US5832228A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for providing multi-level security in computer devices utilized with non-secure networks
Assignee: Round Rock Research LLC
•
Filing: 1996-07-30
•
Granted: 1998-11-03
•
Expires: 2016-07-30
Abstract
Abstract A multi-level network security system is disclosed for a computer host device coupled to at least one computer network. The system including a secure network interface Unit (SNIU) contained within a communications stack of the computer device that operates at a user layer communications protocol. The SNIU communicates with other like SNIU devices on the network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein the network may be individually secure or non-secure without compromising security of communications within the global security perimeter. The SNIU includes a host/network interface for receiving messages sent between the computer device and network. The interface operative to convert the received messages to and from a format utilized by the network. A message parser for determining whether the association already exists with another SNIU device. A session manager coupled to said network interface for identifying and verifying the computer device requesting access to said network. The session manager also for transmitting messages received from the computer device when the message parser determines the association already exists. An association manager coupled to the host/network interface for establishing an association with other like SNIU devices when the message parser determines the association does not exist.
Inventors
- 👤 James M. Holden
- 👤 Stephen E. Levin
- 👤 James O. Nickel
- 👤 Edwin H. Wrench
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 03:32
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0209; H04L63/0218; G; G06; G06F; G06F21/00; G06F21/60; G06F21/606; G06F21/70; G06F21/82; G06F21/85; H04L63/10; H04L63/105; H04L63/14; G06F2211/00; G06F2211/007; G06F2211/009; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2141; G06F2221/2149; G06F2221/2153
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
201 words
A multi-level network security system for a computer host device coupled to at least one computer network, comprising: a secure network interface Unit (SNIU) contained within a communications stack of said computer device that operates at a user layer communications protocol, said SNIU communicates with other like SNIU devices on said network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein said network may be individually secure or non-secure without compromising security of communications within said global security perimeter, comprising: a host/network interface for receiving messages sent between said computer device and said network, said interface operative to convert said received messages to and from a format utilized by said network; a message parser for determining whether said association already exists with another SNIU device; a session manager coupled to said network interface for identifying and verifying said computer device requesting access to said network, said session manager also for transmitting said messages received from said computer device when said message parser determines said association already exists; and an association manager coupled to said host/network interface for establishing an association with other like SNIU devices when said message parser determines said association does not exist.
Claim 2
Dependent Claim
201 words
A multi-level network security system for a computer host device coupled to at least one computer network, comprising: a secure network interface Unit (SNIU) contained within a communications stack of said computer device that operates at a user layer communications protocol, said SNIU communicates with other like SNIU devices on said network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein said network may be individually secure or non-secure without compromising security of communications within said global security perimeter, comprising: a host/network interface for receiving messages sent between said computer device and said network, said interface operative to convert said received messages to and from a format utilized by said network; a message parser for determining whether said association already exists with another SNIU device; a session manager coupled to said network interface for identifying and verifying said computer device requesting access to said network, said session manager also for transmitting said messages received from said computer device when said message parser determines said association already exists; and an association manager coupled to said host/network interface for establishing an association with other like SNIU devices when said message parser determines said association does not exist.
Claim 3
Dependent Claim
23 words
The system of claim 1, wherein said SNIU is contained within said communications stack between a Network layer and a Data Link layer.
Claim 4
Dependent Claim
19 words
The system of claim 1, which further includes means coupled to SNIU for performing both encryption and decryption functions.
Claim 5
Dependent Claim
25 words
The system of claim 3, which further includes means for generating and writing cryptographic residues for outgoing messages and validating cryptographic residues for incoming residues.
Claim 6
Dependent Claim
52 words
The system of claim 1, wherein said session manager protects the security communications between said computer device and said network by implementing a security policy selected from a group consisting of discretionary access control, mandatory access control, labeling, denial of service detection, data type integrity, cascading control and covert channel use detection.
Claim 7
Dependent Claim
28 words
The system of claim 1, wherein said SNIU further includes means for performing a defined trusted session layer protocol (TSP), said TSP constituting said user layer communications protocol.
