Secure segregation of data of two or more domains or trust realms transmitted through a common data channel

• US 7,836,180 B2
• Filed: 02/20/2007
• Issued: 11/16/2010
• Est. Priority Date: 11/18/1999
• Status: Expired due to Fees

• Current Assignee: L-3 Communications Corporation (L3Harris Technologies, Inc.)
• Original Assignee: L-3 Communications Corporation (L3Harris Technologies, Inc.)
• Inventors: Whitaker, David James, Anspach, Jonathan Paul
• Primary Examiner(s): Chang; Jungwon
• Application Number:
  US11/677,042
• Publication Number:
  US 20070150945A1
• Time in Patent Office: 1,365 Days
• Field of Search: 709/229, 709/223, 709/200, 709/225, 709/249, 370/238.1, 370/254, 370/392, 726/14, 726/15
• US Class Current: 709/225
• CPC Class Codes: H04L 41/083 for increasing network speed
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A system for transporting data comprising a first domain comprising a first plurality of filters in a first communication channel, the first communications channel including a common portion, the first plurality of filters employing a first plurality of filtering criteria; a second domain comprising a second plurality of filters in a second communications channel, the second communications channel including the common portion, the second plurality of filters employing a second plurality of filtering criteria; a plurality of managers each coupled to one of the first plurality of filters and the second plurality of filters, each of the plurality of managers comprising means for configuring the one of the first plurality of filters and the second plurality of filters; and at least one control terminal coupled to the plurality of managers for controlling said plurality of managers.

Claims

1. A system for transporting data comprising:

a first domain comprising a first plurality of filters in a first communications channel, the first communications channel including a common portion, a first terminal coupled at one end of the first communications channel, and a second terminal coupled at another end of the first communications channel, the first plurality of filters employing a first plurality of filtering criteria;

a second domain comprising a second plurality of filters in a second communications channel, the second communications channel including the common portion of the first communications channel, a third terminal coupled at one end of the second communications channel, and a fourth terminal coupled at another end of the second communications channel, the second plurality of filters employing a second plurality of filtering criteria.

2. The system of claim 1 wherein at least one filter in said first plurality of filters is in said second plurality of filters also.

3. The system of claim 2 wherein said first plurality of filters includes a filter based in an IP address.

4. The system of claim 2 wherein said first plurality of filters includes a filter based on a MAC address.

5. The system of claim 2 wherein said first plurality of filters includes a router.

6. The system of claim 5 wherein said second plurality of filters includes a router.

7. The system of claim 2 wherein said first plurality of filters includes a switch.

8. The system of claim 7 wherein said switch is an ATM switch, and where said ATM switch is said at least on filter.

9. A system for transporting data comprising:

a first domain comprising a first plurality of filters in a first communications channel, the first communications channel including a common portion, the first plurality of filters employing a first plurality of filtering criteria;

a second domain comprising a second plurality of filters in a second communications channel, the second communications channel including the common portion of the first communications channel, the second plurality of filters employing a second plurality of filtering criteria;

a plurality of managers each coupled to one of the first plurality of filters and the second plurality of filters, each of the plurality managers comprising means for configuring the one of the first plurality of filters and the second plurality of filters;

at least one control terminal coupled to the plurality of managers for controlling said plurality of managers.

10. The system in claim 9 wherein said at least one control terminal includes means for storing a configuration file for each of said first plurality of filters and each of said second plurality of filters.

11. The system of claim 9 wherein each of said plurality of managers includes respective management software.

12. The system of claim 11 wherein said control terminal does not include management software, but rather includes communications software in communication with said management software.

13. The system of claim 12 wherein said control terminal includes x-protocol software.