Data synchronization for a secure electronic device

• US 20070204331A1
• Filed: 02/28/2006
• Published: 08/30/2007
• Est. Priority Date: 02/28/2006
• Status: Active Grant

• Current Assignee: Harris Global Communications, Inc. (L3Harris Technologies, Inc.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: O'Brien, Terence
• Granted Patent: US 7,681,230 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Method for synchronizing stored data in one device (102, 106, 202, 206, 210) with other devices (102, 106, 202, 206, 210) at multiple levels of security classification. The methods and systems disclosed herein can advantageously utilize unique protocols and, optionally, cryptographic technologies to effect data synchronization in a secure manner.

Claims

1. A method for secure synchronization of data contained on a first device and a second device, comprising:

establishing a device-to-device single-level secure processing state as between said first device and said second device at a first defined security access level by

(a) authenticating a user, said first device, and said second device;

(b) determining an assigned security access level for said user from among a plurality of possible user security access levels; and

(c) determining if said first defined security access level at which said user requests to sign on is lesser than or equal to said assigned security access level of said user; and

synchronizing a first plurality of managed data objects stored on said first device and said second device at said first defined security access level.

2. The method according to claim 1, wherein said synchronizing step is performed by a direct connection between said first device and said second device, exclusive of any intermediate computer network.

3. The method according to claim 1, further comprising, prior to said synchronizing step, signing said user onto a computer network at said first defined security access level using at least one of said first device and said second device.

4. The method according to claim 3, wherein said first device is a network-attached device and said second device is a network server.

5. The method according to claim 4, further comprising selecting said network server to have a combination of an operating system and a file system selected from the group consisting of (a) a single-level secure operating system and a single-level secure file system, (b) a single level secure operating system and a multi-level secure file system, and (c) a multi-level secure operating system and a multi-level secure file system.

6. The method according to claim 5, further comprising selecting said network-attached device to have a single-level secure operating system and a single-level secure file system.

7. The method according to claim 4, further comprising selecting said network server to have a combination of an operating system and a file system selected from the group consisting of (a) a single level secure operating system and a multi-level secure file system, and (b) a multi-level secure operating system and a multi-level secure file system.

8. The method according to claim 7, further comprising selecting said network-attached device to have a single-level secure operating system and a multi-level secure file system.

9. The method according to claim 8, further comprising:

signing said user off of said computer network in response to a first user request;

in response to a second user request, signing said user back onto said computer network at a second defined security access level, different from said first defined security access level, using network-attached device; and

synchronizing a second plurality of managed data objects stored on said network-attached device and said network server at said second defined security access level provided in said multi-level secure file system of said network server and said multi-level secure file system of said network attached device.

10. The method according to claim 4, further comprising selecting said network server to have a multi-level secure operating system and a multi-level secure file system.

11. The method according to claim 10, further comprising selecting said network-attached device to have a multi-level secure operating system and a multi-level secure file system.

12. The method according to claim 11, further comprising:

determining if said user is authorized to access a second defined security access level provided in said multi-level secure file system of said network server and said multi-level secure file system of said network attached device;

automatically repeating said synchronizing step for said second defined security access level.

13. The method according to claim 4, further comprising:

establishing a second device to device single-level secure processing state as between said network-attached device and a locally-connected device that is locally connected to said network-attached device exclusive of any network connection, said network attached device and said locally-connected device connected at a second defined security access level.

14. The method according to claim 13, wherein said establishing of said second device to device single-level secure processing state further comprises authenticating at least said locally connected device.

15. The method according to claim 13, further comprising selecting said network server to have a combination of an operating system and a file system selected from the group consisting of (a) a single-level secure operating system and a single-level secure file system, (b) a single level secure operating system and a multi-level secure file system, and (c) a multi-level secure operating system and a multi-level secure file system.

16. The method according to claim 15, further comprising selecting said network-attached device to have a single-level secure operating system and a single-level secure file system.

17. The method according to claim 16, further comprising selecting said locally connected device to have a single-level secure operating system and a single-level secure file system.

18. The method according to claim 17, further comprising automatically synchronizing a second plurality of managed data objects stored on said network-attached device and said locally connected device at said second defined security access level.

19. The method according to claim 18, further comprising automatically re-synchronizing said first plurality of managed data objects stored on said network-attached device and said network server.

20. The method according to claim 13, further comprising selecting said network server to have a combination of an operating system and a file system selected from the group consisting of (a) a single level secure operating system and a multi-level secure file system, and (b) a multi-level secure operating system and a multi-level secure file system.

