US5864683A — System for providing secure internetwork by conne…

Claim 1

Independent Claim 228 words

A system for secure internetwork communication across an external network, the system comprising: first and second internal networks; first and second secure computers connected to the external network, wherein said first and second secure computers are type enforcing secure computers capable of recognizing data of varying sensitivity and of limiting access to data based on both user access rights and process access rights and wherein the first and second secure computers include: an internal network interface; and an external network interface for secure transfer of data from the first secure computer to the second secure computer over the external network, wherein the external network interface includes means for encrypting data to be transferred from the first secure computer to the second secure computer; a first computing system, wherein the first computing system includes a first client subsystem connected over the first internal network to the internal network interface of the first secure computer, wherein the first client subsystem includes means for secure transfer of data between the first computing system and the first secure computer; and a second computing system, wherein the second computing system includes a second client subsystem connected over the second internal network to the internal network interface of the second secure computer, wherein the second client subsystem includes means for secure transfer of data between the second computing system and the second secure computer.

Claim 2

Independent Claim 228 words

A system for secure internetwork communication across an external network, the system comprising: first and second internal networks; first and second secure computers connected to the external network, wherein said first and second secure computers are type enforcing secure computers capable of recognizing data of varying sensitivity and of limiting access to data based on both user access rights and process access rights and wherein the first and second secure computers include: an internal network interface; and an external network interface for secure transfer of data from the first secure computer to the second secure computer over the external network, wherein the external network interface includes means for encrypting data to be transferred from the first secure computer to the second secure computer; a first computing system, wherein the first computing system includes a first client subsystem connected over the first internal network to the internal network interface of the first secure computer, wherein the first client subsystem includes means for secure transfer of data between the first computing system and the first secure computer; and a second computing system, wherein the second computing system includes a second client subsystem connected over the second internal network to the internal network interface of the second secure computer, wherein the second client subsystem includes means for secure transfer of data between the second computing system and the second secure computer.

Claim 3

Dependent Claim 47 words

The system according to claim 1 wherein the first secure computer further comprises: means for selectively filtering messages received from the second internal network according to a first predefined criteria; and means for selectively filtering data received from the external network according to a second predefined criteria.

Claim 4

Dependent Claim 104 words

A secure computing system, comprising: an internal network; an external network; first and second secure computers connected across the external network, wherein the first and second secure computers comprise encryption means for encrypting and decrypting data transferred between said first and second secure computers and wherein the first secure computer further comprises means for establishing an assured pipeline between processes operating on said internal network and processes operating on said external network; and a workstation connected across the internal network to said first secure computer, wherein the workstation includes means for encrypting and decrypting data transferred between said workstation and said first secure computer.

Claim 5

Dependent Claim 104 words

A secure computing system, comprising: an internal network; an external network; first and second secure computers connected across the external network, wherein the first and second secure computers comprise encryption means for encrypting and decrypting data transferred between said first and second secure computers and wherein the first secure computer further comprises means for establishing an assured pipeline between processes operating on said internal network and processes operating on said external network; and a workstation connected across the internal network to said first secure computer, wherein the workstation includes means for encrypting and decrypting data transferred between said workstation and said first secure computer.

Claim 6

Dependent Claim 46 words

The system according to claim 3 wherein the first secure computer further comprises: means for selectively filtering messages received from the internal network according to a first predefined criteria; and means for selectively filtering data received from the external network according to a second predefined criteria.

Claim 7

Dependent Claim 28 words

The system according to claim 3 wherein the first secure computer is a multilevel secure computer capable of recognizing data of varying sensitivity and users of varying authorizations.

Claim 8

Dependent Claim 40 words

The system according to claim 3 wherein the first secure computer is a type enforcing secure computer capable of recognizing data of varying sensitivity and of limiting access to data based on both user access rights and process access rights.

