System and method for providing voice communications over a multi-level secure network

• US 8,730,871 B2
• Filed: 01/13/2010
• Issued: 05/20/2014
• Est. Priority Date: 05/22/2009
• Status: Active Grant

• Current Assignee: Forcepoint Federal Holdings LLC (Forcepoint LLC)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Masiyowski, John F., Magon, Raymond A., Tierney, Michael O., Marchant, Robert L.
• Primary Examiner(s): MEW, KEVIN D
• Application Number:
  US12/686,814
• Publication Number:
  US 20100296444A1
• Time in Patent Office: 1,588 Days
• Field of Search: 370/328, 370335-336, 370/338, 370352-356, 370/389, 370/392, 370400-401, 370465-466, 370/474, 370493-494
• US Class Current: 370/328
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/1076 Screening of IP real time communications, e.g. spam over Internet telephony [SPIT]

Abstract

According to one embodiment, a communication network includes an analog voice bridge coupled to two secure network domains that each have a differing security level. The analog voice bridge includes two codecs that are coupled together through an analog voice line that transfers analog voice signals. The analog voice bridge is coupled to each secure network domain through a network switch that transfers data packet streams from their respective networks to the codecs while restricting data packets that are not associated with the data packet stream.

Claims

1. A communication method comprising:

transferring, using a first network switch, data packets associated with a first voice packet stream between a first secure network domain and a first codec while restricting other data packets not associated with the first voice packet stream, the first voice packet stream encapsulating an analog voice signal;

transferring, using an analog voice line, the analog voice signal between the first codec and a second codec; and

transferring, using a second network switch, data packets associated with a second voice packet stream between a second secure network domain and the second codec while restricting other data packets not associated with the second voice packet stream, the second voice packet stream encapsulating the analog voice signal, the first secure network domain classified according to a first security level that differs from a second security level of the second secure network domain.

2. The communication method of claim 1, further comprising:

restricting, using the first network switch, transfer of data packets not associated with the first voice packet stream between the first secure network domain and the first codec; and

restricting, using the second network switch, transfer of data packets not associated with the second voice packet stream between the second secure network domain and the second codec.

3. The communication method of claim 1, further comprising restricting, using the first or second network switch, access of one or more terminals coupled to the first or second network switch according to an access control list stored in the first or second network switch, respectively.

4. The communication method of claim 1, further comprising:

restricting, using a packet filter coupled between one or more terminals and the first or second secure network domain, access to the one or more terminals according to an access control list stored in the packet filter, the access control list storing information associated with the one or more terminals.

5. The communication method of claim 4, further comprising restricting access, using the packet filter, to the one or more terminals according to their type.

6. The communication method of claim 4, further comprising:

establishing a voice connection through an analog voice bridge using a browser executed on one of the one or more terminals, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

7. The communication method of claim 4, wherein the one or more terminals are coupled to the first or second secure network through a wireless network.

8. The communication method of claim 1, further comprising restricting voice communication of one or more terminals coupled to the first secure network domain or the second secure network domain according to information associated with the one or more terminals stored in a routing table coupled to the first codec or the second codec.

9. The communication method of claim 1, wherein the first codec is embodied in a computing system that is independent of a second computing system embodying the second codec.

10. The communication method of claim 1, further comprising selectively monitoring voice communications through an analog voice bridge, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

11. The communication method of claim 1, further comprising auditing voice communications through an analog voice bridge, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

12. The communication method of claim 1, wherein the analog voice signal comprises an intercom connection.

13. A communication system comprising:

a first network switch to transfer data packets associated with a first voice packet stream between a first secure network domain and a first codec while restricting other data packets not associated with the first voice packet stream, the first voice packet stream encapsulating an analog voice signal;

an analog voice line to transfer the analog voice signal between the first codec and a second codec; and

a second network switch to transfer data packets associated with a second voice packet stream between a second secure network domain and the second codec while restricting other data packets not associated with the second voice packet stream, the second voice packet stream encapsulating the analog voice signal, the first secure network domain classified according to a first security level that differs from a second security level of the second secure network domain.

14. The communication system of claim 13, wherein the first network switch restricts transfer of data packets not associated with the first voice packet stream between the first secure network domain and the first codec;

and

the second network switch restricts transfer of data packets not associated with the second voice packet stream between the second secure network domain and the second codec.

15. The communication system of claim 13, wherein the first or second network switch restricts access of one or more terminals coupled to the first or second network switch according to an access control list stored in the first or second network switch, respectively.

16. The communication system of claim 13, further comprising:

a packet filter coupled between one or more terminals and the first or second secure network domain to restrict access to the one or more terminals according to an access control list stored in the packet filter, the access control list storing information associated with the one or more terminals.

17. The communication system of claim 16, wherein the packet filter restricts access to the one or more terminals according to their type.

18. The communication system of claim 16, wherein the system is configured to establish a voice connection through an analog voice bridge using a browser executed on one of the one or more terminals, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

19. The communication system of claim 16, wherein the one or more terminals are coupled to the first or second secure network through a wireless network.

20. The communication system of claim 13, wherein the system is configured to restrict voice communication of one or more terminals coupled to the first secure network domain or the second secure network domain according to information associated with the one or more terminals stored in a routing table coupled to the first codec or the second codec.

21. The communication system of claim 13, wherein the first codec is embodied in a computing system that is independent of a second computing system embodying the second codec.

22. The communication system of claim 13, wherein the system is configured to selectively monitor voice communications through an analog voice bridge, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

23. The communication system of claim 13, wherein the system is configured to audit voice communications through an analog voice bridge, wherein the analog voice bridge comprises the first and second codecs coupled together through an analog voice line.

24. The communication system of claim 13, wherein the analog voice signal comprises an intercom connection.