Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure keys”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

Criteria for Evaluating Alternative Network and Link Layer Protocols for the NASA Constellation Program Communication Architecture

Selecting a communications and network architecture for future manned space flight requires an evaluation of the varying goals and objectives of the program, development of communications and network architecture evaluation criteria, and assessment of critical architecture trades. This paper uses Cx Program proposed exploration activities as a guideline; lunar sortie, outpost, Mars, and flexible path options are described. A set of proposed communications network architecture criteria are proposed and described. They include: interoperability, security, reliability, and ease of automating topology changes. Finally a key set of architecture options are traded including (1) multiplexing data at a common network layer vs. at the data link layer, (2) implementing multiple network layers vs. a single network layer, and (3) the use of a particular network layer protocol, primarily IPv6 vs. Delay Tolerant Networking (DTN). In summary, the protocol options are evaluated against the proposed exploration activities and their relative performance with respect to the criteria are assessed. An architectural approach which includes (a) the capability of multiplexing at both the network layer and the data link layer and (b) a single network layer for operations at each program phase, as these solutions are best suited to respond to the widest array of program needs and meet each of the evaluation criteria.

Benbenek, Daniel↗
NASA NTRS2005

Encryption for Remote Control via Internet or Intranet

A data-communication protocol has been devised to enable secure, reliable remote control of processes and equipment via a collision-based network, while using minimal bandwidth and computation. The network could be the Internet or an intranet. Control is made secure by use of both a password and a dynamic key, which is sent transparently to a remote user by the controlled computer (that is, the computer, located at the site of the equipment or process to be controlled, that exerts direct control over the process). The protocol functions in the presence of network latency, overcomes errors caused by missed dynamic keys, and defeats attempts by unauthorized remote users to gain control. The protocol is not suitable for real-time control, but is well suited for applications in which control latencies up to about 0.5 second are acceptable. The encryption scheme involves the use of both a dynamic and a private key, without any additional overhead that would degrade performance. The dynamic key is embedded in the equipment- or process-monitor data packets sent out by the controlled computer: in other words, the dynamic key is a subset of the data in each such data packet. The controlled computer maintains a history of the last 3 to 5 data packets for use in decrypting incoming control commands. In addition, the controlled computer records a private key (password) that is given to the remote computer. The encrypted incoming command is permuted by both the dynamic and private key. A person who records the command data in a given packet for hostile purposes cannot use that packet after the public key expires (typically within 3 seconds). Even a person in possession of an unauthorized copy of the command/remote-display software cannot use that software in the absence of the password. The use of a dynamic key embedded in the outgoing data makes the central-processing unit overhead very small. The use of a National Instruments DataSocket(TradeMark) (or equivalent) protocol or the User Datagram Protocol makes it possible to obtain reasonably short response times: Typical response times in event-driven control, using packets sized .300 bytes, are <0.2 second for commands issued from locations anywhere on Earth. The protocol requires that control commands represent absolute values of controlled parameters (e.g., a specified temperature), as distinguished from changes in values of controlled parameters (e.g., a specified increment of temperature). Each command is issued three or more times to ensure delivery in crowded networks. The use of absolute-value commands prevents additional (redundant) commands from causing trouble. Because a remote controlling computer receives "talkback" in the form of data packets from the controlled computer, typically within a time interval < or =1 s, the controlling computer can re-issue a command if network failure has occurred. The controlled computer, the process or equipment that it controls, and any human operator(s) at the site of the controlled equipment or process should be equipped with safety measures to prevent damage to equipment or injury to humans. These features could be a combination of software, external hardware, and intervention by the human operator(s). The protocol is not fail-safe, but by adopting these safety measures as part of the protocol, one makes the protocol a robust means of controlling remote processes and equipment by use of typical office computers via intranets and/or the Internet.

Lineberger, Lewis↗
NASA NTRS2003

Additional Security Considerations for Grid Management

The use of Grid computing environments is growing in popularity. A Grid computing environment is primarily a wide area network that encompasses multiple local area networks, where some of the local area networks are managed by different organizations. A Grid computing environment also includes common interfaces for distributed computing software so that the heterogeneous set of machines that make up the Grid can be used more easily. The other key feature of a Grid is that the distributed computing software includes appropriate security technology. The focus of most Grid software is on the security involved with application execution, file transfers, and other remote computing procedures. However, there are other important security issues related to the management of a Grid and the users who use that Grid. This note discusses these additional security issues and makes several suggestions as how they can be managed.

