System and method supporting secure data transfer into and out of protected systems using removable media

• US 10,402,559 B2
• Filed: 03/27/2017
• Issued: 09/03/2019
• Est. Priority Date: 06/03/2016
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Knapp, Eric D., Boice, Eric T.
• Primary Examiner(s): Pyzocha, Michael
• Application Number:
  US15/469,816
• Publication Number:
  US 20170351854A1
• Time in Patent Office: 890 Days
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system includes one or more protected nodes within a protected system, where each protected node is configured to be coupled to a storage device. The system also includes a server configured to perform a check-in process so that one or more files on the storage device are (i) accessible by the one or more protected nodes within the protected system and (ii) not accessible by nodes outside of the protected system while the storage device is checked-in. The server is also configured to perform a check-out process so that the one or more files on the storage device are (i) accessible by the nodes outside of the protected system and (ii) not accessible by the one or more protected nodes within the protected system while the storage device is checked-out. The server could be configured to modify a file system of the storage device during the check-in process.

Claims

1. A system comprising:

one or more protected nodes within a protected system, at least one of the protected nodes is operably coupled to a removable storage device; and

a server configured to;

perform a check-in process so that one or more files on the removable storage device are (i) accessible by the one or more protected nodes within the protected system and (ii) not accessible by nodes outside of the protected system while the removable storage device is checked-in; and

perform a check-out process so that the one or more files on the removable storage device are (i) accessible by the nodes outside of the protected system and (ii) not accessible by the one or more protected nodes within the protected system while the removable storage device is checked-out.

2. The system of claim 1, wherein the server is configured to modify a file system of the removable storage device during the check-in process so that the nodes outside of the protected system cannot recognize the file system of the removable storage device.

3. The system of claim 2, wherein the server is configured to restore the file system of the removable storage device during the check-out process so that the one or more protected nodes within the protected system cannot recognize the file system of the removable storage device.

4. The system of claim 1, wherein the server is configured to:

scan the removable storage device to identify any malware contained on the removable storage device during the check-in process; and

digitally sign one or more clean files on the removable storage device during the check-in process.

5. The system of claim 4, wherein each protected node comprises an agent configured to allow meaningful access to each file that has been digitally signed by the server.

6. The system of claim 4, wherein the server is configured to:

detect that a determination cannot be made whether a specified file on the removable storage device is clean or definitively contains malware;

provide at least part of the specified file to an external system for analysis; and

receive from the external system an indication whether the specified file is clean or contains malware.

7. The system of claim 1, wherein the server is configured to:

determine a type of the removable storage device during the check-in process;

determine whether the type of the removable storage device is allowed in the protected system during the check-in process; and

block usage of the removable storage device in the protected system in response to determining that the type of the removable storage device is not allowed in the protected system.

8. The system of claim 1, wherein:

each protected node is configured to execute an agent, the agent configured to control access to the removable storage device and to log information identifying one or more activities involving the removable storage device on the removable storage device; and

the server is configured to collect the information from the removable storage device during the check-out process.

9. The system of claim 8, wherein the agent executed by each protected node is configured to operate as a kernel-level driver or in kernel mode and is configured to intercept attempts to connect the removable storage device to that protected node.

10. The system of claim 1, wherein:

the server comprises a kiosk; and

each protected node comprises a computing or networking device.

11. A method comprising:

performing a check-in process so that one or more files on a removable storage device are (i) accessible by one or more protected nodes within a protected system and (ii) not accessible by nodes outside of the protected system while the removable storage device is checked-in, each protected node configured to be coupled to the removable storage device; and

performing a check-out process so that the one or more files on the removable storage device are (i) accessible by the nodes outside of the protected system and (ii) not accessible by the one or more protected nodes within the protected system while the removable storage device is checked-out.

12. The method of claim 11, wherein the check-in process comprises modifying a file system of the removable storage device so that the nodes outside of the protected system cannot recognize the file system of the removable storage device.

13. The method of claim 12, wherein the check-out process comprises restoring the file system of the removable storage device so that the one or more protected nodes within the protected system cannot recognize the file system of the removable storage device.

14. The method of claim 11, wherein:

the check-in process comprises;

scanning the removable storage device to identify any malware contained on the removable storage device; and

digitally signing one or more clean files on the removable storage device; and

each protected node comprises an agent configured to allow meaningful access to each file that has been digitally signed by the server.

15. The method of claim 14, wherein the check-in process comprises digitally signing the removable storage device itself.

16. The method of claim 14, wherein the check-in process comprises:

detecting that a determination cannot be made whether a specified file on the removable storage device is clean or definitively contains malware;

providing at least part of the specified file to an external system for analysis; and

receiving from the external system an indication whether the specified file is clean or contains malware.

17. The method of claim 11, wherein the check-in process comprises:

determining a type of the removable storage device during the check-in process;

determining whether the type of the removable storage device is allowed in the protected system during the check-in process; and

blocking usage of the removable storage device in the protected system in response to determining that the type of the removable storage device is not allowed in the protected system.

18. The method of claim 11, wherein the check-in process comprises storing one or more hidden files on the removable storage device.

19. The method of claim 18, wherein the one or more hidden files comprise at least one of:

one or more hash values associated with at least one of;

one or more files on the removable storage device or the removable storage device itself;

one or more audit log files used to store information about the one or more files on the removable storage device;

one or more command, control, or configuration files used to store one or more parameters for the one or more protected nodes; and

one or more event logs used to store information about one or more events involving the one or more protected nodes.

20. The method of claim 11, wherein:

each protected node is configured to execute an agent, the agent configured to control access to the removable storage device and to log information identifying one or more activities involving the removable storage device on the removable storage device; and

the check-out process comprises collecting the information from the removable storage device and providing the information to an external system for analysis or storage.