ADP security device for labeled data

Claim 2

A data processing security device comprising: a) memory means for storing a plurality of authorized field protection introducer codes, b) means for evaluating a stream of data flowing from a source of character codes to identify field protection introducer codes within the stream of data, said means for evaluating being in communication with said memory means, said evaluating means comprising comparison means for comparing introducer codes within the stream of data to said authorized codes in said memory means, and c) means for replacing data after said field introducer codes within said stream of data with replacement characters if the field introducer codes within the stream of data do not match at least one of said authorized codes stored in said memory means, said means for replacing being in communication with said evaluating means.

Claim 3

A data processing security device as claimed in claim 1 wherein said means for replacing comprises switching means for outputting data after said field introducer codes within the stream of data when the field introducer codes match at least one authorized code stored in said memory means, and outputting said replacement characters when the field introducer codes do not match at least one authorized code stored in said memory means.

Claim 4

A data processing security device as claimed in claim 2 wherein said switching means comprises an air gap.

Claim 7

A method for controlling the flow of protected data through a computing environment as claimed in claim 4 wherein the step of stopping the forwarding of said data stream includes sending a message indicating a security alert to said source of character codes.

Claim 8

A method for controlling the flow of protected data through a computing environment as claimed in claim 4 further including the step of transmitting a session termination command to said source of character codes to stop the flow of said data stream if activity from said input device stops for a predetermined period of time.

Claim 9

A method for controlling the flow of protected data through a computing environment as claimed in claim 4 further including the step of replacing located security labels with other authorized labels.

Claim 10

A method for controlling the flow of protected data through a computing environment as claimed in claim 4 wherein said at least one authorized security label which is stored in paragraph (a) includes an escape sequence which is non-printing.

Claim 11

A method for controlling the flow of protected data through a computing environment as claimed in claim 4 wherein said at least one security label insertion code which is stored in paragraph (b) includes a new line or carriage control code.

Claim 12

A data processing security device comprising: a) receiving means for receiving a stream of data flowing from a source of character codes, b) memory means containing at least one security label insertion code, said memory means and said receiving means being in communication with a comparison means for evaluating whether the stream of data contains a security label insertion code contained within said memory means, c) security label storage means for storing at least one security label which indicates required authorization to access the stream of data, d) means for evaluating the stream of data to locate security labels within said stream of data relative to a security label insertion code within said stream of data, said evaluating means being in communication with said comparison means of paragraph (b) and with said security label storage means, said evaluating means including means for comparing the located security labels contained within said data stream to said at least one stored authorized security label, and e) means for forwarding said data stream from said evaluating means to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating.

Claim 13

A data processing security device comprising: a) receiving means for receiving a stream of data flowing from a source of character codes, b) memory means containing at least one security label insertion code, said memory means and said receiving means being in communication with a comparison means for evaluating whether the stream of data contains a security label insertion code contained within said memory means, c) security label storage means for storing at least one security label which indicates required authorization to access the stream of data, d) means for evaluating the stream of data to locate security labels within said stream of data relative to a security label insertion code within said stream of data, said evaluating means being in communication with said comparison means of paragraph (b) and with said security label storage means, said evaluating means including means for comparing the located security labels contained within said data stream to said at least one stored authorized security label, and e) means for forwarding said data stream from said evaluating means to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating.

Claim 14

A data processing security device as claimed in claim 10 wherein said means for evaluating comprises a microcontroller.

Claim 15

A data processing security device as claimed in claim 10 wherein said means for stopping the forwarding of said stream of data is a switching means which comprises an air gap.

Claim 16

A data processing security device as claimed in claim 10 further comprising a port for electrical connection to a computer port through which said stream of data flows.

Claim 17

A data processing security device as claimed in claim 10 wherein said at least one security label insertion code contained within said memory means includes a new line or carriage control code.

Claim 18

A data processing security device as claimed in claim 10 wherein said means for evaluating further comprises means for verifying whether the stream of data contains valid character codes.

Claim 19

A data processing security device as claimed in claim 15 wherein said means for verifying includes means for changing the receiving speed of said stream of data and then reverifying whether the stream of data contains valid character codes.

Claim 20

A computer system comprising: a) a computer having an electrical port, and b) a security device electrically attached to said port, said security device comprising: 1) receiving means for receiving a stream of data flowing from a source of character codes, 2) memory means containing at least one security label insertion code, said memory means and said receiving means being in communication with a comparison means for evaluating whether the stream of data contains a security label insertion code contained within said memory means, 3) security label storage means for storing at least one security label which indicates required authorization to access the stream of data, 4) mans for evaluating the stream of data to locate security labels within said stream of data relative to a security label insertion code within said stream of data, said evaluating means being in communication with said comparison means for paragraph (2) and with said security label storage means, said evaluating means including means for comparing the located security labels contained within said data stream to said at least one stored authorized security label, and 5) means for forwarding said data stream from said evaluating means to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating.

