Multi-level secure multi-processor computer architecture
View Patent ↗A multi-level secure multi-processor computer architecture. The inventive architecture provides an inexpensive security solution for integrated avionics and includes a plurality of nodes. The nodes are connected via a switch in a network configuration over which data is routed using labels. The switch is controlled to facilitate secure communication of data between the nodes. In the illustrative embodiment, the network is a Fibre Channel network including plural switches in which a system manager node serves to control routing between nodes based on a security policy. Each node has a central processing unit. The system manager is implemented as a node and sets up routing tables for selective connection of the nodes via the switch. The label assignments are stored in Fibre Channel network interface cards disposed on each node. The system manager also sets up label routing tables that authorize the interconnection of selective nodes. The label routing tables are stored in the switch, which in the illustrative implementation is a crossbar switch having a plurality of switch protocol controllers and switch control units. The label assignments and label routing tables are stored in a label authorization table stored in the system manager. After a secure startup, the system allows for communication in accordance with a security policy between nodes to which trusted and/or untrusted hardware is connected and running under trusted and/or untrusted software applications. The software applications may run on commercial off-the-shelf (COTS) operating systems.
1. A multi-level secure computer architecture comprising:
a plurality of nodes;
switch means for providing a connection between said nodes as part of a network over which data is routed using labels; and
means for controlling said switch means to facilitate secure communication of data between a first and a second of said nodes, said means for controlling including a system manager which controls the routing of said data, said means for controlling including means for controlling routing between nodes based on a security classification level wherein said system manager is an integrated avionics manager.
2. The invention of claim 1 wherein said network is a Fibre Channel network.
3. The invention of claim 1 wherein said system manager includes means for setting up routing tables for selective connection of said nodes.
4. The invention of claim 3 wherein said means for controlling includes means for creating and storing a label authorization table which determines routing between nodes.
5. The invention of claim 4 wherein said labels are stored at said nodes.
6. The invention of claim 5 wherein said table is stored on said switch means.
7. The invention of claim 6 wherein said label authorization table is stored on said system manager.
8. The invention of claim 1 wherein the means for controlling is a node.
9. The invention of claim 8 wherein each node includes a plurality of functional elements.
10. The invention of claim 9 wherein at least one functional element is a central processing unit.
11. The invention of claim 10 wherein each node includes a network interface card.
12. The invention of claim 11 wherein each node includes a fiber channel network interface card.
13. The invention of claim 11 wherein each node includes a hardware module.
14. The invention of claim 1 wherein said switch means includes a crossbar switch.
15. A multi-level secure multi-processor computer architecture comprising:
a plurality of nodes;
switch means for providing a connection between said nodes as part of a network over which data is routed using labels; and
means for controlling said switch means to facilitate secure communication of data between a first and a second of said nodes, said means for controlling including a system manager which controls the routing of said data, said system manager being an integrated avionics manager.