Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure keys”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2026

Extreme Temperature Cryptography Based On Nitrogen-Incorporated Ultrananocrystalline Diamond

Physical entropy sources that remain stable under extreme temperatures are essential for cryptography in emerging technological frontiers in deep space exploration, geothermal energy harvesting, and nuclear energy. However, conventional semiconductor platforms fail to generate stable and reliable cryptographic keys above 200 degrees C due to performance degradation. Here, we report a diamond-based cryptographic primitive that exploits the defect-rich sp 2 -bonded grain boundary network in nitrogen-incorporated ultrananocrystalline diamond (n-UNCD) film as a robust entropy source to generate cryptographic keys that remain operationally stable even after enduring extreme temperatures of 700 degrees C for 54 h while also surviving thermal cycling between room temperature and 700 degrees C for 48 h. The strength of the generated keys is assessed through several cryptographic metrics such as bit uniformity, entropy, hamming distances, and correlation coefficients, all of which are found to be near their respective ideal values. Moreover, the generated keys pass the NIST SP 800 and SP 800-90B tests and are also resilient to supply bias variations and a regression-based machine learning attack model based on the Fourier series. The robustness of the keys is attributed to the better thermal stability and chemical inertness of the n-UNCD film. This is supported by high-resolution energy-dispersive X-ray spectroscopy (EDS), which shows no significant lateral diffusion of metal atoms into the n-UNCD layer, and by Raman spectroscopy, which reveals no significant changes in the bonding configuration of the n-UNCD structure. Our findings highlight the remarkable potential of n-UNCD film for extreme environment cryptography by expanding the operational limits of conventional hardware security platforms.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
DOE OSTI2021

Building Neutron Scattering Infrastructure in Louisiana for Advanced Materials (Final Report)

The main objective of the Louisiana Consortium for Neutron Scattering (LaCNS) is to build a major neutron scattering infrastructure capable of treating both soft and hard materials. The goal is to create a sustainable effort having the quality, breadth, and depth necessary to produce competitive proposals including collaborative and center type proposals. Our scientific aim is to understand the role of coupling in emergent complex materials and its impact on the structure/property relationship and to explore how to tune the key couplings to guide the design of materials with the desired properties. This naturally includes building a base of users of the Spallation Neutron Source (SNS) and the High Flux Isotope Reactor (HFIR) in Louisiana; to train highly talented graduate and post-doctoral students in synthesis, neutron scattering, and simulation and modeling techniques, thereby helping to produce the next generation of scientist who use neutron scattering techniques as a crucial part of their research. The goal of our hard matter program is to understand the interplay between spin, charge, orbital, and lattice degrees of freedom in carefully selected complex materials. We have made considerable progress on number of complex systems including the oxide Sr3(Ru1-xMnx)2O7 where short-range magnetic ordering with anisotropic spin texture is initiated at the metal-insulator transition that clearly indicates a strong spin-charge coupling. Another critical area is in quantum materials. For example, in the topological semimetal BaMnSb2, we found a 3D canted antiferromagnetic Weyl semimetal with a 2D electronic structure and a nontrivial Berry phase. In addition, in the hexagonal chiral Mn1/3NbS2 system, we found soliton/soliton and soliton/antisoliton domain walls where the application of small fields or small currents can be used to control nanoscopic magnetic domains where the control of domain walls is crucially important for information storage. In addition, chemical transformation investigations were performed on the VISION instrument at Spallation Neutron Source (SNS). The soft matter effort was focused on understanding the role of non-covalent interactions on the structure and dynamics of fluid-based soft matter. One key focus was on sequence-defined (SD) amphiphilic peptoid polymers that allow encoding of molecular interactions and thereby systematic investigations of how charge directs the solution self-assembly of amphiphilic polymers in water. Another important area was on the dynamics of lipids self-assembled into membranes for exploring the permeability and mechanical using both neutron spin echo (NSE) spectroscopy and quasielastic neutron scattering (QENS) to distinguished between viscoelasticity and permeability at the molecular scale. Overall, the LaCNS project was quite successful, generating 145 publications and 245 presentations. Our graduate and post-doctoral students were well trained resulting in positions in national laboratories (Oak Ridge National Laboratory (ORNL), Argonne National Laboratory and Los Alamos National Laboratory), major research universities, and industry. We also developed a uniaxial pressure cell along with ORNL for SNS. A critical goal of this project was to establish a foundation for competing nationally in federally funded research programs. To this end, we were quite successful in generating over twenty-two federally and non-federally funded grants including awards from NSF, DOE, and DOD, and two early career awards. Equally important, we were able to secure a key major piece of instrumentation via a large ARO grant for a state-of-the-art electron microscope.

