Time-locked network and nodes for exchanging secure data packets

• US 9,813,384 B2
• Filed: 10/31/2012
• Issued: 11/07/2017
• Est. Priority Date: 10/31/2012
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Howe, Wayne R., Hunt, Jeffrey H., Li, Angela Wai-an
• Primary Examiner(s): KIM, EDWARD J
• Application Number:
  US13/664,966
• Publication Number:
  US 20140122736A1
• Time in Patent Office: 1,833 Days
• Field of Search: 709230, 709231, 709232, 709233, 709234, 709235, 709246
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and apparatus for transmitting secure data packets through a node network. Unsecure data packets are received at a set of unsecure inputs and secure data packets are received at a number of secure inputs in a node in the node network. The secure data packets are authorized to be sent to a number of secure destination devices. The unsecure data packets are not authorized to be sent to the number of secure destination devices. The secure data packets and the unsecure data packets are integrated to form a number of output data streams based on a predetermined schedule. The number of output data streams is sent to a number of next nodes in the node network.

Claims

1. A method for transmitting secure data packets through a node network, the method comprising:

establishing a predetermined schedule that identifies specific times at which each node in the node network along a predetermined pathway through the node network transmits secure data packets along the predetermined node pathway through the node network and specific times at which secure data packets transmitted along the predetermined node pathway are received at each node in the node network, wherein propagation delays between nodes along the predetermined node pathway are taken into account when determining the times at which each node along the node pathways is scheduled to receive the secure data packets, and wherein the each node transmits the secure data packets based on the predetermined schedule;

receiving unsecure data packets at a set of unsecure inputs and the secure data packets at a number of secure inputs in a node in the node network,

wherein the secure data packets are authorized to be sent to a number of secure destination devices, and

wherein the unsecure data packets are not authorized to be sent to the number of secure destination devices;

integrating the secure data packets and the unsecure data packets to form an output data stream based on the predetermined schedule;

sending the output data stream comprising the secure data packets and the unsecure data packets to a next node in along the predetermined node pathway until the secure data packets reach the egress node.

2. The method of claim 1, wherein the step of integrating the secure data packets and the unsecure data packets to form the output data stream based on the predetermined schedule comprises:

forming the output data stream using the unsecure data packets; and

inserting each of the secure data packets into the output data stream based on the predetermined schedule.

3. The method of claim 2, wherein the step of inserting the each of the secure data packets into the output data stream based on the predetermined schedule comprises:

inserting the each of the secure data packets into the output data stream based on a corresponding time at which the each of the secure data packets is to be sent to the next node.

4. A method for transmitting secure data packets to a number of secure destination devices, the method comprising:

establishing a predetermined schedule that identifies specific times at which each node in a node network transmits secure data packets and specific times at which secure data packets transmitted along a predetermined node pathway are received at each node in the node network, wherein propagation delays between nodes along the predetermined node pathway are taken into account when determining the times at which each node along the predetermined node pathway is scheduled to receive the secure data packets;

establishing the predetermined node pathway upon which each node along the node pathway transmits secure data packets based on the predetermined schedule;

receiving an input data stream at a node in a node network, the input data stream comprising the secure data packets and unsecure data packets;

using the specific times at which secure data packets are received as identified in the predetermined schedule to determine whether a data packet in the input data stream is a secure data packet;

separating the secure data packets from the unsecure data packets received in the input data stream based on the predetermined schedule, wherein the secure data packets are authorized to be sent to the number of secure destination devices, and wherein the unsecure data packets are not authorized to be sent to the number of secure destination devices, and wherein the predetermined node pathway identifies an ingress node at which the secure data packets may enter the node network from the number of secure inputs and an egress node at which the secure data packets may exit the node network to the number of secure destination devices; and

sending the secure data packets to the number of secure destination devices as a number of secure output data streams from a number of secure outputs in the node via the predetermined node pathway until the secure data packets reach the egress node.

5. The method of claim 4, wherein the step of separating the secure data packets from the unsecure data packets received in the input data stream based on the predetermined schedule comprises:

identifying data packets in the input data stream received at specified times indicated in the predetermined schedule as the secure data packets.

