Multi-independent level security for high performance computing and data storage systems
Systems, methods, and apparatus for a MILS HPC, data storage system (DSS) system architecture that incorporates a multi-crypto module (MCM) to provide end-to-end multi-independent level security (MILS) protection. Configuration of each MCM enables a high performance computing (HPC) resource to compute different security domains with the associated security level keys from a key/node manager. The HPC resource can be dynamically re-allocated to different security level domain(s) by the key/node manager. In one embodiment, the DSS stores encrypted data regardless of the domains.
1 . A system comprising:
a plurality of compute nodes;
a plurality of cryptographic modules, each module configured to encrypt communications in a networked system, and each module configured to support different security levels for multiple domains; and
a data storage system configured to store encrypted data for each of the compute nodes, wherein each compute node is configured to access the data storage system via a respective one of the cryptographic modules.
2 . The system of claim 1 , wherein each domain is defined by a key manager.
3 . The system of claim 1 , wherein each compute node is configured to serve one of the multiple domains.
4 . The system of claim 1 , wherein the cryptographic modules maintain cryptographic isolation between the compute nodes.
5 . The system of claim 1 , wherein each of the compute nodes is configured to perform transport encryption for communicating with other ones of the compute nodes, and to perform data at rest encryption for storing data in the data storage system.
6 . The system of claim 5 , further comprising a key/node manager configured to manage keys for the transport encryption and the data at rest encryption.
7 . The system of claim 5 , wherein the transport encryption provides a secure link to the other ones of the compute nodes at a same security level.
8 . The system of claim 1 , further comprising a key/node manager configured to provision each of the cryptographic modules to one of the different security levels.
9 . A system comprising:
a plurality of compute nodes:
a plurality of cryptographic modules to provide multi-independent level security, wherein each cryptographic module is configured to enable computation of different security domains; and
a data storage system configured to store encrypted data for each of the compute nodes, wherein each compute node is configured to access the data storage system via a respective one of the cryptographic modules.
10 . The system of claim 9 , wherein the computation of different security domains is enabled with associated security level keys from at least one key manager.
11 . The system of claim 9 , wherein the system is configured for dynamic re-allocation to at least one different security level domain.
12 . The system of claim 9 , wherein each compute node is configured to serve one of the different security domains.
13 . The system of claim 9 , wherein the cryptographic modules maintain cryptographic isolation between the compute nodes.
14 . A system comprising:
a plurality of compute nodes, each node configured to serve one of multiple different security domains;
at least one cryptographic module configured to maintain cryptographic isolation between the compute nodes; and
a data store coupled to the compute nodes, wherein each node is configured to access the data store to retrieve data for the security domain served by the node, and the data store is accessible to the at least one cryptographic module.
15 . The system of claim 14 , wherein at least one compute node of the compute nodes is configured for reallocation to a new security domain.
16 . The system of claim 14 , wherein the at least one cryptographic module comprises a cryptographic engine configured for data processing using a systolic array.
17 . The system of claim 14 , further comprising a key manager configured to select a set of keys from multiple key sets for performing encryption by the at least one cryptographic module.
18 . The system of claim 17 , wherein each set of the multiple key sets corresponds to one of the different security domains.
19 . The system of claim 14 , wherein the at least one cryptographic module maintains cryptographic isolation between data elements stored in the data store.
20 . The system of claim 14 , wherein the data store is configured to store data for at least two of the different security domains.