Bilateral communication using multiple one-way data links

• US 8,831,222 B2
• Filed: 12/05/2012
• Issued: 09/09/2014
• Est. Priority Date: 07/19/2007
• Status: Active Grant

• Current Assignee: OWL Cyber Defense Solutions LLC
• Original Assignee: Owl Computing Technologies, Inc.
• Inventors: Menoher, Jeffrey C., Hope, James, Mraz, Ronald
• Primary Examiner(s): Perungavoor, Venkat
• Application Number:
  US13/705,885
• Publication Number:
  US 20130097283A1
• Time in Patent Office: 643 Days
• Field of Search: None
• US Class Current: 380/256
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A bilateral data transfer system comprising a first node, a second node, a first one-way link for unidirectional transfer of first data from the first node to the second node, and a second one-way link for unidirectional transfer of second data from the second node to the first node, wherein the unidirectional transfer of the first data across the first one-way link and the unidirectional transfer of the second data across the second one-way link are independently administered by the bilateral data transfer system. Under such bilateral data transfer system, each of the one-way data links may be subject to separately administered security restrictions and data filtering processes, enabling secure bilateral communications across different network security domains.

Claims

1. A bilateral data transfer system comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer first data over the first one-way link, to receive second data over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link; and

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive the first data from the first node over the first one-way link, to transfer the second data to the first node over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link.

2. A bilateral data transfer system, comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer first data over the first one-way link, to receive second data over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link; and

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive the first data from the first node over the first one-way link, to transfer the second data to the first node over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link;

wherein the first data comprises a request for data from a remote terminal client coupled to the first node and the second data comprises requested data from a remote terminal server coupled to the second node.

3. A bilateral data transfer system comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof; and

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer first data over the first one-way link, to receive second data over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link.

5. The bilateral data transfer system of claim 3, further comprising:

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive the first data from the first node over the first one-way link, to transfer the second data to the first node over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link.

4. A bilateral data transfer system, comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof; and

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer first data over the first one-way link, to receive second data over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link;

wherein the first data comprises a request for data from a remote terminal client coupled to the first node and the second data comprises requested data from a remote terminal server coupled to the second node.

9. The bilateral data transfer system of claim 4, further comprising:

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive the first data from the first node over the first one-way link, to transfer the second data to the first node over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link.

6. A bilateral data transfer system comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive first data over the first one-way link, to transfer second data over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link.

8. The bilateral data transfer system of claim 6, further comprising:

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer the first data to the second node over the first one-way link, to receive the second data from the second node over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link.

7. A bilateral data transfer system, comprising:

a first one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second one-way link for unidirectional transfer of data from an input end thereof to an output end thereof;

a second node coupled to the output end of the first one-way link and to the input end of the second one-way link, the second node configured to receive first data over the first one-way link, to transfer second data over the second one-way link, and to prevent cross-talk within the second node between the first data received over the first one-way link and the second data to be transferred over the second one-way link;

wherein the first data comprises a request for data from a remote terminal client coupled to the first node and the second data comprises requested data from a remote terminal server coupled to the second node.

10. The bilateral data transfer system of claim 7, further comprising:

a first node coupled to the input end of the first one-way link and to the output end of the second one-way link, the first node configured to transfer the first data to the second node over the first one-way link, to receive the second data from the second node over the second one-way link, and to prevent cross-talk within the first node between the first data to be transferred over the first one-way link and the second data received over the second one-way link.