Security architecture for interconnected digital engineering and certification ecosystem
Inventors
Roper, Jr., William • Benson, Christopher • Krishnan, Sriram • Abunojaim, Baha aldeen E. A. • Daw, Ellie • Valverde, Omar • Zahra, Mohammad M. Y. • Galvin, Peter • Huffaker, Danne Stayskal
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12105826-B1
Publication Date
2024-10-01
Expiration Date
Abstract
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for securely certifying products in an ecosystem. In some implementations, a digital platform receives a user request to access digital models. The digital platform determines whether the user is authorized to access the digital models. In response, the digital platform generates a transaction request to send to a location of the digital models, wherein the transaction request comprises data identifying operations to perform using the digital models. The digital platform transmits, to the location of the digital models, the generated transaction request that causes execution of the operations. The digital platform receives data representative of a result of the operations performed. The digital platform provides, to a user interface of the user device, the data representative of the result. The digital platform audits the data related to the transaction request and the data representative of the result.
Core Innovation
The invention provides an interconnected digital engineering and certification ecosystem for digitally certifying products using digitized engineering tools and digitized common V&V products. A digital platform receives a user request and determines whether the user is authorized to access one or more digital models at an indicated model location.
When the user is authorized, the digital platform generates a transaction request that includes data identifying one or more operations to perform using the one or more digital models and transmits the transaction request to the location of the one or more digital models. Execution of the one or more operations is performed using the digital models requested by the user device, and the digital platform receives data representative of a result and provides the result data to a user interface of the user device.
The ecosystem includes auditing of data related to the transaction request and the data representative of the result of the one or more operations performed using the one or more digital models. Security is described using zero-trust security for users, networks, and digital models, including attribute-based access control, restricted read vs write handling, model wrappers/splicers for function restriction, selective model sharing with redaction, and traceability/auditability through logged endpoint transactions with hashes and digital watermarking.
Claims Coverage
The independent claims define five inventive features across a computer-implemented method, a system, and a non-transitory computer-readable medium. They collectively cover authorization-based access to digital models, transaction-request-based execution at an indicated model location, return of result data to a user interface, and auditing, with dependent matter further refining routing and access control.
Authorization-driven digital model access via digital platform
The digital platform receives a user request via a user device to access one or more digital models and determines whether a user of the user device is authorized to access the one or more digital models.
Transaction-request execution at an indicated model location
In response to determining the user is authorized, the digital platform generates a transaction request to send to a location indicated in the user request of the one or more digital models, where the transaction request comprises data identifying one or more operations to perform using the one or more digital models, and transmits the transaction request to cause execution of the one or more operations using the one or more digital models.
Result return to user interface with transaction-based auditing
The digital platform receives data representative of a result of the one or more operations performed using the one or more digital models, provides the data representative of the result to a user interface of the user device, and audits the data related to the transaction request and the data representative of the result of the one or more operations performed using the one or more digital models.
System implementation of the transaction-request workflow
A system comprising one or more computers and one or more storage devices storing instructions operable to cause receiving a user request via a user device and a digital platform, determining authorization, generating and transmitting a transaction request to a location of the one or more digital models including data identifying one or more operations, receiving result-representative data, providing the result data to a user interface, and auditing the transaction-request data and result-representative data.
Non-transitory medium software implementing authorization, transaction requests, result return, and auditing
A non-transitory computer-readable medium storing software comprising instructions executable to cause receiving a user request via a user device and a digital platform, determining whether the user is authorized, generating a transaction request to send to a location indicated for the one or more digital models with data identifying one or more operations, transmitting the transaction request to cause execution, receiving result-representative data, providing the result to a user interface, and auditing transaction-request-related data and result-representative data.
The independent claims consistently cover a digital-platform workflow that authorizes access to one or more digital models, generates and transmits transaction requests that specify operations for execution at an indicated model location, returns operation result data to a user interface, and audits transaction-request data and result data.
Stated Advantages
Enables digitally certifying products using digitized engineering tools and digitized common V&V products.
Provides traceability and auditability by auditing transaction-request data and result data.
Supports secure access control to digital models using zero-trust security and attribute-based access control.
Documented Applications
Digitally certifying products in an interconnected digital engineering and certification ecosystem, including UAVs, drugs/biologics, and manufacturing processes.
Interested in licensing this patent?