Cross-domain information transfer system and associated methods

A cross-domain information transfer system comprising:

• a sender device, among a plurality of sender devices, comprising a processor and transceiver coupled thereto and configured to receive a respective private encryption key and generate ciphertext from plaintext based upon the private encryption key,
• append a respective attribute for a given domain among a plurality of different domains to the ciphertext, wherein each attribute comprises a binary attribute,
• receive a respective secret signing key and generate ciphertext with a concealed attribute from the ciphertext with the appended attribute based upon the secret signing key, and broadcast the ciphertext with the concealed attribute;
• and a plurality of domain gateway devices,
• wherein the plurality of different domains have different security levels associated therewith,
• each domain gateway device is not capable of determining the plaintext and comprising a processor and transceiver coupled thereto, and having a respective attribute associated therewith and configured to receive a respective secret verifying key associated with each domain,
• receive the ciphertext with the concealed attribute from the untrusted network, and use the secret verifying key to determine if the concealed attribute matches the attribute associated with the domain gateway device, and, when so, pass the ciphertext to at least one receiver device coupled with the domain gateway device;
• wherein the at least one receiver device comprises a processor and transceiver coupled thereto, and configured to decrypt the ciphertext into plaintext based upon the private encryption key.

A method of cross-domain information transfer comprising:

• operate a sender device, among a plurality of sender devices, comprising a processor and transceiver coupled thereto to receive a respective private encryption key and generate ciphertext from plaintext based upon the private encryption key,
• append a respective attribute for a given domain among a plurality of different domains to the ciphertext, wherein each attribute comprises a binary attribute,
• receive a respective secret signing key and generate ciphertext with a concealed attribute from the ciphertext with the appended attribute based upon the secret signing key, and
• broadcast the ciphertext with the concealed attribute;
• and operate a plurality of domain gateway devices, wherein the plurality of different domains have different security levels associated therewith,
• each domain gateway device is not capable of determining the plaintext and comprising a processor and transceiver coupled thereto, and having a respective attribute associated therewith,
• wherein operating each domain gateway device comprises receiving a respective secret verifying key,
• receiving the ciphertext with the concealed attribute from the untrusted network, and
• using the secret verifying key to determine when the concealed attribute matches the attribute associated with the domain gateway device, and, when so, pass the ciphertext to at least one receiver device coupled with the domain gateway device, wherein the at least one receiver device comprises a processor and transceiver coupled thereto, and configured to decrypt the ciphertext into plaintext based upon the private encryption key.