Tool for the centralized supervision and/or hypervision of a set of systems having different security levels

• US 9,270,688 B2
• Filed: 10/23/2009
• Issued: 02/23/2016
• Est. Priority Date: 10/24/2008
• Status: Active Grant

• Current Assignee: Thales SA
• Original Assignee: Thales SA
• Inventors: Linden, Jean-Christophe, Breton, Sbastien, Oger, Pierre
• Primary Examiner(s): Burgess, Glenton B
• Assistant Examiner(s): Moorad, Imran
• Application Number:
  US13/125,760
• Publication Number:
  US 20120023177A1
• Time in Patent Office: 2,314 Days
• Field of Search: 709/206
• US Class Current: 1/1
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A tool for the supervision and/or hypervision of a set of systems of different security levels, the systems transmitting messages, includes a display system, and further includes, for each supervised network, at least one gateway for converting the messages to image data, said gateways transmitting said image data via a one-way video link to the display system, at least one of the supervised networks being of a higher security level than the area in which the display system is placed. The invention applies notably to the centralized supervision of several information systems when said systems are subjected to different security constraints.

Claims

1. A supervision system for centralized supervision or hypervision of a plurality of systems having different security levels, said supervision system comprising:

a display system comprising one or more displays;

a plurality of systems configured to transmit messages, each of the messages comprising semantic content, and the plurality of systems being located in a different area than the display system; and

one or more gateways within at least one of the plurality of systems, wherein;

the one or more gateways are configured to convert each of the transmitted messages to a symbolic representation of its semantic content, the symbolic representation to be transmitted as image data, and the symbolic representation of the semantic content of each message being different from its corresponding message,

the one or more gateways are configured to transmit said image data via one or more one-way links to the display system to create a semantic break of the semantic content of the messages between the plurality of systems and the display system, and

at least one of the plurality of systems has a higher security level than the security level of an area in which the display system is located.

2. The supervision system as claimed in claim 1, wherein the one or more gateways are configured to assemble several messages transmitted by the at least one system to generate image data symbolizing coarser semantic content.

3. The supervision system as claimed in claim 1, wherein the one-way links are video links transferring the image data from the one or more gateways to the one or more displays of the display system.

4. The supervision system as claimed in claim 3, wherein at least one display of the one or more displays is associated with each of the plurality of systems, and one of the one or more one-way links connects each of the plurality of systems to the associated at least one display.

5. The supervision system as claimed in claim 1, wherein at least one of the one or more one-way links is a network link configured to transport the image data, and wherein the display system comprises a processing module connected to the one or more displays, the processing module configured to receive the image data, and the processing module configured to execute a software program enabling presentation of the image data from the plurality of systems on the same display of the display system.

6. The supervision system as claimed in claim 1, wherein the transmitted messages are SNMP/UDP messages, and the one or more gateways further comprise an adapter configured to convert semantic content of the SNMP/UDP messages to the image data.

7. The supervision system as claimed in claim 1, wherein the transmitted messages are state indicators.

10. The supervision system as claimed in claim 1, wherein the one or more gateways are configured to transmit only said image data via the one or more one-way links to the display system.

8. A method for centralized supervision or hypervision of a plurality of systems having different security levels using a display system, the plurality of systems being located in a different area than the display system, at least one of the plurality of systems comprising one or more gateways configured to transmit messages, each of the messages comprising semantic content, said one or more gateways being linked to the same display system, the method comprising, for at least one of the plurality of systems having a higher security level than the security level of an area in which the display system is located:

receiving, by the one or more gateways within the at least one of the plurality of systems, the transmitted messages;

converting, by the one or more gateways, each of the transmitted messages to a symbolic representation of its semantic content, the symbolic representation to be transmitted as image data, and the symbolic representation of the semantic content of each message being different from its corresponding message; and

transmitting, by the one or more gateways and via a one-way link, the image data to the display system to create a semantic break of the semantic content of the messages between the plurality of systems and the display system.

9. The method as claimed in claim 8, further comprising assembling, by the gateway, several transmitted messages to create a message symbolizing coarser semantic content.

11. The method as claimed in claim 8, wherein transmitting the image data to the display system comprises transmitting, by the one or more gateways and via the one-way link, only the image data to the display system.