Eidson, Thomas M.↗
NASA NTRS1999

WEDDS: The WITS Encrypted Data Delivery System

WEDDS, the WITS Encrypted Data Delivery System, is a framework for supporting distributed mission operations by automatically transferring sensitive mission data in a secure and efficient manner to and from remote mission participants over the internet.

public key cryptography encryption authentication ↗
NASA NTRS2013

Autonomous Byte Stream Randomizer

Net-centric networking environments are often faced with limited resources and must utilize bandwidth as efficiently as possible. In networking environments that span wide areas, the data transmission has to be efficient without any redundant or exuberant metadata. The Autonomous Byte Stream Randomizer software provides an extra level of security on top of existing data encryption methods. Randomizing the data s byte stream adds an extra layer to existing data protection methods, thus making it harder for an attacker to decrypt protected data. Based on a generated crypto-graphically secure random seed, a random sequence of numbers is used to intelligently and efficiently swap the organization of bytes in data using the unbiased and memory-efficient in-place Fisher-Yates shuffle method. Swapping bytes and reorganizing the crucial structure of the byte data renders the data file unreadable and leaves the data in a deconstructed state. This deconstruction adds an extra level of security requiring the byte stream to be reconstructed with the random seed in order to be readable. Once the data byte stream has been randomized, the software enables the data to be distributed to N nodes in an environment. Each piece of the data in randomized and distributed form is a separate entity unreadable on its own right, but when combined with all N pieces, is able to be reconstructed back to one. Reconstruction requires possession of the key used for randomizing the bytes, leading to the generation of the same cryptographically secure random sequence of numbers used to randomize the data. This software is a cornerstone capability possessing the ability to generate the same cryptographically secure sequence on different machines and time intervals, thus allowing this software to be used more heavily in net-centric environments where data transfer bandwidth is limited.

Paloulian, George K.↗
NASA NTRS1993

Strategic factors in the development of the National Technology Transfer Network

Broad consensus among industry and government leaders has developed over the last decade on the importance of applying the U.S. leadership in research and development (R&D) to strengthen competitiveness in the global marketplace, and thus enhance national prosperity. This consensus has emerged against the backdrop of increasing economic competition, and the dramatic reduction of military threats to national security with the end of the Cold War. This paper reviews the key factors and considerations that shaped - and continue to influence - the development of the Regional Technoloty Transfer Centers (RTTC) and the National Technology Transfer Center (NTTC). Also, the future role of the national network in support of emerging technology policy initiatives will be explored.

Root, Jonathan F.↗
NASA NTRS1981

Portable appliance security apparatus

An apparatus for securing a small computer, or other portable appliance, against theft is described. It is comprised of a case having an open back through which the computer is installed or removed. Guide members in the form of slots are formed in a rear portion of opposite walls of the case for receiving a back plate to cover the opening and thereby secure the computer within the case. An opening formed in the top wall of the case exposes the keyboard and display of the computer. The back plate is locked in the closed position by a key-operated plug type lock. The lock is attached to one end of a hold down cable, the opposite end thereof being secured to a desk top or other stationary object. Thus, the lock simultaneously secures the back plate to the case and retains the case to the stationary object.

Kerley, J. J.↗
NASA NTRS2010

NASA UAS Update

Last year may prove to be a pivotal year for the National Aeronautics and Space Administration (NASA) in the Unmanned Aircraft Systems (UAS) arena, especially in relation to routine UAS access to airspace as NASA accepted an invitation to join the UAS Executive Committee (UAS ExCom). The UAS ExCom is a multi-agency, Federal executive-level committee comprised of the Federal Aviation Administration (FAA), Department of Defense (DoD), Department of Homeland Security (DHS), and NASA with the goals to: 1) Coordinate and align efforts between key Federal Government agencies to achieve routine safe federal public UAS operations in the National Airspace System (NAS); 2) Coordinate and prioritize technical, procedural, regulatory, and policy solutions needed to deliver incremental capabilities; 3) Develop a plan to accommodate the larger stakeholder community at the appropriate time; and 4) Resolve conflicts between Federal Government agencies (FAA, DoD, DHS, and NASA), related to the above goals. The committee was formed in recognition of the need of UAS operated by these agencies to access to the National Airspace System (NAS) to support operational, training, development and research requirements. In order to meet that need, technical, procedural, regulatory, and policy solutions are required to deliver incremental capabilities leading to routine access. The formation of the UAS ExCom is significant in that it represents a tangible commitment by FAA senior leadership to address the UAS access challenge. While the focus of the ExCom is government owned and operated UAS, civil UAS operations are bound to benefit by the progress made in achieving routine access for government UAS. As the UAS ExCom was forming, NASA's Aeronautics Research Mission Directorate began to show renewed interest in UAS, particularly in relation to the future state of the air transportation system under the Next Generation Air Transportation System (NextGen). NASA made funding from the American Recovery and Revitalization Act available in order to continue addressing the issue of routine civil UAS access.