Claim 9

Independent Claim 208 words

A method of transferring data between a first and a second network connected by an external network, wherein the first network comprises a first workstation connected to a first secure computer server and wherein the second network comprises a second workstation connected to a second secure computer server, wherein each secure computer server comprises a trusted subsystem, first encryption means for encrypting and decrypting data transferred between the secure computer server and its respective workstation and second encryption means for encrypting and decrypting data transferred between the secure computer server and the external network, the method comprising the steps of: establishing an authenticated and protected interaction between the first workstation and the first secure computer server; establishing an assured pipeline between processes operating on said first network and processes operating on said external network; sending data from the first workstation to the first secure computer server; passing the data received from the first workstation through the assured pipeline; selecting an authentication and protection mechanism for interaction on the external network; encrypting, via the second encryption means of the first secure computer server, the data received from the first workstation through the assured pipeline; and sending the encrypted data over the external network to the second secure computer server.

Claim 10

Independent Claim 208 words

A method of transferring data between a first and a second network connected by an external network, wherein the first network comprises a first workstation connected to a first secure computer server and wherein the second network comprises a second workstation connected to a second secure computer server, wherein each secure computer server comprises a trusted subsystem, first encryption means for encrypting and decrypting data transferred between the secure computer server and its respective workstation and second encryption means for encrypting and decrypting data transferred between the secure computer server and the external network, the method comprising the steps of: establishing an authenticated and protected interaction between the first workstation and the first secure computer server; establishing an assured pipeline between processes operating on said first network and processes operating on said external network; sending data from the first workstation to the first secure computer server; passing the data received from the first workstation through the assured pipeline; selecting an authentication and protection mechanism for interaction on the external network; encrypting, via the second encryption means of the first secure computer server, the data received from the first workstation through the assured pipeline; and sending the encrypted data over the external network to the second secure computer server.

Claim 11

Dependent Claim 86 words

A secure server, comprising: a processor; an internal network interface, connected to the processor for communicating on an internal network; and an external network interface, connected to the processor for communicating on an external network; wherein the processor includes server program code for transferring data between the internal and external network interfaces via an assured pipeline and security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process received from the external network to data stored on the internal network.

Claim 12

Dependent Claim 86 words

A secure server, comprising: a processor; an internal network interface, connected to the processor for communicating on an internal network; and an external network interface, connected to the processor for communicating on an external network; wherein the processor includes server program code for transferring data between the internal and external network interfaces via an assured pipeline and security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process received from the external network to data stored on the internal network.

Claim 13

Dependent Claim 27 words

The server according to claim 8, wherein the processor further includes encryption means for encrypting data to be transferred from the internal network to the external network.

Claim 14

Dependent Claim 25 words

The server according to claim 8, wherein the processor further includes filter program code for filtering data transferred between the internal and external network interfaces.

Claim 15

Dependent Claim 28 words

The server according to claim 8, wherein the processor further includes formatting program code for changing the format of data transferred between the internal and external network interfaces.

Claim 16

Dependent Claim 70 words

A secure server for use in controlling access to data stored within an internal network, comprising: administrative and operational kernels, wherein the operational kernel includes security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process received from the external network to data stored on the internal network; and wherein the administrative kernel is restricted to execution only while isolated from the internal network.

Claim 17

Dependent Claim 70 words

A secure server for use in controlling access to data stored within an internal network, comprising: administrative and operational kernels, wherein the operational kernel includes security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process received from the external network to data stored on the internal network; and wherein the administrative kernel is restricted to execution only while isolated from the internal network.

Claim 18

Dependent Claim 88 words

A secure wide-area access system, comprising: a secure computer; an internal network; and a workstation connected across the internal network to the secure computer; wherein the secure computer comprises an internal network interface, a public network interface, public network program code used to communicate through the public network interface to a public network, private network program code used to communicate through the internal network interface to the workstation and security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process to data.

Claim 19

Dependent Claim 88 words

A secure wide-area access system, comprising: a secure computer; an internal network; and a workstation connected across the internal network to the secure computer; wherein the secure computer comprises an internal network interface, a public network interface, public network program code used to communicate through the public network interface to a public network, private network program code used to communicate through the internal network interface to the workstation and security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process to data.

