Isolated KVM combiner for multi-network computer system having a video processor

• US 9,767,049 B2
• Filed: 06/06/2014
• Issued: 09/19/2017
• Est. Priority Date: 08/19/2008
• Status: Active Grant

• Current Assignee: High Sec Labs Ltd
• Original Assignee: High Sec Labs Ltd
• Inventors: Soffer, Aviv, Vaisband, Oleg
• Primary Examiner(s): Alrobaye, Idriss N
• Assistant Examiner(s): Franklin, Richard B
• Application Number:
  US14/297,759
• Publication Number:
  US 20140289433A1
• Time in Patent Office: 1,201 Days
• Field of Search: None
• CPC Class Codes: G06F 13/00 Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units interface circuits for specific input/output devices G06F3/00 ; multiprogram control therefor G06F9/46; multiprocessor systems G06F15/16
• CPC Class Codes: G06F 13/105 where the programme performs an input/output emulation function
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 3/023 Arrangements for converting discrete items of information into a coded form, e.g. arrangements for interpreting keyboard generated codes as alphanumeric codes, operand codes or instruction codes
• CPC Class Codes: G09G 2370/24 Keyboard-Video-Mouse [KVM] switch

Abstract

The present invention presents apparatuses and systems for operating multiple computers from a single keyboard and a single mouse and view composite videos generated from video output of the multiple computers on a single display, while preventing any possible information leakage between the computers. Keyboard and mouse commands detected by a host controller are used to control a video processor and a peripheral switch. The peripheral switch directs keyboard and mouse signals to one selected host and at the same time, the video processor creates an active display window showing video information from the selected host. Physical unidirectional isolators in the video, keyboard and mouse channels prevent any potential data leakages between hosts.

Claims

1. An Isolated KVM combiner for multi-network computer system comprising:

a keyboard input configured to connect to a keyboard;

a pointing device input configured to connect to a pointing device;

a host controller having an output port, a first input port and a second input port, the first and second input ports connected, respectively, to the keyboard input and the pointing device input to receive user input signals from at least one of said keyboard and said pointing device and generate unidirectional output commands based on said signals from at least one of said keyboard and said pointing device;

at least one first peripheral interface and at least one second peripheral interface connected to at least one first host computer and at least one second host computer, respectively;

a peripheral switch having an input connected to the output port of said host controller and at least two output ports, to selectively direct signals from said host controller only to a selected one of said at least one first peripheral interface and said at least one second peripheral interface at a time;

at least one first physical unidirectional enforcing circuitry and at least one second physical unidirectional enforcing circuitry, each having an input port connected to the output ports of the said peripheral switch to only receive signals from said peripheral switch, and output ports connected to said at least one first peripheral interface and said at least one second peripheral interface, respectively, enforcing data flow only from said peripheral switch to the peripheral interfaces by allowing the data to flow only in one direction;

at least one first video input interface and at least one second video input interface connected to video outputs of said at least one first host computer and said at least one second host computer, respectively;

at least one video output port connected to a user display device;

a digital video processor having an input connected to an output of said host controller;

at least one first video physical unidirectional isolator and at least one second video physical unidirectional isolator, each connected to a respective input of said digital video processor and to one of said at least one first video input interface and said at least one second video input interface, respectively, enforcing data flow only from said at least one first video input interface and said at least one second video input interface, respectively, to said video processor by allowing the data to flow only in one direction,

wherein said digital video processor is configured to combine video signals received from said at least one first video input interface and said at least one second video input interface through said at least one first and second video physical unidirectional isolator, respectively, to obtain a composite video signal and outputting said composite video signal to said at least one video output port, and

wherein said video processor receives said unidirectional output commands generated by said host controller in response to said user input signals received from at least one of said keyboard input and said pointing device input, whereby absolute data isolation is maintained between the first and second host computers.

2. The Isolated KVM combiner of claim 1, wherein the at least one first host computer and the at least one second host computer are connected to at least two separate networks, respectively.

3. The Isolated KVM combiner of claim 1, wherein said peripheral switch is responsive to commands received from at least one of said keyboard input and said pointing device input.

4. The Isolated KVM combiner of claim 1, wherein said composite video signal to be displayed on the user display device comprises at least one first window and at least one second window, wherein video content of said at least one first window is derived from video signal from said at least one first video input interfaces, and video content of said at least one second window is derived from video signal from said at least one second video input interfaces.

5. The Isolated KVM combiner of claim 4 wherein only one of said at least one first window and said at least one second window is an active window, and the video content of said active window is derived from video signal from video input interface of the host computer coupled to the peripheral interface selected by said peripheral switch.

6. The Isolated KVM combiner of claim 1, further comprising a video frame buffer connected to said video processor.

7. The Isolated KVM combiner of claim 1, and having at least one video input interface connected to an external video source other than a computer.

8. The Isolated KVM combiner of claim 1, further comprising at least one first non-volatile memory and at least one second non-volatile memory connected to said at least one first video input interface and at least one second video input interface, respectively, wherein said at least one first non-volatile memory and said at least one second non-volatile memory contain display parameters readable by said at least one first host computer and said at least one second host computer, respectively.

9. The Isolated KVM combiner of claim 8, wherein said display parameters are readable to the respective host to emulate standard display DDC (Display Data Channel).

10. The Isolated KVM combiner of claim 8, wherein upon connection of the isolated KVM combiner to one or more of the first or second host computers, the host computer video circuitry interrogates said at least one first non-volatile memory and said at least one second non-volatile memory to receive Plug &

Play parameters.

11. The Isolated KVM combiner of claim 10, wherein said Plug 86 Play parameters are selected from the group consisting:

display name, supported display resolution, and supported display refresh rate.

12. The Isolated KVM combiner of claim 8, wherein said at least one first non-volatile memory and said at least one second non-volatile memory are user programmable.

13. The isolated KVM device of claim 1, further comprising:

at least one first audio interface and at least one second audio interface, respectively connected to one of said at least one first host computer and at least one second host computer; and

an audio multiplexer, wherein said audio multiplexer is connected to said at least one first audio interface and said at least one second audio interface and to at least one audio peripheral selected from a group consisting of;

microphone, headset, and a speaker.

14. The isolated KVM device of claim 1, further comprising a cascading port to enable the isolated KVM device to be cascaded to another isolated KVM device.

15. The Isolated KVM combiner of claim 1, wherein said video processor comprises an FPGA (Field Programmable Gate Array).

16. The Isolated KVM combiner of claim 1, wherein said video physical unidirectional isolators comprise a 1-Way DVI Interface.

17. The Isolated KVM combiner of claim 1, wherein said host controller transmits said unidirectional output command to said video processor through unidirectional flow device.

18. The Isolated KVM combiner of claim 1, wherein said unidirectional output commands to said video processor are generated by said host controller in response to user input from said pointing device.

19. The Isolated KVM combiner of claim 1, wherein said unidirectional output commands to said video processor are generated by said host controller in response to special keyboard keys combination.