Search NASA⌕ Search

SEARCH · Search NASA

Results for “authentication”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
DOE OSTI2017

FPGA Authentication Methods.

One of the greatest challenges facing designers of equipment to be used in a nuclear arms control treaty is how to convince the other party in the treaty to trust its results and functionality. Whether the host provides equipment meant to prove treaty obligations and the inspector needs to gain that trust (commonly referred to as authentication), or the inspector provides this equipment and the host needs to gain this trust (commonly considered to be included in certification), one party generally has higher confidence in the equipment at the start of a treaty regime and the other party needs to gain that confidence prior to use. While we focus on authentication in this document—that is, the inspector gaining confidence in host-provided equipment—our conclusions will likely apply to host certification of inspector-provided equipment.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗
DOE OSTI2023

Active High Assurance Authentication Protocol (AHAAP)

The AHAAP Maturation Project involves maturation and evaluation of a patented zero-trust tamper-resistant high-assurance session-less dynamic and active device authentication protocol that simultaneously authenticates identity and provides integrity verification in a single step, substantially reducing the risk of cyberattack, and eliminating the need for costly and complex conventional communication security systems requirements (i.e., cryptography, Public Key Infrastructure (PKI), and key management). These cybersecurity attributes of the technology must be preserved when applying the technology to different cybersecurity solutions, including Command & Control (C&C), Over-the-Air (OTA) update, Common Access Card (CAC), and distributed energy resource (DER) implementations, among others. The technology research objective is to test and verify that the cybersecurity attributes of the technology are not degraded in different cybersecurity applications. The primary technology development objective is to build minimum viable products to demonstrate the technology addresses today’s cybersecurity threats so that prospective investors, strategic partners, regulatory agencies, and commercial customers can interact with and assess the protection assured by the technology. The AHAAP Maturation Project goal is to develop, test, and validate one or more AHAAP implementations. The AHAAP Maturation Project tasks are: (i) engineer AHAAP implementation software, (ii) build a functional prototype that implements the AHAAP software for demonstration, testing, analysis, and evaluation purposes, and (iii) generate a report detailing the results of the AHAAP C&C software and hardware implementation. The final project deliverables are: (i) AHAAP software implementation and prototype, (ii) a report from Sandia National Laboratories detailing the results of the AHAAP implementations.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Fermilab s Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All of the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility but some experiments are beginning to transition to stop using them. There have been some glitches and learning curve issues but in general the system has been performing well and is being improved as operational problems are addressed.

Dykstra, David↗
NASA NTRS1979

Object migration and authentication

The paper presents a mechanism permitting a type manager to fabricate a migrated object representation which can be entrusted to other subsystems or transmitted outside of the control of a local computer system. The migrated object representation is signed by the type manager in such a way that the type manager's signature cannot be forged and the manager is able to authenticate its own signature. Subsequently, the type manager can retrieve the migrated representation and validate its contents before reconstructing the object in its original representation. This facility allows type managers to authenticate the contents of off-line or network storage and solves problems stemming from the hierarchical structure of the system itself.

Gligor, V. D.↗
NASA NTRS2009

Geospatial Authentication

A software package that has been designed to allow authentication for determining if the rover(s) is/are within a set of boundaries or a specific area to access critical geospatial information by using GPS signal structures as a means to authenticate mobile devices into a network wirelessly and in real-time. The advantage lies in that the system only allows those with designated geospatial boundaries or areas into the server.

Lyle, Stacey D.↗
NASA NTRS2009

Method and system for identifying and authenticating an object

An object has a taggant placed in a first portion thereof and has a visible symbol placed on a second portion thereof. When the object is to be identified and authenticated, the taggant is made to radiate with a specific energy signature. The energy signature and at least one image of the symbol are recorded along with a relative location that identifies the first portion of the object. The combination of the energy signature, symbol image and relative location are used to repeatedly identify and authenticate the object.