36 MATERIALS SCIENCE↗
DOE OSTI2023

Crystal growth of new high light yield halide perovskite scintillator RbSrI 3

X-ray radiography systems are a key national security technology enabling non-invasive cargo screening. However, the scintillators currently used in these systems have limitations in performance that prompt research for new suitable materials. Here, in this work, crystal growth, physical properties, and optical and scintillation properties of a new halide perovskite scintillator RbSrI 3 were investigated for the first time. The melting point was determined to be 453 °C. Divalent europium and ytterbium were investigated as potential luminescent activators. Light yield and energy resolution of RbSrI 3 :Eu 5 mol% was 78,700 ph/MeV and 2.8 % at 662 keV, and that of RbSrI 3 :Yb 0.5 mol% was 24,000 ph/MeV and 4.9 % at 662 keV.

36 MATERIALS SCIENCE↗
DOE OSTI2021

The tepary bean genome provides insight into evolution and domestication under heat stress

Tepary bean (Phaseolus acutifolis A. Gray), native to the Sonoran Desert, is highly adapted to heat and drought. It is a sister species of common bean (Phaseolus vulgaris L.), the most important legume protein source for direct human consumption, and whose production is threatened by climate change. Here, we report on the tepary genome including exploration of possible mechanisms for resilience to moderate heat stress and a reduced disease resistance gene repertoire, consistent with adaptation to arid and hot environments. Extensive collinearity and shared gene content among these Phaseolus species will facilitate engineering climate adaptation in common bean, a key food security crop, and accelerate tepary bean improvement.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2023

Genome analyses reveal population structure and a purple stigma color gene candidate in finger millet

Finger millet is a key food security crop widely grown in eastern Africa, India and Nepal. Long considered a ‘poor man’s crop’, finger millet has regained attention over the past decade for its climate resilience and the nutritional qualities of its grain. To bring finger millet breeding into the 21 st century, here we present the assembly and annotation of a chromosome-scale reference genome. We show that this ~1.3 million years old allotetraploid has a high level of homoeologous gene retention and lacks subgenome dominance. Population structure is mainly driven by the differential presence of large wild segments in the pericentromeric regions of several chromosomes. Trait mapping, followed by variant analysis of gene candidates, reveals that loss of purple coloration of anthers and stigma is associated with loss-of-function mutations in the finger millet orthologs of the maize R1/B1 and Arabidopsis GL3/EGL3 anthocyanin regulatory genes. Proanthocyanidin production in seed is not affected by these gene knockouts.

59 BASIC BIOLOGICAL SCIENCES↗
DOE OSTI2021

Improved Nondestructive Isotopic Analysis with Practical Microcalorimeter Gamma Spectrometers

