US5692124A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Support of limited write downs through trustworthy predictions in multilevel security of computer network communications
Assignee: Micron Technology Inc
•
Filing: 1996-08-30
•
Granted: 1997-11-25
•
Expires: 2016-08-30
Abstract
Abstract A method is disclosed for limited write downs of data from higher security classification users to lower security classification users across computer networks, while preserving the security of classified data at the higher security classification user from covert transmission via acknowledgment messages from the higher user to the lower user. The intended acknowledgment message is released to the lower user when it matches the user content of a predicted acknowledgment message. In TCP/IP interface applications, the acknowledgment messages are IP based data transfer protocols acknowledging the transfer of data from the lower side to the higher side. With IP datagram transfers, deterministic portions are predicted and non-deterministic portions are identified. Where the number of non-deterministic bits exceed a predetermined rate, the acknowledgment message is discarded.
Inventors
- 👤 James M. Holden
- 👤 Stephen E. Levin
- 👤 Edwin H. Wrench, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 10:36
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0823; G; G06; G06F; G06F21/00; G06F21/50; G06F21/55; G06F21/556; G06F21/60; G06F21/62; G06F21/6218; H04L63/10; H04L63/105; H04L9/00; H04L9/40; G06F2211/00; G06F2211/005; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2113; G06F2221/2141
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
151 words
A method for securing classified data residing with a user at a higher security classification level from covert transference with acknowledgment messages by said user at a higher security classification level for confirming data transfers across a computer network to a user at a lower security classification level, said method comprising the steps of: sending data from said user at a lower security classification level with delivery information to said user at a higher security classification level; predicting the user content of permissible acknowledgment messages supporting a legitimate transfer of said data from said user at a lower security classification level to said user at a higher security classification level; and, releasing the predicted acknowledgment messages from said user at a higher security classification level to said user at a lower security classification level when the predicted acknowledgment message is a predetermined match with the content of said permissible acknowledgment messages.
Claim 2
Independent Claim
151 words
A method for securing classified data residing with a user at a higher security classification level from covert transference with acknowledgment messages by said user at a higher security classification level for confirming data transfers across a computer network to a user at a lower security classification level, said method comprising the steps of: sending data from said user at a lower security classification level with delivery information to said user at a higher security classification level; predicting the user content of permissible acknowledgment messages supporting a legitimate transfer of said data from said user at a lower security classification level to said user at a higher security classification level; and, releasing the predicted acknowledgment messages from said user at a higher security classification level to said user at a lower security classification level when the predicted acknowledgment message is a predetermined match with the content of said permissible acknowledgment messages.
Claim 3
Dependent Claim
19 words
The method in accordance with claim 1, wherein said computer network communicates under a Transmission Control Protocol/Internet Protocol (TCP/IP).
Claim 4
Dependent Claim
41 words
The method in accordance with claim 1, wherein said acknowledgment messages are Internet Protocol based data transfer protocols acknowledging the transfer of data from said user at a lower security classification level to said user at a higher security classification level.
Claim 5
Dependent Claim
28 words
The method in accordance with claim 1, wherein said data is transferred under a trivial file transfer protocol (TFTP) requiring acknowledgment for each given block of data transferred.
Claim 6
Dependent Claim
38 words
The method in accordance with claim 1, wherein the exact content of each acknowledgment message generated at the higher classified security level is predicted based on said data transferred from said user at a lower classified security level.
Claim 7
Dependent Claim
91 words
The method in accordance with claim 1, wherein the acknowledgment message generated by said user at a higher security classification level is only released to said user at the lower security classification level if the data contents in the acknowledgment message is of a security classification level at least one of equal to and lower than the security classification level of the data transferred from the said user at a lower security classification level to said user at a higher security classification level upon which the acknowledged message contents were predicted.
Claim 8
Dependent Claim
47 words
The method in accordance with claim 1, wherein the data transfers from said user at a lower security classification level to said user at a higher security classification level are Internet Protocol (IP) datagrams that are unit packets of deterministic data and nondeterministic data including IP addresses.
Claim 9
Dependent Claim
22 words
The method in accordance with claim 7, wherein the deterministic portions of the data transfers are predicted and the non-deterministic portions identified.