21. The method according to claim 20, further comprising selecting said network-attached device to have a single-level secure operating system and a multi-level secure file system.

22. The method according to claim 21, further comprising selecting said locally connected device to have a single-level secure operating system, and a single-level secure file system

23. The method according to claim 22, further comprising automatically synchronizing a second plurality of managed data objects stored on said network-attached device and said locally connected device at said second defined security access level.

24. The method according to claim 23, further comprising automatically re-synchronizing said first plurality of managed data objects stored on said network-attached device and said network server.

25. The method according to claim 24, further comprising:

signing said user off of said computer network in response to a first user request;

in response to a second user request, signing said user back onto said computer network at a third security access level using network-attached device; and

synchronizing a third plurality of managed data objects stored on said network-attached device and said network server at said third defined security access level provided in said multi-level secure file system of said network server and said multi-level secure file system of said network attached device.

26. The method according to claim 21, further comprising selecting said locally connected device to have a single-level secure operating system, and a multi-level secure file system.

27. The method according to claim 26, further comprising:

prior to establishing said second device to device single-level secure processing state as between said network-attached device and a locally-connected device, determining if said locally-connected device supports said second defined security access level associated with said second device to device single level secure processing state;

automatically synchronizing a second plurality of managed data objects stored on said network-attached device and said locally connected device at said second defined security access level.

28. The method according to claim 27, further comprising automatically re-synchronizing said first plurality of managed data objects stored on said network-attached device and said network server.

29. The method according to claim 28, further comprising:

signing said user off of said computer network in response to a first user request;

in response to a second user request, signing said user back onto said computer network at a third security access level using network-attached device; and

synchronizing a third plurality of managed data objects stored on said network-attached device and said network server at said third defined security access level provided in said multi-level secure file system of said network server and said multi-level secure file system of said network attached device.

30. The method according to claim 13, further comprising selecting said network server to have a multi-level secure operating system and a multi-level secure file system.

31. The method according to claim 30, further comprising selecting said network-attached device to have a multi-level secure operating system and a multi-level secure file system.

32. The method according to claim 31, further comprising selecting said locally connected device to have a single-level secure operating system, and a single-level secure file system.

33. The method according to claim 32, further comprising automatically synchronizing a second plurality of managed data objects stored on said network-attached device and said locally connected device at said second defined security access level.

34. The method according to claim 33, further comprising the step of automatically establishing said second device to device single level secure processing state prior to synchronizing said second plurality of managed data objects, and automatically terminating said second device to device single level secure processing state after synchronizing said second plurality of managed data objects.

35. The method according to claim 34, further comprising automatically re-synchronizing said first plurality of managed data objects stored on said network-attached device and said network server.

36. The method according to claim 35, further comprising:

automatically modifying an access level of said network attached device to a third defined security access level in said multi-level secure file system of said network-attached device;

automatically modifying an access level of said network server to said third defined security access level in said multi-level secure file system of said network server; and

synchronizing a third plurality of managed data objects stored on said network-attached device and said network server at said third defined security access level.

37. The method according to claim 31, further comprising selecting said locally connected device to have a combination of operating system and file system selected from the group consisting of (a) a single-level secure operating system, and a multi-level secure file system, and (b) a multi-level secure operating system, and a multi-level secure file system

38. The method according to claim 37, further comprising:

prior to establishing said second device to device single-level secure processing state as between said network-attached device and a locally-connected device, determining if said locally-connected device supports said second defined security level;

automatically synchronizing a second plurality of managed data objects stored on said network-attached device and said locally connected device at said second defined security access level.

39. The method according to claim 38, further comprising automatically re-synchronizing said first plurality of managed data objects stored on said network-attached device and said network server.

40. The method according to claim 39, further comprising:

automatically modifying an access level of said network attached device to a third defined security access level in said multi-level secure file system of said network-attached device;

automatically modifying an access level of said network server to said third defined security access level in said multi-level secure file system of said network server; and

synchronizing a third plurality of managed data objects stored on said network-attached device and said network server at said third defined security access level.

41. The method according to claim 38, further comprising the step of automatically establishing said second device to device single level secure processing state prior to synchronizing said second plurality of managed data objects, and automatically terminating said second device to device single level secure processing state after synchronizing said second plurality of managed data objects.

42. The method according to claim 41, further comprising automatically setting an access level of said locally connected device in response to a command from said network attached device.