Advances in both instrumentation and data analysis software are now enabling the first ultra-high-resolution microcalorimeter gamma spectrometers designed for implementation in nuclear facilities and analytical laboratories. With approximately ten times better energy resolution than high-purity germanium detectors, these instruments can overcome important uncertainty limits. Microcalorimeter gamma spectroscopy is intended to provide nondestructive isotopic analysis capabilities with sufficient precision and accuracy to reduce the need for sampling, chemical separations, and mass spectrometry to meet safeguards and security goals. Key milestones were the development of the SOFIA instrument (Spectrometer Optimized for Facility Integrated Applications) and the SAPPY software (Spectral Analysis Program in PYthon). SOFIA is a compact instrument that combines advances in large multiplexed transition-edge sensor arrays with optimized cryogenic performance to overcome many practical limitations of previous systems. With a 256-pixel multiplexed detector array capable of 5,000 counts per second, measurement time can be comparable to high-purity germanium detectors. SAPPY was developed to determine isotopic ratios in data from SOFIA and other microcalorimeter instruments with an approach similar to the widely-used FRAM software. SAPPY provides a flexible framework with rigorous uncertainty analysis for both microcalorimeter and high purity germanium (HPGe) data, allowing direct comparison. Here, we present current results from the SOFIA instrument, preliminary isotopic analysis using SAPPY, and describe how the technology is being used to explore uncertainty limits of nondestructive isotopic characterization, inform safeguards models, and extract improved nuclear data including gamma-ray branching ratios.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
DOE OSTI2023

A Scalable Quantum Cryptography Network for Protected Automation Communication (Final Report)

This is the final report for a CEDS-funded project aimed at developing a new quantum technology for securing utility communication networks used to control and monitor electrical grid equipment. Securing these control networks represents a unique challenge as the performance of the security solution has a direct impact on the stability and reliability of the electrical grid. Traditional, software-based solutions - developed for information networks - are not suitable for utility control networks because they introduce latency, require burdensome maintenance and upgrades, are often incompatible with legacy equipment, and introduce operational complexity that reduces grid reliability. Consequently, many U.S. utilities do not use existing solutions and, instead, protect their critical control networks through the careful isolation and obscuration of their networked equipment. With more utilities embracing grid automation, the attack surface that utilities must defend from hackers has grown to an unmanageable size. To address this situation, Qubitekk and its partners proposed and developed a hardware-based solution that can secure critical control networks without negatively impacting grid performance. This new solution is based on quantum key distribution (QKD) techniques that guarantee secure key generation and distribution across a utility control network. Through deployment and field testing of a prototype QKD system, we have shown that this solution delivers long-term network security, is technically feasible to implement and maintain on a utility’s distribution substation network and does not negatively impact grid operations. In addition, the project has identified and solved key challenges associated with generating, transmitting, and measuring coherent photonic quantum states on a real-world fiber optic network. These additional findings are playing a critical role in advancing quantum networks for quantum computing applications. An overview of the QKD prototype development effort, field testing activities and results, and additional findings relevant to emerging quantum networks are presented in this report.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗
DOE OSTI2021

Implementation of quantum key distribution and quantum clock synchronization via time bin encoding

Quantum key distribution allows for a provably secure transmission of cryptographic keys over an optical channel. Encoded polarization states or time-bin degree of freedom have been used for successful demonstrations. However, photon losses in long fibers, slow single photon detectors, and detector dark counts significantly limit the overall bit rate. Improving key throughput and reducing the overhead of key reconciliation remain as major challenges. Methods which utilize multiple time bins allow for multiple key bits to be encoded in a single photon, thus increasing the fidelity of transmitted keys and decreasing the overhead of key reconciliation in real-world conditions. Previous implementations of these methods required that Alice and Bob share a time reference by sharing a dedicated classical channel used for synchronization. This work presents a technique that allows two parties to exchange time-bin encoded photons without the need for synchronized time references. Our technique uses a framing protocol which allows Alice to encode a time reference along with a key which is determined by Alice before transmission. Security can be achieved by monitoring the visibility of a pair of Franson interferometers, using decoy pulses and measuring the round trip time between Alice and Bob. The bit rate of this technique is limited only by the recovery time of the detector and the speed of the modulation electronics. We experimentally demonstrate a raw bit rate of 5Mb/s over an optical channel with 55dB of loss, which is competitive with current research. We also demonstrate absolute timing synchronization with an accuracy of 20ps.

