SEARCH · Search NASA
Results for “secure keys”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
A Secure Key Distribution System of Quantum Cryptography Based on the Coherent State
The cryptographic communication has a lot of important applications, particularly in the magnificent prospects of private communication. As one knows, the security of cryptographic channel depends crucially on the secrecy of the key. The Vernam cipher is the only cipher system which has guaranteed security. In that system the key must be as long as the message and most be used only once. Quantum cryptography is a method whereby key secrecy can be guaranteed by a physical law. So it is impossible, even in principle, to eavesdrop on such channels. Quantum cryptography has been developed in recent years. Up to now, many schemes of quantum cryptography have been proposed. Now one of the main problems in this field is how to increase transmission distance. In order to use quantum nature of light, up to now proposed schemes all use very dim light pulses. The average photon number is about 0.1. Because of the loss of the optical fiber, it is difficult for the quantum cryptography based on one photon level or on dim light to realize quantum key-distribution over long distance. A quantum key distribution based on coherent state is introduced in this paper. Here we discuss the feasibility and security of this scheme.
Quantum Technologies for UAS (QTech)
Harness the power of quantum technologies to assure the availability of UAS communications against disruptions. Make use of quantum computing (e.g. quantum optimization) and quantum communication (e.g. quantum key distribution) to address the availability cybersecurity challenge. Our approach is three-fold: (1) Utilize quantum optimization algorithms to design robust network with routing redundancy that can respond adaptively to dynamically changing real-time environment and disruptions, (2) Utilize quantum optimization algorithms resource allocation for detection, localization, and tracking of mobile communication disruption agents, (3) Utilize quantum key distribution (QKD) to execute secure key sharing in high data rate optical communication and/or anti-jamming protocols for secure RF communication.
Modeling, Simulation and Analysis of Public Key Infrastructure
Security is an essential part of network communication. The advances in cryptography have provided solutions to many of the network security requirements. Public Key Infrastructure (PKI) is the foundation of the cryptography applications. The main objective of this research is to design a model to simulate a reliable, scalable, manageable, and high-performance public key infrastructure. We build a model to simulate the NASA public key infrastructure by using SimProcess and MatLab Software. The simulation is from top level all the way down to the computation needed for encryption, decryption, digital signature, and secure web server. The application of secure web server could be utilized in wireless communications. The results of the simulation are analyzed and confirmed by using queueing theory.
Generation of key in cryptographic system for secure communications
Report discusses key generation for transmission of confidential data. A number of feedback functions are discussed for generation of long key sequences.
Enhancing Global Food Security: Opportunities for the American Meteorological Society
Food security is a key pillar of environmental security yet remains one of the world’s greatest challenges. Its obverse, food insecurity, negatively impacts health and well-being, drives mass migration, and undermines national security and global sustainable development. Ensuring food security is a delicate balance of myriad concerns within the atmospheric and Earth sciences, agronomy and agriculture engineering, social sciences, economics, monitoring, and policymaking. A Food Security Presidential Session at the American Meteorological Society’s (AMS) 2022 Annual Meeting brought together experts across disciplines to tackle issues at the nexus of weather, climate, and food security. The starkest takeaway was the realization that, despite its importance and clear roles for the atmospheric and climate sciences, food security has not been a focus for the AMS community. The aim of this paper is to build on the perspectives shared by this expert panel and to identify overlapping issues and key points of intersection between the food-security community and AMS. We examine 1) the interactions between weather, climate, and the food system and how they influence food security; 2) the time and spatial scales of food security decision support that match weather and climate phenomena; 3) the role of both providers and users of information as well as decision-makers in improving research to operations for food security; and 4) the opportunities for the AMS community to address food security. We conclude that, moving forward, the AMS community is well-positioned to scale up its engagement across the global food system to address existing scientific needs and technology gaps to improve global food security.
Quantum Technologies for UAS (QTech)
Recent advances in small Unmanned Aerial System (sUAS) technologies lower the barriers for use by both private and commercial entities. However, these advances are also likely to lead to greater vehicle densities, a more heterogenous mix of vehicles and equipment and greater levels of vehicle autonomy, which can increase the chance for communications disruptions. For the safe and secure operation of these vehicles, it is essential to have a robust communications network. This work is focused on harnessing the power of quantum technologies to enable this robust communications network by: (1) utilizing quantum optimization algorithms to design robust network with routing redundancy that can respond adaptively to dynamically changing real-time environment and disruptions, (2) utilize quantum optimization algorithms resource allocation for detection, localization, and tracking of mobile communication disruption agents and (3) utilize quantum key distribution (QKD) to execute secure key sharing in anti-jamming protocols for secure radio frequency (RF) communication. Efforts to map these quantum optimization algorithms to commercially available quantum annealers and soon to be available general-purpose gate-model quantum hardware architectures will be reviewed, and plans for testing the solutions to these algorithms through indoor sUAS flight tests will be discussed. Lastly, efforts to miniaturize and practically deploy Quantum Key Distribution (QKD) hardware, which could ultimately be used to securely exchange encryption keys, in sUAS networks will be reviewed.