Claim 8
Dependent Claim
14 words
The system of claim 1, wherein said SNIUs exchange security parameters during said association.
Claim 9
Dependent Claim
30 words
The system of claim 1, wherein said SNIU further includes a scheduler coupled between said host/network and said message parser for controlling the flow of said data within said SNIU.
Claim 10
Dependent Claim
18 words
The system of claim 1, wherein said Association manager generates two messages in order to establish said association.
Claim 11
Dependent Claim
33 words
The system of claim 1, wherein said SNIU further includes an audit manager coupled to said association manager for generating audit event messages when a message is received with an invalid authorization code.
Claim 12
Independent Claim
175 words
A method of providing a multi-level network security system for a portable computer device coupled to at least one computer network, comprising: placing a secure network interface Unit (SNIU) within a communications stack of said computer device that operates at a user layer communications protocol, said SNIU communicates with other like SNIU devices on said network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein said network may be individually secure or non-secure without compromising security of communications within said global security perimeter, said SNIU performing a plurality of security functions including: receiving said messages sent between said computer device and said network; converting said received messages to and from a format utilized by said network; identifying and verifying said computer device requesting access to said network at the session level; determining whether said association already exists with another SNIU device; transmitting said messages received from said computer device when said association already exists; and establishing an association with other like SNIU devices when said association does not exist.
Claim 13
Independent Claim
175 words
A method of providing a multi-level network security system for a portable computer device coupled to at least one computer network, comprising: placing a secure network interface Unit (SNIU) within a communications stack of said computer device that operates at a user layer communications protocol, said SNIU communicates with other like SNIU devices on said network by establishing an association, thereby creating a global security perimeter for end-to-end communications and wherein said network may be individually secure or non-secure without compromising security of communications within said global security perimeter, said SNIU performing a plurality of security functions including: receiving said messages sent between said computer device and said network; converting said received messages to and from a format utilized by said network; identifying and verifying said computer device requesting access to said network at the session level; determining whether said association already exists with another SNIU device; transmitting said messages received from said computer device when said association already exists; and establishing an association with other like SNIU devices when said association does not exist.
Claim 14
Dependent Claim
23 words
The method of claim 11, wherein said SNIU is placed within said communications stack between a Network layer and a Data Link layer.
Claim 15
Dependent Claim
18 words
The method of claim 11, which further includes encrypting outgoing messages and decrypting incoming messages of said SNIU.
Claim 16
Dependent Claim
23 words
The method of claim 13, which further includes generating and writing cryptographic residues for outgoing messages and validating cryptographic residues for incoming residues.
Claim 17
Dependent Claim
51 words
The method of claim 11, wherein said SNIU protects the security communications between said computer device and said network by implementing a security policy selected from a group consisting of discretionary access control, mandatory access control, labeling, denial of service detection, data type integrity, cascading control and covert channel use detection.
Claim 18
Dependent Claim
25 words
The method of claim 11, wherein said SNIU further performs a defined trusted session layer protocol (TSP), said TSP constituting said user layer communications protocol.
Claim 19
Dependent Claim
12 words
The method of claim 11, which further includes generating an audit trail.
Claim 20
Dependent Claim
23 words
The method of claim 11, which further includes temporarily storing said received messages from said computer device when said association does not exist.
Claim 21
Dependent Claim
14 words
The method of claim 11, wherein said association is established by generating two messages.
Claim 22
Dependent Claim
14 words
The method of claim 1, wherein said SNIUs exchange security parameters during said association.
References Cited (Backward Citations)
US4885789A
Cited
US5204961A
Cited
US5619657A
Cited
US5577209A
Cited
US5361359A
Cited
US5416842A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-02 | 2002-05-04 | 2002-11-03 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-02 | 2006-05-04 | 2006-11-03 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-02 | 2010-05-04 | 2010-11-03 | $7700.00 | Window Closed / Lapsed |