encryption↗
DOE OSTI2023

Flexible visualization of a 3rd party Intrusion Prevention (Security) tool: A use case with the ELK stack

A difficult aspect of cyber security is the ability to achieve automated real time intrusion prevention across various sets of systems. To this extent, several companies are offering comprehensive solutions that leverage an "accuracy of scale" and moving much of the intelligence and detection on the Cloud, relying on an ever-growing set of data and analytics to increase decision accuracy. Often, they provide tools to visualize the decision workflows in attack prevention (as well as tune the algorithm) but those solutions are not always practical as companies see the problem as "global" that is, from a unified Cyber-security standpoint. However, a key to a successful Cyber-security program is transparency and trust: from an experimental team viewpoint, this specifically means having the ability to immediately see what and from where, who has been blocked and being able to inform the community in case of a revoked access without the need for filing a "ticket" (that may eventually be answered) – in other words, rapid response to their user-base is essential but solutions targeting "sub-groups" in an organization are not often available. We have come up with a versatile solution leveraging the ELK stack (Elasticsearch, Logstash, & Kibana) and an IPS (Intrusion Prevention System) based WAF (Web Application Firewall) from Signal Sciences. Signal Science allows the streaming of detailed logs in a Logstash format suitable for custom solutions for visualization. By combining these two tools, we have strengthened our security posture and enabled individual experiments to monitor their own traffic. Specifically, the IPS WAF provides unique data such as country of origin, protocol, response code, source IP, and paths accessed. In this contribution, we will show how we engineered a visualization solution so experiment groups could access a dashboard with predefined graphs but also, where they can create individual customizable dashboards used to display blocked traffic and troubleshoot latency issues. We will discuss the details and procedures for developing and configuring these tools and how it benefits cyber security postures across our scientific based environment.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2022

Module-OT: A Turnkey Solution for Securing Energy Systems

The Modular Security Apparatus for Managing Distributed Cryptography for Command-and-Control Messages on Operational Technology Networks (Module-OT) is a flexible and lightweight solution for grid-edge devices focusing on end-to-end security. It is a bump- in- the-wire solution acting as a secure conduit for data between devices or systems across a network. It improves the cybersecurity posture of DER systems by providing authentication, authorization, and data integrity to secure DER communications. Additionally, it performs key management, provides data security through whitelisting Internet Protocol addresses and ports, blocks unauthorized connections, controls user access, and allows serial or Ethernet connections for added flexibility. The core software is portable to various Linux-based operating systems and is developed to be customized by the developer and researcher communities. Module-OT has been validated in the lab, has been demonstrated at a 500-KW PV-plus-storage site, and has been proven ready to secure operational technology devices. Its core functionality meets current standards, including validation procedures of the NIST Cryptographic Algorithm Validation Program (CAVP) and the Federal Information Processing Standard (FIPS 140-2). Because of its capability to provide an accessible and affordable option for stepping up security across modern energy systems, Module-OT can serve as an effective technological option to standardize cybersecurity moving forward.

cryptography↗
DOE OSTI2019

Enabling Secure Grid Information Sharing through Hash Calendar-based Blockchain Infrastructures

The power grid is becoming increasingly interconnected, as information from grid operations must be accessible to an array of engineers, grid regulators, and market operators. However, there remain challenges ensuring the appropriate integrity and authenticity of the grid information. While traditional cryptographic protocols, like public key infrastructure, provide security for in-transit communication, they come with key exchanges and cost to get public key certificates from a centralized authority. To address these challenges, this paper demonstrates how a hash calendar-based blockchain can be used to provide improved security for communication with the use of distributed ledgers. It demonstrates the security requirements and threats to this communication, and then provides a theoretic definition of the process. Furthermore, it introduces a use-case of the proposed process within the WSU Smart City Testbed DMS with the Guardtime’s Keyless Signature Infrastructure (KSI) architecture.