Schramm, Jr., Harry F.↗
NASA NTRS2012

Expedition Earth and Beyond: Using Crew Earth Observation Imagery from the International Space Station to Facilitate Student-Led Authentic Research

Student-led authentic research in the classroom helps motivate students in science, technology, engineering, and mathematics (STEM) related subjects. Classrooms benefit from activities that provide rigor, relevance, and a connection to the real world. Those real world connections are enhanced when they involve meaningful connections with NASA resources and scientists. Using the unique platform of the International Space Station (ISS) and Crew Earth Observation (CEO) imagery, the Expedition Earth and Beyond (EEAB) program provides an exciting way to enable classrooms in grades 5-12 to be active participants in NASA exploration, discovery, and the process of science. EEAB was created by the Astromaterials Research and Exploration Science (ARES) Education Program, at the NASA Johnson Space Center. This Earth and planetary science education program has created a framework enabling students to conduct authentic research about Earth and/or planetary comparisons using the captivating CEO images being taken by astronauts onboard the ISS. The CEO payload has been a science payload onboard the ISS since November 2000. ISS crews are trained in scientific observation of geological, oceanographic, environmental, and meteorological phenomena. Scientists on the ground select and periodically update a series of areas to be photographed as part of the CEO science payload.

Graff, P. V.↗
NASA NTRSDate not supplied

Long-term Engagement in Authentic Research with NASA (LEARN): Innovative Practices Suggested by a New Model for Teacher Research Experiences

NASA's LEARN Project is an innovative program that provides long-term immersion in the practice of atmospheric science for middle and high school in-service teachers. Working alongside NASA scientists and using authentic NASA Science Mission Directorate research data, teachers develop individual research topics of interest during two weeks in the summer while on-site at NASA Langley. With continued, intensive mentoring by NASA scientists, the teachers further develop their research throughout the academic year through virtual group meetings and data team meetings mirroring scientific collaborations. At the end of the first year, LEARN teachers present scientific posters. The LEARN experience has had such an impact that multiple teachers from the first two cohorts have elected to continue their research. The LEARN project evaluation has provided insights into particularly effective elements of this new approach. Findings indicate that teachers? perceptions of the scientific enterprise have changed, and that LEARN provided substantial resources to help them take real-world research to their students. This presentation will focus on key factors from LEARN?s implementation that inform best practices for the incorporation of authentic scientific research into teacher professional development experiences. We suggest that these factors should be considered in the development of other such experiences, including: (1) The involvement of a single scientist as both the project leader/manager and the project scientist, to ensure that the project can meet teachers? needs. (2) An emphasis on framing and approaching scientific research questions, so that teachers can learn to evaluate the feasibility of studies based on scope, scale, and availability of data. (3) Long term, ongoing relationships where teachers and scientists work as collaborators, beyond the workshop ?mold.? (4) A focus on meeting the needs of individual teachers, whether their needs relate to elements of research and analysis, or to their tight professional schedules. (5) Above all, flexibility and patience. LEARN builds relationships with teachers slowly, over a long period of time. In the middle, life often intervenes. LEARN has emphasized that teachers? success is more important than deadlines or following a rigid protocol.

M Pippin↗
DOE OSTI2018

Detecting anomalous behavior via user authentication graphs

Significant and aggregate user authentication activity may be analyzed across a population of users and computers in one or more networks to differentiate between authorized users and intruders in a network, and/or to detect inappropriate behavior by otherwise authorized users. Dynamic graphs and graph models over user and computer authentication activity, including time-constrained models, may be used for the purposes of profiling and analyzing user behavior in computer networks. More specifically, an edge-based breadth first search of graphs may be used that enforces time-constraints while maintaining traditional breadth first search computational complexity equivalence.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Detecting anomalous behavior via user authentication graphs

Significant and aggregate user authentication activity may be analyzed across a population of users and computers in one or more networks to differentiate between authorized users and intruders in a network, and/or to detect inappropriate behavior by otherwise authorized users. Dynamic graphs and graph models over user and computer authentication activity, including time-constrained models, may be used for the purposes of profiling and analyzing user behavior in computer networks. More specifically, an edge-based breadth first search of graphs may be used that enforces time-constraints while maintaining traditional breadth first search computational complexity equivalence.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2019

Integrated circuit authentication from a die material measurement

The various technologies presented herein relate to measuring a signal generated by a die-based test circuit incorporated into an IC, and utilizing the measured signal to authenticate the IC. The signal can be based upon a sensor response generated by the test circuit fabricated into the die, wherein the sensor response is based upon a property of the die material. The signal can be compared with a reference value obtained from one or more test circuit(s) respectively located on one or more reference dies, wherein the reference dies are respectively cut from different wafers, and the location at which the reference dies were cut is known. If the measured signal matches the reference value, the die is deemed to be from the same cut location as the dies from which the reference value was obtained. If the measured signal does not match the reference value, the die is not authenticated.

