There are 3 Elements Required in Any Computer Action — User, Data and Code Execution

• Current systems can only control 2 of these elements — Users and Data

• Current systems are unable to fully control actions once access to data is granted

• ZTOS exerts fine-grained control over all 3 elements — a new control system over the actions that can be exerted upon data by users and applications

Patented AI-based System Activity Models Redefine how Users and Code Execution Operate upon Data

• ZTOS eliminates root access and super-user privileges through an innovative distributed encryption design that spreads keys and ownership and features continuous authentication

• This architecture removes the main cyberattack vector: privilege escalation and leverage of root access capability 

We understand that we are making bold claims and welcome the opportunity to explain why we do so.

We also look forward to rigorous technical, legal/IP and financial discussions and our plans for distribution of our API’s through established channels through partnerships and licensing.

What does ZTOS stand for and why have you chosen this name?

ZTOS, or Zero Trust Operating System embodies the dual principles behind our technology.

• On one hand, we revolutionize file system operations using sophisticated drivers and APIs.
• On the other, Zero Trust principles aren’t mere appendages in our system. Instead, they are integral, baked into every layer from inception.

Our unique AI-based distributed architecture is built on the key Zero Trust tenet: No process, user, or data resource can be trusted by default. Consequently, ZTOS isn’t just a Zero Trust product but a robust, security-focused file system, engineered to fulfill the comprehensive spectrum of Zero Trust specifications.

We welcome technical and functional discussion of these topics.

What unique functionality does ZTOS provide?

ZTOS (Zero Trust Operating System) creates a new type of secure operating environment by applying the principles of Zero Trust across three dimensions simultaneously: data, code/action, and user.

• Unlike conventional systems, ZTOS uniquely controls all three dimensions at once in order to allow or facilitate an action.
• Current systems are two-dimensional and are based on the concept of “defense-in-depth,” which involves multiple layers of security controls — but still only exert control over two of the three dimensions.

This lack of control over all the elements involved in a computer action allows potential breaches, even when they are unintentional. This vulnerability is present in all operating systems, but is eliminated in ZTOS.

Can you illustrate the problem with an example?

Let’s consider a scenario where an authorized employee needs to access a company’s financial records — this involves the user and data dimensions.

• If the employee runs a command to read the data, which is an action executed via code, conventional systems would allow this since the user has the required permissions.
• However, if the same user unintentionally runs a piece of code that corrupts or exports the data without their knowledge — perhaps due to malware or a coding error — traditional systems cannot and do not prevent this action.

This is because these systems cannot simultaneously control and coordinate the three dimensions — user, code, and data.

Are there any other systems similar to ZTOS?

While some elements of ZTOS may exist in various forms elsewhere, no other operating system or cybersecurity solution offers the extensive overhaul of file system security that ZTOS inherently provides.

Could you explain ZTOS in layman’s terms?

Imagine the core of every operating system, spanning cloud, mobile, and desktop platforms. A user receives permissions to read or alter data — a system that’s been pretty much the same since the early UNIX days.

• Picture all computer activities, like ‘edit’ or ‘view’, as a three-piece puzzle involving data, a user, and the execution of a code.
• However, existing access controls, based on these old permission structures, don’t regulate the simultaneous engagement of these three elements once access is granted.
• This simultaneous engagement is what’s needed to control the actions users can perform on the data.

We term this simultaneous control of Data/User/Code as ‘DUC’.

• In ZTOS, no action can happen without the authentication of this DUC puzzle – that is, the pieces must fit. The user must be approved for that action, on that data.

As always, we’re open to further technical and functional discussions on these subjects.

Why does this matter?

One consequence of systems based on outmoded access control architectures is that the operating systems then require all-powerful “super user” accounts and “root access” capabilities. These enable control over any aspect of the system. But these expansive capabilities have many consequences.

• A key goal in all types of cybersecurity attacks is to obtain or escalate privileges to super user or root access level in order to exploit these capabilities.

Unlike traditional systems, ZTOS doesn’t just mitigate these risks – it completely eliminates them, redefining the security paradigm for operating systems.

How do conventional systems address these security vulnerabilities?

Traditional systems attempt to resolve the inherent flaw in all operating systems by deploying a multitude of security solutions (this is the so-called “defense-in-depth” design). These solutions, often sourced from various vendors, must be integrated and maintained across sophisticated, continuously evolving systems.