Bauer, Jeffrey Ervin↗
NASA NTRS2003

Securing Sensitive Flight and Engine Simulation Data Using Smart Card Technology

NASA Glenn Research Center has developed a smart card prototype capable of encrypting and decrypting disk files required to run a distributed aerospace propulsion simulation. Triple Data Encryption Standard (3DES) encryption is used to secure the sensitive intellectual property on disk pre, during, and post simulation execution. The prototype operates as a secure system and maintains its authorized state by safely storing and permanently retaining the encryption keys only on the smart card. The prototype is capable of authenticating a single smart card user and includes pre simulation and post simulation tools for analysis and training purposes. The prototype's design is highly generic and can be used to protect any sensitive disk files with growth capability to urn multiple simulations. The NASA computer engineer developed the prototype on an interoperable programming environment to enable porting to other Numerical Propulsion System Simulation (NPSS) capable operating system environments.

Blaser, Tammy M.↗
NASA NTRS2016

Very High Spectral Resolution Imaging Spectroscopy: the Fluorescence Explorer (FLEX) Mission

The Fluorescence Explorer (FLEX) mission has been recently selected as the 8th Earth Explorer by the European Space Agency (ESA). It will be the first mission specifically designed to measure from space vegetation fluorescence emission, by making use of very high spectral resolution imaging spectroscopy techniques. Vegetation fluorescence is the best proxy to actual vegetation photosynthesis which can be measurable from space, allowing an improved quantification of vegetation carbon assimilation and vegetation stress conditions, thus having key relevance for global mapping of ecosystems dynamics and aspects related with agricultural production and food security. The FLEX mission carries the FLORIS spectrometer, with a spectral resolution in the range of 0.3 nm, and is designed to fly in tandem with Copernicus Sentinel-3, in order to provide all the necessary spectral / angular information to disentangle emitted fluorescence from reflected radiance, and to allow proper interpretation of the observed fluorescence spatial and temporal dynamics.

Moreno, Jose F.↗
NASA NTRS1997

Security System Responsive to Optical Fiber Having Bragg Grating

An optically responsive electronic lock is disclosed comprising an optical fiber serving as a key and having Bragg gratings placed therein. Further, an identification system is disclosed which has the optical fiber serving as means for tagging and identifying an object. The key or tagged object is inserted into a respective receptacle and the Bragg gratings cause the optical fiber to reflect a predetermined frequency spectra pattern of incident light which is detected by a decoder and compared against a predetermined spectrum to determine if an electrical signal is generated to either operate the lock or light a display of an authentication panel.