Bevel gear driver and method having torque limit selection
This invention comprises a torque drive mechanism utilizing axially translatable, mutually engageable transmission members having mating crown gears, driven and driving members with a three-element drive train being biased together by resilient means or by a fluid actuator system, the apparatus being operable to transmit a precisely controlled degree of torque to a driven member. The apparatus is applicable for use in hand tools and as a replacement for impact torque drivers, torque wrenches, motorized screw drivers, or the like, wherein the applied torque must be precisely controlled or limited. The bevel torque drive includes a drive gear which is axially displaceable and rotatable within cylindrical driver housing, a rotatable intermediate gear, and an output gear. Key rotationally secures displaceable gear with respect to input shaft but permits axial movement therebetween. A thrust bearing is preferably connected to the lower end of shaft for support to reduce play and friction between shaft and a transmission joint disc during rotation of the gear train. Coaxially mounted coiled spring is footed against displaceable gear for biasing the displaceable gear toward and into engagement with the intermediate gear for driving intermediate gear and output gear. Torque control is achieved by the use of straight or spiral beveled gears which are of configurations adapted to withdraw from mutual engagement upon the torque exceeding a predetermined limit. The novel, advantageous features of the invention include the configuration of the mating, crown gear sets and the axially translatable, slidable drive gear. The mechanism is capable of transmitting a high degree of torque within a narrow, compact transmission housing. The compact size and narrow, elongated configuration of the housing is particularly applicable for use in hand tools and in multiple torque driver mechanisms in which it is necessary to drive multiple fasteners which are located in close proximity. Prior torque drivers such as 'click-type' torque wrenches do not actually limit torque application but only provide an audible warning that the limit has been reached.
Operational Experience with Long Duration Wildfire Mapping: UAS Missions Over the Western United States
The National Aeronautics and Space Administration, United States Forest Service, and National Interagency Fire Center have developed a partnership to develop and demonstrate technology to improve airborne wildfire imaging and data dissemination. In the summer of 2007, a multi-spectral infrared scanner was integrated into NASA's Ikhana Unmanned Aircraft System (UAS) (a General Atomics Predator-B) and launched on four long duration wildfire mapping demonstration missions covering eight western states. Extensive safety analysis, contingency planning, and mission coordination were key to securing an FAA certificate of authorization (COA) to operate in the national airspace. Infrared images were autonomously geo-rectified, transmitted to the ground station by satellite communications, and networked to fire incident commanders within 15 minutes of acquisition. Close coordination with air traffic control ensured a safe operation, and allowed real-time redirection around inclement weather and other minor changes to the flight plan. All objectives of the mission demonstrations were achieved. In late October, wind-driven wildfires erupted in five southern California counties. State and national emergency operations agencies requested Ikhana to help assess and manage the wildfires. Four additional missions were launched over a 5-day period, with near realtime images delivered to multiple emergency operations centers and fire incident commands managing 10 fires.
Smashing the Stovepipe: Leveraging the GMSEC Open Architecture and Advanced IT Automation to Rapidly Prototype, Develop and Deploy Next-Generation Multi-Mission Ground Systems
Satellite/Payload Ground Systems - Typically highly-customized to a specific mission's use cases - Utilize hundreds (or thousands!) of specialized point-to-point interfaces for data flows / file transfers Documentation and tracking of these complex interfaces requires extensive time to develop and extremely high staffing costs Implementation and testing of these interfaces are even more cost-prohibitive, and documentation often lags behind implementation resulting in inconsistencies down the road With expanding threat vectors, IT Security, Information Assurance and Operational Security have become key Ground System architecture drivers New Federal security-related directives are generated on a daily basis, imposing new requirements on current / existing ground systems - These mandated activities and data calls typically carry little or no additional funding for implementation As a result, Ground System Sustaining Engineering groups and Information Technology staff continually struggle to keep up with the rolling tide of security Advancing security concerns and shrinking budgets are pushing these large stove-piped ground systems to begin sharing resources - I.e. Operational / SysAdmin staff, IT security baselines, architecture decisions or even networks / hosting infrastructure Refactoring these existing ground systems into multi-mission assets proves extremely challenging due to what is typically very tight coupling between legacy components As a result, many "Multi-Mission" ops. environments end up simply sharing compute resources and networks due to the difficulty of refactoring into true multi-mission systems Utilizing continuous integration / rapid system deployment technologies in conjunction with an open architecture messaging approach allows System Engineers and Architects to worry less about the low-level details of interfaces between components and configuration of systems GMSEC messaging is inherently designed to support multi-mission requirements, and allows components to aggregate data across multiple homogeneous or heterogeneous satellites or payloads - The highly-successful Goddard Science and Planetary Operations Control Center (SPOCC) utilizes GMSEC as the hub for it's automation and situational awareness capability Shifts focus towards getting GS to a final configuration-managed baseline, as well as multi-mission / big-picture capabilities that help increase situational awareness, promote cross-mission sharing and establish enhanced fleet management capabilities across all levels of the enterprise.
