OptiArmor Secure Separation Device

• US 20170063789A1
• Filed: 08/03/2015
• Published: 03/02/2017
• Est. Priority Date: 08/01/2014
• Status: Abandoned Application

• Current Assignee: SRC, Inc.
• Original Assignee: SRC, Inc.
• Inventors: Marcinkowski, James M., Casale, Anthony G., Seakan, Michael J., Webb, Mark W., Marceau, Robert A.
• Application Number:
  US14/816,167
• Publication Number:
  US 20170063789A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for secured separation within a computer network. The method includes the step of: (i) providing a secure separation module between a low security computer network and a high security computer network; (ii) intercepting, by the secure separation module, any data directed from the low security computer network to the high security computer network; (iii) routing, by the secure separation module, the data to a first destination; (iv) authenticating the communication; (v) filtering the data using one or more filters; and (vi) communicating the data, only if it passes the one or more filters, to a destination computer network.

Claims

1. A method for secured separation within a computer network, the method comprising the steps of:

providing a secure separation module between a low security computer network and a high security computer network;

intercepting, by the secure separation module, any data directed from the low security computer network to the high security computer network;

routing, by the secure separation module, the data to a first destination;

authenticating the communication;

filtering the data using one or more filters; and

communicating the data, only if it passes the one or more filters, to a destination computer network.

2. The method of claim 1, further comprising the step of intercepting, by the secure separation module, any data directed from the high security computer network to the low security computer network.

3. The method of claim 1, wherein said system is implemented within an electrical utility system.

4. The method of claim 1, wherein the security of the high security computer network is greater than the security of the low security computer network.

5. The method of claim 1, wherein the low security computer network is an external computer network, and further wherein the high security computer network is an internal computer network.

6. The method of claim 1, wherein the communication is a wireless communication.

7. The method of claim 1, further comprising the step of decrypting the communication.

8. A method for secured separation within a computer network, the method comprising the steps of:

providing a secure separation system comprising;

a first secure separation module between a low security computer network and a first high security computer network, and a second secure separation module between the low security computer network and a second high security computer network;

intercepting, by the secure separation module, any data directed from the low security computer network to the first or second high security computer network;

routing, by the first or second secure separation module, the data to a first destination;

authenticating the communication;

filtering the data using one or more filters; and

communicating the data, only if it passes the one or more filters, to a destination computer network.

9. The method of claim 8, further comprising the step of intercepting, by the secure separation module, any data directed from the high security computer network to the low security computer network.

10. The method of claim 8, wherein said system is implemented within an electrical utility system.

11. The method of claim 8, wherein the security of the first or second high security computer network is greater than the security of the low security computer network.

12. The method of claim 8, wherein the low security computer network is an external computer network, and further wherein the first and second high security computer networks are internal computer networks.

13. The method of claim 8, wherein the communication is a wireless communication.

14. A system for separation within a computer network, the system comprising:

a low security computer network;

a high security network;

a secure separation module positioned between the low security computer network and the high security computer network, wherein the secure separation module is configured to;

(i) intercept any data directed from the low security computer network to the high security computer network;

(ii) authenticate the communication;

(iii) filter the data using one or more filters; and

(iv) communicate the data, only if it passes the one or more filters, to a destination computer network.

15. The system of claim 14, wherein said system is implemented within an electrical utility system.

16. The system of claim 14, wherein the security of the high security computer network is greater than the security of the low security computer network.

17. The system of claim 14, wherein the low security computer network is an external computer network, and further wherein the high security computer network is an internal computer network.

18. The system of claim 14, further comprising a second secure separation module between the low security computer network and a second high security computer network.

19. The system of claim 14, wherein the communication is a wireless communication.

20. The system of claim 14, wherein the secure separation module is further configured to intercept any data directed from the high security computer network to the low security computer network.