Authenticated sensor interface device

• US 9,961,108 B2
• Filed: 08/29/2016
• Issued: 05/01/2018
• Est. Priority Date: 11/03/2011
• Status: Active Grant

• Current Assignee: Battelle Savannah River Alliance LLC
• Original Assignee: Savannah River Nuclear Solutions LLS
• Inventors: Coleman, Jody Rustyn, Poland, Richard W.
• Primary Examiner(s): CHIANG, JASON
• Application Number:
  US15/249,762
• Publication Number:
  US 20160366179A1
• Time in Patent Office: 610 Days
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: H04B 10/00 Transmission systems employing electromagnetic waves other than radio-waves, e.g. infrared, visible or ultraviolet light, or employing corpuscular radiation, e.g. quantum communication
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18

Abstract

A system and method for the secure storage and transmission of data is provided. A data aggregate device can be configured to receive secure data from a data source, such as a sensor, and encrypt the secure data using a suitable encryption technique, such as a shared private key technique, a public key encryption technique, a Diffie-Hellman key exchange technique, or other suitable encryption technique. The encrypted secure data can be provided from the data aggregate device to different remote devices over a plurality of segregated or isolated data paths. Each of the isolated data paths can include an optoisolator that is configured to provide one-way transmission of the encrypted secure data from the data aggregate device over the isolated data path. External data can be received through a secure data filter which, by validating the external data, allows for key exchange and other various adjustments from an external source.

Claims

1. A secure data filter for receiving external data from a remote data source, the secure data filter comprising:

a receiver comprising one or more optical sensors configured to receive an optical signal encoding the external data, the receiver further comprising one or more light-emitting diodes configured to transmit one or more optical signals to the remote data source, the one or more optical signals indicating the receiver is prepared to receive the optical signal encoding the external data ;

a sensor circuit coupled to each of the one or more sensors of the receiver, each sensor circuit configured to change state over a time period in response to an optical signal received at its associated optical sensor;

a movable shutter capable of preventing optical access to the one or more optical sensors; and

a controller configured to actuate the movable shutter to provide optical access to the one or more optical sensors, the controller configured to control optical access provided by the movable shutter based at least in part on the time period for each sensor circuit to change state by;

actuating the movable shutter to provide optical access to the one or more optical sensors during the time period for each sensor circuit to change state; and

after expiration of the time period but prior to expiration of twice the time period, actuating the movable shutter to prevent optical access to the one or more optical sensors.

2. The secure data filter of claim 1, wherein the receiver comprises eight optical sensors, each optical sensor configured to receive a single bit of external data via an optical signal.

3. The secure data filter of claim 1, wherein the receiver comprises an additional optical sensor configured to optically receive a checksum for the external data.

4. The secure data filter of claim 1, wherein the controller is configured to periodically actuate the movable shutter to provide optical access to the one or more optical sensors based at least in part on a timing schedule.

5. The secure data filter of claim 1, wherein the sensor circuit comprises at least one of a resistor-capacitor circuit (RC circuit) or a Schmitt trigger.

6. The secure data filter of claim 1, wherein the receiver is positioned within an enclosure of the secure data filter;

wherein the sensor circuit is positioned within the enclosure; and

wherein the movable shutter is positioned within the enclosure.