• This inevitably leads to deployment and compatibility issues, as well as the need for increasingly complex ‘best-practices’ documents, which necessitate additional training.

In general, most security systems — even those that implement the emerging tenets of Zero Trust — focus primarily on verifying permissions and requirements, such as, “Does this user have permission to connect via VPN?” or “Does this device meet the connection requirements?”

• While these checks potentially hinder unauthorized access, they also introduce complex, costly parameters, requiring continual maintenance.
• This can introduce system and user overhead (“friction”), which ZTOS mitigates through its distributed ownership and authentication architecture.

Moreover, a multitude of security solutions exist, including VPNs and anti-virus software. In addition, security measures that address individual data, user, and code/action aspects, like code signing and file encryption, have also been in use for years.

• However, none of these approaches address the central issue — controlling all three dimensions simultaneously to permit or enable an action.

This is the fundamental flaw in all operating systems that is rectified by ZTOS.

Given the vast resources poured into security, why hasn’t another company developed ZTOS?

The solutions offered by ZTOS are not “changes at the edges” or “workarounds” but involve a different approach to file system operations, which effectively addresses the most critical vulnerabilities in current operating systems.

• However, true technological evolution and innovation often emerge from unexpected places, not just the well-established tech giants.

So, the approach to cybersecurity by Decision Time is entirely unique.

Decision Time has adopted an innovative and comprehensive strategy to address cybersecurity issues. These issues, previously handled in a piecemeal fashion, avoid the deeper architectural challenges. To realize this strategy, ZTOS employs a mix of original mathematics, technology and repurposed existing methods deployed in novel ways.

• Such an approach requires long-term vision, patience, and dedication — attributes not commonly associated with startup environments. This necessity explains our years of stealth development and bootstrap operation.
• Our primary mission has been to develop a universally applicable, unassailable security system through an API-based infrastructure.

The result of this effort is a versatile architecture that revolutionizes cybersecurity. This architecture provides an exceptional value proposition by combining powerful solutions with robust IP and patent protection.

What is the current stage of Decision Time’s development?

Decision Time has completed the research and testing phases for ZTOS and our security-focused analytic applications.

• We are presently expanding our code base within a representative system.
• Our approach has allowed us to architect the ZTOS APIs and user interface components to be able to align with the specific requirements of potential distribution partnerships.

We are prepared to complete our code for production and for full-scale deployment via our distribution partners.

What do you mean by AI-driven capabilities in ZTOS?

ZTOS incorporates an array of AI technologies, many of which are the result of the original and innovative work of our founders. In one notable instance, ZTOS deploys a proprietary and unique emergent graph neural network to continuously model system activity as users execute code on data.

Additionally, we utilize Natural Language Processing and sophisticated AI tools, like Large Language Models similar to GPT, to extend our Zero Trust protection to the content within data files, not just the files themselves.

These techniques collectively offer unparalleled security dimensions.

You have been awarded 9 patents and have many more in the pipeline. Please explain.

At Decision Time, we have implemented a “portfolio” strategy that encompasses a broad “omnibus” patent with numerous claim sets. We have prepared new claims and supplemental material that leverage the original IP “priority date” of June 2017. The claims granted to us by the US Patent Office secure a unique intellectual property position in the cybersecurity and analytics fields. The scope and depth of this portfolio sets it apart in our industry.

Why is robust patent protection crucial to your business model?

The strength of our business model, which revolves around high-margin API-based licensing and distribution, hinges on two aspects:

• Our proprietary technology is not only unique but also potent and widely applicable, fulfilling a tangible and urgent market demand.
• Our expansive patent protection safeguards this technology, especially the key components that empower the functionalities of ZTOS.
• Moreover, we’ve been granted extensive protection for various technological pathways that make these solutions feasible, bolstering the security of our original work.

This blend of sought-after technology and substantial IP protection reinforces our value proposition and buttresses our bold business model.

Do you provide financials and revenue modeling?

Yes, we have meticulously prepared financials that detail our revenue streams and expenditures. Upon request, we can provide these financial models along with supplementary materials, such as technical documentation, summaries of our intellectual property, and necessary corporate and legal due diligence documents.