Patent US2449271A successfully refreshed from Google Patents.
Patent US5828832A successfully refreshed from Google Patents.
US5828832A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Mixed enclave operation in a computer network with multi-level network security
Assignee: Round Rock Research LLC
•
Filing: 1996-07-30
•
Granted: 1998-10-27
•
Expires: 2016-07-30
Abstract
Abstract A method is disclosed for mixed enclave operation of a computer network with users employing a multi-level network security interface and users without any network security interface. Either the network security user selects or the network security interface automatically selects whether communications are permissible with other unsecured users. Where a mixed enclave operation is selected, the network security user identifies when communications are being undertaken with another secured user or a non-secured user. Communications with a non-secured user at a lower security level entail securing the data residing with the secured user from transmission back to the non-secured user.
Inventors
- 👤 James M. Holden
- 👤 Stephen E. Levin
- 👤 Edwin H. Wrench, Jr.
- 👤 David W. Snow, deceased
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 14:29
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H04L63/08; H04L63/0823; H04L63/10; H04L63/105; H04L9/00; H04L9/40; G06F2211/00; G06F2211/001; G06F2211/005; G06F2211/007; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2101; H04L63/02; H04L63/0209; H04L63/0218
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
161 words
A method for communicating on a network having a secured plurality of users utilizing multi-level network security devices, each multi-level network security device being operable in a first and second mode, respectively, and an unsecured plurality of users employing no network security devices, said method comprising the steps of: sending a communication from any first user; intercepting said communication by a first multi-level network security device; discarding said communication if said communication violates security parameters associated with said first multi-level network security device; and, in said first mode, sending said communication from said first multi-level network security device to any second user; and, in said second mode, encrypting said communication using said first multi-level network security device, sending said encrypted communication to a second multi-level network security device, decrypting said communication using said second multi-level network security device, and sending said decrypted communication from said second multi-level network security device to a third user selected from said secured plurality of users.
Claim 2
Independent Claim
161 words
A method for communicating on a network having a secured plurality of users utilizing multi-level network security devices, each multi-level network security device being operable in a first and second mode, respectively, and an unsecured plurality of users employing no network security devices, said method comprising the steps of: sending a communication from any first user; intercepting said communication by a first multi-level network security device; discarding said communication if said communication violates security parameters associated with said first multi-level network security device; and, in said first mode, sending said communication from said first multi-level network security device to any second user; and, in said second mode, encrypting said communication using said first multi-level network security device, sending said encrypted communication to a second multi-level network security device, decrypting said communication using said second multi-level network security device, and sending said decrypted communication from said second multi-level network security device to a third user selected from said secured plurality of users.
Claim 3
Dependent Claim
19 words
The method of claim 1, wherein said multi-level network security interfaces are transparent to said users and the network.
Claim 4
Dependent Claim
85 words
The method of claim 1, wherein said step of sending said encrypted communication to a second multi-level network security interface further comprises the steps of: intercepting said encrypted communication sent by said first multi-level network security interface by a third multi-level network security interface; validating a signature of said first multi-level network security interface using said third multi-level network security interface; and, sending said first multi-level network security interface encrypted communication from said third multi-level network security interface to said second multi-level network security interface.
Claim 5
Dependent Claim
38 words
The method in accordance with claim 1, further comprising using Internet protocol (IP) addresses for identifying each of said secured plurality of users employing multi-level network security interfaces, respectively, and said remaining users employing no network security interface.
Claim 6
Dependent Claim
25 words
The method in accordance with claim 1, further comprising each multi-level network security interface using association establishment messages for authenticating other multi-level network security interfaces.
Claim 7
Dependent Claim
23 words
The method in accordance with claim 1, further comprising using association establishment messages for exchanging security parameters between said multi-level network security interfaces.
Claim 8
Dependent Claim
42 words
The method in accordance with claim 1, further comprising said first multi-level network security interface assuming that datagrams received which are not addressed to said first multi-level network security interface are from one of said remaining users employing no network security interface.
Claim 9
Dependent Claim
49 words
The method in accordance with claim 1, wherein for communications between a secured user selected from said secured plurality and an unsecured user selected from said remaining users employing no network security interface, at least one multi-level network security interface employs a waiting queue to influence passage of information.
Claim 10
Dependent Claim
74 words
The method in accordance with claim 1, wherein said second user is selected from said secured plurality, and receives initial information from said first user who is selected from said remaining users employing no network security interface and which has not already established communications with said second user, and said first multi-level network security interface creates an entry in an association table indicative of at least said first users' IP address and association type.
Claim 11
Dependent Claim
41 words
The method in accordance with claim 9, wherein said first multi-level network security interface compares the security level of said second user to that of the first user for determining if information to the first user can be allowed to proceed.
Claim 12
Dependent Claim
41 words
The method in accordance with claim 10, wherein when the second user is at a higher security level than the first user and the first user is writing up to the second user, information intended for the second user is released.
Claim 13
Dependent Claim
36 words
The method in accordance with claim 10, wherein when the second user is at security level equal to the first user, the first multi-level network security interface permits information transfers between said first and second users.
Claim 14
Dependent Claim
50 words
The method in accordance with claim 12, wherein when the second user is at a higher security level than the first user and the second user is writing down to the first user, the first multi-level network security interface determines if the information intended for the first user is predicted.
Claim 15
Independent Claim
104 words
A method for mixed enclave communications over a network including both secured and unsecured users, said method comprising the steps of: permitting communications over the network between one of said secured users and one of said unsecured users; discovering dynamically by said secured user whether a user initiating communications is one of said secured users or one of said unsecured users; and, controlling passage of information between said one of said secured users and said one of said unsecured users for securing given information residing with said one of said secured users against transference to said one of said unsecured users when not permissible.
Claim 16
Independent Claim
104 words
A method for mixed enclave communications over a network including both secured and unsecured users, said method comprising the steps of: permitting communications over the network between one of said secured users and one of said unsecured users; discovering dynamically by said secured user whether a user initiating communications is one of said secured users or one of said unsecured users; and, controlling passage of information between said one of said secured users and said one of said unsecured users for securing given information residing with said one of said secured users against transference to said one of said unsecured users when not permissible.
Claim 17
Dependent Claim
25 words
The method in accordance with claim 14, wherein the step of discovering includes using Internet Protocol (IP) addresses for identifying the secured and unsecured users.
Claim 18
Dependent Claim
24 words
The method in accordance with claim 14, wherein the step of discovering includes using association establishment messages for said secured users authenticating each other.
Claim 19
Dependent Claim
24 words
The method in accordance with claim 14, wherein the step of discovering includes using association establishment messages for the secured users exchanging security parameters.
Claim 20
Dependent Claim
34 words
The method in accordance with claim 14, wherein for communications between one of the secured users and one of the unsecured users, the secured user employs a waiting queue to influence passage of information.
Claim 21
Dependent Claim
50 words
The method in accordance with claim 14, wherein when one of the secured users receives initial information from one of the unsecured users that is not already established, the secured user creates an entry in an association table indicative of at least the unsecured user's IP address and association type.
Claim 22
Dependent Claim
35 words
The method in accordance with claim 19, wherein the secured user further compares its security level to that of the unsecured user for determining if information to the unsecured user can be allowed to proceed.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-26 | 2002-04-27 | 2002-10-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-26 | 2006-04-27 | 2006-10-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-26 | 2010-04-27 | 2010-10-27 | $7700.00 | Window Closed / Lapsed |