Claim 10
Dependent Claim
63 words
The method in accordance with claim 8, wherein when the predicted message is received from said user at a higher security classification level, the non-deterministic portion is checked for proper format and inserted into the predicted message for transfer back to said user at a lower security classification level to confirm the data transfer originally from the lower side to the higher side.
Claim 11
Dependent Claim
19 words
The method in accordance with claim 9, wherein the number of non-deterministic bits in each conformation message are monitored.
Claim 12
Dependent Claim
38 words
The method in accordance with claim 10, wherein confirmation messages having a rate of non-deterministic bits exceeding a predetermined rate are discarded and not permitted to be sent back to said user at a lower security classification level.
Claim 13
Independent Claim
120 words
A method for securing data with a user at a higher security classification level against covert transference in acknowledgment messages during communications with a user at a lower security classification level not permitted access to the data, said method comprising the steps of: sending data by said user at a lower security classification level to said user at a higher security classification level; predicting the content of permissible acknowledgment messages from said user at a higher security classification level to said user at a lower security classification level based only on information residing with said user at a lower security classification level; and, releasing said acknowledgment messages which have a predetermined match to said user content of permissible acknowledgment messages.
Claim 14
Independent Claim
120 words
A method for securing data with a user at a higher security classification level against covert transference in acknowledgment messages during communications with a user at a lower security classification level not permitted access to the data, said method comprising the steps of: sending data by said user at a lower security classification level to said user at a higher security classification level; predicting the content of permissible acknowledgment messages from said user at a higher security classification level to said user at a lower security classification level based only on information residing with said user at a lower security classification level; and, releasing said acknowledgment messages which have a predetermined match to said user content of permissible acknowledgment messages.
Claim 15
Dependent Claim
42 words
The method in accordance with claim 12, wherein said acknowledgment messages are Internet protocol (IP) feedback messages supporting a legitimate transfer of said data with said user at a lower security classification level to said user at a higher security classification level.
Claim 16
Dependent Claim
28 words
The method in accordance with claim 12, wherein the communications include a trivial file transfer protocol (TFTP) requiring an acknowledgment message for each given block of data transferred.
Claim 17
Dependent Claim
46 words
The method in accordance with claim 14, wherein the sequence and exact content of each said acknowledgment message generated with said user at a higher security classification level is determined based on the TFTP data packets originating from said user at a lower security classification level.
Claim 18
Dependent Claim
61 words
The method in accordance with claim 15, wherein the acknowledgment message generated with said user at a higher security classification level is only used to determine said step of releasing and not release in any part data at a security classification level higher than the security classification level of the data received from said user at a lower security classification level.
Claim 19
Dependent Claim
22 words
The method in accordance with claim 12, wherein said communications include Internet Protocol (IP) datagrams that include both deterministic and non-deterministic data.
Claim 20
Dependent Claim
34 words
The method in accordance with claim 17, wherein the non-deterministic data include IP addresses to be released from said user at a higher security level to said user at a lower security classification level.
Claim 21
Dependent Claim
32 words
The method in accordance with claim 18, wherein for a predicted said acknowledgment message generated by said user at a higher security classification level, the non-deterministic portion is checked for proper format.
Claim 22
Dependent Claim
25 words
The method in accordance with claim 19, wherein the step of releasing further includes monitoring the number of non-deterministic bits in each said acknowledgment message.
Claim 23
Dependent Claim
26 words
The method in accordance with claim 20, wherein the step of releasing is based on comparing the rate of non-deterministic bits monitored against a given rate.
Claim 24
Dependent Claim
42 words
The method in accordance with claim 17, wherein when the non-deterministic portion of said acknowledgment messages is an IP address, said method builds trust in the addresses through a chain of predicting and then verifying addresses and monitoring their use and change.
Claim 25
Dependent Claim
62 words
The method in accordance with claim 22, wherein building trust in IP addresses includes source and destination pairs going from said user at a lower security classification level to said user at a higher security classification level, said source and destination pairs being saved and used to predict destination and source addresses that would be a part of the predicted acknowledgment messages.
References Cited (Backward Citations)
US4984272A
Cited
US5469556A
Cited
US5574912A
Cited
US5204961A
Cited
US5355474A
Cited
US5469569A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-11-24 | 2001-05-26 | 2001-11-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-11-24 | 2005-05-26 | 2005-11-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-11-24 | 2009-05-26 | 2009-11-25 | $7700.00 | Window Closed / Lapsed |