Claim 21

A computer system comprising: a) a computer having an electrical port, and b) a security device electrically attached to said port, said security device comprising: 1) receiving means for receiving a stream of data flowing from a source of character codes, 2) memory means containing at least one security label insertion code, said memory means and said receiving means being in communication with a comparison means for evaluating whether the stream of data contains a security label insertion code contained within said memory means, 3) security label storage means for storing at least one security label which indicates required authorization to access the stream of data, 4) mans for evaluating the stream of data to locate security labels within said stream of data relative to a security label insertion code within said stream of data, said evaluating means being in communication with said comparison means for paragraph (2) and with said security label storage means, said evaluating means including means for comparing the located security labels contained within said data stream to said at least one stored authorized security label, and 5) means for forwarding said data stream from said evaluating means to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating.

Claim 22

A data processing security system comprising: a) a first data processing security device comprising 1) first receiving means for receiving a stream of data flowing from a source of character codes, 2) first memory means containing at least one security label insertion code, said first memory means and said first receiving means being in communication with a first comparison means for evaluating whether the stream of data contains a security label insertion code contained within said first memory means, 3) first security label storage means for storing at least one security label which indicates required authorization to access the stream of data, and 4) inserting means for receiving said stream of data, the inserting means being in communication with said first comparison means and said first security label storage means for inserting at least one security label stored in said first security label storage means into said data stream relative to the security label insertion codes within said data stream in response to said first comparison means, and b) a second data processing security device in communication with said first device, said second device comprising 1) second receiving means for receiving the steam of data from said first device, 2) second memory means containing at lest one security label insertion code, the second memory means and second receiving means being in communication with a second comparison means for evaluating whether the stream of data received from said first device contains a security label insertion code contained within the second memory means, 3) second security label storage means for storing at least one security label which indicates required authorization to access the stream of data, 4) means for evaluating the stream of data received from said first device to locate security labels within the stream of data relative to said security label insertion codes within said stream of data, the evaluating means being in communication with the second comparison means of paragraph (b)(2) and with the second security label storage means of paragraph (b)(2), said evaluating means including means for comparing the located security labels contained within the data stream received from said first device to said at least one stored authorized security label of paragraph (b)(3), and (5) means for forwarding said data stream from the evaluating means of paragraph (b)(4) to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means of paragraph (b)(4) when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating of paragraph (b)(4).

Claim 23

A data processing security system comprising: a) a first data processing security device comprising 1) first receiving means for receiving a stream of data flowing from a source of character codes, 2) first memory means containing at least one security label insertion code, said first memory means and said first receiving means being in communication with a first comparison means for evaluating whether the stream of data contains a security label insertion code contained within said first memory means, 3) first security label storage means for storing at least one security label which indicates required authorization to access the stream of data, and 4) inserting means for receiving said stream of data, the inserting means being in communication with said first comparison means and said first security label storage means for inserting at least one security label stored in said first security label storage means into said data stream relative to the security label insertion codes within said data stream in response to said first comparison means, and b) a second data processing security device in communication with said first device, said second device comprising 1) second receiving means for receiving the steam of data from said first device, 2) second memory means containing at lest one security label insertion code, the second memory means and second receiving means being in communication with a second comparison means for evaluating whether the stream of data received from said first device contains a security label insertion code contained within the second memory means, 3) second security label storage means for storing at least one security label which indicates required authorization to access the stream of data, 4) means for evaluating the stream of data received from said first device to locate security labels within the stream of data relative to said security label insertion codes within said stream of data, the evaluating means being in communication with the second comparison means of paragraph (b)(2) and with the second security label storage means of paragraph (b)(2), said evaluating means including means for comparing the located security labels contained within the data stream received from said first device to said at least one stored authorized security label of paragraph (b)(3), and (5) means for forwarding said data stream from the evaluating means of paragraph (b)(4) to an input device when an authorized security label is located and for stopping the forwarding of said data stream based upon said comparison by the evaluating means of paragraph (b)(4) when an authorized security label is not located, said means for forwarding being in communication with said means for evaluating of paragraph (b)(4).

Claim 24

A data processing security system as claimed in claim 18 wherein said at least one security label insertion code contained within said first or second memory means includes a new line or carriage control code.

Claim 25

A data processing security system as claimed in claim 18 wherein said means for evaluating comprises a microcontroller.

Claim 26

A data processing security system as claimed in claim 18 wherein said means for inserting security labels is a microcontroller.

Claim 27

A data processing security system as claimed in claim 18 wherein said first device and second device each comprise a port for electrical connection to a computer port through which said stream of data flows.

Claim 28

A data processing security system as claimed in claim 18 wherein said means for evaluating further comprises means for verifying whether the stream of data contains valid character codes.

Claim 29

A data processing security system as claimed in claim 23 wherein said means for verifying includes means for changing the receiving speed of said stream of data and then reverifying whether the stream of data contains valid character codes.