Distributive access controller

• US 20040025052A1
• Filed: 06/18/2003
• Published: 02/05/2004
• Est. Priority Date: 07/26/2000
• Status: Active Grant

• Current Assignee: Secureeden Incorporated
• Original Assignee: David Dickenson
• Inventors: Dickenson, David
• Granted Patent: US 7,725,558 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A device for securely controlling communications among or within computers, computer systems, or computer networks, comprising: (a) a primary access port to which an “owner” computer program, computer, computer system, or computer network is connectable to access shared computer resources; (b) a secondary access port to which a non-owner computer program, computer, computer system, or computer network is connectable to access the shared computer resources; (c) a transfer port to which a shared computer resource is connectable to provide controlled access to that computer resource from computer programs, computers, computer systems, or computer networks connected to the access ports; and (d) a separate physical communication path to and from each access port and each transfer port, where access permissions and restrictions for each communication path are set by the owner of the device through the primary access port.

Claims

1. A device for controlling communications among or within computers, computer systems, or computer networks, comprising:

(a) a primary access port to which a computer program, a computer, a computer system, or a computer network is connectable to access a computer resource over which said device controls access;

(b) a secondary access port to which a computer program, a computer, a computer system, or a computer network is connectable to access said computer resource;

(c) a transfer port to which said computer resource is connectable to provide access to said computer resource from computer programs, computers, computer systems, or computer networks connected to access ports of said device;

(d) a separate physical communication path to and from each access port and each transfer port of said device; and

(e) an access control interface associated with said primary access port through which the owner-of said device sets access permissions and restrictions for each communication path.

2. A device as claimed in claim 1 wherein said computer resource is a storage unit having a Small Computer System Interface (SCSI) bus.

3. A device as claimed in claim 1 wherein said computer resource is random access memory (RAM).

4. A method of controlling communications among or within computers, computer systems, or computer networks, comprising:

(a) providing a device as claimed in claim 1;

(b) connecting to said primary access port a first computer program, computer, computer system, or computer network controlled by the owner of said device;

(c) connecting to said secondary access a port a second computer program, computer, computer system, or computer network seeking access to said computer resource;

(d) connecting said computer resource to said transfer port; and

(e) setting access permissions and restrictions for each of said communication paths through said primary access port.

5. Use of the device claimed in claim 1 as a controlled portal through which different computer programs, computers, computer systems, or computer networks communicate and share information securely.

6. A network comprising a device as claimed in claim 1.

7. A network comprising an interconnected plurality of the device claimed in claim 1.