Method and system for providing secure one-way transfer of data

• US 8,250,235 B2
• Filed: 05/19/2004
• Issued: 08/21/2012
• Est. Priority Date: 05/19/2003
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Harvey, Elaine M., Mitzen, Wayne A., Wright, Jason, Sleggs, John M., Wimble, Lawrence A.
• Primary Examiner(s): Luu, Le
• Application Number:
  US10/848,159
• Publication Number:
  US 20050033990A1
• Time in Patent Office: 3,016 Days
• Field of Search: 709/225, 709/237, 709/215, 709/218, 713/153, 710/1, 710/316, 710/62
• US Class Current: 709/237
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A system including a transmitter, a receiver, and a conduit is provided. The transmitter is within a first network, and is in communication with at least one other device within the first network. The receiver is within a second network, and is in communication with at least one other device within the second network. The conduit is formed between the transmitter and the receiver, and is capable of carrying a signal transmitted from the transmitter to the receiver. To maintain the unidirectional nature of the conduit, either the transmitter is incapable of receiving any signal via the conduit or the receiver is incapable of transmitting any signal via the conduit.

Claims

1. A method comprising:

receiving data, via a transmitter, from a first network device in a first network, the data intended for a second network device in a second network;

transmitting, via the transmitter and to the first network device, information indicating receipt of the data on behalf of the second network device; and

forwarding, via the transmitter, the data to the second network device.

2. The method of claim 1 wherein the transmitter is transparent to the first network device and the second network device.

3. The method of claim 1 wherein the transmitter is located in the first network.

4. The method of claim 1 wherein the transmitter is incapable of receiving data from the second network.

5. The method of claim 1 wherein the receiving includes:

receiving the data via a first protocol, and

wherein the forwarding includes;

forwarding the data via a second, different protocol.

6. The method of claim 1 further comprising:

encrypting the data prior to forwarding the data to the second network device.

7. The method of claim 1 further comprising:

performing a hash function on the data prior to forwarding the data to the second network device.

8. The method of claim 1 further comprising:

resending, via the transmitter, at least a portion of the data to the second network device a predetermined number of times.

9. The method of claim 1 wherein the forwarding includes:

sending at least one of a digital signature, a checksum, or a digital certificate with the data to the second network device.

10. A system comprising:

a transmitter configured to;

receive a packet from a first network device in a first network, the packet intended for a second network device in a second network,

transmit, to the first network device, information indicating receipt of the packet on behalf of the second network device, and

forward the packet to the second network device.

11. The system of claim 10 wherein the transmitter is transparent to the first network device and the second network device.

12. The system of claim 10 wherein the transmitter is located in the first network.

13. The system of claim 10 wherein the transmitter is incapable of receiving data from the second network.

14. The system of claim 10 wherein, when receiving a packet, the transmitter is configured to:

receive the packet via a transmission control protocol (TCP), and

wherein, when forwarding the packet, the transmitter is configured to;

repackage data in the packet using a user datagram protocol (UDP).

15. The system of claim 10 wherein the transmitter is further configured to:

encrypt the packet prior to forwarding the packet to the second network device.

16. The system of claim 10 wherein the transmitter is further configured to:

perform a hash function prior to forwarding the packet to the second network device.

17. The system of claim 10 wherein the transmitter is further configured to:

resend the packet to the second network device a predetermined number of times.

18. The system of claim 10 wherein, when forwarding the packet, the transmitter is configured to:

send at least one of a digital signature, a checksum, or a digital certificate with the packet to the second network device.

19. A system comprising:

a receiver configured to;

forward data from a first network device in a first network to a second network device in a second network,

receive a message from the second network device acknowledging receipt of the data, the acknowledgement message being intended for the first network device, and

store the acknowledgement message without forwarding the acknowledgement message to the first network device.

20. The system of claim 19 wherein the receiver is transparent to the first network device and the second network device.

21. The system of claim 19 wherein the receiver is located in the second network.

22. The system of claim 19 wherein the receiver is incapable of transmitting data to the first network.

23. A method comprising:

forwarding data, via a receiver device, from a first network device in a first network to a second network device in a second network;

receiving, via the receiver device, a message from the second network device acknowledging receipt of the data, the acknowledgement message being intended for the first network device; and

storing, via the receiver device, the acknowledgement message without forwarding the acknowledgement message to the first network device.

24. The method of claim 23 wherein the receiver device is transparent to the first network device and the second network device.

25. The system of claim 23 wherein the receiver device is incapable of transmitting data to the first network.

26. A system comprising:

a transmitter configured to;

receive data from a first network device in a first network, the data intended for a second network device in a second network,

transmit, to the first network device, information indicating receipt of the data on behalf of the second network device, and

forward the data toward the second network device; and

a receiver configured to;

receive the data from the transmitter,

forward the data to the second network device,

receive a message from the second network device acknowledging receipt of the data, the acknowledgement message being intended for the first network device, and

store the acknowledgement message without forwarding the acknowledgement message to the first network device.

27. The system of claim 26 wherein the transmitter is located in the first network and the receiver is located in the second network.

28. The system of claim 26 wherein the transmitter and the receiver are transparent to the first network device and the second network device.

29. The system of claim 26 wherein the transmitter is incapable of receiving data from the receiver and the receiver is incapable of transmitting data to the transmitter.