Claim 20

Dependent Claim 20 words

The system according to claim 13 wherein the security policy program code comprises program code for hardening an operating system.

Claim 21

Dependent Claim 40 words

The system according to claim 13 wherein the security policy program code comprises program code for hardening an operating system, wherein the program code for hardening an operating system comprises kernel code for enforcing Type Enforcement via an operational kernel.

Claim 22

Independent Claim 155 words

A method of protecting a computer system connected to an unsecured external network, wherein the computer system includes a plurality of workstations connected to a private network, the method comprising the steps of: providing a secure computer, wherein the secure computer comprises security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process to data; connecting the Type Enforcement based secure computer to the private network; and establishing an assured pipeline for the transfer of data and programs between the private network and the external network through the secure computer, wherein the step of establishing an assured pipeline includes the steps of: i) placing processes within domains, wherein the step of placing processes within domains includes the step of assigning processes received from the external network to an external domain; ii) assigning types to files; and iii) restricting access by processes within the external domain to certain file types.

Claim 23

Independent Claim 155 words

A method of protecting a computer system connected to an unsecured external network, wherein the computer system includes a plurality of workstations connected to a private network, the method comprising the steps of: providing a secure computer, wherein the secure computer comprises security policy program code for enforcing a Type Enforcement security mechanism to restrict access of a process to data; connecting the Type Enforcement based secure computer to the private network; and establishing an assured pipeline for the transfer of data and programs between the private network and the external network through the secure computer, wherein the step of establishing an assured pipeline includes the steps of: i) placing processes within domains, wherein the step of placing processes within domains includes the step of assigning processes received from the external network to an external domain; ii) assigning types to files; and iii) restricting access by processes within the external domain to certain file types.

Claim 24

Dependent Claim 64 words

The method according to claim 16 wherein the step of placing processes within domains includes the steps of: defining a domain definition table within the secure computer; assigning a domain name to each domain; and creating an entry for each process in the domain definition table, wherein the step of creating an entry includes the step of associating a domain name with each entry.

Claim 25

Independent Claim 139 words

A system for transferring data between a workstation connected to an internal network and a remote computer connected to an external network, the system comprising: a secure computer, wherein the secure computer includes: an internal network interface connected to the internal network; and an external network interface connected to the external network, wherein the external network interface includes means for encrypting data to be transferred from the workstation to the remote computer; means for establishing an assured pipeline between said internal network interface and said external network interface; a server function for transferring data between the internal network interface and the external network interface, wherein the server function includes means for establishing an assured pipeline between said internal network interface and said external network interface; and filter means for filtering data transferred between the remote computer and the workstation.

Claim 26

Independent Claim 139 words

A system for transferring data between a workstation connected to an internal network and a remote computer connected to an external network, the system comprising: a secure computer, wherein the secure computer includes: an internal network interface connected to the internal network; and an external network interface connected to the external network, wherein the external network interface includes means for encrypting data to be transferred from the workstation to the remote computer; means for establishing an assured pipeline between said internal network interface and said external network interface; a server function for transferring data between the internal network interface and the external network interface, wherein the server function includes means for establishing an assured pipeline between said internal network interface and said external network interface; and filter means for filtering data transferred between the remote computer and the workstation.

Claim 27

Dependent Claim 30 words

The system according to claim 18, wherein the workstation includes a client subsystem for secure transfer of data from the workstation to the internal network interface of the secure computer.

Claim 28

Dependent Claim 18 words

The system according to claim 19, wherein the client subsystem is a software program running on the workstation.

Claim 29

Dependent Claim 45 words

The system according to claim 20, wherein the secure computer further comprises: means for selectively filtering messages received from the internal network according to a first predefined criteria; and means for selectively filtering data received from the external network according to a second predefined criteria.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2002-01-25	2002-07-27	2003-01-26	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2006-01-25	2006-07-27	2007-01-26	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2010-01-25	2010-07-27	2011-01-26	$7700.00	Window Closed / Lapsed

System for providing secure internetwork by connecting type enforcing secure computers to external network for limiting access to data based on user and process access rights

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag