System for providing a secure video display

• US 8,887,276 B2
• Filed: 11/21/2012
• Issued: 11/11/2014
• Est. Priority Date: 11/21/2012
• Status: Active Grant

• Current Assignee: OWL Cyber Defense Solutions LLC
• Original Assignee: Owl Computing Technologies, Inc.
• Inventors: Mraz, Ronald, Menoher, Jeffrey, Holmes, Andrew
• Primary Examiner(s): Gee, Jason K.
• Assistant Examiner(s): Ullah, Sharif E
• Application Number:
  US13/683,111
• Publication Number:
  US 20140139732A1
• Time in Patent Office: 720 Days
• Field of Search: 726/22, 713/150, 713/181, 380/255, 380/276
• US Class Current: 726/22
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 65/75 Media network packet handling
• CPC Class Codes: H04N 21/4122 additional display device, e.g. video projector digital output for controlling a plurality of local displays G06F3/1423
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43635 HDMI
• CPC Class Codes: H04N 7/01 Conversion of standards , e.g. involving analogue television standards or digital television standards processed at pixel level

Abstract

A system for providing a secure video display using a one-way data link. An input interface for receives a video stream signal. The one-way data link has an input node coupled to receive the input video stream signal and an output node. A processing system is coupled to the output node of the one-way data link and is configured to run a predetermined operating system. In an embodiment, a video display software program operates within the predetermined operating system to process the video stream signal received from the output node of the one-way data link and to provide an output signal for viewing on a display coupled to the processing system. Optionally, the video display program operates within a virtual operating system running within the predetermined operating system. In other embodiments, the video display program may process a video stream signal containing a plurality of different video programs.

Claims

1. A system for providing secure video display, comprising:

an input interface for receiving a digital video data stream signal;

a one-way data link having an input node coupled to the input interface and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a processing system coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

a video display software program for processing the digital video data stream signal received from the output node of the one-way data link and providing an output signal for viewing on a display coupled to the processing system;

a software filter coupled between the input interface and the one-way data link and configured to perform data filtering of the received digital video data stream signals; and

wherein the processing system is coupled to the input interface only via the one-way data link and the software filter.

2. The system of claim 1, further comprising a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system.

3. The system of claim 1, wherein the video display software program converts the received digital video data stream signal from a first format based upon a first video codec to a second format based upon a second video codec.

4. The system of claim 1, wherein the video display software program converts the received digital video data stream signal from a first format into a format suitable for transmission on a dedicated video signal interface.

5. The system of claim 4, wherein the dedicated video signal interface is HDMI.

6. A system for providing secure video display, comprising:

an input interface and associated input server for receiving a plurality of digital video stream data signals;

a one-way data link having an input node coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

an isolated video display network coupled to the dedicated processing system;

one or more display terminals coupled to the isolated video display network;

a video display software program for processing signals received from the output node of the one-way data link and for selectively providing one or more output signals based upon the processed signals via the isolated video display network to one or more associated display terminals for viewing thereon;

a software filter coupled between the input interface and the one-way data link and configured to perform data filtering of the received digital video data stream signals; and

wherein the dedicated processing system is coupled to the input interface only via the one-way data link and the software filter.

7. The system of claim 6, further comprising a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system.

8. The system of claim 6, wherein the video display software program converts the one or more output signals from a first format based upon a first video codec to a second format based upon a second video codec.

9. The system of claim 6, wherein the video display software program converts the one or more output signals from a first format into a format suitable for transmission on a dedicated video signal interface.

10. The system of claim 9, wherein the dedicated video signal interface is HDMI.

11. The system of claim 6, further comprising a software firewall coupled between the input interface and the one-way data link.

12. The system of claim 11, wherein the software firewall is configured to perform IP screening of the received digital video data stream signals.

13. A system for providing secure video display, comprising:

an input interface and associated input sever for receiving a plurality of digital video data stream signals;

a one-way data link having an input node coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

a display terminal coupled to the dedicated processing system, the display terminal configured to allow a user to select one of a plurality of video programs for viewing, the plurality of video programs corresponding to the plurality of digital video data stream signals received at the input interface;

a video display software program for processing signals received from the output node of the one-way data link and for selectively providing an output signal based upon the received signals and the selected video program, the output signal provided to the display terminal for viewing thereon;

a software filter coupled between the input interface and the one-way data link and configured to perform data filtering of the received digital video data stream signals; and

wherein the dedicated processing system is coupled to the input interface only via the one-way data link and the software filter.

14. The system of claim 13, further comprising a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system.

15. The system of claim 13, wherein the video display software program converts the output signal from a first format based upon a first video codec to a second format based upon a second video codec.

16. The system of claim 13, wherein the video display software program converts the output signal from a first format into a format suitable for transmission on a dedicated video signal interface.

17. The system of claim 16, wherein the dedicated video signal interface is HDMI.

18. The system of claim 13, further comprising a software firewall coupled between the input interface and the one-way data link.

19. The system of claim 18, wherein the software firewall is configured to perform IP screening of the received digital video data stream signals.

20. A system for providing secure video display, comprising:

an input interface and associated input server for receiving a plurality of digital video data stream signals and for generating a multiplexed output signal comprising the received plurality of digital video data stream signals;

a one-way data link having an input node coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

an interface software module coupled to the output node of the one-way data link, the interface software module configured to demultiplex the multiplexed output signal and provide a separate demultiplexed signal for each of the plurality of digital video data stream signals received at the input interface;

a processing system coupled to the interface software module, the processing system configured to run a predetermined operating system;

a video display software program for processing one of the separate demultiplexed signals received from the interface software module and for providing an output signal for viewing on a display coupled to the processing system;

a software filter coupled between the input interface and the one-way data link and configured to perform data filtering of the received digital video data stream signals; and

wherein the processing system is coupled to the input interface only via the one-way data link and the software filter.

21. The system of claim 20, further comprising a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system.

22. The system of claim 20, further comprising a plurality of virtual operating systems, one for each of the received plurality of digital video data stream signals, each of the plurality of virtual operating systems configured to run within the predetermined operating system, and each including an associated video display software program operating therein to process an associated of the received plurality of digital video data stream signals.

23. The system of claim 20, wherein the video display software program converts the one of the separate demultiplexed signals from a first format based upon a first video codec to a second format based upon a second video codec.

24. The system of claim 20, wherein the video display software program converts the one of the separate demultiplexed signals from a first format into a format suitable for transmission on a dedicated video signal interface.

25. The system of claim 24, wherein the dedicated video signal interface is HDMI.