Kaur, Kudrat J.↗
DOE OSTI2022

Advanced architectures for high-performance quantum networking

As practical quantum networks prepare to serve an ever-expanding number of nodes, there has grown a need for advanced auxiliary classical systems that support the quantum protocols and maintain compatibility with the existing fiber-optic infrastructure. We propose and demonstrate a quantum local area network design that addresses current deployment limitations in timing and security in a scalable fashion using commercial off-the-shelf components. First, we employ White Rabbit switches to synchronize three remote nodes with ultra-low timing jitter, significantly increasing the fidelities of the distributed entangled states over previous work with Global Positioning System clocks. Second, using a parallel quantum key distribution channel, we secure the classical communications needed for instrument control and data management. Therefore, the conventional network that manages our entanglement network is secured using keys generated via an underlying quantum key distribution layer, preserving the integrity of the supporting systems and the relevant data in a future-proof fashion.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2020

Attack Scenarios Relating to Army Facility-Related Control Systems: Quantifying the Cost to Secure and Cost Savings of the Army’s FRCS Program

Pacific Northwest National Laboratory (PNNL) analyzed the cyber-threat environment to U.S. Army facilities. This report describes three key factors in securing Army-owned facility-related control systems (FRCS). First, Section 1.0 provides background information about the project. Section 2.0 describes the various types of cyber-attacks. Section 3.0 provides a series of attack scenarios from real-world use cases are described in Section 3. These examples are relevant to the Army because the targeted systems or operating environments are like those used at Army installations. An estimated range for the cost to secure these systems is described in Section 4.0. Finally, the cost savings of preventing these kinds of attacks are described in Section 5.0.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗
DOE OSTI2024

Near Net Shape Workshop Report

In 2021, President Biden issued Executive Order (EO) 14017, spurring the federal government to build more secure and diverse U.S. supply chains, including energy supply chains, to ensure economic prosperity and national security (White House 2021). In response to EO 14017, the U.S. Department of Energy (DOE) published America’s Strategy to Secure the Supply Chain for a Robust Clean Energy Transition (Igogo 2022) to outline the challenges and opportunities facing the energy supply chain along with key strategies to secure America’s position as a clean energy superpower in the years and decades to come. The expansion of domestic manufacturing capabilities is identified as one of the common risks and vulnerabilities for which DOE should develop comprehensive strategies to secure supply chains for the clean energy transition. The report states that “examples of manufacturing capabilities of concern include … large iron and steel castings for wind turbines, hydropower turbines, and nuclear reactor components.”

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2020

Data-Driven Security Assessment of Power Grids Based on Machine Learning Approach: Preprint

Data-driven security assessment provides key indicators on power system stability using simulations on scheduling models, as opposed to dynamic simulations that are more time-consuming. This paper investigates data-driven security assessment of power grids based on machine learning. Multivariate random forest regression is used as the machine learning algorithm due to its high robustness to the input data. Three stability issues are analyzed using the proposed machine learning tool, including transient stability, frequency stability and small signal stability. The estimation values from machine learning tool are compared with those from dynamic simulations. Results show that the proposed machine learning tool can effectively predict the stability margins for the three stability metrics.

14 SOLAR ENERGY↗
DOE OSTI2022

America's Strategy to Secure the Supply Chain for a Robust Clean Energy Transition

The opportunity for U.S. global leadership on clean energy is enormous. On February 24, 2021, President Biden issued Executive Order 14017, “America’s Supply Chains,” directing the Secretary of Energy to submit a supply chain strategy overview report for the Energy Sector Industrial Base (ESIB). This report lays out the myriad challenges and opportunities facing the energy supply chain along with key strategies to secure America’s position as a clean energy superpower in the years and decades to come.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗
DOE OSTI2025

Automation of Vulnerability and Patch Management: Information Extraction, Association, and Optimization

