Device for integrating multiple secure networks

• US 10,177,914 B1
• Filed: 10/05/2016
• Issued: 01/08/2019
• Est. Priority Date: 06/04/2015
• Status: Active Grant

• Current Assignee: Fuse Integration, Inc.
• Original Assignee: Fuse Integration, Inc.
• Inventors: Lee, Sumner H.
• Primary Examiner(s): Hoffman, Brandon S
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US15/286,220
• Time in Patent Office: 825 Days
• Field of Search: 713153
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/162 at the data link layer

Abstract

The device and system for secure network communications disclosed herein can simultaneously operate one or more secure computing components in a single housing and integrating multiple secure networks. The device can operate networking and other software applications. The disclosed device can have physically and electromagnetically separated computing components in separate enclosures within the device, with physical attributes of the device designed to minimize spurious electronic emissions between enclosures. The device can have one or more shielded covers allowing removal and replacement of computing components within each enclosure. The device can allow simultaneous operations of multiple electromagnetically separated enclosures for multiple secure computers in a single space to integrate multiple secure networks.

Claims

1. A device for secure network communications allowing operation of multiple secure computers in a single space, the device comprising:

a chassis having an electromagnetically sealed exterior;

a first enclosure within the chassis operable to receive a first removable computing component having a first processor;

a second enclosure within the chassis electromagnetically isolated from the first enclosure and operable to receive a second removable computing component having a second processor;

an encryption component operable to communicatively couple the first removable computing component to the second removable computing component when inserted in the respective first enclosure and second enclosure;

one or more shielded covers making an electromagnetic seal with an exterior surface of the chassis and maintaining electromagnetic isolation of the first enclosure and the second enclosure when closed, the one or more shielded covers operable to allow removal and replacement of the first computing component and the second computing component while maintaining electromagnetic separation of the first enclosure and the second enclosure; and

one or more external interfaces for connection to one or more external computing components.

2. The device of claim 1, wherein the first enclosure provides a first computing enclave having a first security encryption and the second enclosure provides a second computing enclave having a second security encryption different from the first security encryption.

3. The device of claim 1, wherein the chassis has a one quarter air transport rack (ATR) form factor.

4. The device of claim 1, wherein the chassis has a 19-inch rack server form factor.

5. The device of claim 1, further comprising one or more electronic interference filters coupling the first enclosure and the second enclosure, the one or more electronic interference filters allowing transmission of information at a predetermined frequency and minimizing transmission of unintended electromagnetic signals between the first enclosure and the second enclosure.

6. The device of claim 1, further comprising one or more interference filters coupling the first enclosure and the second enclosure, the one or more interference filters allowing air circulation but minimizing transmission of electromagnetic signals between the first enclosure and the second enclosure.

7. The device of claim 1, further comprising one or more air interfaces disposed within the chassis, the one or more air interfaces having a mesh that permits air to pass between the first enclosure and the second enclosure and restricts electromagnetic emissions between the first enclosure and the second enclosure.

8. A system for secure network communications comprising:

a first computing enclave in a first enclosure configured to receive a first removable computing device having a first processor and a first memory, the first computing enclave operably coupled to a first network, the first network having a first encryption;

a second computing enclave in a second enclosure adjacent the first enclosure and configured to receive a second removable computing device having a second processor and a second memory, the first computing enclave operably coupled to a second network and being electromagnetically isolated from the first computing enclave, the second network having a second encryption different from the first encryption;

an encryption device operably coupled to the first computing enclave and the second computing enclave and configured to securely transfer data between the first computing enclave and the second computing enclave according to the first encryption and the second encryption; and

a chassis housing the first enclosure and the second enclosure, and having

a first cover operable to be coupled to the chassis and providing an electromagnetic seal for the first enclave and configured to allow removal and replacement of the first computing device, and

a second cover operable to be coupled to the chassis and providing an electromagnetic seal for the second enclave, and configured to allow removal and replacement of the second computing device while maintaining electromagnetic separation of the first enclosure and the second enclosure.

9. The device of claim 8, wherein the first enclosure provides a first computing enclave having a first security encryption and the second enclosure provides a second computing enclave having a second security encryption different from the first security encryption.

10. The device of claim 8, wherein the chassis has a one quarter air transport rack (ATR) form factor.