A DNA-Inspired Encryption Methodology for Secure, Mobile Ad Hoc Networks
Users are pushing for greater physical mobility with their network and Internet access. Mobile ad hoc networks (MANET) can provide an efficient mobile network architecture, but security is a key concern. A figure summarizes differences in the state of network security for MANET and fixed networks. MANETs require the ability to distinguish trusted peers, and tolerate the ingress/egress of nodes on an unscheduled basis. Because the networks by their very nature are mobile and self-organizing, use of a Public Key Infra structure (PKI), X.509 certificates, RSA, and nonce ex changes becomes problematic if the ideal of MANET is to be achieved. Molecular biology models such as DNA evolution can provide a basis for a proprietary security architecture that achieves high degrees of diffusion and confusion, and resistance to cryptanalysis. A proprietary encryption mechanism was developed that uses the principles of DNA replication and steganography (hidden word cryptography) for confidentiality and authentication. The foundation of the approach includes organization of coded words and messages using base pairs organized into genes, an expandable genome consisting of DNA-based chromosome keys, and a DNA-based message encoding, replication, and evolution and fitness. In evolutionary computing, a fitness algorithm determines whether candidate solutions, in this case encrypted messages, are sufficiently encrypted to be transmitted. The technology provides a mechanism for confidential electronic traffic over a MANET without a PKI for authenticating users.
Research Report: Building a File Observatory for Secure Parser Development
"Parsing untrusted data is notoriously challenging.Failure to handle maliciously crafted data correctly can (anddoes) lead to a wide range of vulnerabilities. The Languagetheoretic security (LangSec) philosophy seeks to obviate the needfor developers to apply ad hoc solutions by, instead, offeringformally correct and verifiable input handling throughout thesoftware development lifecycle. One of the key components indeveloping secure parsers is a broad coverage corpus that enablesdevelopers to understand the problem space for a given formatand to use, potentially, as seeds for fuzzing and other automatedtesting. In this paper, we offer an update on the developmentof a file observatory to gather and enable analysis on a diversecollection of files at scale. Specifically, we report on the additionof a bug tracker corpus and new analytic methods on our existingcorpus."
Research Report: Progress on Building a File Observatory for Secure Parser Development
Parsing untrusted data is notoriously challenging.Failure to handle maliciously crafted data correctly can (anddoes) lead to a wide range of vulnerabilities. The Languagetheoretic security (LangSec) philosophy seeks to obviate the needfor developers to apply ad hoc solutions by, instead, offeringformally correct and verifiable input handling throughout thesoftware development lifecycle. One of the key components indeveloping secure parsers is a broad coverage corpus that enablesdevelopers to understand the problem space for a given formatand to use, potentially, as seeds for fuzzing and other automatedtesting. In this paper, we offer an update on work reportedat the LangSec 2021 conference on the development of a fileobservatory to gather and enable analysis on a diverse collectionof files at scale. The initial focus of the observatory is on PortableDocument Format (PDF) files and file formats typically embeddedin PDFs. In this paper, we report on refactoring the ingestprocess, applying new analytic methods, and improving the User Interface.
