Infrastructure method and system for authenticated dynamic security domain boundary extension

• US 7,469,417 B2
• Filed: 06/17/2003
• Issued: 12/23/2008
• Est. Priority Date: 06/17/2003
• Status: Expired due to Fees

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Electronic Data Systems Corporation (Perspecta, Inc.)
• Inventors: Johnson, Brian, Shute, Beresford, Waters, David A., Fearnley, Jolyon A., Furniss, Diane
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/462,994
• Publication Number:
  US 20040260941A1
• Time in Patent Office: 2,016 Days
• Field of Search: 726/2, 726/7, 726/4, 726/5, 713/164
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and system for authenticated dynamic extension of security domain boundaries includes high security domain extension instructions for sequentially and dynamically forming an extended high security domain (133) through a protected communication path (128). The protected communication path (128) extends from a first computer (10) associated with a high security domain (80) into a second computer (10) associated with low security domain (120). The method and system establish the extended high security domain (133) within the second computer (10). A protected communication path (128) forms an isolation barrier (131) separating the extended high security domain (133) from other objects (126) within the low security domain (120). Authentication instructions (146) temporarily 20 authenticate at least one object (132) associated with the low security domain (120). Returning instructions (156) return the at least one object (132) processed within the extended high security domain (133) to said low security domain (120).

Claims

1. A system for authenticated dynamic extension of security domain boundaries, comprising:

a first computer executing dynamic high security domain extension instructions for dynamically forming an extended high security domain through a protected communication path from a the first computer associated with a high security domain into a second computer associated with low security domain;

the second computer executing establishing instructions within said extended high security domain within said second computer for establishing the protected communication path between said high security domain and said extended high security domain within low security domain, said protected communication path forming an isolation barrier separating said extended high security domain from said low security domain;

the first computer executing instructions for receiving an authenticated access request from a user within said low security domain for temporary authentication with said high security domain;

the first computer executing instructions for providing temporarily authenticated access to said high security domain in response to said high security domain receiving said authenticated access request; and

the second computer executing authentication instructions associated with said low security domain and said high security domain for temporarily authenticating at least one object associated with said low security domain.

2. The system of claim 1, further comprising returning instructions for subsequently returning said at least one object to said low security domain.

3. The system of claim 1, further comprising instructions for verifying the security access authorization of an individual user of said computer during said temporary authentication within said high security domain.

4. A system for authenticated dynamic extension of security domain boundaries, comprising:

a computer executing instructions for enabling the computer, which is normally a member of a low security domain, to be temporarily authenticated as a member of remote high security domain; and

the computer executing instructions for reverting the computer to the service provider'"'"'s low security domain at the cessation of the service provision;

the computer executing instructions for authenticating an incoming request from a device associated with different security domain, and instructions for maintaining the confidentiality and integrity of a session associated with said device, wherein the strength of said authentication instructions relates to a difference in data sensitivity levels between said high security domain and said low security domain;

the computer executing instructions for controlling communications across a domain boundary between said high security domain and said low security domain at a strength level commensurate with data sensitivity level appropriate to the respective domain; and

the computer executing instructions for recognizing and permitting domain boundary extension requests and authenticating sessions.

5. The system of claim 4, wherein the computer in said high security domain role is accorded the same degree of physical protection and access control as would be provided for a dedicated computer in an associated high security domain.

6. The system of claim 4, further comprising instructions for concealing the internal structure of said high security domain from all other domains to a degree commensurate with the data sensitivity level of said high security domain.

7. The system of claim 4, further comprising instructions for reducing to a predetermined level the high security domain bandwidth between said high security domain and said low security domain normally containing the domain boundary extension remote device upon the removal of said extended high security domain.

8. A method for dynamically extending authenticated security domain boundaries, comprising the steps of:

dynamically forming an extended high security domain through a protected communication path from a first computer associated with a high security domain into a second computer associated with low security domain;

establishing a protected communication path between said high security domain and said extended high security domain within low security domain, said protected communication path forming an isolation barrier separating said extended high security domain from said low security domain;

receiving an authenticated access request from a user within said low security domain for temporary authentication with said high security domain;

providing temporarily authenticated access to said high security domain in response to said high security domain receiving said authenticated access request; and

temporarily authenticating at least one object associated with said low security domain.

9. The method of claim 8, further comprising the step of subsequently returning said at least one object to said low security domain.

10. The method of claim 8, further comprising the step of verifying the security access authorization of an individual user of said computer during said temporary authentication within said high security domain.

11. A method for dynamically extending an authenticated security domain boundary, comprising the steps of:

enabling a computer which is normally a member of a low security domain to be temporarily authenticated as a member of remote high security domain;

reverting the computer to the service provider'"'"'s low security domain at the cessation of the service provision;

authenticating an incoming request from a device associated with different security domain, and maintaining the confidentiality and integrity of a session associate with said device, wherein the strength of said authentication instructions relates to a difference in data sensitivity levels between said high security domain and said low security domain; and

controlling communications across a domain boundary between said high security domain and said low security domain at a strength level commensurate with data sensitivity level appropriate to the respective domain; and

recognizing and permitting domain boundary extension requests and authenticates sessions.

12. The method of claim 11, further comprising the step of according a low security domain computer in said extended high security domain role the same degree of physical protection and access control as would be provided for a dedicated computer in an associated high security domain.

13. The method of claim 11, further comprising the steps of concealing the internal structure of said high security domain from all other domains to a degree commensurate with the data sensitivity level of said high security domain.

14. The method of claim 11, further comprising the steps of reducing to a predetermined level the high security domain bandwidth between said high security domain and said low security domain normally containing the domain boundary extension remote device upon the removal of said extended high security domain.

15. A computer-readable storage medium encoded with computer-executable instructions for authenticated dynamic extension of security domain boundaries, comprising:

dynamic high security domain extension instructions for dynamically forming an extended high security domain through a protected communication path from a first computer associated with a high security domain into a second computer associated with low security domain;

instructions for executing within said extended high security domain within said second computer for establishing the protected communication path between said high security domain and said extended high security domain within low security domain, said protected communication path forming an isolation barrier separating said extended high security domain from said low security domain;

instructions for receiving an authenticated access request from a user within said low security domain for temporary authentication with said high security domain;

instructions for providing temporarily authenticated access to said high security domain in response to said high security domain receiving said authenticated access request; and

authentication instructions associated with said low security domain and said high security domain for temporarily authenticating at least one object associated with said low security domain.