System for providing a secure video display

• US 9,894,083 B2
• Filed: 10/09/2014
• Issued: 02/13/2018
• Est. Priority Date: 11/21/2012
• Status: Active Grant

• Current Assignee: OWL Cyber Defense Solutions LLC
• Original Assignee: OWL Cyber Defense Solutions LLC
• Inventors: Mraz, Ronald, Menoher, Jeffrey, Holmes, Andrew
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Ullah, Sharif E
• Application Number:
  US14/510,395
• Publication Number:
  US 20150026792A1
• Time in Patent Office: 1,223 Days
• Field of Search: 726 22, 726 2, 726 21, 726 36, 713150, 713163, 713181, 380255, 380264, 380276
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 65/75 Media network packet handling
• CPC Class Codes: H04N 21/4122 additional display device, e.g. video projector digital output for controlling a plurality of local displays G06F3/1423
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43635 HDMI
• CPC Class Codes: H04N 7/01 Conversion of standards , e.g. involving analogue television standards or digital television standards processed at pixel level

Abstract

A system for providing a secure video display using a one-way data link. An input interface for receives a video stream signal. The one-way data link has an input node coupled to receive the input video stream signal and an output node. A processing system is coupled to the output node of the one-way data link and is configured to run a predetermined operating system. In an embodiment, a video display software program operates within the predetermined operating system to process the video stream signal received from the output node of the one-way data link and to provide an output signal for viewing on a display coupled to the processing system. Optionally, the video display program operates within a virtual operating system running within the predetermined operating system. In other embodiments, the video display program may process a video stream signal containing a plurality of different video programs.

Claims

1. A system for providing secure video display, comprising:

an input interface for coupling to a network for receiving a digital video data stream signal via the network;

a one-way data link having an input node directly coupled to the input interface and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

a video display software program running on the processing system for processing the digital video data stream signal received from the output node of the one-way data link and providing an output signal via an output of the processing system for viewing on a display coupled to the output of the processing system; and

wherein the processing system is coupled to the input interface only via the one-way data link;

wherein the processing system is coupled to the display only via the output of the processing system; and

wherein the processing system is not coupled to any other systems for data communications.

3. The system of claim 1, wherein the video display software program converts the received digital video data stream signal from a first format based upon a first video codec to a second format based upon a second video codec.

4. The system of claim 1, wherein the video display software program converts the received digital video data stream signal from a first format into a format suitable for transmission on a dedicated video signal interface.

5. The system of claim 4, wherein the dedicated video signal interface is HDMI.

2. A system for providing secure video display, comprising:

an input interface for coupling to a network for receiving a digital video data stream signal via the network;

a one-way data link having an input node directly coupled to the input interface and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

a video display software program running on the processing system for processing the digital video data stream signal received from the output node of the one-way data link and providing an output signal via an output of the processing system for viewing on a display coupled to the output of the processing system; and

a virtual operating system configured to run within the predetermined operating system, wherein the video display software program operates within the virtual operating system;

wherein the processing system is coupled to the input interface only via the one-way data link.

6. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video stream data signals via the network;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

an isolated video display network directly coupled to the dedicated processing system;

one or more display terminals directly coupled to the isolated video display network;

a video display software program running on the processing system for processing signals received from the output node of the one-way data link and for selectively providing one or more output signals based upon the processed signals via the isolated video display network to one or more associated display terminals for viewing thereon; and

wherein the processing system is coupled to the input interface only via the one-way data link; and

wherein only the processing system and the one or more display terminals are coupled to the isolated video display network; and

wherein the processing system is not coupled to any other systems for data communications.

8. The system of claim 6, wherein the video display software program converts the one or more output signals from a first format based upon a first video codec to a second format based upon a second video codec.

9. The system of claim 6, wherein the video display software program converts the one or more output signals from a first format into a format suitable for transmission on a dedicated video signal interface.

10. The system of claim 9, wherein the dedicated video signal interface is HDMI.

11. The system of claim 6, further comprising a software firewall coupled between the input interface and the one-way data link.

12. The system of claim 11, wherein the software firewall is configured to perform IP screening of the received digital video data stream signals.

7. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video stream data signals via the network;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system;

an isolated video display network directly coupled to the dedicated processing system;

one or more display terminals directly coupled to the isolated video display network;

a video display software program running on the processing system for processing signals received from the output node of the one-way data link and for selectively providing one or more output signals based upon the processed signals via the isolated video display network to one or more associated display terminals for viewing thereon;

a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system; and

wherein the processing system is coupled to the input interface only via the one-way data link.

13. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video data stream signals via the network;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a display terminal coupled to an interface of the dedicated processing system, the display terminal configured to allow a user to select one of a plurality of video programs for viewing, the plurality of video programs corresponding to the plurality of digital video data stream signals received at the input interface;

a video display software program running on the processing system for processing signals received from the output node of the one-way data link and for selectively providing an output signal on the interface of the dedicated processing system based upon the received signals and the selected video program, the output signal provided to the display terminal for viewing thereon; and

wherein the processing system is coupled to the input interface only via the one-way data link;

wherein the processing system is coupled to the display terminal only via the interface of the processing system; and

wherein the processing system is not coupled to any other systems for data communications.

15. The system of claim 13, wherein the video display software program converts the output signal from a first format based upon a first video codec to a second format based upon a second video codec.

16. The system of claim 13, wherein the video display software program converts the output signal from a first format into a format suitable for transmission on a dedicated video signal interface.

17. The system of claim 16, wherein the dedicated video signal interface is HDMI.

18. The system of claim 13, further comprising a software firewall coupled between the input interface and the one-way data link.

19. The system of claim 18, wherein the software firewall is configured to perform IP screening of the received digital video data stream signals.

14. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video data stream signals via the network;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a dedicated processing system directly coupled to the output node of the one-way data link, the processing system configured to run a predetermined operating system, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

a display terminal directly coupled to an output of the dedicated processing system, the display terminal configured to allow a user to select one of a plurality of video programs for viewing, the plurality of video programs corresponding to the plurality of digital video data stream signals received at the input interface;

a video display software program running on the processing system for processing signals received from the output node of the one-way data link and for selectively providing an output signal on the output of the dedicated processing system based upon the received signals and the selected video program, the output signal provided to the display terminal for viewing thereon;

a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system; and

wherein the processing system is coupled to the input interface only via the one-way data link.

20. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video data stream signals via the network and for generating a multiplexed output signal comprising the received plurality of digital video data stream signals;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

an interface software module operating on a server directly coupled to the output node of the one-way data link, the interface software module configured to demultiplex the multiplexed output signal and provide a separate demultiplexed signal for each of the plurality of digital video data stream signals received at the input interface;

a processing system directly coupled to the interface software module, the processing system having an output and configured to run a predetermined operating system;

a video display software program running on the processing system for processing one of the separate demultiplexed signals received from the interface software module and for providing an output signal for on the output of the processing system for viewing on a display directly coupled to the processing system; and

wherein the processing system is coupled to the input interface only via the one-way data link, wherein the processing system is coupled to the display only via the output of the processing system; and

wherein the processing system is not coupled to any other systems for data communications.

22. The system of claim 20, further comprising a plurality of virtual operating systems, one for each of the received plurality of digital video data stream signals, each of the plurality of virtual operating systems configured to run within the predetermined operating system, and each including an associated video display software program operating therein to process an associated of the received plurality of digital video data stream signals.

23. The system of claim 20, wherein the video display software program converts the one of the separate demultiplexed signals from a first format based upon a first video codec to a second format based upon a second video codec.

24. The system of claim 20, wherein the video display software program converts the one of the separate demultiplexed signals from a first format into a format suitable for transmission on a dedicated video signal interface.

25. The system of claim 24, wherein the dedicated video signal interface is HDMI.

21. A system for providing secure video display, comprising:

an input interface for coupling to a network and an associated input server for receiving a plurality of digital video data stream signals via the network and for generating a multiplexed output signal comprising the received plurality of digital video data stream signals;

a one-way data link having an input node directly coupled to an output of the input server and an output node, the one-way data link configured to transfer data only from the input node to the output node and to prevent any signal from passing from the output node to the input node;

an interface software module running on a server directly coupled to the output node of the one-way data link, the interface software module configured to demultiplex the multiplexed output signal and provide a separate demultiplexed signal for each of the plurality of digital video data stream signals received at the input interface;

a processing system coupled to the interface software module, the processing system configured to run a predetermined operating system;

a video display software program running on the processing system for processing one of the separate demultiplexed signals received from the interface software module and for providing an output signal for viewing on a display coupled to the processing system; and

a virtual operating system configured to run within the predetermined operating system, and wherein the video display software program operates within the virtual operating system; and

wherein the processing system is coupled to the input interface only via the one-way data link.