Vulnerability and patch management is an integral part of a robust cybersecurity program, yet it grows increasingly complex due to the sheer amount of data that must be analyzed. Particularly in Operational Technology (OT) environments, analysis must be done manually because of the lack of automated solutions. Additionally, there are many steps in this process, from the initial discovery of the vulnerability to the implementation of its remediation, and each step in the process requires different data in order to be performed effectively. In this work, we provide approaches and strategies to assist operators in industrial or OT environments throughout the vulnerability management cycle. Security advisories provide key information about mitigation strategies, or actions that can be taken when a patch is unavailable or cannot be installed. Details of these strategies are not shared in public vulnerability databases and must be found manually. We approach this problem by designing a solution to automatically identify that information within vendor security advisories and retrieve it for operator use. We start with an approach that requires domain-specific knowledge of certain frequently-seen reference websites. Next, an approach that can work on an arbitrary website but relies on certain keywords. Finally, an approach that uses Natural Language Processing (NLP) methods and does not require specific knowledge or keywords. Each of these approaches is more general than its predecessor; we demonstrate high accuracy for all approaches Advisories also often contain details of affected products in non-standard or natural language formats. While this information can be easily understood when read by an operator, the non-standard format acts as a barrier to effective automation. We provide an approach for the first step in this process: identifying vendors in security advisories and mapping them to a standard framework for representing digital assets and software products. We evaluate five established string similarity algorithms, plus one of our own design that combines string similarity and information theory, on the task of mapping vendors to their corresponding entries in the Common Platform Enumeration (CPE) repository. Our results show that our proposed metric outperforms all others. Due to the constraints on time, finances, and personnel for organizations, Large Language Models (LLMs) may seem like attractive opportunities for security operators to speed up information gathering; however, it is still not clear whether LLMs can handle vulnerability management tasks well. To answer this question, we perform an empirical study of LLMs’ ability to provide consistent, accurate information about vulnerabilities in order to guide organizations in their adoption of LLMs. We observe poor performance for all models tested, suggesting that these models are not well-suited to the consistent retrieval of accurate vulnerability information. Finally, once vulnerabilities have been identified and any additional information has been obtained, operators must decide which remediation actions to implement based on their available resources. This already-complex problem becomes even more so when we consider that a vulnerability may have multiple avenues for remediation. We formulate this scenario as two knapsack problems and provide solutions, which we then compare against several existing strategies for vulnerability prioritization seen in real operational environments.

McClanahan, Kylie↗
DOE OSTI2023

Quantum Key Distribution for Critical Infrastructures: Towards Cyber-Physical Security for Hydropower and Dams

Hydropower facilities are often remotely monitored or controlled from a centralized remote control room. Additionally, major component manufacturers monitor the performance of installed components, increasingly via public communication infrastructures. While these communications enable efficiencies and increased reliability, they also expand the cyber-attack surface. Communications may use the internet to remote control a facility’s control systems, or it may involve sending control commands over a network from a control room to a machine. The content could be encrypted and decrypted using a public key to protect the communicated information. These cryptographic encoding and decoding schemes become vulnerable as more advances are made in computer technologies, such as quantum computing. In contrast, quantum key distribution (QKD) and other quantum cryptographic protocols are not based upon a computational problem, and offer an alternative to symmetric cryptography in some scenarios. Although the underlying mechanism of quantum cryptogrpahic protocols such as QKD ensure that any attempt by an adversary to observe the quantum part of the protocol will result in a detectable signature as an increased error rate, potentially even preventing key generation, it serves as a warning for further investigation. In QKD, when the error rate is low enough and enough photons have been detected, a shared private key can be generated known only to the sender and receiver. We describe how this novel technology and its several modalities could benefit the critical infrastructures of dams or hydropower facilities. The presented discussions may be viewed as a precursor to a quantum cybersecurity roadmap for the identification of relevant threats and mitigation.

97 MATHEMATICS AND COMPUTING↗