Method and device for connecting to a high security network
View Patent ↗The present invention relates to the field of access to a high-security network, and more particularly to a device allowing secure access, for example for management and maintenance operations. There is described a connection device making it possible to connect any maintenance apparatus to a high-security network without compromising the trust of the system. The device contains a client of the maintenance application package only the inputs-outputs of which are offloaded onto the maintenance apparatus. It has authentication means and means for performing a protocol break between the maintenance apparatus and the high-security system. In this way, only said connection device needs to be trusted and the maintenance may be effected from any terminal.
1. A maintenance system to insure maintenance of a high-security system by means of a client/server mode maintenance application, said maintenance system comprising:
a maintenance terminal and said high-security system comprising a maintenance server of said client/server mode maintenance application, wherein said maintenance system further comprises a connection device ( 3 . 3 ) devoid of any input/output means apart from a first connection link ( 4 . 3 ) adapted to link said connection device to said high-security system and a second connection link ( 4 . 2 ) adapted to link said connection device ( 3 . 3 ) to said maintenance terminal ( 3 . 4 ), said connection device further including:
a proprietor maintenance client ( 3 . 8 ) that depends on the high-security system and that connects to a maintenance server ( 3 . 5 ) of said high-security system via said first connection link ( 4 . 3 ) for controlling said maintenance server ( 3 . 5 ), said proprietor maintenance client ( 3 . 8 ) generating a display resulting from a control operation of said maintenance server ( 3 . 5 ) of a high-security system, and
a remote connection server ( 3 . 9 ) connected via the second connection link ( 4 . 2 ) to said maintenance terminal ( 3 . 4 ),
wherein said remote connection server ( 3 . 9 ) being constructed to offload onto said maintenance terminal ( 3 . 4 ) the display generated by said proprietor maintenance client ( 3 . 8 ) resulting from the control operation of said maintenance server ( 3 . 5 ) of said high-security system and to offload onto said maintenance client ( 3 . 8 ) inputs issued from a keyboard or a pointing peripheral of said maintenance terminal ( 3 . 4 ), said maintenance client ( 3 . 8 ) then controlling the maintenance server ( 3 . 5 ) according to said inputs,
said connection device further comprising a sensor for authenticating the user,
said connection device further comprising a chip-card component for storing authentication credits and the cryptographic means necessary for establishing an encrypted tunnel between said device and the high-security system.
2. The maintenance system according to claim 1 , said connection device further comprising:
a firewall on the first connection link for controlling the flows between said device and the high-security system;
a firewall on the second connection link for controlling the flows between said device and the maintenance terminal.
3. The maintenance system according to claim 1 , said connection device further comprising a chip-card component for making the start-up of the system dependent on the successful authentication of the user.
4. The maintenance system according to claim 1 , said connection device further comprising authentication credits for establishing an encrypted tunnel between said device and said high-security system, dependent on the successful authentication of the user.
5. The maintenance system according to claim 1 , said connection device further comprising a file system for mounting an available volume of said terminal so as to make the file system accessible to the maintenance client.