Data transfer system

• US 9,088,539 B2
• Filed: 01/21/2014
• Issued: 07/21/2015
• Est. Priority Date: 07/19/2007
• Status: Active Grant

• Current Assignee: OWL Cyber Defense Solutions LLC
• Original Assignee: Owl Computing Technologies, Inc.
• Inventors: Mraz, Ronald
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US14/159,527
• Publication Number:
  US 20140136657A1
• Time in Patent Office: 546 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A data transfer system comprising a first node, a second node, and a first one-way link for unidirectional transfer of data from the first node to the second node. The first node is configured to receive data and to allow transfer of the data to the second node via the first one-way link only if there is a match between a characteristic of the received data and an entry in a first predefined configuration file. The system may also include a second one-way link for unidirectional transfer of second data from the second node to the first node. The second node is configured to receive the second data and to allow transfer of the second data to the first node via the second one-way link only if there is a match between a characteristic of the second data and an entry in a predefined configuration file.

Claims

1. A data transfer system, comprising:

a first node configured to receive packetized data from a first source/destination and to compare an identifying characteristic of the received packetized data with a list of characteristics in a predefined configuration file, and, only if there is a match between the received packetized data characteristic and an entry in the predefined configuration file, to allow transfer of the packetized data on an output;

a first one-way data link having an input coupled to the output of the first node and an output, and configured to enforce unidirectional data flow only from the input to the output;

a second node having an input coupled to the output of the first one-way data link and configured to receive packetized data via the input and to forward the received packetized data to a second source/destination;

a second one-way data link having an input coupled to an output of the second node and an output, and configured to enforce unidirectional data flow only from the input to the output;

wherein the second node is further configured to receive second packetized data from the second source/destination and to compare an identifying characteristic of the received second packetized data with a second list of characteristics in a second predefined configuration file, and, only if there is a match between the received second packetized data characteristic and an entry in the second predefined configuration file, to allow transfer of the second packetized data on the output; and

wherein the first node also has an input coupled to the output of the second one-way data link and is further configured to receive second packetized data via the input and to forward the received packetized data to a second source/destination via an output.

2. The data transfer system of claim 1, wherein the identifying characteristic of the received second packetized data is the type of data.

3. The data transfer system of claim 2, wherein the type of data is keyboard or mouse data.

4. The data transfer system of claim 2, wherein the type of data is graphical display data.