6. The method of claim 4, wherein the step of sending the secure data packets to the number of secure destination devices as the number of secure output data streams comprises:

sending the secure data packets to the number of secure destination devices as the number of secure output data streams from the number of secure outputs in the node, wherein the number of secure destination devices includes at least one of a secure server, a secure end-node, a secure end-device, and a secure Web server.

7. The method of claim 4 further comprising:

sending the unsecure data packets to a set of unsecure destination devices as a set of unsecure output data streams from a set of unsecure outputs in the node, wherein the unsecure data packets include at least one of unsecure authorized data packets and unsecure unauthorized data packets.

8. A node in a node network, the node comprising:

a number of secure inputs comprising hardware equipment configured to receive secure data packets, wherein the secure data packets are authorized to be sent to a number of secure destination devices;

a set of unsecure inputs comprising hardware equipment configured to receive unsecure data packets, wherein the unsecure data packets are not authorized to be sent to the number of secure destination devices;

a timing controller comprising hardware equipment configured to control integration of the secure data packets and the unsecure data packets into an output data stream based on a predetermined schedule that identifies specific times at which each node in the node network transmits the secure data packets along a predetermined node pathway of select nodes through the node network and specific times at which secure data packets transmitted along the predetermined node pathway are received at each node in the node network, wherein propagation delays between nodes along the predetermined node pathway are taken into account when determining the times at which each node along the node pathways is scheduled to receive the secure data packets; and

a number of outputs comprising hardware equipment configured to send the output data stream to a next node select nodes in the predetermined node pathway until the secure data packets reach an egress node.

9. The node of claim 8 further comprising:

a first networking device configured to receive the unsecure data packets from the set of unsecure inputs and send the unsecure data packets to the number of outputs; and

a second networking device configured to receive the secure data packets from the number of secure inputs and send the secure data packets to the number of outputs.

10. The node of claim 9, wherein the timing controller is configured to control at least one of the number of secure inputs, the set of unsecure inputs, the number of outputs, the first networking device, and the second networking device using the predetermined schedule.

11. The node of claim 9, wherein the first networking device comprises:

a set of buffers.

12. The node of claim 9, wherein the second networking device comprises:

a set of buffers.

13. The node of claim 8, wherein the set of unsecure inputs is not designated to receive any secure data packets.

14. The node of claim 8, wherein the set of unsecure inputs is configured to receive the unsecure data packets from a set of unsecure source devices and wherein the number of secure inputs is configured to receive the secure data packets from a number of secure source devices.

15. The node of claim 8, wherein the unsecure data packets include at least one of unsecure authorized data packets and unsecure unauthorized data packets.

16. A node in a node network, the node comprising:

an input comprising hardware equipment configured to receive an input data stream from a previous node in a predetermined node pathway in the node network, wherein the input data stream comprises secure data packets and unsecure data packets, wherein the secure data packets are authorized to be sent to a secure destination device and the unsecure data packets are not authorized to be sent to the secure destination device;

a timing controller comprising hardware equipment configured to separate the secure data packets from the unsecure data packets received in the input data stream based on a predetermined schedule, wherein the predetermined schedule identifies times at which the previous node transmits the secure data packets along the predetermined node pathway and specific times at which secure data packets transmitted along the predetermined node pathway are received at each node in the node network, wherein propagation delays between nodes along the predetermined node pathway are taken into account when determining the times at which each node along the node pathways is scheduled to receive the secure data packets, and wherein the timing controller is configured to use the specific times at which secure data packets are received as identified in the predetermined schedule to determine whether a data packet in the input data stream is a secure data packet; and

a secure output comprising hardware equipment configured to send the secure data packets to a next node in the predetermined node pathway based on the predetermined schedule to the secure destination device as a secure output data stream until the secure data packets reach an egress node.

17. The node of claim 16 further comprising:

an unsecure output comprising hardware equipment configured to send the unsecure data packets to an unsecure destination device as an unsecure output data stream.

18. The node of claim 17 further comprising:

a first networking device configured to receive the unsecure data packets from the input and send the unsecure data packets to the unsecure output; and

a second networking device configured to receive the secure data packets from the input and send the secure data packets to the secure output.

19. The node of claim 18, wherein the timing controller is configured to control at least one of the input, the secure output, the unsecure output, the first networking device, or the second networking device using the predetermined schedule.

20. The node of claim 16, wherein the unsecure data packets include at least one of unsecure authorized data packets or unsecure unauthorized data packets.