SBIR-STTR Award

The development and certification strategies of existing commercially available separation kernels (SK) rely on the costly retrofitting of safety critical (DO-178B) operating systems, to meet the requirements of the NSA approved U.S. Government Separation Kernel Protection Profile in Environments Requiring High Robustness (SKPP). SOLUTE’s innovative approach focuses on the development of a SK architecture, which from the ground up meets the High Robustness requirements of the SKPP and defines cost minimization as a central principle. SOLUTE has partnered with DSD Information Assurance Labs (A National Information Assurance Partnership (NIAP) accredited testing laboratory) and GDC4S to ensure that the architectural development process is optimized for low cost certification at all stages.

Keywords:
Solute, Seperation Kernel, High Assurance, Cyber Security, Cots, Operating System, Virtualization, Cyber Defense

Based on the findings of previous research, the proposed effort aims to develop an open architecture that integrates multiple sources of location information with multiple device management and data protection mechanisms enables precision, real-time access to data. The integrated architecture will combine capabilities resident in the Mobile Device (and operating system), Mobile Device Management (MDM) / Enterprise Mobility Management (EMM), IoT Technologies, Data Ingestion and Normalization, Device Virtualization, and Mobile Deceive Detection and Localization technologies to provide an end-to-end system. The proposed architecture will leverage open standards and open source technologies where possible. In cases that proprietary technologies will be used, SOLUTE will develop abstraction layers and Open APIs to ensure that the resulting system is vendor neutral. In addition, the IMU based motion prediction algorithms developed in the previous phase will be improved and productionized. Finally, GML based Smart Maps will be implemented to add context and intelligence to all motion and location prediction inputs. All location sensing system will be thoroughly tested to build real world error and accuracy models. Much like other forms of sensor fusion, these models will be used to more accurately predict location information by aggregating and fusing information from all available sensor data.

Benefit:
The anticipated result of this effort is the production of a reliable and accurate system for controlling access to Navy networks, systems, and data based on the location of a mobile device. It is envisioned that this capability will be demonstrated both in the SOLUTE SPARC lab as well as at one or more Government facilities (if desired). The result will be a demonstrable system with associate performance data, design information, and cyber security evidence that support transition into the target Program of Record. This form of support will allow for rapid identification, and restriction of data will create a mobile first next generation form of cyber control that will facilitate a physical security as well a greatly enhance OPSEC across the fleet as a result. For example, we anticipate being able to demonstrate this capability to provide a strong mobile security infrastructure to a secure space or classified facility allowing them to quickly and accurately identify devices and users and take immediate actions. Administrative dashboards could be used for control and distribution of data in response to equipment and personnel causalities with increased accuracy and response, exemplifying how the system could be grown to aid in a broader range of Naval capabilities. This foundation technology could lead to future deployments across the fleet both on shore and at sea, allowing for the warfighters to have a tightly coupled form of communication, allowing their work days to flow faster, more communicative, and with greater accuracy. Top levels of commands could have a deeper and real time understanding of the personnel under them, and the tactical situation as it evolved, and command and control parties would be able to response with greater celerity to situations in tightly coupled communication with those front-line responders.

Keywords:
prediction, detection, security, Mobility, geolocation, Integration, localization