47 OTHER INSTRUMENTATION↗
DOE OSTI2020

Methods and systems for authenticating identity

Systems and methods are disclosed that provide for secure communications between a user device and an authentication system. The systems and methods create a dynamic identification for the device that is stored in both the device and authentication system.

42 ENGINEERING↗
DOE OSTI2020

Method of authenticating integrated circuits using optical characteristics of physically unclonable functions

A method and apparatus for reading unique identifiers of an integrated circuit. The unique identifiers may be physically unclonable functions (PUFs), formed by high energy ions implanted into semiconductor material of the integrated circuit. The method may include electrically or optically stimulating each of the PUFs and sensing with an optical sensor optical characteristics of resulting light emitted from the PUFs. Then the method may include comparing values associated with the optical characteristics of the PUFs with groups of stored values in a circuit database. Each of the groups of stored values may be associated with optical characteristics of PUFs of a known authentic circuit. The method may then include the controller providing verification of authenticity of the integrated circuit when each of the values associated with the optical characteristics of the PUFs match the stored values of at least one of the groups in the circuit database.

42 ENGINEERING↗
DOE OSTI2021

Integrated circuit authentication from a die material measurement

The various technologies presented herein relate to measuring a signal generated by a die-based test circuit incorporated into an IC and utilizing the measured signal to authenticate the IC. The signal can be based upon a sensor response generated by the test circuit fabricated into the die, wherein the sensor response is based upon a property of the die material. The signal can be compared with a reference value obtained from one or more test circuit(s) respectively located on one or more reference dies, wherein the reference dies are respectively cut from different wafers, and the location at which the reference dies were cut is known. If the measured signal matches the reference value, the die is deemed to be from the same cut location as the dies from which the reference value was obtained. If the measured signal does not match the reference value, the die is not authenticated.

Zortman, William A.↗
DOE OSTI2022

Systems and methods for quantum optical device authentication

Quantum optical device authentication technologies are described herein. A first device includes an optical transmitter transmits a plurality of pulses to an optical receiver included on a second device. The optical pulses each have one of two non-orthogonal optical states. The optical receiver measures each of the pulses and the second device records a measured value of the optical state of each pulse. Subsequently, the second device transmits the measured values of the optical states of the pulses to the first device. The first device outputs an indication of whether the second device is authenticated based upon the measured values received from the second device and the optical states of the pulses transmitted by the optical transmitter.

Soh, Daniel Beom Soo↗
DOE OSTI2024

Secure authentication using recurrent neural networks

A computer-implemented method of user authentication is provided. The method comprises combining, by a computer system, a user recurrent neural network with a system recurrent neural network to form a unique combined recurrent neural network. The user recurrent neural network is configured to generate a unique user key, and the system recurrent neural network is configured to generate a system key. The computer system inputs a predetermined input into the combined recurrent neural network, and the combined recurrent neural network generates a unique combined key from the input, wherein the combined key differs from both the user key and system key. The computer system then associates the combined key with a unique access authorization to authenticate a user.

Aimone, James Bradley↗
DOE OSTI2024

Methods and systems for authenticating identity

Systems and methods are disclosed that provide for secure communications between a user device and an authentication system. The systems and methods create a dynamic identification for the device that is stored in both the device and authentication system.

Choi, Sung Nam↗
DOE OSTI2024

Systems, devices, and methods for authenticating millimeter wave devices

Systems, devices, and methods are described for millimeter wave device authentication. A system may include one or more access points. Each access point of the one or more access points is configured to extract, from one or more beam patterns generated via a client device, a beam feature associated with the client device. Each access point may also be configured to transmit the beam feature. The system may also include a server communicatively coupled to the one or more access points and including a database for storing known beam features. The server may be configured to receive the beam feature associated with the client device from at least one access point of the one or more access points. Also, the server may be configured to authenticate the client device in response to the received beam feature matching a known beam feature stored in the at least one database.

Bhuyan, Arupjyoti↗