Connecting Space to Village: Tethys Adoption Within SERVIR
The SERVIR program, a joint development initiative of National Aeronautics and Space Administration (NASA) and United States Agency for International Development (USAID), works in partnership with leading regional organizations world-wide to help developing countries use information provided by Earth observing satellites and geospatial technologies for managing climate risks and land use. SERVIR empowers decision-makers with tools, products, and services to act locally on critical issues related to four key areas: Food Security and Agriculture, Water and Water-related Disasters, Land Use/Land Cover and Ecosystems, Weather and Climate. SERVIR is improving awareness, increasing access to information, and supporting analysis to help people in West Africa, Eastern and Southern Africa, Hindu Kush-Himalaya (HKH), the Lower Mekong, South America and Mesoamerica. NASA funds an Applied Sciences Team (AST), composed of experts from universities and research institutions around the United States. Through AST, SERVIR adopted the Tethys platform introduced by Brigham Young University (BYU) for the implementation of tools to deliver scientific data to stakeholders in the Hindu Kush-Himalaya region. Several Tethys applications developed within SERVIR have raised interest amongst decision makers in the countries served by our regional hubs. They see these new apps as key vehicles to disseminate complex information related to weather models, hydrological models, and air quality monitoring, and as such the scope of our Tethys efforts continue to expand to other regions. As of July 2019, each one of the SERVIR hubs (with the exception of Amazonia, which has only recently started), have stood up Tethys portals and have at least one individual trained in the implementation and maintenance of a Tethys portal and in the creation of basic applications. HKH, with BYU's valuable support, has implemented very sophisticated applications that showcase the possibilities and the benefits that the Tethys platform brings.
Secure ADS-B authentication system and method
A secure system for authenticating the identity of ADS-B systems, including: an authenticator, including a unique id generator and a transmitter transmitting the unique id to one or more ADS-B transmitters; one or more ADS-B transmitters, including a receiver receiving the unique id, one or more secure processing stages merging the unique id with the ADS-B transmitter's identification, data and secret key and generating a secure code identification and a transmitter transmitting a response containing the secure code and ADSB transmitter's data to the authenticator; the authenticator including means for independently determining each ADS-B transmitter's secret key, a receiver receiving each ADS-B transmitter's response, one or more secure processing stages merging the unique id, ADS-B transmitter's identification and data and generating a secure code, and comparison processing comparing the authenticator-generated secure code and the ADS-B transmitter-generated secure code and providing an authentication signal based on the comparison result.
Vannevar Bush 2: Science for the 21st Century. Why Should Federal Dollars be Spent to Support Scientific Research?
On July 5, 1945, Dr. Vannevar Bush delivered a report to President Truman known as 'Science: The Endless Frontier'. In the report, Dr. Bush stated that 'scientific progress is one essential key to our security as a nation, to our better health, to more jobs, to a higher standard of living, and to our cultural progress'. Bush addressed job creation, the independence of basic research, the ties between research and application, and the nations's need for new talent. In 1995, there are strong similarities between the issues addressed in the Congress, Administration, and the public and those following World War 2. Federal funds and research funding are under severe pressure, including that from fiscal constraints in the federal budget due to the large and growing deficit and the escalating cost of health care. Defense conversion is addressed in the Congress and in industry, where many jobs are at stake. Conversion of the national laboratories, particularly nuclear weapons laboratories, has been a subject of a governmental commission and is the subject of draft legislation. Health care costs and the appropriate role of the federal government in funding basic and applied research has become a major topic of debate. Discussion on education in science has grown from the issue of how to produce more Ph.D.'s to how to improve the understanding of technology and science among the general public.
Integrated Distributed Directory Service for KSC
This paper describes an integrated distributed directory services (DDS) architecture as a fundamental component of KSC distributed computing systems. Specifically, an architecture for an integrated directory service based on DNS and X.500/LDAP has been suggested. The architecture supports using DNS in its traditional role as a name service and X.500 for other services. Specific designs were made in the integration of X.500 DDS for Public Key Certificates, Kerberos Security Services, Network-wide Login, Electronic Mail, WWW URLS, Servers, and other diverse network objects. Issues involved in incorporating the emerging Microsoft Active Directory Service MADS in KSC's X.500 were discussed.
A Safety-Driven Approach to Exploring and Comparing Air Traffic Management Concepts for Enabling Urban Air Mobility
There is broad recognition that the high tempo and density of Urban Air Mobility (UAM) operations will require identifying new Air Traffic Management (ATM) concepts to safely integrate UAM air traffic into the airspace alongside existing air traffic. However, the simulation models used to compare ATM concepts today are difficult to apply during the early stages of concept development and do not offer enough support in identifying potential new concepts. In addition, they have limited ability to evaluate ATM concepts in terms of safety, security, and other key emergent properties. Instead of using simulation to evaluate ATM concepts, this paper demonstrates how a safety-driven systems engineering approach based on Systems-Theoretic Accident Model and Processes (STAMP) can be used to design properties such as safety into an ATM system from the earliest stages of development. Using a hazard analysis technique called Systems-Theoretic Process Analysis (STPA), system requirements and the desired ATM behavior are derived. As an example, two possible ATM concepts to implement that behavior are compared to identify their safety-related benefits and tradeoffs. This new approach enables (1) systematic exploration of alternative ATM concepts and (2) identification of the safety-related tradeoffs between concepts as early as possible in the development process.