Gary, Charles K.↗
NASA NTRS1994

Technology Benefit Estimator (T/BEST): User's Manual

The Technology Benefit Estimator (T/BEST) system is a formal method to assess advanced technologies and quantify the benefit contributions for prioritization. T/BEST may be used to provide guidelines to identify and prioritize high payoff research areas, help manage research and limited resources, show the link between advanced concepts and the bottom line, i.e., accrued benefit and value, and to communicate credibly the benefits of research. The T/BEST software computer program is specifically designed to estimating benefits, and benefit sensitivities, of introducing new technologies into existing propulsion systems. Key engine cycle, structural, fluid, mission and cost analysis modules are used to provide a framework for interfacing with advanced technologies. An open-ended, modular approach is used to allow for modification and addition of both key and advanced technology modules. T/BEST has a hierarchical framework that yields varying levels of benefit estimation accuracy that are dependent on the degree of input detail available. This hierarchical feature permits rapid estimation of technology benefits even when the technology is at the conceptual stage. As knowledge of the technology details increases the accuracy of the benefit analysis increases. Included in T/BEST's framework are correlations developed from a statistical data base that is relied upon if there is insufficient information given in a particular area, e.g., fuel capacity or aircraft landing weight. Statistical predictions are not required if these data are specified in the mission requirements. The engine cycle, structural fluid, cost, noise, and emissions analyses interact with the default or user material and component libraries to yield estimates of specific global benefits: range, speed, thrust, capacity, component life, noise, emissions, specific fuel consumption, component and engine weights, pre-certification test, mission performance engine cost, direct operating cost, life cycle cost, manufacturing cost, development cost, risk, and development time. Currently, T/BEST operates on stand-alone or networked workstations, and uses a UNIX shell or script to control the operation of interfaced FORTRAN based analyses. T/BEST's interface structure works equally well with non-FORTRAN or mixed software analysis. This interface structure is designed to maintain the integrity of the expert's analyses by interfacing with expert's existing input and output files. Parameter input and output data (e.g., number of blades, hub diameters, etc.) are passed via T/BEST's neutral file, while copious data (e.g., finite element models, profiles, etc.) are passed via file pointers that point to the expert's analyses output files. In order to make the communications between the T/BEST's neutral file and attached analyses codes simple, only two software commands, PUT and GET, are required. This simplicity permits easy access to all input and output variables contained within the neutral file. Both public domain and proprietary analyses codes may be attached with a minimal amount of effort, while maintaining full data and analysis integrity, and security. T/BESt's sotware framework, status, beginner-to-expert operation, interface architecture, analysis module addition, and key analysis modules are discussed. Representative examples of T/BEST benefit analyses are shown.

Generazio, Edward R.↗
NASA NTRS2004

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗
NASA NTRSDate not supplied

Building Capacity to Use Earth Observations for Agriculture and Food Security Applications: A Summary of NASA’s DEVELOP Program and Projects in Central and South America

NASA’s DEVELOP program engages individuals and organizations in 10-week feasibility studies to apply NASA Earth observations (EO) to decision makers’ needs. Since 2018, DEVELOP conducted 21 projects in Central and South America, eight of those in collaboration with Sistema de la Integración Centroamericana (SICA) and its member state partner agencies. These projects addressed a diverse set of community needs across multiple themes, including two feasibility studies that focused on monitoring drought and precipitation patterns and their impacts on agriculture in Guatemala, Honduras, El Salvador, and Nicaragua using EO from Terra MODIS and GPM. This poster introduces DEVELOP, its approach to capacity building, key partnerships, and project results highlighting the capabilities of EO for enhanced decision making in the area of agriculture and food security.

Capacity Building↗
NASA NTRS2006

Addressing the Tension Between Strong Perimeter Control an Usability

This paper describes a strong perimeter control system for a general purpose processing system, with the perimeter control system taking significant steps to address usability issues, thus mitigating the tension between strong perimeter protection and usability. A secure front end enforces two-factor authentication for all interactive access to an enclave that contains a large supercomputer and various associated systems, with each requiring their own authentication. Usability is addressed through a design in which the user has to perform two-factor authentication at the secure front end in order to gain access to the enclave, while an agent transparently performs public key authentication as needed to authenticate to specific systems within the enclave. The paper then describes a proxy system that allows users to transfer files into the enclave under script control, when the user is not present to perform two-factor authentication. This uses a pre-authorization approach based on public key technology, which is still strongly tied to both two-factor authentication and strict control over where files can be transferred on the target system. Finally the paper describes an approach to support network applications and systems such as grids or parallel file transfer protocols that require the use of many ports through the perimeter. The paper describes a least privilege approach that dynamically opens ports on a host-specific, if-authorized, as-needed, just-in-time basis.

