjoint, and incoherent portions of the message which are also encrypted. The portions of the message are split up in such a way that even if the snooper captured some of the portions of data, it would be difficult to reconstruct the message without also capturing most other partial portions of the message spread throughout the entire infrastructure of the network.