High assurance classification level disambiguation for displays

• US 8,875,226 B1
• Filed: 06/14/2012
• Issued: 10/28/2014
• Est. Priority Date: 06/14/2012
• Status: Active Grant

• Current Assignee: Rockwell Collins, Inc. (Raytheon Technologies Corporation d/b/a RTX)
• Original Assignee: Rockwell Collins, Inc. (Raytheon Technologies Corporation d/b/a RTX)
• Inventors: Marek, James A.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Zoubair, Noura
• Application Number:
  US13/523,256
• Time in Patent Office: 866 Days
• Field of Search: 726/1, 726/3, 726/12, 726/17, 726/21, 726/26, 726/27, 713/166, 709/217, 709/228, 715/803, 715/204
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/032 Protect output to user by software means
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance

Abstract

A method for disambiguating entities on a multi-level security display includes receiving a selection of a particular security level and rendering entities having a different security level in a visually distinct way. Visual distinction may include not drawing the entities on the multi-level security display.

Claims

1. An apparatus comprising:

a multi-level security display;

a processor connected to the multi-level security display;

an input device connected to the processor;

two or more data communication devices; and

computer executable program code configured to execute on the processor,

wherein;

the computer executable program code is configured to recognize that a first data communication device of the two or more data communication devices is configured to communicate data at a first security level and a second data communication device of the two or more data communication devices configured to communicate data at a second security level;

the multi-level security display is configured to display a first entity associated with the first data communication device having the first security level and a second entity associated with the second data communication device having the second security level;

the computer executable program code is configured to receive a security level selection from a user via the input device, the security level selection corresponding to the first security level; and

the computer executable program code is configured to render the first entity in a visually distinct way from the second entity.

2. The apparatus of claim 1, wherein the computer executable program code is further configured to remove the second entity from the multi-level security display and prohibit the second entity from being rendered on the multi-level security display.

3. The apparatus of claim 2, wherein the computer executable program code is further configured to designate the second entity as non-selectable.

4. The apparatus of claim 1, wherein the computer executable program code is further configured to dim the second entity relative to the first entity on the multi-level security display.

5. The apparatus of claim 1, further comprising a memory connected to the processor, wherein the memory is configured to store at least one data structure associating at least one entity with a security level.

6. The apparatus of claim 5, wherein the security level selection is received by:

receiving an entity selection from the input device;

referencing the at least one data structure to determine the security level of the selected entity; and

selecting the security level associated with the selected entity.

7. The apparatus of claim 1, wherein:

the multi-level security display is configured to display a third entity having a third security level inferior to the first security level and the second security level;

the first security level is inferior to the second security level; and

the computer executable program code is further configured to render the third entity in a visually distinct way from the second entity.

8. A processor in a display system configured to:

recognize that a first data communication device connected to the processor is configured to communicate data at a first security level and a second data communication device connected to the processor is configured to communicate data at a second security level;

render a first entity associated with the first data communication device having the first security level for display on a multi-level security display;

render a second entity associated with the second data communication device having the second security level for display on a multi-level security display;

receive a security level selection from an input device; and

draw the first entity in a visually distinct way as compared to the second entity.

9. The processor of claim 8, further configured to prohibit drawing the second entity on a multi-level security display when the security level selection corresponds to the first security level.

10. The processor of claim 9, further configured to designate the second entity as non-selectable.

11. The processor of claim 8, further configured to draw the second entity dimly relative to the first entity on a multi-level security display when the security level selection corresponds to the first security level.

12. The processor of claim 11, further configured to designate the second entity as non-selectable.

13. The processor of claim 8, further configured to:

render a third entity having a third security level inferior to the first security level and the second security level for display on a multi-level security display; and

draw the third entity in a visually distinct way as compared to the second entity,

wherein the first security level is inferior to the second security level.

14. The processor of claim 8, further configured to store at least one data structure associating data for rendering at least one entity with a security level.

15. A method for de-cluttering a multi-level security display comprising:

recognizing that a first data communication device connected to a processor is configured to communicate data at a first security level and a second data communication device connected to the processor is configured to communicate data at a second security level;

rendering a first entity associated with the first data communication device having the first security level for display on the multi-level security display;

rendering a second entity associated with the second data communication device having the second security level for display on the multi-level security display;

receiving a security level selection from an input device; and

drawing the first entity in a visually distinct way as compared to the second entity.

16. The method of claim 15, wherein drawing the first entity in a visually distinct way as compared to the second entity includes drawing the second entity invisibly when the security level selection corresponds to the first security level.

17. The method of claim 16, further comprising designating the second entity as non-selectable.

18. The method of claim 15, wherein drawing the first entity in a visually distinct way as compared to the second entity includes drawing the second entity dimly relative to the first entity when the security level selection corresponds to the first security level.