Hinke, Thomas H.↗
NASA NTRS2026

Turbofan Engine Power Extraction Demonstration Final Report

As GE Aerospace advances toward a revolutionary step change in propulsion efficiency, the integration and demonstration of new engine architectures and technology systems are essential. The NASA Turbofan Engine Power Extraction Demonstration (PEx), conducted through the Hybrid Thermally Efficient Core (HyTEC) project, aims to develop and demonstrate megawatt-class hybrid electric capability on a modern commercial turbofan engine. The hybrid electric system is critical to meeting the needs of the U.S. aviation industry for next-generational propulsion systems with greater efficiency, durability, and range. This supports energy independence and helps ensure the security and resilience of one of America's largest export industries. The PEx project specifically targets three key objectives: mechanically integrating hybrid electric capability into a commercial turbofan engine, integrating electric machine control with turbofan control for advanced power management, and de-risking performance modeling of future hybrid electric architectures. To mature these technologies to Technology Readiness Level (TRL) 6, a series of electric power system component tests and a baseline engine performance test campaign were conducted. These efforts culminated in an integrated hybrid electric turbofan test campaign demonstrating power extraction, power insertion, and power transfer between spools. Tests of the electric power system were completed at GE Aerospace’s Electrical Power Integrated Systems Center in Dayton, Ohio and engine tests were completed at Peebles Test Operation in Peebles, Ohio. Hybrid electric trade studies extended the demonstrated capability to altitude using the validated cycle model from the PEx test campaigns, allowing for comments on expanded mission benefits not demonstrated in the ground campaign. The knowledge gained from PEx also supports GE Aerospace’s Compact Core Demonstrator as part of HyTEC Phase 2 and ultimately informs the implementation of hybrid electric systems in the next generation of GE Aerospace commercial engine products. This report provides a summary of the program background, test campaigns, trade studies, and insights into the technical maturation required to support future commercial products.

Hybrid Electric↗
NASA NTRS2008

Web Monitoring of EOS Front-End Ground Operations, Science Downlinks and Level 0 Processing

This paper addresses the efforts undertaken and the technology deployed to aggregate and distribute the metadata characterizing the real-time operations associated with NASA Earth Observing Systems (EOS) high-rate front-end systems and the science data collected at multiple ground stations and forwarded to the Goddard Space Flight Center for level 0 processing. Station operators, mission project management personnel, spacecraft flight operations personnel and data end-users for various EOS missions can retrieve the information at any time from any location having access to the internet. The users are distributed and the EOS systems are distributed but the centralized metadata accessed via an external web server provide an effective global and detailed view of the enterprise-wide events as they are happening. The data-driven architecture and the implementation of applied middleware technology, open source database, open source monitoring tools, and external web server converge nicely to fulfill the various needs of the enterprise. The timeliness and content of the information provided are key to making timely and correct decisions which reduce project risk and enhance overall customer satisfaction. The authors discuss security measures employed to limit access of data to authorized users only.

Cordier, Guy R.↗
NASA NTRSDate not supplied

Medical System Requirements Development for Lunar Operations

The major health hazards of spaceflight include higher levels of damaging radiation, altered gravity, extended periods of isolation and confinement, a closed and potentially hostile living environment, and the stress associated with being a long distance from Earth. As we increase the duration of lunar stays with foreseeable communication latencies and disruptions, there will be a progressive need for crew to maintain their own health and independently respond to critical medical events. The Exploration Medical Capability element of the NASA Human Research Program is developing a set of Medical System requirements for lunar transit and surface operations. These requirements specify the capabilities, processes and procedures of a habitat Medical System needed for a range of conditions known to occur during spaceflight. Requirement text is written so as not to constrain innovative design solutions necessary for a resilient system. The requirement set includes attributes and functions the Medical System imposes on eight additional habitat systems. A key property of the Medical System is the provision of medical knowledge that will be stored, updated, analyzed, and secured within a Habitat Data System. A Task Performance Support System will aid in medical data acquisition and interpretation, crew training, medical condition prevention, diagnosis and treatment, provide interactive procedures, and track medical inventory. A Wellness System will focus on the provision of countermeasures to prevent, mitigate or treat adverse physical and behavioral health effects while the Medical System recommends adjustments to these countermeasures to maintain crew health. An Environmental Monitoring System will share out-of-bounds readings of air and water quality, acoustics, and radiation exposure levels with the Medical System to help identify issues before they affect crew health and performance. A Communications System will provide secured and private consultations between crew and the ground medical team and their loved ones on Earth. The Medical System also imposes requirements on a Research & Testbed System, fostering advanced medical science such as human research. A Waste Management System provides biohazard waste containment and waste disposal options (recycle and reuse). An Extravehicular Activity System supports crew health during lunar surface activities. And finally, a Maintenance Support System ensures that medical equipment is performing as expected. These requirements are being specifically developed for lunar surface operations but could help to identify Medical System requirements for any space habitat (e.g., I-Hab, commercial endeavors, etc.).

technology↗