IP Library Granted Patent US 7,958,351
Granted Patent B2
US 7,958,351 · App. 10/334,318 · Granted Jun 7, 2011

Method and apparatus for multi-level security implementation

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,958,351
App. No.
10/334,318
Granted
Jun 7, 2011
Kind
B2
Abstract

A method of operating a multi-level security system including the steps of providing a plurality of processors. At least some of said processors are equipped with a data card which permits simultaneous processing of different classification levels of information and the dynamic reallocation of processors to different classification levels.

Claims (45)

1. A multi-level security apparatus for processing a plurality of different classification levels of information, the apparatus comprising:

a plurality of processors configured to collectively process information simultaneously at a classified level of information and an unclassified level of information;

a data interconnection configured to interconnect the plurality of processors;

a first card having a first key connected to the data interconnection and to a first processor of the plurality of processors, wherein the first processor is configured to communicate with the data interconnection through the first card;

a second card having a second key connected to the data interconnection and to a second processor of the plurality of processors, wherein the second processor is configured to communicate with the data interconnection through the second card;

a processing module configured to be in communication with the first card and the second card through the data interconnection for reallocating said first and second processors from processing said unclassified level of information to said classified level of information, the processing module comprising an information security module with a guard function configured to allow information to be passed in an unrestricted way from an unclassified side of the apparatus to a classified side of the apparatus.

2. The apparatus of claim 1 wherein each of said first and second data cards comprises a daughter card.

3. The apparatus of claim 1 wherein the processing module is configured to dynamically reallocate security levels of said first and second processors.

4. The apparatus of claim 1 wherein the plurality of different classification levels comprises TOP SECRET, SECRET, and CONFIDENTIAL.

5. The apparatus of claim 1 wherein the first card comprises a first virtual private network (VPN) card and the second comprises a second VPN card.

6. The apparatus of claim 1 wherein the data interconnection comprises a data fabric included in a bus.

7. The apparatus of claim 6 wherein the first and second keys are the same, the first card configured to encrypt data contained in the first processor creating encrypted data for transmission over the data fabric of the bus for receipt and decryption by the second card and receipt by the second processor, the encrypted data not readable by a general processor of the plurality of processors.

8. The apparatus of claim 6 wherein the first and second cards are keyed for a higher and a lower classification level, whereby when data from the first processor is encrypted and put on the bus, garbled information is received at the second processor.

9. The apparatus of claim 8 wherein information that goes across the data fabric is either unclassified information or classified information that has been encrypted.

10. The apparatus of claim 8 wherein the first and second keys are keyed for a plurality of different classification levels.

11. The apparatus of claim 1 further comprising an information security module which is keyed for a plurality of different classification levels.

12. The apparatus of claim 1 wherein the first card and the second card are keyed for at least one of a classified information or for a classification level.

13. The apparatus of claim 1 further comprising a tuner and an FPGA card configured to simultaneously perform communication, signal intelligence (SIGINT), and jamming functions.

14. A method for securely transmitting information comprising:

setting a first key corresponding to a first classification level for a first card operatively connected between a bus and a first processing device;

setting a second key corresponding to a second classification level for a second card operatively connected between the bus and a second processing device;

receiving first information encrypted at the first classification level and second information encrypted at the second classification level at the bus simultaneously;

receiving the first information at an information security module in communication with the bus;

determining that the first information is intended for the second processing device;

decrypting the first information at the information security module to create decrypted first information;

encrypting the decrypted first information corresponding to the second classification level to create second encrypted first information;

receiving and decrypting the second encrypted first information at the second card.

15. The method of claim 14 further comprising:

storing a plurality of keys at an information security module in communication with the bus;

deleting the second key from the second card;

loading a key from the plurality of keys stored at the information security module at the second card.

16. The method of claim 14 further comprising:

sending a jamming signal from a transmitter in communication with the bus;

receiving encrypted information at a receiver in communication with the bus.

17. A multi-level security apparatus for processing a plurality of different classification levels of information, the apparatus comprising:

a plurality of processors;

a bus connected for communication among the plurality of processors;

a first card having a first key connected to the bus and to a first processor of the plurality of processors, wherein the first processor is configured to communicate with the bus through the first card;

a second card having a second key connected to the bus and to a second processor of the plurality of processors, wherein the second processor is configured to communicate with the bus through the second card;

an information security module with a guard function configured to allow information to be passed in an unrestricted way from an unclassified side of the apparatus to a classified side of the apparatus;

wherein the apparatus is configured to receive first information encrypted at a first classification level and second information encrypted at a second classification level at the bus simultaneously;

wherein the plurality of processors are configured to collectively process information simultaneously at the first classification classified level, the second classification level, and at an unclassified level of information.

18. The apparatus of claim 17 further comprising a processing module connected for communication with the bus, wherein the processing module is configured to dynamically reallocate security levels of the first and second processors.

19. The apparatus of claim 17 further comprising an information security module keyed for a plurality of different classification levels.

20. The apparatus of claim 17 further comprising a tuner and an FPGA card configured to simultaneously perform communication, signal intelligence (SIGINT), and jamming functions.

Assignments (4)
MERGER Recorded Dec 29, 2015
From: WISTERIUM DEVELOPMENT LLC
To: CALLAHAN CELLULAR L.L.C.
Reel/Frame 037396/0503 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 22, 2009
From: BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC.
To: WISTERIUM DEVELOPMENT LLC
Reel/Frame 023267/0313 →
CONFIRMATORY ASSIGNMENT Recorded Feb 24, 2009
From: LUTHI, PETER O.
To: BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC.
Reel/Frame 022302/0361 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 9, 2003
From: LUTHI, PETER O.
To: BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC.
Reel/Frame 013717/0730 →